last executing test programs: 3m18.775383701s ago: executing program 4 (id=221): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_ublk_setup_io_uring(0x1c, &(0x7f0000000040)={0x0, 0x30b5, 0x4000, 0x0, 0x159}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) syz_open_dev$loop(&(0x7f0000000000), 0x7b, 0xa004) socket$inet6_sctp(0xa, 0x5, 0x84) userfaultfd(0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000080), 0x80000) fanotify_init(0x0, 0x400) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000060000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 3m18.550605727s ago: executing program 4 (id=225): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000000)="06", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2008c058) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @empty, 0x6}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @empty, 0x6}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002f00090028ad70000000000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x4) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002f00090028ad70000000000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x4) 3m17.316456999s ago: executing program 4 (id=230): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x288, 0x288, 0x0, 0x130, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98, 0x30010000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 3m16.847138337s ago: executing program 4 (id=231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5a, 0xae0, 0x6361, 0x5, 0xffffffff, 0x40003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0x4, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80000000, 0x7, 0x3, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000dffea000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 3m15.367127735s ago: executing program 4 (id=238): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x2, 0xeab, 0x7fffffff, 0xffff, 0x0, 0x5, 0x40, 0xfffffff8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_disconnect(r7) r8 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xd0, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r8, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) writev(r9, &(0x7f0000001ac0)=[{&(0x7f0000000180)="6ca5f21aad0655d0a50fa202", 0xc}], 0x1) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xa8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8, 0xfffa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x74, 0x2, [@TCA_MATCHALL_ACT={0x70, 0x2, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x2, 0x3, 0x1, 0x3ff, 0x7f, {0x3, 0x2, 0x400, 0xb2a, 0x1}, {0x9, 0x0, 0x3, 0x34e5, 0xc, 0x5}, 0x9, 0xfffffffd, 0x7}}]]}, {0xfedf}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x3, 0xfff1}, {0x9, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff3}, {}, {0xb, 0xffff}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8048}, 0x20000810) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r12) 3m10.33279094s ago: executing program 4 (id=256): openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) close(r1) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x2, 0x8000, 0x41, @empty, @private0, 0x7, 0x10, 0x2, 0x80}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x40, 0x8, 0x2, 0xfff, {{0x15, 0x4, 0x3, 0x1, 0x54, 0x65, 0x0, 0xd, 0x0, 0x0, @multicast2, @loopback, {[@end, @ra={0x94, 0x4, 0x5}, @noop, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x6, 0x3}, @ssrr={0x89, 0x7, 0x99, [@rand_addr=0x64010101]}, @generic={0x83, 0xc, "9e08f6837345e6193d26"}, @rr={0x7, 0x17, 0x89, [@broadcast, @local, @multicast1, @remote, @private=0xa010102]}]}}}}}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x40, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x18, &(0x7f0000000000)=0xc, 0x4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000aab000/0x3000)=nil, 0x3000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000100), 0xfffffffffffffeda, 0x400c885, &(0x7f00000003c0)={0x11, 0x11, r6, 0x1, 0xe8, 0x6, @random="c0f424a1f50d"}, 0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, 0x0, 0x4000) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @hyper, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}) 3m10.230881971s ago: executing program 1 (id=259): socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "ec720d001ef6be99b473d27aef0100008000"}) r2 = syz_open_pts(r1, 0x40000) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x10000000000000) 3m9.740690954s ago: executing program 3 (id=261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x3004c047}, 0x4000050) 3m9.577126256s ago: executing program 3 (id=262): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x60004000}, 0x10) 3m9.391675002s ago: executing program 3 (id=263): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x15, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000580)=[{0x0, 0x2, 0x10, 0x6}, {0x2, 0x3, 0x10, 0x1}, {0x3, 0x3, 0x5, 0x5}], 0x10, 0x7}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010029bd700000000000fc020000000000000000000000000000fe88000000000000000000000000000100000006000000000a0000002c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x40044) 3m9.108447442s ago: executing program 3 (id=264): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000100)={r0, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x100, &(0x7f0000000040)={@align=0x7, {0x9, 0x4, 0x9c, 0x8}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2}) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000180)={0x1, 0x0, {0x7, 0xe283c8c, 0x8, 0x7}}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f00000001c0)={0x0, 0x0, 0x101a, 0x8, 0xfff, 0xb, 0x9, 0x1}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x700, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) 3m9.105729482s ago: executing program 1 (id=265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c112233440008000000050005dc05000580080007"], 0x4a) 3m8.766026511s ago: executing program 0 (id=266): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24048050) connect$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x4, 0x1}}, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0x40) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3m8.731294305s ago: executing program 3 (id=267): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x2, 0xeab, 0x7fffffff, 0xffff, 0x0, 0x5, 0x40, 0xfffffff8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_disconnect(r7) r8 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xd0, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r8, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) writev(r9, &(0x7f0000001ac0)=[{&(0x7f0000000180)="6ca5f21aad0655d0a50fa202", 0xc}], 0x1) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xa8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8, 0xfffa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x74, 0x2, [@TCA_MATCHALL_ACT={0x70, 0x2, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x2, 0x3, 0x1, 0x3ff, 0x7f, {0x3, 0x2, 0x400, 0xb2a, 0x1}, {0x9, 0x0, 0x3, 0x34e5, 0xc, 0x5}, 0x9, 0xfffffffd, 0x7}}]]}, {0xfedf}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x3, 0xfff1}, {0x9, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff3}, {}, {0xb, 0xffff}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8048}, 0x20000810) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r12) 3m8.392142758s ago: executing program 2 (id=268): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000040)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000300000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000003c000000000000007f0000010000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000400000000000000fc020000000000000000000007000001fe80000000000000000000000000003a00000000000000020a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fc0000000000000000000400000000017f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m8.297631421s ago: executing program 1 (id=269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000948010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c0001"], 0xf0}}, 0x0) 3m8.123333444s ago: executing program 2 (id=270): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000600)={0x28, 0x4, r1, 0x0, &(0x7f0000feb000/0x14000)=nil, 0x14000, 0x100019}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000140)={0x28, 0x6, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000180)}) mprotect(&(0x7f0000001000/0x14000)=nil, 0x14000, 0x1) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffe0, 0xffff}, {0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x17}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r6, &(0x7f0000000380)='100000', 0x6) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000100)={0x8000, 0x4, 0x0, 0x100, 0x3, "6be4072d59894f3598e38dfb6471295dedd125"}) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r7, &(0x7f0000000200)='1', 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r8, &(0x7f0000000280)='0', 0x1) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x1f00, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x0, @vifc_lcl_ifindex, @local}, 0x10) 3m7.860319689s ago: executing program 1 (id=271): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000240)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f000015a000/0x1000)=nil, 0x1000, 0x3000002, 0x80010, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1000e) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x77359400}, 0x0) timer_create(0x2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000741000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000057a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006de000/0x3000)=nil, &(0x7f00004d3000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xb, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)) io_uring_enter(0xffffffffffffffff, 0x221b, 0xbf70, 0x19, 0x0, 0xff79) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xd) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) pipe(0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) 3m7.796375865s ago: executing program 0 (id=272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x3004c047}, 0x4000050) 3m7.638199162s ago: executing program 0 (id=273): r0 = userfaultfd(0x801) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) unshare(0x2a020400) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000440)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d04000000fff300bf000000000000005504000001ed0a002500000017ff2000dd40000000000000730a00fe000000007704000000000000e5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800d9b3a69b37caa964e4b7000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325a904514d8e90131bfc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f49e4dcc1b7af0b51b9cafeda067b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb860600911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b30e55ac1275e938706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff0492df6b53002514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa250bc93b233a2291b5b10eebc49b6882f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753446de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000010000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468db"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffebb, 0x0, 0xffffffffffffffff, 0xffffffffffffff04}, 0x48) 3m7.112713056s ago: executing program 0 (id=274): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x248200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002500), 0x2443, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r3, 0x3ba0, &(0x7f0000001000)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000000000)="2fd32953ca03f38ccbae7e215a168d2b40da8ca6a586cbb086873c26f05d1cbcfae7e84bf5a822a8e968d6e6c184ec26df9f48d2eab76ff5029676e9ff613acd4e5cf96a0a101e6f6e607e9943d71c012ddf2eae4668b9fda1418a453b827c260d7c8efb22901230e886661e4e837d394cb3d4d46cb1da4a3712e48e050fdbfef6ed510b624d36c1718ca6239234a1f8e55f8acf183927ad6d3f188e63afa579b5e4973d1c0618b706057fb0fb71ee29c8f1e540ac997c938a387dd95ccbbc093f0ad9aaf7c6bd6a682b32b42b832a7d65d1a2e6a161ec1f367c54aed35850c45da14ecde34001ce47c647cb80b40a98aeedba344ab0b15b441011737068481607ddd0a9ea192543232a38c4b0547a28ab3054b50cea3553e97c6c4bd2e3e0076409dcb668e5a4554036dba8a46ff6a52857a9d43184b1afbc997900bb91bf6fb848226e90b8014e68be43102e7e79e0d63acd2b29a2984d97ea6d030392bcdf8d474ee55a69f764708c8ecb1fb35efe63e3a583eaf48e7706076532dc0543857270e521cfad9f14455c8c105d9cb44b5f1543593ba73af42cc894a91d764250ca3f7d636b8b2537745ba7037f5b8cf8c552b534231460510675c22aa5c44bfb142c13c3520be31dbccc29ea1b7e976ff018427cf9618404423d5139746b5ad00c05b4e01f2fdde0827c9116fc9e57000f5f142cd1d410094450080b111694eb6444597e280d804a9c03b160b4f25c40fda791ed04bb450b9622539750d42d7a4756f8bb8068775c098a3ccadfc8a57157e4d493e3787e8cfc77bac0576150799d2f143c06aa521f821628ea00a2993a40d9a491d502c62d25274e1e55227ca9b3008d972e1c2e63fc150bc71991bdfcb91aeef36c26197decacb37e293c7059e64c2e9b2c0c9d78e0dced26b6c92c2225ba42d0d83ea3a1aabb458b71986902a8587f4e695a16a854aa62d8813977702ff8edc3cc2488c778ffa0e386fb829a75544dd7c5364548d86c9310ae22fe97afe80080752d561a30a05b2efaf77d8d5d4123a4c92f22f690e960e46e15633f3096d4cd1947dd4a1f9a0af4c6a1180ce4a79c3132e98b160ec401047cff3f5cdc49840518a5a10b8219dc0e2b70fb9b4bd75188b3c225ae37c8d77e1a7a51934ce93d991c6c88aed95e380f23308d0312a6b2b7d4e447c65243423a7562fafe6658645fecb8059630948a985249b9a11811828faafb46ea585debfe73cf4a28d907b69981637018e06861deabf999220595d156d9117c5ab4c75558ee1fe199b190206020ddbc5a1259dda9b87639e56b4729d289da8d0b5feecb740aea78403c7684a9f001a8ae93c1ad656a3d1905b77ede482dc388f85306cbc097e4fae67d1ad738cc54ad4b503d9e6f16f1a87008940acf2d14419c77bcb0b9cbaf43dca3a09b5f4c03244fbf25937d5ab1652e7eadfa3f583f7e52a6c79e8a4f529add5f99dcc045923b928cd1efa6c9c7fa5489ef0dd711fbc35dd8ac04f78cc3e0ecb38d534be938c668eb89014be9754b5e9800ca5dc9fa4d0a2a6a7435ae7b309c6227d2838be4ee8b165b4e5351094d5e42bfd78d6c6c02a19ae2f43f8baf89b648a9fe864af006dc0cabf53cd3a049927ed1c23601f9c079a31c3340a7516af007da29b4cf579d78d16e88acba3e987fc8c5cc270a72fd3e703a43de4b52b079be10d9fed54f08b233ad0c209786932b41ca0db2c51f65a4c49e89c7f7273ad220a6724b6f474174a50785f4fc073ee132acb603446acd8d283e6355394214cd2b4a64e20ed0b5ec57bd48215135b1eb3522ee04ba63ac78f921fd14b7d22195266c71c664e106f75147ab2485d2ec0f32ad71a1f78bdb13fe1fe19dc9c75fa93d8a6f82046816f3fe33dbfeef09503d2ed7321c7b0c2e56514c6d70614db57cf46ccde4a4a6456da4355e3ad7c6871444ff58046d17fbfc50175fcb52906629a8c7c5f0320e7885bb77f020af874ad58d9a31b148709f3ea4e42910b72533967bbb6bdfa389a79ad7dc2c567034547d97b991fd98161df0bc14a9fd0eb43cffd72c24b8df10082ed2fbd3962704f3c88a409f83f91b3960101eac7ff0e1af6c33f7638f163538450c257d35c1904a3f68f1fc4b5ceba1f53cfa5f7313dea0ef71530dd6e101c4dfe706e81ccc72288014541dedbd9bdc15da2332520cca76ee62b9ccde0562113f3aa7876752d0d8d91305b59e8aedd95afd1c07420980b96a2a09e53df5a4d72c509d8ef78f7138683e475a9d9746048dafafeda7ad32e5f4ddc9377e209f5bee7ce5cac821c67b342aeeac262323f8eb3443bfae8d71a4e7ae20c09e97a8aa87ce3fbd28934de5ef19b69ed7ebf66b5031bf6e7ce39073fe62e0e51be90fd88ac7a63012850383cc96461834daf093d2054c11dad1a1d1b6a5693d1de187a2334c0a67fa075c137fbfafba9125e2b1a310c73a5e45b1bb3c7189c7ea7400f7460b065b7f203a732d3ef62e6588d7afdb62406624862c81511a91a5cca2fa647364c4a719b1ac5d69b43d7b1748df3f35192ae5336e7dece690ed53f23dc54e0fc3e744c9d99ff5b7b86f6b91fd6a06d5dec46e7e8f8ca3f87f855025e5cb627f61831004494761eb16e10d2aa8c232006ab4f3c73aa33e64b3a32a686d4c325b4bf8d13edc5f1e1a17cccdf1e1cc18550f79fa829a435ba2a19bb511072a1a4a32e06745817981d6951fc2b72973bca9a6afdd87f0f2f7227a8939a33f02e96a840dbe5e8634cda2d694fd602818662ad7351791603b7f7738642bbddb1f5d38086487e9a159b515b6fe6eaa35dc83f24babd5ba8b6d86bb46849fec9f9d676d1a00e7eae5908748d6a33a105a133f9c2a351612a454d0efe9a9d5d1ee2f7187b78e96d758daa9180bac8e3ee2c0ea20870dc1b6cdeeab3595d8f65a27510d1230ecc10d386246762730714c0e76255f2e6f6734ab880c29ae1cfe82c735b013fb5bf92f0ed9cc0ce97cd0ac1087c19e79c1f624e3ea36d33f23b7ef2b6ca11a0652d1c03a622453b8d091e7034a620c7f7d4add09524e80d3e3aad354f30c52fd97e04c52721c6ea756393ffee18518663a2271c63ae4ace07a5db75b009f0d4735a76cf8295a356ad426d0e94390991971b46c906b28ab6b0d131e008407e210a1fd3857db6fa966e58a4fe0d40b927bc712145b45416336769c0653e063523209d46808705d9f72e55b8be30bee982c897dca7a598fe929bcbf241f339d07435a489c162720663602deafc2820277d3c969687829914f8148c970c584f4362aef08c812e06d6be44f6a1b3cd9f51eda6a4b06bff49eb700ee1ae54d06bc316589ef876e1fb64b1fdc81875977111253627f7f5b8f2be69e8f4973a675fa256320dba8d14053eb10ba3b00ce6ba1bb44ec863f3d2649b5410cc3ceac525925f3c447247dff0907ef3f75a83e5bc9ea166b1570d9f66b9cf4f87b1f0a6160e79b773f6cb92826fa8deda5057a8e0009c13afde210368d0ed9943c941c1c9fdb91eab090ccae863f7739fff5eb18d9165b0a23987cb37d10451bf69279fa1e3e73e30d948edc1bd683f82dc6790f890a010f90c45bff93d728ab899b8dcc7573a6ebe703fe47fb657e271de73d865e753c5aeca8d7959f59cb61bfb9cf20bb0adb5bb20bc12d3f474df0f3ff4c49773fe200aa9336989cb4ef843c09b9a4470f1ec1543097463d755b3aff75f88ca3e7677c9c93dc3f0f9ff5f5ae70b7cbfec9a1ea39d85905a736922dce2b349195823324d6a8977d76e9c406156352db7ed1a806f9bfa1839d70e5b259d245d2b187945bf8f2ad8a28b823eec23ddeef6ec545109b244aa6035519c5a48ca6cc00daa8929b2257f0fb651e45ddd1721ba8075c92fa3745348946de6a7c40de7f281e59dcc8b9e21a2e5a22220c53e8f76bd6ae3c57760b992225677e5bf573fe1385789555d4ce7289fb51e0b089c7181cd03fa97c88eeb635fdac4f7b72de1d668fe55a57776f27f2667392451d6b44686e163a934384473f053e55b09f8edab337d2ee700d50039176bee9f646dfb09baa48b669b20494380f994b0f2014a83c73989c8cce89263066321a5f1fa89694e642af18b2bbfca645a1d3a570f3b942d2920b52b101eb54297f5c9d94b028c8c0723bede98904e85b392e22523d47f9583cf30db8b3403b9d5fff98a6d80204161183e2671163d54795a5751bb4f001c227c58ff7b4758ca1e562384b01a0f163fb833a6c63aadb0b205a46ab3c13d7edf3e3d2385d8ee9cb52a238299337a41ce2a00045b8ec211e9a97ca4baeb2e28242c4ac306d7635161de39d6656d4e6aefcb8020ffcf56d16e9f6e62a17c822de0b3d8b8dbf7bc40e92e9e3988e7df9f87a95ea2326f6666a9f72873035455bc3783ad20ff70158842135e72a9aac18261be082feea6cd9146eebb0705669bb9dbad97bc5b2976c61ba22e69ded8a1ce35f80a08b16848cae8e4f029da5060bd0412e58f0485a5571a7618d7491afc31d2d441614df4133a21a725ceadd2768aac01ccf248226b8d8df7638dcf6845618199023a4fef0b697d85e7591337be96b92ad17bea62003ca3c43162ce7b3b9a3ad609de9fd5cac1fceb38e6cdd97232487d22cd1e9d994a01235bd9887bae57ff3eda274bbfafecf7dab747efc44bf3977db93aed0e1a5450d5cd4a93a1d772792dee8f6d770cb4fdcc270443256af8e4097da59fff75b8c5cc6c75846c0cf7e710674d0c248c1a3790e2ac117b79c52d4424fcd3e5551898cacc67028a11b0900cfb0dda81926bf037c2a5b29ad3191bc71b4517173682af41f7477887339fa463661697be89518b03695c5bb5319013db6f80fb209ebff41d36c6de10d75220ad572dc38886094c758011b4e44e6960b9d51671870b7f18b11b93c9a79d1b0612acfd3b8ba355223ef964c8533f8efb5a65fadcb2e57e8b1377d1d27c7622b1bab60d3bb4c66a59ee1b409e629854baf00129fd452852b7c6b473e95a557956075bbb5d6d235cdce3587fbdf8012217200a555b5f7985dcf16524d80005bd0bd5a43a411a5283aeb837888993ce09fed21d59c6c6411b1b2150e72e523b9aa127b043d04db037be6a272046b1dadc361433ed25eac131345b138bdf9bcd47ff3d58808ba6073eb2056f874220a235ecdac001d54de3044a3a1e2812f0f5c2e49bf80b046df8a5221da498c3faa524438d2c420e540f7270193cf2443b44b949727da1e0619738b72c804a2b23dd1ed5cdde569de900c82c9af829bc7676a02768e9c3cd4f18426dc3c8110a555168b89dcef826b241cf0750a8c83d7a11657705531753257dde538b3d422243398a45a739ca92e11be0d062b5645b8a947b38fc615f1e107f4a09ed8552566fd5018b22f9a3ddc8faa154306127d7f36992cb196a5a4466b8e70bc44a785c8696cee7ed519eac51570657e01af5f3c52df8dff8b0ad3f81883e0644081eb090848417c3e4dee17987b15b1a43af9be519da0b003b8facd5d7b91bfba303401b8f54b5b868359e95fa58148f50032929a32b53cb6a3d78e202e0c0613e514d7df9e9dc6231980a7a26be619e933904c0f29c34aaca28669a6e370362b55e7dbdf0720d7e6f5187357a2ff3838382c43ce46d1bd0cba8e82045010fef30aac49f9f827732adf0eaf3c1b794551b30a83de505dc2eb466a6b003dcc270ad047d6f0a2530e6865e47e1e561eb9a421b6309955a37acc50d4318ea685650746a48a9f405351e12e2d6198f880b15714f09e37aeb142810252f811e2ce", 0x466f}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, r2, 0x47550000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x1, 0xe, 0x80, '\x00', 0x81}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m7.11248049s ago: executing program 2 (id=275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000090040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) 3m6.546288356s ago: executing program 2 (id=276): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3801000010000100fefffffffddbdf25fe889637429010eb0f82000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000200004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd70000000000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 3m6.508191999s ago: executing program 0 (id=277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000090601020000000000000000150000000900020073797a31000000000500010007000000280007800a0011000003fffffff500001800018014000240"], 0x50}, 0x1, 0x0, 0x0, 0x3004c047}, 0x4000050) 3m6.356914533s ago: executing program 1 (id=278): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 3m6.120361373s ago: executing program 2 (id=279): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_ublk_setup_io_uring(0x1c, &(0x7f0000000040)={0x0, 0x30b5, 0x4000, 0x0, 0x159}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) syz_open_dev$loop(&(0x7f0000000000), 0x7b, 0xa004) socket$inet6_sctp(0xa, 0x5, 0x84) userfaultfd(0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000080), 0x80000) fanotify_init(0x0, 0x400) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000c0000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 3m5.977801563s ago: executing program 3 (id=280): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x6, 0x6}]}, 0x10) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be00442ffffe8000000000000000000006000000aaff020000000000000000000000000001042088be000000030c000800050086dd88a888be0000000216096605010000f2000088a8080022eb00020000200cf00802000000000000020004941308186558ffffffff"], 0xfd78) r3 = socket(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20000}, 0xc) connect$unix(r3, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) 3m5.958425889s ago: executing program 1 (id=281): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x288, 0x288, 0x0, 0x130, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x98}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 3m5.904218352s ago: executing program 0 (id=282): ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000480)={0x3, &(0x7f0000000440)=[{0x0, 0x0, 0x81, 0xffff8000}, {0x0, 0x8, 0x91, 0x1}, {0xffff, 0x8, 0x2, 0x1ff}]}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6) syz_emit_ethernet(0x100, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000007f15000000000000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000400000000abcb00"/28], 0x50) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r4, r4, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = userfaultfd(0x801) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000b80)={0xaa, 0xc1}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 3m5.740738196s ago: executing program 2 (id=283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x3004c047}, 0x4000050) 2m51.097064887s ago: executing program 32 (id=256): openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) close(r1) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x2, 0x8000, 0x41, @empty, @private0, 0x7, 0x10, 0x2, 0x80}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x40, 0x8, 0x2, 0xfff, {{0x15, 0x4, 0x3, 0x1, 0x54, 0x65, 0x0, 0xd, 0x0, 0x0, @multicast2, @loopback, {[@end, @ra={0x94, 0x4, 0x5}, @noop, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x6, 0x3}, @ssrr={0x89, 0x7, 0x99, [@rand_addr=0x64010101]}, @generic={0x83, 0xc, "9e08f6837345e6193d26"}, @rr={0x7, 0x17, 0x89, [@broadcast, @local, @multicast1, @remote, @private=0xa010102]}]}}}}}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x40, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x18, &(0x7f0000000000)=0xc, 0x4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000aab000/0x3000)=nil, 0x3000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000100), 0xfffffffffffffeda, 0x400c885, &(0x7f00000003c0)={0x11, 0x11, r6, 0x1, 0xe8, 0x6, @random="c0f424a1f50d"}, 0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, 0x0, 0x4000) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @hyper, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}) 2m50.523361362s ago: executing program 33 (id=282): ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000480)={0x3, &(0x7f0000000440)=[{0x0, 0x0, 0x81, 0xffff8000}, {0x0, 0x8, 0x91, 0x1}, {0xffff, 0x8, 0x2, 0x1ff}]}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6) syz_emit_ethernet(0x100, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffffba711161dcc463ffffffffff86dd600007ea00ca2f0000000000000000000000ffff00000000ff020000000000000000000000000001200088be00ca907841c00001be15792fd500ee8f6f969895ea1da36c6843f9540e81bf6aa7955433de8f88f113325342f80b107670f2f2944803777202e939b5b9010d5e23b72611a83828b199b60c812781b7f2bc1510cbc4492c507d268a87f1671439aeb372cbc8be06e45b8f8ed1cf0ccd6d45d88c996660f54e9382398e5ff60745e86854d5713d1303cd0b1c86836f59550851a30baa85cd40df064a63cef5b8e2919cf8203b931b5b4c018d989b4205a7ec08de4d81c26cdd78d5446e833ef8a7f09048109055ad8f96128094fb2ae75fe386d97e003b625d528886e37b6005ed5d8202f9ebec"], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000007f15000000000000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000400000000abcb00"/28], 0x50) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r4, r4, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = userfaultfd(0x801) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000b80)={0xaa, 0xc1}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 2m50.30729132s ago: executing program 34 (id=281): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x288, 0x288, 0x0, 0x130, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x98}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 2m50.027473261s ago: executing program 35 (id=283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x3004c047}, 0x4000050) 2m46.814310727s ago: executing program 36 (id=280): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x6, 0x6}]}, 0x10) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be00442ffffe8000000000000000000006000000aaff020000000000000000000000000001042088be000000030c000800050086dd88a888be0000000216096605010000f2000088a8080022eb00020000200cf00802000000000000020004941308186558ffffffff"], 0xfd78) r3 = socket(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20000}, 0xc) connect$unix(r3, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) 1m23.288972869s ago: executing program 8 (id=637): io_setup(0x7, &(0x7f0000000280)=0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000000}]) 1m23.130545474s ago: executing program 8 (id=640): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_ublk_setup_io_uring(0x1c, &(0x7f0000000040)={0x0, 0x30b5, 0x4000, 0x0, 0x159}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) syz_open_dev$loop(&(0x7f0000000000), 0x7b, 0xa004) socket$inet6_sctp(0xa, 0x5, 0x84) userfaultfd(0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000080), 0x80000) fanotify_init(0x0, 0x400) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000600003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 1m22.758863147s ago: executing program 8 (id=642): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200182"], 0x0}) syz_usb_connect$uac3(0x1, 0x119, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x107, 0x3, 0x1, 0x7, 0x60, 0x0, {0x8, 0xb, 0x1, 0x2, 0x1, 0x25, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xff, 0x34, 0x3}, [@selector_unit={0xa, 0x24, 0xc, 0x81, 0x5, "dc39d0f1b3"}, @mixer_unit={0x9, 0x24, 0x5, 0x1, 0x0, "fd425e6d"}, @cluster_info_segment={0x6, 0x20, 0x4, 0xb0, 0xb}, @feature_unit={0x11, 0x24, 0x7, 0x4, 0x5, [0xe, 0x9, 0x10]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7fff, 0x1, 0x3, "15b0d029f360"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x1, 0x2, 0x9, "", "2b1fa3"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2, 0x4, 0xd, 0x8, "1e211ec039"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x96, 0x9, 0x4, {0xa, 0x25, 0x25, 0x4940, 0x40, 0x849}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0xc03, 0x6, 0x1}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0xfff4, 0x2, 0x8}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3, 0x2, 0xe8, "b236cd54"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x9, 0x1, 0x9, 0x6, "d39f50c7fb"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xf8, 0x2, 0x3, 0x91, "a468cae933"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x8, 0x1, 0x2, 0x2, "6df2cf2928"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0x1, 0xa9, {0xa, 0x25, 0x25, 0x88, 0x2}}}}}}}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x300, 0x6, 0x5, 0xff, 0xe7, 0xfc}, 0x1fd, &(0x7f0000000980)={0x5, 0xf, 0x1fd, 0x6, [@generic={0xc7, 0x10, 0x4, "d5cdd4aef129b76beb75c24b8fdef8504f72cc45a4bdb4a7f216b9831dca707f25adf38cbaeb1d6fab3742c277f34fb04e2c001ce779bfcec1bf2666338401cd5074cc8c3d903267aa51e9cd23dbf2f39e08a386710b96398c562c189805e03d79044c69ab86f34ee1ef98854d51979a9d14e341cc881fa4a57b77238ed0b2dc5ea7f1b057f596438e45dadff735631277e184951bb67fea1d864722cdae75aa44b039aee218f4dcb9728a8118393e3f8df94fce76a72cb98f3150b564fa9ea22808122e"}, @generic={0xf8, 0x10, 0x4, "7f9f806add3c6145b5a7c765c38203a45befdc6b7168b387d924e2cd7df438ef978ce12978852e805a2ad46e2b49266503a93193a8caabac1ef438afc6c72d5717af358cc600ed77d3ae8f64a111c5d607aba5296b80de0810fa37e38a7ee349a23ee931b8e2051c9a522cd3c46956a953a2b97475b10e1f1d7c1c7bad159ab577b6d58630cca03a9e3fc2eb89ea1af6ccd32d9b323ed8ecf7aeb9ddf28dc9e818295118349d233c3153d001a04713a3eb2ecfa1c38d01b182571d0c0ffe5277e75897e99492ae85adc27781bc39531f3d4f636fe26494bb6370c1d9fde2d2374921cf76b1d86835c15e5f250c586be4165b0ddd8f"}, @ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0x7, 0x88f, 0xa422}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x5e, 0x6, 0xf000, 0x6}, @ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x4, 0xf000, 0x9772, [0xffc0ff, 0x7f9fb0, 0xc0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0xfc, 0x90, 0x6}]}, 0x5, [{0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x44c}}, {0x42, &(0x7f0000000bc0)=@string={0x42, 0x3, "de284ec27c39e2098a973bde1dcdc4aae82a4126dfcb356486fbe926e85d611eeb16df2a22d2a50777fa2f43017785ea05c6f9a94d2f29fb6a3c2a5e487afe41"}}, {0xb, &(0x7f0000000c40)=@string={0xb, 0x3, "15a4deb835aef6aaf2"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x3009}}, {0x3a, &(0x7f0000000cc0)=@string={0x3a, 0x3, "6a3af46e0e243e5c1386646c2429819025bf31b20aa217c1e2afd3e492ffd1698944536c5b23bd86e72d332ad217646a43f51091486b1725"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x7694fc55001ee757, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES16=0x0], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="00020c0000000c00027c6e"], 0x0, 0x0, 0x0}, 0x0) socket$xdp(0x2c, 0x3, 0x0) 1m19.672449707s ago: executing program 8 (id=659): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) r1 = syz_io_uring_setup(0x5fce, &(0x7f0000000940)={0x0, 0x40939e, 0x1, 0xfffffffe, 0x35}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000900)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000003c0)={&(0x7f0000002000)={[{0x0, 0x3b, 0x400}, {0x0, 0xfffffffffffffe02, 0x2}, {0x0, 0x0, 0x74}, {0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0x2}, {0x0}, {0x0, 0x0, 0x3}]}, 0x8}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r1, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1) syz_usb_connect$uac1(0x2, 0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004082057d0040000102030109027c0003010048060904000000010100000a240106000a0002010209040100000102000009040001010102000011240201090404035cd868ee6e1a5bc8e40b2402017f0206072d727309050109080000037f0725010c000200090402"], 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000300)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0xf28a, @remote, 0xfffffffd}}, 0x24) shutdown(r0, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010428bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="08f5000001000100140012800c0001006d7674617000b7fe028008000500", @ANYRES32=r4, @ANYBLOB="0800040044000000"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @empty}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0x20, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=0x0, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000000)="06", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2008c058) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @empty, 0x6}, 0x1c) 1m16.263064624s ago: executing program 8 (id=669): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000032000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) 1m15.604104201s ago: executing program 8 (id=672): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9e000000) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfe}}, 0x7ffe}, 0x1c) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000180)=@qipcrtr, 0x0, 0x800) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x1cf600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) unshare(0x2c020400) syz_usb_connect$cdc_ecm(0x5, 0x5a, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r2 = io_uring_setup(0x1cf8, &(0x7f0000000040)={0x0, 0xe83e, 0xc000, 0x2000008, 0x4c1}) pselect6(0x40, &(0x7f0000000380)={0x101, 0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400000000001}, &(0x7f0000000000)={0x8000021000000021, 0x0, 0x0, 0x3, 0x0, 0x401, 0xfffffffffffffffe, 0x3}, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x61662f0b98a107c, &(0x7f0000000100)={0x0, 0x34, 0x1}, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) r4 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c, 0x0, r4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x4, 0x10000000, 0x26e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) 1m0.306447987s ago: executing program 37 (id=672): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9e000000) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfe}}, 0x7ffe}, 0x1c) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000180)=@qipcrtr, 0x0, 0x800) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x1cf600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) unshare(0x2c020400) syz_usb_connect$cdc_ecm(0x5, 0x5a, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r2 = io_uring_setup(0x1cf8, &(0x7f0000000040)={0x0, 0xe83e, 0xc000, 0x2000008, 0x4c1}) pselect6(0x40, &(0x7f0000000380)={0x101, 0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400000000001}, &(0x7f0000000000)={0x8000021000000021, 0x0, 0x0, 0x3, 0x0, 0x401, 0xfffffffffffffffe, 0x3}, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x61662f0b98a107c, &(0x7f0000000100)={0x0, 0x34, 0x1}, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) r4 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c, 0x0, r4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x4, 0x10000000, 0x26e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) 37.884641526s ago: executing program 5 (id=749): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) fcntl$lock(r0, 0x5, &(0x7f0000000100)={0x1, 0x1, 0x3, 0xfffffffffffffffe}) (async) io_setup(0x5, &(0x7f0000000280)=0x0) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x810, r5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') (async, rerun: 64) io_destroy(r1) (async, rerun: 64) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a05000000000000000000020000020900010073797a30000000000900030073797a3200bf44444acff7184800010000000000000000000000000a"], 0x80}}, 0x0) (rerun: 64) r7 = gettid() (async) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r8, 0x0, 0x0) (async) syz_usb_control_io(r8, 0x0, 0x0) (async) r9 = getpid() rt_tgsigqueueinfo(r9, r7, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4}) (async) r10 = syz_open_procfs(r9, &(0x7f0000000200)='net/rfcomm\x00') (async) r11 = socket$kcm(0x10, 0x2, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000007c0)={'ipvlan0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4c, 0x400004, 0x3b, 0x5, 0x83, 0xd, 0x2, 0xfd, 0xd, 0x4, [0x800, 0x6, 0x8, 0x8, 0x0, 0x9, 0x9, 0x12]}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0xc0448c5}, 0x240400d4) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002", 0x29}, {&(0x7f0000000000)="11c9064268e957a7204d0b5c94a69a7520bf3858bf158b18b2aa28e598c69466ba", 0x21}], 0x2}, 0x40) (async) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 37.708224587s ago: executing program 9 (id=750): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xe, 0x802) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000040)={{0xa, 0x4, 0x1c0000, 0x4, 'syz1\x00', 0x7fff}, 0x0, [0x73e4, 0x3, 0x7, 0x5, 0x2, 0x6, 0x7127, 0x7f, 0x9, 0x5bc, 0x7, 0x7fffffffffffffff, 0x8000000000000000, 0x7, 0x3, 0x2, 0x6, 0x2, 0x0, 0x4, 0x6, 0x6, 0x4, 0x7, 0x3, 0x6b6f, 0x800, 0x5, 0xaf6, 0x4, 0x0, 0xe1, 0x1, 0x5, 0x3, 0x0, 0x5, 0x7, 0x10001, 0x2, 0x6, 0x800, 0x2, 0x100, 0x2, 0x0, 0x5, 0x4, 0x65f, 0x2, 0xfffffffffffffff7, 0x7, 0x200, 0x1bb9, 0xa, 0x7, 0x7fffffffffffffff, 0xb783, 0x4e3, 0x9, 0x4, 0x1, 0x851a, 0xffffffffbe7a0cd7, 0x0, 0xb, 0xffffffffffffffff, 0xe, 0x7fffffff, 0x8, 0x5, 0x8, 0x2, 0x7fffffff, 0x3, 0x9, 0x7, 0xe32, 0x0, 0x4, 0x8, 0x3, 0x6dc7, 0x8, 0x1ff, 0x4, 0x7, 0x8, 0x644, 0x24e, 0x8, 0xfffffffffffffffc, 0x80000000, 0x8, 0x1000, 0xd, 0x7, 0x80, 0x0, 0xff, 0x101, 0x2, 0xffff, 0x80000000, 0xffff, 0x3, 0xa, 0x6, 0x9, 0x4, 0x8, 0x6, 0x101, 0x9, 0xffffffffffffffff, 0x7, 0x0, 0x4, 0x10000, 0x7, 0x1, 0xce, 0x3a, 0x60000000, 0x100, 0x3ff, 0x5, 0x7]}) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, 0x2, 0x6, 0x1002, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004086}, 0x0) readahead(r0, 0x10000, 0xf) sync_file_range(r0, 0xce52a6b, 0xce8f, 0x0) io_setup(0xa, &(0x7f0000000680)=0x0) r3 = eventfd(0xffff3e35) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000007c0)={0xa, r1, 'id1\x00'}) r5 = eventfd2(0x2, 0x1) r6 = fcntl$dupfd(r0, 0x406, r1) r7 = eventfd(0x3) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000bc0), 0x478200, 0x0) r9 = eventfd2(0xa9e, 0x80800) r10 = eventfd(0x1) r11 = eventfd2(0x4a4, 0x800) io_submit(r2, 0x8, &(0x7f0000000f00)=[&(0x7f0000000740)={0x0, 0x0, 0x0, 0x9, 0xfe00, r0, &(0x7f00000006c0)="f742c6381712ac80dd71c1d40dc5b5056e21cecbd8f607dc12172df8b813aba0887d1de7f28de0cf7cd11e0b8a040caea6250de1bbed3bb87fca97dc86a3aed3fdb6118a3fae12a133bde87ab6158f763293", 0x52, 0xce, 0x0, 0x1, r3}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f0000000780)="cf59227d288b61c73ebef4f9447dfc96ab9e77225a7eef5031ab5fa51b6bf5409d93409dc1fd9dfc2787de25e2d7", 0x2e, 0x5f0, 0x0, 0xf5a94bae3c2e2fe5, r4}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x200, r0, &(0x7f0000000880)="78f46d13ac5884ae0696ea3c61d46722be114f508c7b1e6179823483df14a87babc9b5585877bbc32bd026fa0ce586b08ccda8e24223e2e5f5b3808e658035bc9cc9493ea57c3098dde4af2440dac26c55a9453ad8c62ff358827785ae5ad876cfd4dfda561f5b89a10a9876ffdccd66486fbc704aa4a5583b641020b70a63ff70ece1d9df3da6815514be", 0x8b, 0x0, 0x0, 0x0, r5}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0xe, r6, &(0x7f0000000980)="53ff0774aa57e20f21c67bf0bf1bd4aec156ded086bf38dea571c3109458d8d1f6d8b8b9da22f98ebced7b412a637a9984d3f728b319cb49265eb54b6f65167f98548f701f3184a9d3e4a46c84d0774572ae05d7ce44c21facea28d7ee17967839b9a890286a88011072a5cca1b48e31382ff0cf7c1d7f92527ef0e91fe8e66bb9ecbecbbaeeffb06e9bb09bb8af74abcdd555105f6318db06570e4746b66a3c19d0f47177c06edee88c3ea3def68d03f02e85ae81e4d1d18d12884e43ba30917d0f59aac75c33dbf9ae113f118719d992f3e84609d331a69fc90dd3f01ae70a134997b5208cb767b16128f81e7ef4c937", 0xf1, 0xd, 0x0, 0x1, r7}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x2, r1, &(0x7f0000000ac0)="898eb0a086208c79c894e08f929a3943c9da91558ef55ec2045e89d5b2285d1610f86ab6c541d743c7f16d311662f4c4d6d8a6ed5466b044b4348b8a27c5476724422e816d746dfa8c2bbaa60ee8f757401d388bc5a3240e75d7554d5e8315bce5905290f25f5f12ba08b6b102f3cc639939db32410ce52ac2b577c27be8309f27288f26c2200352845ca74a9f79af6d79cc599506f6b738316df4ac444df29108e96d934fe67aacf1b17ea7deddb613c3151bec9c72b460f44f5d47ea985b2e6aae095ac6be55c38bc62bb8f771806235637c3555bfd0423cf038971266c289d7f8ccfe584ae892360a5c61", 0xec, 0xe390, 0x0, 0x4, r8}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x7, 0x6, r1, &(0x7f0000000c40)="36cd8fd55801623197e0bd328f8edea865b8b85e8b6e9a488bc257e45e02302fca4bca13eaf385b35abb68d576115cbb7bdcc84ffa4fdc1b7191fe10f4cc297732573b6d2282fa285282af089ff2b1da61749ae1e6fb6b4fcdd50cabf8076b35cf092a53a06a694c63d84468e3f00d40b060c85ad87dad55bf985ea99efbc487156b7c6dcefe3a315ba6fce2fd", 0x8d, 0x401, 0x0, 0x1, r9}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x8, 0x8, r0, &(0x7f0000000d40)="ed3eb93d15444813bcf6ce3667b07001fb2b473e44192e54d302349695aa68446a57552a6bbb390f76006884d92f5a97800f6cd855aa728e931a0af13415500885e523bda893e0aaa27d8dbef72395f9", 0x50, 0x5, 0x0, 0x2, r10}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000e00)="266c0dc1b3b6f2173a2d667bd92f5c34e4f9af5261a4a3f67df3a893314e25381ea73600c312a528b03a905b249acf73321ed0f10694f4e0d8153f0e3d802128a371b94629f85c34594a209e0ae619087c35c9bd436c425a031021dd2aa6c132a85ff6f4688cfbea9a483d407cf56b1fbf5ecd0ae8d9af95385e6968b35af1004245069dc7e97931cd12563ee97ddfc912ef6470bbe4c73bab8643fd897f513480abce5c90c03ea93c", 0xa9, 0xba5, 0x0, 0x0, r11}]) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000f40)={0x400, 0x10, 0x9, 0xdd59}, 0x8) r12 = syz_open_dev$video(&(0x7f0000000f80), 0x3, 0x80) ioctl$VIDIOC_DBG_G_CHIP_INFO(r12, 0xc0c85666, &(0x7f0000000fc0)={{0x1, @name="763d5d954624fa6f1ed77e62ac1c0c786c8e4f640f0e1775326d8452725410b6"}, "088e7bd53d95b418f8448944fd7fcac71970b21a020e9fdd0813fe05072d61b6", 0x3}) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000001180)={&(0x7f00000010c0), 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x10, 0x3f2, 0x400, 0x70bd26, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x24000001) preadv(r9, &(0x7f0000001480)=[{&(0x7f00000011c0)=""/201, 0xc9}, {&(0x7f00000012c0)=""/237, 0xed}, {&(0x7f00000013c0)=""/150, 0x96}], 0x3, 0x4, 0x8) r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000014c0), 0x270401, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r13, 0x3b87, &(0x7f0000001500)={0x18, 0x0, 0x1, 0x0, 0x0, 0x7}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r13, 0x3ba0, &(0x7f0000001540)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r13, 0x3ba0, &(0x7f00000015c0)={0x48, 0xa, r14}) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001680), r4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, r15, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x400) open_tree(r6, &(0x7f0000001780)='./file0\x00', 0x89100) 36.430916302s ago: executing program 9 (id=752): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 35.947456382s ago: executing program 6 (id=753): r0 = socket$kcm(0x10, 0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xffffc000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000540)={{r1, 0x1, 0x2, 0x8, 0x1, 0x5, 0x8000000000000001, 0x3, 0x81, 0x4, 0x1, 0xa, 0x8001, 0x8000000000000001}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000800)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}], 0x7, "fe1bbf180571b4"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001800)={{r3, 0x6, 0x0, 0x6, 0x1, 0x101, 0x7, 0x1, 0x3, 0x2, 0x10001, 0x2, 0xfffffffffffffffd, 0xfffffffffffffffb, 0x222b}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = socket$inet6(0xa, 0x80001, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004c00004400000000000690780a210104ac1414aa44140a01e000000100000000e000000100000108070704030e00000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="53000700907800005ef4659b413ed4fe0d507ea4d139a2b3f28952d4c688afb49f8ca52e9326aadb505b8efb8dafbc390944234acc30101a0005a1beef2a5ae30e7b048a9f1a984f7be7fd5445b41abba3a2250840d8dac5aee91e65d3f00847ab7ca1a6366c173f278f010163b99f787e604cd0917fa4a2126c1eb0b0de4acf57a3274f0bb8e8802661ba26"], 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r5, &(0x7f0000000000), 0x2002) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000077911b800000000001801000020646c2500000000002020207b18f8ff0000000079a100000000000007010000f8ffffffb702000008000000b703000007000000850000002f0000009500740000000000ef5f6082e4a0a52b72bde925efe35e0c28542f1716572a77c3939e085958131eb5d6ab7a69e1a83a4c8354fce7a66fe529cf5d06f6010e13c72fe2174e984706fbb446efe6271a62fc1c495beb391ce3ca6f852a3a36ecf9c5"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc, &(0x7f000000cf3d)=""/195, 0x0, 0x2e, '\x00', 0x0, @fallback=0xd}, 0x59) sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000076001f03000000000000000008000000", @ANYRES32, @ANYBLOB="0400"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) getsockopt$bt_hci(r4, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x40000) 35.833440409s ago: executing program 9 (id=754): openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010029bd700000000000fc020000000000000000000000000000fe88000000000000000000000000000100000006000000000a0000002c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400000000000000000000010000000000000000080000000000000005000000000000000000000000000000000000001d000000000000007f00000000000000990c0000000000000000000000000000dd020000000000000000000000000000010100020000000084010500ac141439000000000000000000000000000004d32b00000000000000ac14140c000000000000000000000000000000000000ff00010000000000000000000000fc02000000000000000000000000000000000000320000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000fe8000000000000000000000000000bb000004d43c00000002000000fc0000000000000000000000000000010000000001030000000000000600000000000000ff02000000f3ff000000000000000001000000002b00000002"], 0x23c}}, 0x40044) 35.132007491s ago: executing program 5 (id=755): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_ublk_setup_io_uring(0x1c, &(0x7f0000000040)={0x0, 0x30b5, 0x4000, 0x0, 0x159}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) syz_open_dev$loop(&(0x7f0000000000), 0x7b, 0xa004) socket$inet6_sctp(0xa, 0x5, 0x84) userfaultfd(0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000080), 0x80000) fanotify_init(0x0, 0x400) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000050000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 35.02630006s ago: executing program 9 (id=756): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r2) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r1, 0x230d}, 0xc) (async) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) 34.385975827s ago: executing program 6 (id=757): landlock_create_ruleset(&(0x7f0000000040)={0x10200, 0x1f, 0x2, 0x1c00, 0xb, 0x2}, 0xe, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x3, 0x0) connect$unix(r0, 0x0, 0x0) 33.72024444s ago: executing program 9 (id=759): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wrr\x00', 0x1, 0xa8a, 0x30}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000280)={{0x84, @private=0xa010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x80}, {@loopback, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) syz_usb_connect$midi(0x2, 0x38, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000040ca150101400001020311090226000101064009090400000101"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @random="0ebd5ea3bea2", 'bridge0\x00'}}, 0x1e) syz_usb_connect(0x5, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040490d0070010001020301090227000101008032"], 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r5, 0x6db34000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x6, 0x6000) ioctl$KDGKBTYPE(r6, 0x4b48, &(0x7f0000000080)) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x10010, r8, 0x7c1f1000) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000100)) 33.718964341s ago: executing program 6 (id=760): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x2, 0xeab, 0x7fffffff, 0xffff, 0x0, 0x5, 0x40, 0xfffffff8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3"], 0x0) syz_usb_disconnect(r7) r8 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xd0, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r8, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) writev(r9, &(0x7f0000001ac0)=[{&(0x7f0000000180)="6ca5f21aad0655d0a50fa202", 0xc}], 0x1) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xa8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8, 0xfffa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x74, 0x2, [@TCA_MATCHALL_ACT={0x70, 0x2, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x2, 0x3, 0x1, 0x3ff, 0x7f, {0x3, 0x2, 0x400, 0xb2a, 0x1}, {0x9, 0x0, 0x3, 0x34e5, 0xc, 0x5}, 0x9, 0xfffffffd, 0x7}}]]}, {0xfedf}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x3, 0xfff1}, {0x9, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff3}, {}, {0xb, 0xffff}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8048}, 0x20000810) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r12) 33.656243704s ago: executing program 5 (id=761): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010000106000000000000000000000000149f000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) 33.590353501s ago: executing program 7 (id=762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000090601020000000000000000150000000900020073797a31000000000500010007000000280007800a00110000030000000000031800018014000240"], 0x50}, 0x1, 0x0, 0x0, 0x3004c047}, 0x4000050) 32.897330352s ago: executing program 7 (id=763): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3801000010000100fefffffffddbdf25fe889637429010eb0f82000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000000000000000000000fd04d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd70000000000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 32.364881741s ago: executing program 5 (id=764): syz_usb_connect(0x0, 0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c0320904000001020201000524001001052406000107058103ffff0a09040100020a00000007050202ffff0007058202ff"], 0x0) 31.349772286s ago: executing program 7 (id=765): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b700000001000000bfa300000005000007030000f0fffeff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed00006203b0ff000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 29.800158201s ago: executing program 6 (id=766): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x501082) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @local}}, 0x6, 0x3, 0xf02, 0x0, 0x15, 0x1, 0x5}, 0x9c) (async) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f0000000780)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd6c000000000800ff00000000000000000000400000000000ff020000000000000000000000000001ff"], 0x0) (async) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x11162, 0x0) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) (async) r3 = fsopen(&(0x7f0000000180)='sysfs\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000001124000180090001006d6574610000000014000280080002400000000308000340000000040900010073797a30000000000900020073797a32"], 0x94}}, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4) (async) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x1, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0xfffffffc, @local}], 0x1c) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r3, 0x0, 0x9) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x8, 0x0, 0x1000, 0xb82, 0x400000, 0x1ff, 0x2, 0x40000001, 0x402, 0x20000009, 0x5, 0x1, 0x8, 0x4006, 0x84, 0xfffffffc, 0xffffffff, 0x37e9, 0x80000004, 0x6, 0x5, 0x40424f, 0x3}}) (async) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x44}}, 0x0) (async) getdents(r7, 0xfffffffffffffffd, 0x58) pselect6(0x40, &(0x7f0000000000)={0xd, 0x3, 0x0, 0x6, 0x840, 0x5, 0x2, 0x2}, 0x0, 0x0, 0x0, 0x0) 29.628387268s ago: executing program 7 (id=767): r0 = userfaultfd(0x801) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) unshare(0x2a020400) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000440)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffebb, 0x0, 0xffffffffffffffff, 0xffffffffffffff04}, 0x48) 29.593186581s ago: executing program 9 (id=768): socket$inet6(0xa, 0x5, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1f, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000000c0)) (async) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) shutdown(r0, 0x1) (async) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x3f, 0x0}, 0x7f}], 0x414, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) (async) mmap(&(0x7f0000f4a000/0x2000)=nil, 0x2000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x47f7c000) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) (async) socket$kcm(0xa, 0x5, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, 0x0) (async) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a000000040000000100000000000000", @ANYRES32, @ANYBLOB="0000000000002db69ee43a27180a000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x12, r3, 0x100000000) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01864c2, &(0x7f0000000040)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x5, 0xff2, &(0x7f0000000fc0)=""/4082, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 29.163787953s ago: executing program 5 (id=769): syz_usb_connect$midi(0x1, 0x31, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x2, 0x150, 0xa, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x8, 0xd0, 0x3e, 0x8, {0x4}}}]}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x59, &(0x7f0000000000)={0x5, 0xf, 0x59, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xe, 0x8, 0x2}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0xfff, 0xff00, 0x0, [0x3fc0, 0xc0c0, 0xc0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x36, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "0791f734510b2d1eb718f5ca7f6d1046"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x77, 0x2, 0xd4, 0x7ff, 0x6}, @ssp_cap={0xc, 0x10, 0xa, 0x49, 0x0, 0x9, 0xf00f, 0x4}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 28.688157625s ago: executing program 7 (id=770): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select(0x300, 0x0, 0x0, &(0x7f0000000080)={0xfefdffffffffffff, 0x1, 0x41ac, 0x300, 0x4, 0x2}, &(0x7f0000000440)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x2e, 0xe, [0xf68f, 0x8, 0x9, 0x1ff, 0x1ff, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x200, 0x3d, 0x5e, 0x1000, 0xffff, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0xe52c, 0xaa8, 0x7ffffffc, 0xd, 0xe9c4, 0xcd8, 0x6e, 0x200006, 0x7, 0xd, 0x8a, 0x3, 0x6, 0x3, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x401, 0xfffffffe, 0x2b, 0xa, 0x0, 0x7, 0x8, 0x5, 0x3, 0x6, 0x8, 0x23, 0x2, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x5fffffd, 0xd1, 0xf, 0x4, 0xa, 0xfffffffe, 0x400, 0x80000000, 0x8000, 0x3, 0x5, 0x2, 0x0, 0x2, 0x1, 0x80, 0x4, 0x2, 0x0, 0xd, 0x2000006, 0x4, 0x8, 0x0, 0x1, 0xfffffffc, 0x0, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0x3, 0x4, 0x1, 0xa, 0x6, 0x7fff, 0x1, 0x3, 0x33e3, 0x9, 0x6, 0x7fff, 0x6, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x6, 0x7, 0x200, 0x9, 0xe, 0x81, 0x0, 0x4, 0x105, 0x5, 0x8, 0x3, 0x1, 0xfffffffa]}}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f02feff000000010000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) connect$unix(r1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xcf0b, 0x1, 0xffffffff, 0x19}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r3, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x101, 0x11, 0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 28.083244809s ago: executing program 6 (id=771): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_ublk_setup_io_uring(0x1c, &(0x7f0000000040)={0x0, 0x30b5, 0x4000, 0x0, 0x159}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) syz_open_dev$loop(&(0x7f0000000000), 0x7b, 0xa004) socket$inet6_sctp(0xa, 0x5, 0x84) userfaultfd(0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000080), 0x80000) fanotify_init(0x0, 0x400) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000060000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 27.376806975s ago: executing program 7 (id=772): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x104) io_setup(0x3, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x25, 0x0, 0x1f, 0x1, 0x0, r0, 0x0, 0x0, 0xa00, 0x0, 0x2, r0}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = memfd_create(&(0x7f00000006c0)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\xa4\xb5\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?Y\x96\xab\xc7\x06F\x8e\xab\xc8\x1e\x89]\x13bZ\x8d \x19\x00k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x84:kgA]Z\x88\xecIf\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89vr\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xfc@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf]\x0e\a\x00\x91T\x1b\xee\x10\x92\x80m\xc7\x90\x9fU\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8C26\xa6u<\xa7@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88\x7f\xd9\x90\xb7=\x1e@\xda9(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb1&\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\a\x84\xb2j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r8, 0xc0585611, &(0x7f0000000340)=@multiplanar_userptr={0x2, 0x1, 0x4, 0x110000, 0x5, {0x77359400}, {0x2, 0x1, 0x0, 0x2, 0x0, 0xa, "75ff52b2"}, 0x6, 0x2, {0x0}, 0x7, 0x0, r9}) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xffffffffffffff9e, 0x70411, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x0, 0x0, r9}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) 26.799788528s ago: executing program 5 (id=773): socket$tipc(0x1e, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x40007}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) clock_nanosleep(0x9, 0x1, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4048804) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/147, 0x93, 0x0, 0x0}, &(0x7f0000000380)=0x40) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x9) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x0, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r5, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) bind$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) listen(r7, 0x0) 26.711626666s ago: executing program 6 (id=774): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000c40000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) 0s ago: executing program 38 (id=768): socket$inet6(0xa, 0x5, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1f, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000000c0)) (async) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) shutdown(r0, 0x1) (async) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x3f, 0x0}, 0x7f}], 0x414, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) (async) mmap(&(0x7f0000f4a000/0x2000)=nil, 0x2000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x47f7c000) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) (async) socket$kcm(0xa, 0x5, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, 0x0) (async) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a000000040000000100000000000000", @ANYRES32, @ANYBLOB="0000000000002db69ee43a27180a000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x12, r3, 0x100000000) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01864c2, &(0x7f0000000040)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x5, 0xff2, &(0x7f0000000fc0)=""/4082, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) kernel console output (not intermixed with test programs): dvb-demux' registered. [ 209.287012][ T50] legousbtower 9-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 209.296578][ T50] legousbtower 9-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 209.305247][ T7579] syzkaller0: entered promiscuous mode [ 209.305272][ T7579] syzkaller0: entered allmulticast mode [ 209.343186][ T7579] tipc: Enabled bearer , priority 0 [ 209.366299][ T7579] tipc: Resetting bearer [ 209.385000][ T7578] tipc: Resetting bearer [ 209.394792][ T5350] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 209.418480][ T5350] usb 8-1: device descriptor read/8, error -71 [ 209.440587][ T7578] tipc: Disabling bearer [ 209.528192][ T5350] usb usb8-port1: unable to enumerate USB device [ 209.889660][ T5350] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 210.038421][ T5350] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 210.038994][ T5350] usb 7-1: config 1 has no interfaces? [ 210.041619][ T5350] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.041643][ T5350] usb 7-1: Product: syz [ 210.041657][ T5350] usb 7-1: Manufacturer: syz [ 210.041673][ T5350] usb 7-1: SerialNumber: syz [ 210.424956][ T9] usb 9-1: USB disconnect, device number 8 [ 210.449653][ T5753] zl10353_read_register: readreg error (reg=127, ret==0) [ 210.515116][ T9] legousbtower 9-1:14.228: LEGO USB Tower #-160 now disconnected [ 210.722806][ T5753] usb 6-1: USB disconnect, device number 14 [ 211.031322][ T5350] usb 7-1: USB disconnect, device number 14 [ 211.211480][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.474'. [ 211.377027][ T7604] syzkaller0: entered promiscuous mode [ 211.377052][ T7604] syzkaller0: entered allmulticast mode [ 211.588207][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 211.595753][ T32] kauditd_printk_skb: 33 callbacks suppressed [ 211.595775][ T32] audit: type=1326 audit(1789908842.196:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7605 comm="syz.7.477" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 211.645263][ T32] audit: type=1326 audit(1789908842.256:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7605 comm="syz.7.477" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 211.645434][ T32] audit: type=1326 audit(1789908842.256:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7605 comm="syz.7.477" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 211.645584][ T32] audit: type=1326 audit(1789908842.256:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7605 comm="syz.7.477" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 211.645910][ T32] audit: type=1326 audit(1789908842.256:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7605 comm="syz.7.477" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 211.646436][ T32] audit: type=1326 audit(1789908842.256:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7605 comm="syz.7.477" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 211.724256][ T32] audit: type=1326 audit(1789908842.316:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7605 comm="syz.7.477" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 211.732002][ T32] audit: type=1326 audit(1789908842.336:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7605 comm="syz.7.477" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 211.732054][ T32] audit: type=1326 audit(1789908842.336:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7605 comm="syz.7.477" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 211.732092][ T32] audit: type=1326 audit(1789908842.336:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7605 comm="syz.7.477" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 211.787283][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 211.788179][ T9] usb 9-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 211.789602][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.789623][ T9] usb 9-1: config 0 has no interfaces? [ 211.791964][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.791986][ T9] usb 9-1: Product: syz [ 211.791998][ T9] usb 9-1: Manufacturer: syz [ 211.792012][ T9] usb 9-1: SerialNumber: syz [ 211.795366][ T9] usb 9-1: config 0 descriptor?? [ 211.981136][ T7614] netlink: 72 bytes leftover after parsing attributes in process `syz.6.478'. [ 211.999934][ T9] usb 9-1: USB disconnect, device number 9 [ 212.518870][ T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 212.559490][ T7624] syzkaller0: entered promiscuous mode [ 212.559517][ T7624] syzkaller0: entered allmulticast mode [ 212.579513][ T7624] tipc: Enabled bearer , priority 0 [ 212.611605][ T7628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.612122][ T7628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.624803][ T7622] tipc: Resetting bearer [ 212.696614][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 212.726598][ T9] usb 9-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 212.730181][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.730206][ T9] usb 9-1: config 0 has no interfaces? [ 212.740823][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.740850][ T9] usb 9-1: Product: syz [ 212.740864][ T9] usb 9-1: Manufacturer: syz [ 212.740876][ T9] usb 9-1: SerialNumber: syz [ 212.755042][ T9] usb 9-1: config 0 descriptor?? [ 212.802566][ T7622] tipc: Disabling bearer [ 212.917755][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 213.083932][ T9] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 213.095494][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 213.095529][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 213.095553][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 213.126638][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.126667][ T9] usb 6-1: Product: syz [ 213.126681][ T9] usb 6-1: Manufacturer: syz [ 213.126694][ T9] usb 6-1: SerialNumber: syz [ 213.147820][ T9] usb 6-1: config 0 descriptor?? [ 213.202849][ T4984] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 213.202878][ T4984] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 213.202889][ T4984] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 213.202956][ T4984] loop0: [ 213.259025][ T9] iguanair 6-1:0.0: probe with driver iguanair failed with error -12 [ 213.377034][ T5699] usb 6-1: USB disconnect, device number 15 [ 213.662501][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 213.821490][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.822765][ T9] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 213.822805][ T9] usb 7-1: can't read configurations, error -22 [ 213.948219][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 214.085545][ T7664] netlink: 28 bytes leftover after parsing attributes in process `syz.8.475'. [ 214.085575][ T7664] netlink: 28 bytes leftover after parsing attributes in process `syz.8.475'. [ 214.120260][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 214.122787][ T9] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 214.122838][ T9] usb 7-1: can't read configurations, error -22 [ 214.123902][ T9] usb usb7-port1: attempt power cycle [ 214.463582][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 214.518262][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 214.521095][ T9] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 214.521133][ T9] usb 7-1: can't read configurations, error -22 [ 214.558193][ T7672] netlink: 468 bytes leftover after parsing attributes in process `syz.7.488'. [ 214.648683][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 214.681181][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 214.683576][ T9] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 214.683616][ T9] usb 7-1: can't read configurations, error -22 [ 214.684090][ T9] usb usb7-port1: unable to enumerate USB device [ 214.757759][ T5699] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 214.908138][ T5699] usb 6-1: Using ep0 maxpacket: 32 [ 214.909584][ T5699] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 214.911028][ T5699] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 214.911591][ T5699] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 214.911620][ T5699] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 214.911645][ T5699] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 214.914206][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.914232][ T5699] usb 6-1: Product: syz [ 214.914246][ T5699] usb 6-1: Manufacturer: syz [ 214.914259][ T5699] usb 6-1: SerialNumber: syz [ 215.018629][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 215.021289][ T5699] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input28 [ 215.239000][ T5699] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 215.239024][ T5699] (id 0x00) [ 215.257207][ T9] usb 9-1: USB disconnect, device number 10 [ 215.387699][ T5699] rc_core: IR keymap rc-imon-pad not found [ 215.387722][ T5699] Registered IR keymap rc-empty [ 215.390564][ T5699] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 215.390591][ T5699] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 215.416384][ T5710] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 215.484966][ T5699] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 215.510496][ T5699] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input29 [ 215.516970][ T5699] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:16> initialized [ 215.588394][ T5710] usb 10-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 215.590696][ T5710] usb 10-1: config 2 has an invalid interface number: 228 but max is 0 [ 215.590735][ T5710] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 215.590754][ T5710] usb 10-1: config 2 has no interface number 0 [ 215.590793][ T5710] usb 10-1: config 2 interface 228 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.590819][ T5710] usb 10-1: config 2 interface 228 has no altsetting 0 [ 215.608324][ T5710] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.608354][ T5710] usb 10-1: Product: syz [ 215.608368][ T5710] usb 10-1: Manufacturer: syz [ 215.608382][ T5710] usb 10-1: SerialNumber: syz [ 215.671329][ T7671] imon:send_packet: task interrupted [ 215.671349][ T7671] imon:send_packet: packet tx failed (-512) [ 215.682261][ T7671] imon:vfd_write: send packet #0 failed [ 215.703121][ T7671] imon:send_packet: task interrupted [ 215.703140][ T7671] imon:send_packet: packet tx failed (-512) [ 215.703187][ T7671] imon:vfd_write: send packet #0 failed [ 215.725448][ T7671] imon:send_packet: task interrupted [ 215.725464][ T7671] imon:send_packet: packet tx failed (-512) [ 215.725506][ T7671] imon:vfd_write: send packet #0 failed [ 215.725815][ T7671] imon:send_packet: task interrupted [ 215.725825][ T7671] imon:send_packet: packet tx failed (-512) [ 215.725859][ T7671] imon:vfd_write: send packet #0 failed [ 215.744685][ T7671] imon:send_packet: task interrupted [ 215.744703][ T7671] imon:send_packet: packet tx failed (-512) [ 215.744746][ T7671] imon:vfd_write: send packet #0 failed [ 215.745254][ T7671] imon:send_packet: task interrupted [ 215.745266][ T7671] imon:send_packet: packet tx failed (-512) [ 215.745301][ T7671] imon:vfd_write: send packet #0 failed [ 215.745594][ T7671] imon:send_packet: task interrupted [ 215.745605][ T7671] imon:send_packet: packet tx failed (-512) [ 215.745638][ T7671] imon:vfd_write: send packet #0 failed [ 215.745974][ T7671] imon:send_packet: task interrupted [ 215.745983][ T7671] imon:send_packet: packet tx failed (-512) [ 215.746017][ T7671] imon:vfd_write: send packet #0 failed [ 215.768865][ T7671] imon:send_packet: task interrupted [ 215.768883][ T7671] imon:send_packet: packet tx failed (-512) [ 215.768921][ T7671] imon:vfd_write: send packet #0 failed [ 215.769318][ T7671] imon:send_packet: task interrupted [ 215.769330][ T7671] imon:send_packet: packet tx failed (-512) [ 215.769367][ T7671] imon:vfd_write: send packet #0 failed [ 215.843380][ T6775] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 215.979443][ T6775] usb 9-1: device descriptor read/64, error -71 [ 216.217771][ T6775] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 216.348996][ T6775] usb 9-1: device descriptor read/64, error -71 [ 216.458139][ T6775] usb usb9-port1: attempt power cycle [ 216.486123][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.6.494'. [ 216.780680][ T5710] ims_pcu 10-1:2.228: Zero length descriptor [ 216.780753][ T5710] ims_pcu 10-1:2.228: probe with driver ims_pcu failed with error -22 [ 216.797751][ T6775] usb 9-1: new low-speed USB device number 13 using dummy_hcd [ 216.823770][ T6775] usb 9-1: device descriptor read/8, error -71 [ 216.835491][ T5710] usb 10-1: USB disconnect, device number 11 [ 217.062655][ T6775] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 217.082956][ T6775] usb 9-1: device descriptor read/8, error -71 [ 217.197783][ T6775] usb usb9-port1: unable to enumerate USB device [ 217.266208][ T7723] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.561237][ T5710] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 217.591047][ T6768] usb 6-1: USB disconnect, device number 16 [ 217.708278][ T5710] usb 10-1: Using ep0 maxpacket: 16 [ 217.711204][ T5710] usb 10-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 217.712408][ T5710] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.712431][ T5710] usb 10-1: config 0 has no interfaces? [ 217.714996][ T5710] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.715021][ T5710] usb 10-1: Product: syz [ 217.715035][ T5710] usb 10-1: Manufacturer: syz [ 217.715049][ T5710] usb 10-1: SerialNumber: syz [ 217.786094][ T5710] usb 10-1: config 0 descriptor?? [ 217.824649][ T32] kauditd_printk_skb: 24 callbacks suppressed [ 217.824670][ T32] audit: type=1326 audit(1789908848.426:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.7.504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 217.824805][ T32] audit: type=1326 audit(1789908848.426:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.7.504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 217.834661][ T32] audit: type=1326 audit(1789908848.426:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.7.504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 217.834714][ T32] audit: type=1326 audit(1789908848.436:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.7.504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 217.834756][ T32] audit: type=1326 audit(1789908848.436:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.7.504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 217.834800][ T32] audit: type=1326 audit(1789908848.436:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.7.504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 217.834856][ T32] audit: type=1326 audit(1789908848.436:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.7.504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 217.834899][ T32] audit: type=1326 audit(1789908848.436:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.7.504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 217.834942][ T32] audit: type=1326 audit(1789908848.436:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.7.504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 217.834986][ T32] audit: type=1326 audit(1789908848.436:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.7.504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 218.003811][ T7743] syzkaller0: entered promiscuous mode [ 218.003834][ T7743] syzkaller0: entered allmulticast mode [ 218.027025][ T25] usb 10-1: USB disconnect, device number 12 [ 218.058985][ T7743] tipc: Enabled bearer , priority 0 [ 218.103992][ T7740] tipc: Resetting bearer [ 218.183075][ T7740] tipc: Disabling bearer [ 218.408087][ T5710] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 218.431164][ T4984] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 218.431195][ T4984] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 218.431208][ T4984] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 218.431276][ T4984] loop0: [ 218.557685][ T5710] usb 7-1: Using ep0 maxpacket: 16 [ 218.559743][ T5710] usb 7-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=a9.3d [ 218.561568][ T5710] usb 7-1: config 3 has an invalid interface number: 231 but max is 0 [ 218.561596][ T5710] usb 7-1: config 3 has no interface number 0 [ 218.561639][ T5710] usb 7-1: config 3 interface 231 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 218.561666][ T5710] usb 7-1: config 3 interface 231 has no altsetting 0 [ 218.566543][ T5710] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.566571][ T5710] usb 7-1: Product: syz [ 218.566585][ T5710] usb 7-1: Manufacturer: syz [ 218.566599][ T5710] usb 7-1: SerialNumber: syz [ 218.610486][ T25] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 218.763812][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 218.769180][ T25] usb 10-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 218.777780][ T25] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.777806][ T25] usb 10-1: config 0 has no interfaces? [ 218.794971][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.795000][ T25] usb 10-1: Product: syz [ 218.795014][ T25] usb 10-1: Manufacturer: syz [ 218.795027][ T25] usb 10-1: SerialNumber: syz [ 218.806209][ T25] usb 10-1: config 0 descriptor?? [ 218.874746][ T7771] syz.5.512 (7771): drop_caches: 0 [ 219.229539][ T7779] netlink: 36 bytes leftover after parsing attributes in process `syz.7.513'. [ 219.259799][ T5350] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 219.293466][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.515'. [ 219.408609][ T5350] usb 9-1: Using ep0 maxpacket: 32 [ 219.409342][ T5350] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 219.410533][ T5350] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 219.410556][ T5350] usb 9-1: config 0 has no interface number 0 [ 219.410597][ T5350] usb 9-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 219.410618][ T5350] usb 9-1: config 0 interface 1 has no altsetting 0 [ 219.413775][ T5350] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.413799][ T5350] usb 9-1: Product: syz [ 219.413813][ T5350] usb 9-1: Manufacturer: syz [ 219.413827][ T5350] usb 9-1: SerialNumber: syz [ 219.425061][ T5350] usb 9-1: config 0 descriptor?? [ 219.477819][ T25] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 219.629493][ T25] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 219.630937][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.630968][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.631021][ T25] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 219.631065][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.650822][ T25] usb 8-1: config 0 descriptor?? [ 219.699037][ T5350] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 219.754668][ T5350] cx231xx 9-1:0.1: Failed to read PCB config [ 219.754773][ T5350] cx231xx 9-1:0.1: probe with driver cx231xx failed with error -71 [ 219.771527][ T5350] usb 9-1: USB disconnect, device number 15 [ 220.146210][ T7806] netlink: 28 bytes leftover after parsing attributes in process `syz.9.502'. [ 220.146240][ T7806] netlink: 28 bytes leftover after parsing attributes in process `syz.9.502'. [ 220.193123][ T7807] netlink: 72 bytes leftover after parsing attributes in process `syz.6.519'. [ 220.228086][ T5350] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 220.377741][ T5350] usb 9-1: Using ep0 maxpacket: 32 [ 220.381714][ T5350] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 220.383811][ T5350] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 220.383838][ T5350] usb 9-1: config 0 has no interface number 0 [ 220.383880][ T5350] usb 9-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 220.383906][ T5350] usb 9-1: config 0 interface 1 has no altsetting 0 [ 220.401048][ T5350] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.401075][ T5350] usb 9-1: Product: syz [ 220.401089][ T5350] usb 9-1: Manufacturer: syz [ 220.401127][ T5350] usb 9-1: SerialNumber: syz [ 220.446880][ T5350] usb 9-1: config 0 descriptor?? [ 220.479256][ T7816] netlink: 'syz.6.521': attribute type 1 has an invalid length. [ 220.508671][ T25] usbhid 8-1:0.0: can't add hid device: -71 [ 220.508819][ T25] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 220.545062][ T25] usb 8-1: USB disconnect, device number 18 [ 220.568078][ T6768] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 220.685591][ T5350] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 220.722908][ T6768] usb 6-1: unable to get BOS descriptor or descriptor too short [ 220.723823][ T6768] usb 6-1: not running at top speed; connect to a high speed hub [ 220.723857][ T6768] usb 6-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 220.723924][ T6768] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 220.725515][ T6768] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.725609][ T6768] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 220.727200][ T6768] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.727259][ T6768] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 220.736640][ T6768] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.740319][ T6768] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 220.744950][ T6768] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.745030][ T6768] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 220.753373][ T6768] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.753444][ T6768] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 220.754973][ T6768] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.755015][ T6768] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 220.759074][ T6768] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.759127][ T6768] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 220.762380][ T6768] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.762423][ T6768] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 220.771594][ T6768] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.771621][ T6768] usb 6-1: Product: syz [ 220.771633][ T6768] usb 6-1: Manufacturer: syz [ 220.771672][ T6768] usb 6-1: SerialNumber: syz [ 220.791225][ T5350] cx231xx 9-1:0.1: Failed to read PCB config [ 220.791289][ T5350] cx231xx 9-1:0.1: probe with driver cx231xx failed with error -110 [ 221.013650][ T7812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.027418][ T7812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.136882][ T6768] usb 6-1: USB disconnect, device number 17 [ 221.369016][ T6768] usb 10-1: USB disconnect, device number 13 [ 221.860138][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.7.528'. [ 221.908848][ T25] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 221.971687][ T4984] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 221.971720][ T4984] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 221.971733][ T4984] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 221.971802][ T4984] loop0: [ 222.179357][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 222.180980][ T25] usb 10-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 222.187094][ T25] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 222.187132][ T25] usb 10-1: config 0 interface 0 has no altsetting 0 [ 222.203983][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.204010][ T25] usb 10-1: Product: syz [ 222.204024][ T25] usb 10-1: Manufacturer: syz [ 222.204036][ T25] usb 10-1: SerialNumber: syz [ 222.232978][ T25] usb 10-1: config 0 descriptor?? [ 222.529436][ T25] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input30 [ 222.987177][ T7874] syz.6.532 (7874): drop_caches: 0 [ 223.101337][ T6753] usb 9-1: USB disconnect, device number 16 [ 223.429454][ T7882] fuse: Bad value for 'fd' [ 223.517818][ T5753] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 223.574075][ T7883] xt_LOG: prefix is not null-terminated [ 223.584301][ T7886] xt_LOG: prefix is not null-terminated [ 223.667701][ T5753] usb 8-1: Using ep0 maxpacket: 8 [ 223.670711][ T5753] usb 8-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 223.676189][ T5753] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.676255][ T5753] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.676301][ T5753] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.735242][ T5710] kvaser_usb 7-1:3.231: error -ENODEV: Cannot get usb endpoint(s) [ 223.752777][ T5753] usb 8-1: config 0 descriptor?? [ 223.927447][ T32] kauditd_printk_skb: 18 callbacks suppressed [ 223.927470][ T32] audit: type=1326 audit(1789908854.536:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.8.535" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2872f9e159 code=0x7ffc0000 [ 223.961348][ T32] audit: type=1326 audit(1789908854.536:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.8.535" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2872f9e159 code=0x7ffc0000 [ 224.017018][ T7879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.027398][ T7879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.036968][ T7879] netlink: 'syz.7.533': attribute type 2 has an invalid length. [ 224.036992][ T7879] netlink: 40 bytes leftover after parsing attributes in process `syz.7.533'. [ 224.473281][ T7879] : entered promiscuous mode [ 224.528942][ T5753] usbhid 8-1:0.0: can't add hid device: -71 [ 224.529041][ T5753] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 224.560084][ T5753] usb 8-1: USB disconnect, device number 19 [ 224.674633][ T7897] syzkaller0: entered promiscuous mode [ 224.674653][ T7897] syzkaller0: entered allmulticast mode [ 224.958926][ T9] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 225.099213][ C1] imon 10-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 225.104232][ T25] send_packet: 1153 callbacks suppressed [ 225.104254][ T25] imon:send_packet: packet tx failed (-71) [ 225.118132][ T25] imon 10-1:0.0: panel buttons/knobs setup failed [ 225.146633][ T32] audit: type=1800 audit(1789908855.746:224): pid=7862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.530" name="bus" dev="ramfs" ino=22269 res=0 errno=0 [ 225.169187][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 225.174312][ T9] usb 9-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 225.195798][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.195840][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 225.221908][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.223522][ T9] usb 9-1: Product: syz [ 225.223541][ T9] usb 9-1: Manufacturer: syz [ 225.223554][ T9] usb 9-1: SerialNumber: syz [ 225.243771][ T9] usb 9-1: config 0 descriptor?? [ 225.398214][ T25] rc_core: IR keymap rc-imon-pad not found [ 225.398236][ T25] Registered IR keymap rc-empty [ 225.398321][ T25] imon 10-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 225.398340][ T25] imon 10-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 225.401207][ T25] imon:send_packet: packet tx failed (-71) [ 225.417848][ T25] imon 10-1:0.0: remote input dev register failed [ 225.418019][ T25] imon 10-1:0.0: imon_init_intf0: rc device setup failed [ 225.479624][ T9] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 225.479732][ T9] imon 9-1:0.0: unable to initialize intf0, err -19 [ 225.479751][ T9] imon:imon_probe: failed to initialize context! [ 225.479763][ T9] imon 9-1:0.0: unable to register, err -19 [ 225.482183][ T9] usb 9-1: USB disconnect, device number 17 [ 225.491698][ T25] imon 10-1:0.0: unable to initialize intf0, err 0 [ 225.491718][ T25] imon:imon_probe: failed to initialize context! [ 225.491729][ T25] imon 10-1:0.0: unable to register, err -19 [ 225.561716][ T25] usb 10-1: USB disconnect, device number 14 [ 225.977184][ T7928] xt_hl: Unknown Hop Limit match mode: 206 [ 225.980067][ T5753] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 226.057971][ T9] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 226.142509][ T5753] usb 8-1: unable to get BOS descriptor or descriptor too short [ 226.144096][ T5753] usb 8-1: not running at top speed; connect to a high speed hub [ 226.144132][ T5753] usb 8-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 226.144170][ T5753] usb 8-1: too many configurations: 17, using maximum allowed: 8 [ 226.145345][ T5753] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.145395][ T5753] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 226.213290][ T5753] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.213348][ T5753] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 226.217355][ T5753] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.217410][ T5753] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 226.228415][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 226.255216][ T5753] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.255268][ T5753] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 226.269318][ T9] usb 9-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 226.285193][ T5753] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.285233][ T5753] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 226.320251][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.320295][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 226.344183][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.542'. [ 226.365310][ T5753] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.365610][ T5753] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 226.392303][ T5753] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.392355][ T5753] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 226.418250][ T5753] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.418305][ T5753] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 226.419289][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.419312][ T9] usb 9-1: Product: syz [ 226.419327][ T9] usb 9-1: Manufacturer: syz [ 226.419341][ T9] usb 9-1: SerialNumber: syz [ 226.425252][ T5753] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.425284][ T5753] usb 8-1: Product: syz [ 226.425299][ T5753] usb 8-1: Manufacturer: syz [ 226.425313][ T5753] usb 8-1: SerialNumber: syz [ 226.453365][ T9] usb 9-1: config 0 descriptor?? [ 226.515548][ T7936] syzkaller0: entered promiscuous mode [ 226.515566][ T7936] syzkaller0: entered allmulticast mode [ 226.541595][ T7936] tipc: Enabled bearer , priority 0 [ 226.560389][ T7934] tipc: Resetting bearer [ 226.682469][ T7934] tipc: Disabling bearer [ 226.716486][ T7917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.722608][ T7917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.738000][ T9] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 226.738163][ T9] imon 9-1:0.0: unable to initialize intf0, err -19 [ 226.738183][ T9] imon:imon_probe: failed to initialize context! [ 226.738195][ T9] imon 9-1:0.0: unable to register, err -19 [ 226.815714][ T5753] usb 8-1: USB disconnect, device number 20 [ 227.580876][ T4984] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 227.580908][ T4984] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 227.580921][ T4984] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 227.581012][ T4984] loop0: [ 227.661906][ T7978] netlink: 28 bytes leftover after parsing attributes in process `syz.8.537'. [ 227.661937][ T7978] netlink: 28 bytes leftover after parsing attributes in process `syz.8.537'. [ 228.073250][ T32] audit: type=1326 audit(1789908858.676:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.7.552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 228.073308][ T32] audit: type=1326 audit(1789908858.676:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.7.552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 228.105672][ T32] audit: type=1326 audit(1789908858.706:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.7.552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 228.105837][ T32] audit: type=1326 audit(1789908858.706:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.7.552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 228.107014][ T32] audit: type=1326 audit(1789908858.706:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.7.552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 228.151905][ T32] audit: type=1326 audit(1789908858.756:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.7.552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 228.151974][ T32] audit: type=1326 audit(1789908858.756:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.7.552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 228.681139][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.7.556'. [ 228.763353][ T7999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.829538][ T9] usb 9-1: USB disconnect, device number 18 [ 229.144875][ T32] kauditd_printk_skb: 28 callbacks suppressed [ 229.144897][ T32] audit: type=1326 audit(1789908859.746:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.7.558" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 229.146391][ T32] audit: type=1326 audit(1789908859.746:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.7.558" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 229.146450][ T32] audit: type=1326 audit(1789908859.746:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.7.558" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 229.146494][ T32] audit: type=1326 audit(1789908859.746:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.7.558" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 229.146546][ T32] audit: type=1326 audit(1789908859.746:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.7.558" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 229.146640][ T32] audit: type=1326 audit(1789908859.746:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.7.558" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 229.181837][ T32] audit: type=1326 audit(1789908859.746:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.7.558" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 229.181893][ T32] audit: type=1326 audit(1789908859.786:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.7.558" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 229.181935][ T32] audit: type=1326 audit(1789908859.786:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.7.558" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 229.228186][ T32] audit: type=1326 audit(1789908859.806:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.7.558" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 229.548098][ T7999] dvmrp0: entered allmulticast mode [ 229.903717][ T8017] syzkaller0: entered promiscuous mode [ 229.903742][ T8017] syzkaller0: entered allmulticast mode [ 229.950544][ T8017] tipc: Enabled bearer , priority 0 [ 229.966654][ T8016] tipc: Resetting bearer [ 230.014830][ T8029] netlink: 72 bytes leftover after parsing attributes in process `syz.5.563'. [ 230.114550][ T8016] tipc: Disabling bearer [ 230.326350][ T8039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.333108][ T8039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.558803][ T9] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 230.710117][ T9] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 230.712551][ T9] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 230.712581][ T9] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 230.712602][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 230.712649][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 230.712675][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 230.714575][ T9] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 230.714599][ T9] usb 9-1: Product: syz [ 230.714614][ T9] usb 9-1: Manufacturer: syz [ 230.781300][ T8050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.785884][ T8050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.829180][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 230.829203][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 230.860548][ T9] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 230.860571][ T9] cdc_wdm 9-1:1.0: Unknown control protocol [ 231.003081][ T8050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.008976][ T8050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.099387][ T8050] netlink: 28 bytes leftover after parsing attributes in process `syz.6.569'. [ 231.099417][ T8050] netlink: 28 bytes leftover after parsing attributes in process `syz.6.569'. [ 231.205360][ C1] cdc_wdm 9-1:1.0: unknown notification 108 received: index 49848 len 0 [ 231.413417][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 231.413551][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 231.413779][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 231.413800][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 231.414012][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 231.414033][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 231.414245][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 231.414265][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 231.414477][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 231.414506][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 231.414717][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 231.414736][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 231.414944][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 231.414963][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 231.415171][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 231.415191][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 231.415400][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 231.415421][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 231.415650][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 231.415671][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 231.421727][ T5350] usb 9-1: USB disconnect, device number 19 [ 231.421808][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 231.745953][ T8066] pimreg: entered allmulticast mode [ 231.904263][ T8075] bond1: option all_slaves_active: invalid value (143) [ 231.937503][ T8075] bond1 (unregistering): Released all slaves [ 232.041641][ T8073] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 232.165029][ T8088] netlink: 72 bytes leftover after parsing attributes in process `syz.9.577'. [ 232.806035][ T8096] could not allocate digest TFM handle sha1-ni [ 232.831194][ T8107] syzkaller0: entered promiscuous mode [ 232.831221][ T8107] syzkaller0: entered allmulticast mode [ 232.835474][ T8117] syzkaller0: entered promiscuous mode [ 232.835498][ T8117] syzkaller0: entered allmulticast mode [ 232.843332][ T8113] tipc: Enabled bearer , priority 10 [ 232.903101][ T8104] tipc: Enabled bearer , priority 0 [ 232.907002][ T8106] tipc: Resetting bearer [ 232.986617][ T8106] tipc: Disabling bearer [ 233.156740][ T8101] tipc: Resetting bearer [ 233.244313][ T8101] tipc: Disabling bearer [ 233.674154][ T8142] netlink: 72 bytes leftover after parsing attributes in process `syz.9.589'. [ 233.872510][ T8145] syz.8.590 (8145): drop_caches: 0 [ 233.959057][ T5699] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 234.108403][ T5699] usb 8-1: Using ep0 maxpacket: 32 [ 234.116966][ T5699] usb 8-1: unable to get BOS descriptor or descriptor too short [ 234.117024][ T5699] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 234.169102][ T5699] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 234.169135][ T5699] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 234.169155][ T5699] usb 8-1: config 14 has no interface number 0 [ 234.169172][ T5699] usb 8-1: config 14 has no interface number 1 [ 234.169239][ T5699] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 234.169263][ T5699] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 234.169288][ T5699] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 234.169314][ T5699] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 234.169340][ T5699] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 234.169366][ T5699] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.169391][ T5699] usb 8-1: config 14 interface 57 has no altsetting 0 [ 234.169408][ T5699] usb 8-1: config 14 interface 228 has no altsetting 0 [ 234.212369][ T5699] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.212398][ T5699] usb 8-1: Product: syz [ 234.212413][ T5699] usb 8-1: Manufacturer: syz [ 234.212426][ T5699] usb 8-1: SerialNumber: syz [ 234.400059][ T8162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.403361][ T8162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.533354][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.9.595'. [ 234.614419][ T8162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.615781][ T8162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.624852][ T8162] netlink: 28 bytes leftover after parsing attributes in process `syz.6.594'. [ 234.624877][ T8162] netlink: 28 bytes leftover after parsing attributes in process `syz.6.594'. [ 234.650765][ T8168] syzkaller0: entered promiscuous mode [ 234.650788][ T8168] syzkaller0: entered allmulticast mode [ 234.674224][ T8168] tipc: Enabled bearer , priority 10 [ 234.713796][ T8167] tipc: Resetting bearer [ 234.767248][ T5699] legousbtower 8-1:14.57: interrupt endpoints not found [ 234.782717][ T8167] tipc: Disabling bearer [ 234.805103][ T8172] ALSA: mixer_oss: invalid OSS volume '' [ 235.113845][ T8179] syzkaller0: entered promiscuous mode [ 235.113872][ T8179] syzkaller0: entered allmulticast mode [ 235.137438][ T8179] tipc: Enabled bearer , priority 0 [ 235.148199][ T8178] tipc: Resetting bearer [ 235.192215][ T5699] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 235.195113][ T5699] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 235.214593][ T8178] tipc: Disabling bearer [ 235.430399][ T5350] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 235.516251][ T8193] netlink: 72 bytes leftover after parsing attributes in process `syz.8.602'. [ 235.585814][ T5350] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 235.586854][ T5350] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 235.586881][ T5350] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.586899][ T5350] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 235.586945][ T5350] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.606001][ T5350] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 235.606027][ T5350] usb 10-1: Product: syz [ 235.606040][ T5350] usb 10-1: Manufacturer: syz [ 235.643484][ T5350] cdc_wdm 10-1:1.0: skipping garbage [ 235.643507][ T5350] cdc_wdm 10-1:1.0: skipping garbage [ 235.653447][ T5350] cdc_wdm 10-1:1.0: cdc-wdm1: USB WDM device [ 235.653475][ T5350] cdc_wdm 10-1:1.0: Unknown control protocol [ 235.836793][ T8182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.840587][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.8.604'. [ 235.868459][ T8182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.951277][ T5350] usb 10-1: USB disconnect, device number 15 [ 236.165316][ T8205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.165645][ T8205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.623187][ T8219] syz.8.606 (8219): drop_caches: 0 [ 237.087978][ T8139] usb 8-1: LEGO USB Tower reset control request failed [ 237.090117][ T8182] usb 8-1: LEGO USB Tower reset control request failed [ 237.375563][ T6768] usb 8-1: USB disconnect, device number 21 [ 237.417194][ T6768] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 238.201180][ T8250] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 238.206111][ T8247] syzkaller0: entered promiscuous mode [ 238.206136][ T8247] syzkaller0: entered allmulticast mode [ 238.250441][ T8247] tipc: Enabled bearer , priority 10 [ 238.284697][ T8246] tipc: Resetting bearer [ 238.354253][ T8246] tipc: Disabling bearer [ 238.468223][ T9] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 238.628658][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 238.631829][ T9] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 238.632874][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.632912][ T9] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.632927][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 238.636827][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.636843][ T9] usb 8-1: Product: syz [ 238.636852][ T9] usb 8-1: Manufacturer: syz [ 238.636860][ T9] usb 8-1: SerialNumber: syz [ 238.711926][ T9] usb 8-1: config 0 descriptor?? [ 238.736939][ T8265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.746786][ T8265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.808258][ T8262] syzkaller0: entered promiscuous mode [ 238.808283][ T8262] syzkaller0: entered allmulticast mode [ 238.839122][ T8262] tipc: Enabled bearer , priority 0 [ 238.868438][ T8261] tipc: Resetting bearer [ 238.918785][ T8261] tipc: Disabling bearer [ 238.943288][ T9] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 238.943352][ T9] imon 8-1:0.0: unable to initialize intf0, err -19 [ 238.943363][ T9] imon:imon_probe: failed to initialize context! [ 238.943369][ T9] imon 8-1:0.0: unable to register, err -19 [ 238.980025][ T9] usb 8-1: USB disconnect, device number 22 [ 239.280492][ T8278] netlink: 72 bytes leftover after parsing attributes in process `syz.9.618'. [ 239.382314][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.8.620'. [ 239.469968][ T9] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 239.605868][ T8287] syz.9.621 (8287): drop_caches: 0 [ 239.617954][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 239.618870][ T9] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 239.625160][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.625214][ T9] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.625242][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 239.678186][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.678212][ T9] usb 8-1: Product: syz [ 239.678227][ T9] usb 8-1: Manufacturer: syz [ 239.678248][ T9] usb 8-1: SerialNumber: syz [ 239.735391][ T9] usb 8-1: config 0 descriptor?? [ 239.744770][ T8296] input: syz1 as /devices/virtual/input/input32 [ 239.949228][ T9] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 239.949336][ T9] imon 8-1:0.0: unable to initialize intf0, err -19 [ 239.949355][ T9] imon:imon_probe: failed to initialize context! [ 239.949366][ T9] imon 8-1:0.0: unable to register, err -19 [ 240.158841][ T8318] syzkaller0: entered promiscuous mode [ 240.158866][ T8318] syzkaller0: entered allmulticast mode [ 240.186723][ T8318] tipc: Enabled bearer , priority 10 [ 240.203801][ T8316] tipc: Resetting bearer [ 240.245613][ T8325] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 240.266792][ T8316] tipc: Disabling bearer [ 240.388527][ T6775] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 240.412236][ T8325] dvmrp0: entered allmulticast mode [ 240.539758][ T6775] usb 6-1: Using ep0 maxpacket: 16 [ 240.544342][ T6775] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 240.552742][ T6775] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 240.561101][ T6775] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.561128][ T6775] usb 6-1: Product: syz [ 240.561141][ T6775] usb 6-1: Manufacturer: ž [ 240.561153][ T6775] usb 6-1: SerialNumber: syz [ 240.623525][ T6775] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 240.803128][ T6775] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 240.842424][ T8337] syzkaller0: entered promiscuous mode [ 240.842486][ T8337] syzkaller0: entered allmulticast mode [ 240.872239][ T8341] netlink: 28 bytes leftover after parsing attributes in process `syz.7.611'. [ 240.872315][ T8341] netlink: 28 bytes leftover after parsing attributes in process `syz.7.611'. [ 240.946572][ T8337] tipc: Enabled bearer , priority 0 [ 240.956921][ T8335] tipc: Resetting bearer [ 241.096980][ T8335] tipc: Disabling bearer [ 241.130644][ T8352] netlink: 72 bytes leftover after parsing attributes in process `syz.6.634'. [ 241.250515][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.8.635'. [ 241.307080][ T6775] usb 6-1: USB disconnect, device number 18 [ 241.477908][ T8362] syz.8.637 (8362): drop_caches: 0 [ 241.557222][ T6601] udevd[6601]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.640228][ T32] kauditd_printk_skb: 196 callbacks suppressed [ 241.640251][ T32] audit: type=1326 audit(1789908872.246:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.6.639" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdb39e159 code=0x7ffc0000 [ 241.640464][ T32] audit: type=1326 audit(1789908872.246:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.6.639" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdb39e159 code=0x7ffc0000 [ 241.646817][ T32] audit: type=1326 audit(1789908872.246:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.6.639" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdb39e159 code=0x7ffc0000 [ 241.646871][ T32] audit: type=1326 audit(1789908872.246:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.6.639" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdb39e159 code=0x7ffc0000 [ 241.654489][ T32] audit: type=1326 audit(1789908872.256:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.6.639" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5bdb39e159 code=0x7ffc0000 [ 241.654544][ T32] audit: type=1326 audit(1789908872.256:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.6.639" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdb39e159 code=0x7ffc0000 [ 241.654585][ T32] audit: type=1326 audit(1789908872.256:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.6.639" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdb39e159 code=0x7ffc0000 [ 241.668639][ T32] audit: type=1326 audit(1789908872.256:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.6.639" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdb39e159 code=0x7ffc0000 [ 241.668692][ T32] audit: type=1326 audit(1789908872.256:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.6.639" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdb39e159 code=0x7ffc0000 [ 241.668730][ T32] audit: type=1326 audit(1789908872.266:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.6.639" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5bdb39e159 code=0x7ffc0000 [ 241.763582][ T8364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.764050][ T8364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.191673][ T5710] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 242.192787][ T8377] syzkaller0: entered promiscuous mode [ 242.192809][ T8377] syzkaller0: entered allmulticast mode [ 242.200221][ T8377] tipc: Enabled bearer , priority 10 [ 242.228508][ T8376] tipc: Resetting bearer [ 242.248812][ T9] usb 8-1: USB disconnect, device number 23 [ 242.301082][ T8376] tipc: Disabling bearer [ 242.372388][ T5710] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 242.374282][ T5710] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.374315][ T5710] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.374354][ T5710] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.377538][ T5710] usb 9-1: config 0 descriptor?? [ 242.475374][ T8380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 242.824519][ T8388] syzkaller0: entered promiscuous mode [ 242.824577][ T8388] syzkaller0: entered allmulticast mode [ 242.830683][ T8388] tipc: Enabled bearer , priority 0 [ 242.833816][ T8387] tipc: Resetting bearer [ 242.889429][ T5710] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 242.889475][ T5710] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 242.889496][ T5710] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 242.889517][ T5710] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 242.889539][ T5710] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 242.889563][ T5710] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 242.889587][ T5710] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 242.916775][ T5710] pyra 0003:1E7D:2CF6.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.8-1/input0 [ 242.921681][ T8387] tipc: Disabling bearer [ 243.019945][ T8389] netlink: 40 bytes leftover after parsing attributes in process `syz.5.645'. [ 243.039165][ T5676] usb 8-1: new low-speed USB device number 24 using dummy_hcd [ 243.190323][ T5676] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 243.194923][ T5676] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 243.194964][ T5676] usb 8-1: config 0 has no interface number 0 [ 243.195008][ T5676] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 243.195034][ T5676] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 243.195076][ T5676] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.232043][ T8393] netlink: 72 bytes leftover after parsing attributes in process `syz.9.650'. [ 243.271925][ T8371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.272978][ T8371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.295677][ T5676] usb 8-1: config 0 descriptor?? [ 243.300559][ T8386] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 243.319155][ T5699] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 243.321943][ T5676] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 243.389373][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.9.652'. [ 243.489126][ T5699] usb 6-1: unable to get BOS descriptor or descriptor too short [ 243.489216][ T5699] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 243.497232][ T5699] usb 6-1: config 114 has an invalid interface number: 240 but max is 0 [ 243.497263][ T5699] usb 6-1: config 114 has no interface number 0 [ 243.497338][ T5699] usb 6-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 243.497365][ T5699] usb 6-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 243.497391][ T5699] usb 6-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 243.497412][ T5699] usb 6-1: config 114 interface 240 has no altsetting 0 [ 243.519013][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.519042][ T5699] usb 6-1: Product: syz [ 243.519082][ T5699] usb 6-1: Manufacturer: syz [ 243.519095][ T5699] usb 6-1: SerialNumber: syz [ 243.535006][ T8389] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 243.535173][ T8389] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 243.786059][ T8409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.786619][ T8409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.812062][ T5699] ir_usb 6-1:114.240: IR Dongle converter detected [ 243.821110][ T5699] usb 6-1: IRDA class descriptor not found, device not bound [ 243.869421][ T5699] usb 6-1: USB disconnect, device number 19 [ 243.924323][ T7746] udevd[7746]: setting mode of /dev/bus/usb/006/019 to 020664 failed: No such file or directory [ 243.924460][ T7746] udevd[7746]: setting owner of /dev/bus/usb/006/019 to uid=0, gid=0 failed: No such file or directory [ 244.027713][ T5676] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 244.052272][ T8386] syzkaller1: entered promiscuous mode [ 244.052290][ T8386] syzkaller1: entered allmulticast mode [ 244.109013][ T25] usb 8-1: USB disconnect, device number 24 [ 244.109086][ C0] iowarrior 8-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 244.177731][ T5676] usb 10-1: Using ep0 maxpacket: 16 [ 244.178409][ T5676] usb 10-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 244.181764][ T5676] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.181795][ T5676] usb 10-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 244.181818][ T5676] usb 10-1: config 0 interface 0 has no altsetting 0 [ 244.184897][ T5676] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.184923][ T5676] usb 10-1: Product: syz [ 244.184935][ T5676] usb 10-1: Manufacturer: syz [ 244.184943][ T5676] usb 10-1: SerialNumber: syz [ 244.260038][ T5676] usb 10-1: config 0 descriptor?? [ 244.350915][ T5710] pyra 0003:1E7D:2CF6.0003: couldn't init struct pyra_device [ 244.350972][ T5710] pyra 0003:1E7D:2CF6.0003: couldn't install mouse [ 244.416318][ T5710] pyra 0003:1E7D:2CF6.0003: probe with driver pyra failed with error -71 [ 244.432257][ T5710] usb 9-1: USB disconnect, device number 20 [ 244.479577][ T5676] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 244.479692][ T5676] imon 10-1:0.0: unable to initialize intf0, err -19 [ 244.479711][ T5676] imon:imon_probe: failed to initialize context! [ 244.479723][ T5676] imon 10-1:0.0: unable to register, err -19 [ 244.519205][ T5676] usb 10-1: USB disconnect, device number 16 [ 244.728521][ T5699] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 244.881609][ T5699] usb 6-1: unable to get BOS descriptor or descriptor too short [ 244.882163][ T5699] usb 6-1: not running at top speed; connect to a high speed hub [ 244.882200][ T5699] usb 6-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 244.882248][ T5699] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 244.883760][ T5699] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.883812][ T5699] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 244.886116][ T5699] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.886167][ T5699] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 244.899555][ T5699] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.899610][ T5699] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 244.903697][ T5699] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.903750][ T5699] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 244.906371][ T5699] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.906434][ T5699] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 244.908237][ T5699] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.908289][ T5699] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 244.920490][ T5699] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.920546][ T5699] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 244.923325][ T5699] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.923373][ T5699] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 244.938549][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.938583][ T5699] usb 6-1: Product: syz [ 244.938597][ T5699] usb 6-1: Manufacturer: syz [ 244.938610][ T5699] usb 6-1: SerialNumber: syz [ 245.081969][ T5676] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 245.165101][ T8413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.182492][ T8413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.236970][ T5699] usb 6-1: USB disconnect, device number 20 [ 245.260571][ T5676] usb 10-1: Using ep0 maxpacket: 16 [ 245.261738][ T5676] usb 10-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 245.266168][ T5676] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.266220][ T5676] usb 10-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 245.266250][ T5676] usb 10-1: config 0 interface 0 has no altsetting 0 [ 245.318682][ T5676] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.318717][ T5676] usb 10-1: Product: syz [ 245.318732][ T5676] usb 10-1: Manufacturer: syz [ 245.318747][ T5676] usb 10-1: SerialNumber: syz [ 245.324385][ T5676] usb 10-1: config 0 descriptor?? [ 245.497736][ T6768] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 245.530553][ T8422] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.531284][ T8422] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.559612][ T5676] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 245.559821][ T5676] imon 10-1:0.0: unable to initialize intf0, err -19 [ 245.559841][ T5676] imon:imon_probe: failed to initialize context! [ 245.559854][ T5676] imon 10-1:0.0: unable to register, err -19 [ 245.669478][ T6768] usb 9-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 245.672034][ T6768] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.672114][ T6768] usb 9-1: config 1 interface 0 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 245.676531][ T6768] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.676559][ T6768] usb 9-1: Product: syz [ 245.676573][ T6768] usb 9-1: Manufacturer: syz [ 245.676587][ T6768] usb 9-1: SerialNumber: syz [ 245.712130][ T8422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.726587][ T8422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.761212][ T6768] snd-ua101 9-1:1.1: invalid num_altsetting [ 245.761237][ T6768] snd-ua101 9-1:1.0: invalid format type [ 246.941720][ T1044] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.946207][ T4142] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.946261][ T4142] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.946300][ T4142] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.114358][ T8445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 247.234897][ T8437] tipc: Enabling of bearer rejected, failed to enable media [ 247.236000][ T8438] netlink: 28 bytes leftover after parsing attributes in process `syz.9.656'. [ 247.236025][ T8438] netlink: 28 bytes leftover after parsing attributes in process `syz.9.656'. [ 247.853662][ T8451] netlink: 228 bytes leftover after parsing attributes in process `syz.5.664'. [ 248.322083][ T5753] usb 9-1: USB disconnect, device number 21 [ 248.603863][ T8459] netlink: 72 bytes leftover after parsing attributes in process `syz.6.668'. [ 248.891523][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.8.669'. [ 249.092005][ T5676] usb 10-1: USB disconnect, device number 17 [ 249.336711][ T8468] loop5: detected capacity change from 0 to 7 [ 249.379651][ T8468] Dev loop5: unable to read RDB block 7 [ 249.379691][ T8468] loop5: AHDI p1 p2 p3 [ 249.379716][ T8468] loop5: partition table partially beyond EOD, truncated [ 249.379967][ T8468] loop5: p1 start 1601398130 is beyond EOD, truncated [ 249.379991][ T8468] loop5: p2 start 1702059890 is beyond EOD, truncated [ 250.106143][ T4984] Dev loop5: unable to read RDB block 7 [ 250.106184][ T4984] loop5: AHDI p1 p2 p3 [ 250.106208][ T4984] loop5: partition table partially beyond EOD, truncated [ 250.106465][ T4984] loop5: p1 start 1601398130 is beyond EOD, truncated [ 250.106486][ T4984] loop5: p2 start 1702059890 is beyond EOD, truncated [ 250.707873][ T5753] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 250.878725][ T5753] usb 8-1: unable to get BOS descriptor or descriptor too short [ 250.883806][ T5753] usb 8-1: not running at top speed; connect to a high speed hub [ 250.883845][ T5753] usb 8-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 250.883881][ T5753] usb 8-1: too many configurations: 17, using maximum allowed: 8 [ 250.886132][ T5753] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.886183][ T5753] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.905530][ T5753] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.905589][ T5753] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 251.018662][ T5753] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.018724][ T5753] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 251.155661][ T5753] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.155720][ T5753] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 251.184836][ T5753] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.184896][ T5753] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 251.186002][ T4984] Dev loop5: unable to read RDB block 7 [ 251.186034][ T4984] loop5: AHDI p1 p2 p3 [ 251.186059][ T4984] loop5: partition table partially beyond EOD, truncated [ 251.186331][ T4984] loop5: p1 start 1601398130 is beyond EOD, truncated [ 251.186352][ T4984] loop5: p2 start 1702059890 is beyond EOD, truncated [ 251.259804][ T5753] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.260243][ T5753] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 251.304300][ T5753] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.304358][ T5753] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 251.412462][ T5753] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.412519][ T5753] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 251.443745][ T5753] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.443776][ T5753] usb 8-1: Product: syz [ 251.443791][ T5753] usb 8-1: Manufacturer: syz [ 251.443806][ T5753] usb 8-1: SerialNumber: syz [ 251.527462][ T8487] syzkaller0: entered promiscuous mode [ 251.527489][ T8487] syzkaller0: entered allmulticast mode [ 251.702193][ T8482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.729861][ T8482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.860653][ T5753] usb 8-1: USB disconnect, device number 25 [ 251.959472][ T8491] netlink: 'syz.5.678': attribute type 1 has an invalid length. [ 252.155867][ T8494] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 252.563684][ T8491] bond2: entered promiscuous mode [ 252.563731][ T8491] bond2: entered allmulticast mode [ 252.564319][ T8491] 8021q: adding VLAN 0 to HW filter on device bond2 [ 252.864983][ T4984] Dev loop5: unable to read RDB block 7 [ 252.865024][ T4984] loop5: AHDI p1 p2 p3 [ 252.865051][ T4984] loop5: partition table partially beyond EOD, truncated [ 252.865261][ T4984] loop5: p1 start 1601398130 is beyond EOD, truncated [ 252.865283][ T4984] loop5: p2 start 1702059890 is beyond EOD, truncated [ 253.048240][ T32] kauditd_printk_skb: 233 callbacks suppressed [ 253.048274][ T32] audit: type=1326 audit(1789908883.646:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8497 comm="syz.7.680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 253.048321][ T32] audit: type=1326 audit(1789908883.646:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8497 comm="syz.7.680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 253.055179][ T32] audit: type=1326 audit(1789908883.656:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8497 comm="syz.7.680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 253.055237][ T32] audit: type=1326 audit(1789908883.656:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8497 comm="syz.7.680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 253.055283][ T32] audit: type=1326 audit(1789908883.656:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8497 comm="syz.7.680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 253.055889][ T32] audit: type=1326 audit(1789908883.656:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8497 comm="syz.7.680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 253.058004][ T32] audit: type=1326 audit(1789908883.666:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8497 comm="syz.7.680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 253.058055][ T32] audit: type=1326 audit(1789908883.666:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8497 comm="syz.7.680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 253.360146][ T32] audit: type=1326 audit(1789908883.966:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8497 comm="syz.7.680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 253.360202][ T32] audit: type=1326 audit(1789908883.966:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8497 comm="syz.7.680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a619e159 code=0x7ffc0000 [ 253.785959][ T8508] netlink: 72 bytes leftover after parsing attributes in process `syz.9.683'. [ 253.928352][ T5753] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 254.057804][ T5753] usb 6-1: device descriptor read/64, error -71 [ 254.298145][ T5753] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 254.427736][ T5753] usb 6-1: device descriptor read/64, error -71 [ 254.538129][ T5753] usb usb6-port1: attempt power cycle [ 254.698687][ T9] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 254.860083][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 254.863765][ T9] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 254.873833][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.875052][ T9] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 254.875083][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 254.885519][ T5753] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 254.916247][ T5753] usb 6-1: device descriptor read/8, error -71 [ 254.961956][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.961987][ T9] usb 8-1: Product: syz [ 254.962002][ T9] usb 8-1: Manufacturer: syz [ 254.962018][ T9] usb 8-1: SerialNumber: syz [ 255.006875][ T9] usb 8-1: config 0 descriptor?? [ 255.178138][ T5753] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 255.209004][ T5753] usb 6-1: device descriptor read/8, error -71 [ 255.248546][ T9] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 255.248674][ T9] imon 8-1:0.0: unable to initialize intf0, err -19 [ 255.248692][ T9] imon:imon_probe: failed to initialize context! [ 255.248704][ T9] imon 8-1:0.0: unable to register, err -19 [ 255.296101][ T9] usb 8-1: USB disconnect, device number 26 [ 255.318168][ T5753] usb usb6-port1: unable to enumerate USB device [ 255.559218][ T4984] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 255.559247][ T4984] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 255.559257][ T4984] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 255.559315][ T4984] loop0: [ 255.867660][ T9] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 255.986683][ T8531] syz.6.689 (8531): drop_caches: 0 [ 256.017667][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 256.019831][ T9] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 256.050858][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.050916][ T9] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 256.050943][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 256.135855][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.135886][ T9] usb 8-1: Product: syz [ 256.135901][ T9] usb 8-1: Manufacturer: syz [ 256.135916][ T9] usb 8-1: SerialNumber: syz [ 256.152501][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.161303][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.190661][ T9] usb 8-1: config 0 descriptor?? [ 256.425589][ T9] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 256.425708][ T9] imon 8-1:0.0: unable to initialize intf0, err -19 [ 256.425728][ T9] imon:imon_probe: failed to initialize context! [ 256.425749][ T9] imon 8-1:0.0: unable to register, err -19 [ 256.581059][ T4984] Dev loop5: unable to read RDB block 7 [ 256.581097][ T4984] loop5: AHDI p1 p2 p3 [ 256.581120][ T4984] loop5: partition table partially beyond EOD, truncated [ 256.581321][ T4984] loop5: p1 start 1601398130 is beyond EOD, truncated [ 256.581341][ T4984] loop5: p2 start 1702059890 is beyond EOD, truncated [ 257.049576][ T8538] syzkaller0: entered promiscuous mode [ 257.049602][ T8538] syzkaller0: entered allmulticast mode [ 257.126204][ T8538] tipc: Enabled bearer , priority 10 [ 257.170614][ T8537] tipc: Resetting bearer [ 257.178208][ T5753] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 257.290361][ T8540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 257.330718][ T5753] usb 6-1: device descriptor read/64, error -71 [ 257.445510][ T8537] tipc: Disabling bearer [ 257.505997][ T8541] netlink: 28 bytes leftover after parsing attributes in process `syz.7.684'. [ 257.506026][ T8541] netlink: 28 bytes leftover after parsing attributes in process `syz.7.684'. [ 257.567956][ T5753] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 257.718264][ T5753] usb 6-1: device descriptor read/64, error -71 [ 257.828317][ T5753] usb usb6-port1: attempt power cycle [ 258.189053][ T5753] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 258.234923][ T5753] usb 6-1: device descriptor read/8, error -71 [ 258.467661][ T5753] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 258.508553][ T5753] usb 6-1: device descriptor read/8, error -71 [ 258.630275][ T5753] usb usb6-port1: unable to enumerate USB device [ 258.733747][ T5753] usb 8-1: USB disconnect, device number 27 [ 259.919431][ T4984] Dev loop5: unable to read RDB block 7 [ 259.919473][ T4984] loop5: AHDI p1 p2 p3 [ 259.919509][ T4984] loop5: partition table partially beyond EOD, truncated [ 259.919730][ T4984] loop5: p1 start 1601398130 is beyond EOD, truncated [ 259.919752][ T4984] loop5: p2 start 1702059890 is beyond EOD, truncated [ 260.431425][ T4984] Dev loop5: unable to read RDB block 7 [ 260.431462][ T4984] loop5: AHDI p1 p2 p3 [ 260.431487][ T4984] loop5: partition table partially beyond EOD, truncated [ 260.431688][ T4984] loop5: p1 start 1601398130 is beyond EOD, truncated [ 260.431728][ T4984] loop5: p2 start 1702059890 is beyond EOD, truncated [ 260.659012][ T5753] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 260.827735][ T5753] usb 10-1: Using ep0 maxpacket: 32 [ 260.864525][ T5753] usb 10-1: unable to get BOS descriptor or descriptor too short [ 260.864586][ T5753] usb 10-1: New USB device found, idVendor=0921, idProduct=3ed0, bcdDevice=87.83 [ 260.864623][ T5753] usb 10-1: too many configurations: 61, using maximum allowed: 8 [ 260.924712][ T5753] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 260.924757][ T5753] usb 10-1: can't read configurations, error -61 [ 261.064651][ T5753] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 261.183228][ T4984] Dev loop5: unable to read RDB block 7 [ 261.183469][ T4984] loop5: AHDI p1 p2 p3 [ 261.183494][ T4984] loop5: partition table partially beyond EOD, truncated [ 261.183723][ T4984] loop5: p1 start 1601398130 is beyond EOD, truncated [ 261.183744][ T4984] loop5: p2 start 1702059890 is beyond EOD, truncated [ 261.248324][ T5753] usb 10-1: Using ep0 maxpacket: 32 [ 261.285118][ T5753] usb 10-1: unable to get BOS descriptor or descriptor too short [ 261.285178][ T5753] usb 10-1: New USB device found, idVendor=0921, idProduct=3ed0, bcdDevice=87.83 [ 261.285217][ T5753] usb 10-1: too many configurations: 61, using maximum allowed: 8 [ 261.321945][ T5753] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 261.321988][ T5753] usb 10-1: can't read configurations, error -61 [ 261.323587][ T5753] usb usb10-port1: attempt power cycle [ 261.483177][ T8560] syzkaller0: entered promiscuous mode [ 261.483203][ T8560] syzkaller0: entered allmulticast mode [ 261.544528][ T8560] tipc: Enabled bearer , priority 0 [ 261.561800][ T8559] tipc: Resetting bearer [ 261.577608][ C1] sched: DL replenish lagged too much [ 261.729618][ T5753] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 261.748449][ T5753] usb 10-1: Using ep0 maxpacket: 32 [ 261.750569][ T5753] usb 10-1: unable to get BOS descriptor or descriptor too short [ 261.750621][ T5753] usb 10-1: New USB device found, idVendor=0921, idProduct=3ed0, bcdDevice=87.83 [ 261.750656][ T5753] usb 10-1: too many configurations: 61, using maximum allowed: 8 [ 261.752449][ T5753] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 261.752487][ T5753] usb 10-1: can't read configurations, error -61 [ 261.849625][ T8559] tipc: Disabling bearer [ 261.879069][ T5753] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 261.900114][ T5753] usb 10-1: Using ep0 maxpacket: 32 [ 261.904148][ T5753] usb 10-1: unable to get BOS descriptor or descriptor too short [ 261.904205][ T5753] usb 10-1: New USB device found, idVendor=0921, idProduct=3ed0, bcdDevice=87.83 [ 261.904241][ T5753] usb 10-1: too many configurations: 61, using maximum allowed: 8 [ 261.961463][ T5753] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 261.961516][ T5753] usb 10-1: can't read configurations, error -61 [ 261.962959][ T5753] usb usb10-port1: unable to enumerate USB device [ 262.140279][ T4984] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 262.140313][ T4984] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 262.140325][ T4984] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 262.140392][ T4984] loop0: [ 262.498843][ T4984] Dev loop5: unable to read RDB block 7 [ 262.498880][ T4984] loop5: AHDI p1 p2 p3 [ 262.498905][ T4984] loop5: partition table partially beyond EOD, truncated [ 262.499123][ T4984] loop5: p1 start 1601398130 is beyond EOD, truncated [ 262.499144][ T4984] loop5: p2 start 1702059890 is beyond EOD, truncated [ 263.008022][ T5753] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 263.180125][ T5753] usb 6-1: Using ep0 maxpacket: 32 [ 263.183898][ T5753] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 263.186195][ T5753] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 263.186228][ T5753] usb 6-1: config 0 has no interface number 0 [ 263.186269][ T5753] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 263.186292][ T5753] usb 6-1: config 0 interface 85 has no altsetting 0 [ 263.277147][ T5753] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.277178][ T5753] usb 6-1: Product: syz [ 263.277193][ T5753] usb 6-1: Manufacturer: syz [ 263.277207][ T5753] usb 6-1: SerialNumber: syz [ 263.326285][ T5753] usb 6-1: config 0 descriptor?? [ 263.800595][ T5753] appletouch 6-1:0.85: Failed to read mode from device. [ 263.800853][ T5753] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 264.223245][ T5753] usb 6-1: USB disconnect, device number 29 [ 264.498825][ T5709] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 264.647822][ T5709] usb 10-1: Using ep0 maxpacket: 16 [ 264.654604][ T5709] usb 10-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 264.693079][ T5709] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 264.693114][ T5709] usb 10-1: config 0 interface 0 has no altsetting 0 [ 264.724534][ T5709] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.724569][ T5709] usb 10-1: Product: syz [ 264.724584][ T5709] usb 10-1: Manufacturer: syz [ 264.724598][ T5709] usb 10-1: SerialNumber: syz [ 264.809294][ T5709] usb 10-1: config 0 descriptor?? [ 269.758379][ T4984] Dev loop5: unable to read RDB block 7 [ 269.758417][ T4984] loop5: AHDI p1 p2 p3 [ 269.758441][ T4984] loop5: partition table partially beyond EOD, truncated [ 269.758703][ T4984] loop5: p1 start 1601398130 is beyond EOD, truncated [ 269.758724][ T4984] loop5: p2 start 1702059890 is beyond EOD, truncated [ 269.951248][ T5709] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 269.951352][ T5709] imon 10-1:0.0: unable to initialize intf0, err -19 [ 269.951368][ T5709] imon:imon_probe: failed to initialize context! [ 269.951379][ T5709] imon 10-1:0.0: unable to register, err -19 [ 270.011092][ T5709] usb 10-1: USB disconnect, device number 22 [ 270.262622][ T8598] capability: warning: `syz.5.714' uses 32-bit capabilities (legacy support in use) [ 270.422463][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.428254][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.456698][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.461714][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.462517][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 270.669086][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.6.716'. [ 270.877169][ T8605] syzkaller0: entered promiscuous mode [ 270.877198][ T8605] syzkaller0: entered allmulticast mode [ 270.970267][ T4984] Dev loop5: unable to read RDB block 7 [ 270.970303][ T4984] loop5: AHDI p1 p2 p3 [ 270.970328][ T4984] loop5: partition table partially beyond EOD, truncated [ 270.970537][ T4984] loop5: p1 start 1601398130 is beyond EOD, truncated [ 270.970556][ T4984] loop5: p2 start 1702059890 is beyond EOD, truncated [ 271.566022][ T4984] Dev loop5: unable to read RDB block 7 [ 271.566061][ T4984] loop5: AHDI p1 p2 p3 [ 271.566084][ T4984] loop5: partition table partially beyond EOD, truncated [ 271.566290][ T4984] loop5: p1 start 1601398130 is beyond EOD, truncated [ 271.566310][ T4984] loop5: p2 start 1702059890 is beyond EOD, truncated [ 271.761981][ T8620] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 272.602895][ T4984] Dev loop5: unable to read RDB block 7 [ 272.602933][ T4984] loop5: AHDI p1 p2 p3 [ 272.602959][ T4984] loop5: partition table partially beyond EOD, truncated [ 272.603177][ T4984] loop5: p1 start 1601398130 is beyond EOD, truncated [ 272.603199][ T4984] loop5: p2 start 1702059890 is beyond EOD, truncated [ 272.687948][ T5629] Bluetooth: hci0: command tx timeout [ 274.199254][ T8639] fuse: Bad value for 'fd' [ 274.558318][ T5709] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 274.739668][ T5709] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 274.740715][ T5709] usb 8-1: config 0 has an invalid interface number: 251 but max is 0 [ 274.740740][ T5709] usb 8-1: config 0 has no interface number 0 [ 274.743639][ T5709] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.743663][ T5709] usb 8-1: Product: syz [ 274.743678][ T5709] usb 8-1: Manufacturer: syz [ 274.743692][ T5709] usb 8-1: SerialNumber: syz [ 274.758903][ T9] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 274.774026][ T5629] Bluetooth: hci0: command tx timeout [ 274.814046][ T5709] usb 8-1: config 0 descriptor?? [ 275.009840][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 275.013762][ T9] usb 10-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 275.015563][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 275.015596][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 275.071501][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.071672][ T9] usb 10-1: Product: syz [ 275.071693][ T9] usb 10-1: Manufacturer: syz [ 275.071708][ T9] usb 10-1: SerialNumber: syz [ 275.130819][ T9] usb 10-1: config 0 descriptor?? [ 275.401295][ T8608] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.405248][ T8608] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.433095][ T8608] bridge_slave_0: entered allmulticast mode [ 275.459154][ T8608] bridge_slave_0: entered promiscuous mode [ 275.501001][ T8608] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.501174][ T8608] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.504964][ T8608] bridge_slave_1: entered allmulticast mode [ 275.537156][ T8608] bridge_slave_1: entered promiscuous mode [ 275.655256][ T5709] asix 8-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 275.655294][ T5709] asix 8-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 275.679684][ T5709] asix 8-1:0.251: probe with driver asix failed with error -5 [ 275.776804][ T5709] usb 8-1: USB disconnect, device number 28 [ 275.849667][ T9] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 275.849784][ T9] imon 10-1:0.0: unable to initialize intf0, err -19 [ 275.849803][ T9] imon:imon_probe: failed to initialize context! [ 275.849814][ T9] imon 10-1:0.0: unable to register, err -19 [ 276.000641][ T9] usb 10-1: USB disconnect, device number 23 [ 276.114428][ T8608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.153902][ T8608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.437726][ T9] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 276.608287][ T8608] team0: Port device team_slave_0 added [ 276.623566][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 276.634416][ T9] usb 10-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 276.635689][ T4984] Dev loop5: unable to read RDB block 7 [ 276.635718][ T4984] loop5: AHDI p1 p2 p3 [ 276.635742][ T4984] loop5: partition table partially beyond EOD, truncated [ 276.635997][ T4984] loop5: p1 start 1601398130 is beyond EOD, truncated [ 276.636017][ T4984] loop5: p2 start 1702059890 is beyond EOD, truncated [ 276.636801][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 276.636828][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 276.768129][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.768162][ T9] usb 10-1: Product: syz [ 276.768177][ T9] usb 10-1: Manufacturer: syz [ 276.768190][ T9] usb 10-1: SerialNumber: syz [ 276.806135][ T9] usb 10-1: config 0 descriptor?? [ 276.848171][ T5629] Bluetooth: hci0: command tx timeout [ 276.857999][ T8608] team0: Port device team_slave_1 added [ 277.043752][ T9] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 277.043868][ T9] imon 10-1:0.0: unable to initialize intf0, err -19 [ 277.043885][ T9] imon:imon_probe: failed to initialize context! [ 277.043897][ T9] imon 10-1:0.0: unable to register, err -19 [ 277.046110][ T8659] netlink: 72 bytes leftover after parsing attributes in process `syz.5.728'. [ 277.218949][ T8608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.218971][ T8608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.218998][ T8608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.312337][ T8663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.313096][ T8663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.345660][ T8608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.345681][ T8608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.345707][ T8608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.465424][ T9] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 277.651554][ T9] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 277.654433][ T9] usb 8-1: config 0 has no interfaces? [ 277.654476][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.713044][ T9] usb 8-1: config 0 descriptor?? [ 277.800639][ T4984] Dev loop5: unable to read RDB block 7 [ 277.800741][ T4984] loop5: AHDI p1 p2 p3 [ 277.800776][ T4984] loop5: partition table partially beyond EOD, truncated [ 277.801004][ T4984] loop5: p1 start 1601398130 is beyond EOD, truncated [ 277.801029][ T4984] loop5: p2 start 1702059890 is beyond EOD, truncated [ 277.940326][ T8608] hsr_slave_0: entered promiscuous mode [ 277.944659][ T8608] hsr_slave_1: entered promiscuous mode [ 278.103786][ T8667] netlink: 28 bytes leftover after parsing attributes in process `syz.9.726'. [ 278.103817][ T8667] netlink: 28 bytes leftover after parsing attributes in process `syz.9.726'. [ 278.147711][ T9] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 278.322924][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 278.326295][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 278.326336][ T9] usb 6-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 278.326372][ T9] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 278.373691][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.373781][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 278.412719][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.412775][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 278.469999][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.470059][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 278.505882][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.505939][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 278.594434][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.594491][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 278.595730][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.595780][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 278.656331][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.656398][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 278.685024][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.685412][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 278.731047][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.731080][ T9] usb 6-1: Product: syz [ 278.731095][ T9] usb 6-1: Manufacturer: syz [ 278.731109][ T9] usb 6-1: SerialNumber: syz [ 278.927794][ T5629] Bluetooth: hci0: command tx timeout [ 278.974296][ T8665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.974994][ T8665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.114896][ T9] usb 6-1: USB disconnect, device number 30 [ 279.594486][ T51] usb 8-1: USB disconnect, device number 29 [ 279.766839][ T32] kauditd_printk_skb: 25 callbacks suppressed [ 279.766861][ T32] audit: type=1326 audit(1789908910.366:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.6.732" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdb39e159 code=0x7ffc0000 [ 279.800670][ T32] audit: type=1326 audit(1789908910.406:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.6.732" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdb39e159 code=0x7ffc0000 [ 279.922705][ T32] audit: type=1326 audit(1789908910.526:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.6.732" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5bdb39e159 code=0x7ffc0000 [ 279.922764][ T32] audit: type=1326 audit(1789908910.526:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.6.732" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdb39e159 code=0x7ffc0000 [ 279.922809][ T32] audit: type=1326 audit(1789908910.526:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.6.732" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdb39e159 code=0x7ffc0000 [ 279.923536][ T4984] Dev loop5: unable to read RDB block 7 [ 279.923564][ T4984] loop5: AHDI p1 p2 p3 [ 279.923587][ T4984] loop5: partition table partially beyond EOD, truncated [ 279.923948][ T4984] loop5: p1 start 1601398130 is beyond EOD, truncated [ 279.923968][ T4984] loop5: p2 start 1702059890 is beyond EOD, truncated [ 280.061243][ T32] audit: type=1326 audit(1789908910.666:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.6.732" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5bdb39e159 code=0x7ffc0000 [ 280.061299][ T32] audit: type=1326 audit(1789908910.666:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.6.732" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdb39e159 code=0x7ffc0000 [ 280.061345][ T32] audit: type=1326 audit(1789908910.666:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.6.732" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdb39e159 code=0x7ffc0000 [ 280.161174][ T32] audit: type=1326 audit(1789908910.766:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.6.732" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5bdb39e159 code=0x7ffc0000 [ 280.161238][ T32] audit: type=1326 audit(1789908910.766:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.6.732" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdb39e159 code=0x7ffc0000 [ 280.439033][ T6768] usb 10-1: USB disconnect, device number 24 [ 281.029295][ T8677] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 281.062489][ T8681] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 281.411219][ T4984] Dev loop5: unable to read RDB block 7 [ 281.411258][ T4984] loop5: AHDI p1 p2 p3 [ 281.411282][ T4984] loop5: partition table partially beyond EOD, truncated [ 281.411485][ T4984] loop5: p1 start 1601398130 is beyond EOD, truncated [ 281.411505][ T4984] loop5: p2 start 1702059890 is beyond EOD, truncated [ 282.629882][ T51] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 282.801474][ T51] usb 6-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 282.806041][ T51] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 282.806075][ T51] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 282.933888][ T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.933918][ T51] usb 6-1: Product: syz [ 282.933933][ T51] usb 6-1: Manufacturer: syz [ 282.933947][ T51] usb 6-1: SerialNumber: syz [ 282.964929][ T8710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.984971][ T8710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.062610][ T51] ums-onetouch 6-1:1.0: USB Mass Storage device detected [ 283.157506][ T51] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/input/input35 [ 283.194771][ T51] input input35: usb_submit_urb failed [ 283.326947][ T51] input: failed to attach handler kbd to device input35, error: -5 [ 283.351220][ T4969] input input35: usb_submit_urb failed [ 283.444998][ T51] scsi host1: usb-storage 6-1:1.0 [ 283.556602][ T4969] input input35: usb_submit_urb failed [ 283.814434][ T8696] Bluetooth: hci5: command 0x0406 tx timeout [ 283.814476][ T8696] Bluetooth: hci6: command 0x0406 tx timeout [ 283.814504][ T8696] Bluetooth: hci7: command 0x0406 tx timeout [ 283.814530][ T8696] Bluetooth: hci8: command 0x0406 tx timeout [ 283.814555][ T8696] Bluetooth: hci9: command 0x0406 tx timeout [ 284.202283][ T6601] input input35: usb_submit_urb failed [ 284.444577][ T4969] input input35: usb_submit_urb failed [ 284.482715][ T5676] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 284.625605][ T4969] input input35: usb_submit_urb failed [ 285.028593][ T5676] usb 10-1: unable to get BOS descriptor or descriptor too short [ 285.063653][ T5676] usb 10-1: not running at top speed; connect to a high speed hub [ 285.063696][ T5676] usb 10-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 285.063733][ T5676] usb 10-1: too many configurations: 17, using maximum allowed: 8 [ 285.111720][ T5676] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.111778][ T5676] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 285.183502][ T5676] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.183559][ T5676] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 285.325673][ T5676] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.325730][ T5676] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 285.413047][ T5676] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.413113][ T5676] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 285.543358][ T5676] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.543414][ T5676] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 285.613113][ T8737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.613779][ T8737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.646413][ T5676] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.646469][ T5676] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 285.706082][ T5676] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.706142][ T5676] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 285.895943][ T8737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.914271][ T5676] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.914330][ T5676] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.124780][ T8737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.798794][ T9] usb 6-1: USB disconnect, device number 31 [ 286.884127][ T5676] usb 10-1: string descriptor 0 read error: -71 [ 286.884289][ T5676] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.948357][ T5676] usb 10-1: can't set config #1, error -71 [ 286.974254][ T4984] Dev loop5: unable to read RDB block 7 [ 286.974289][ T4984] loop5: AHDI p1 p2 p3 [ 286.974312][ T4984] loop5: partition table partially beyond EOD, truncated [ 286.974508][ T4984] loop5: p1 start 1601398130 is beyond EOD, truncated [ 286.974529][ T4984] loop5: p2 start 1702059890 is beyond EOD, truncated [ 286.978562][ T5676] usb 10-1: USB disconnect, device number 25 [ 287.803194][ T8751] netlink: 'syz.5.749': attribute type 10 has an invalid length. [ 287.826198][ T8754] netlink: 'syz.5.749': attribute type 10 has an invalid length. [ 287.893317][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.749'. [ 288.024499][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.749'. [ 288.024734][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.749'. [ 288.024996][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.749'. [ 288.025202][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.749'. [ 288.025439][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.749'. [ 288.025642][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.749'. [ 288.025892][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.749'. [ 288.150222][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.749'. [ 288.150468][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.749'. [ 288.434669][ T5753] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 288.609662][ T5753] usb 8-1: Using ep0 maxpacket: 16 [ 288.615472][ T5753] usb 8-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 288.689966][ T5753] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.689999][ T5753] usb 8-1: Product: syz [ 288.690014][ T5753] usb 8-1: Manufacturer: syz [ 288.690028][ T5753] usb 8-1: SerialNumber: syz [ 288.740832][ T5753] usb 8-1: config 0 descriptor?? [ 288.775427][ T5753] visor 8-1:0.0: Sony Clie 3.5 converter detected [ 289.303009][ T5753] usb 8-1: clie_3_5_startup: get config number failed: -71 [ 289.303207][ T5753] visor 8-1:0.0: probe with driver visor failed with error -71 [ 289.367294][ T5753] usb 8-1: USB disconnect, device number 30 [ 289.609622][ T4984] Dev loop5: unable to read RDB block 7 [ 289.609658][ T4984] loop5: AHDI p1 p2 p3 [ 289.609682][ T4984] loop5: partition table partially beyond EOD, truncated [ 289.609886][ T4984] loop5: p1 start 1601398130 is beyond EOD, truncated [ 289.609907][ T4984] loop5: p2 start 1702059890 is beyond EOD, truncated [ 289.975504][ T8608] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 290.091708][ T8608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 290.093864][ T8608] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 290.165548][ T8608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 290.312981][ T8779] pim6reg: entered allmulticast mode [ 290.317451][ T8781] Invalid option length (1048500) for dns_resolver key [ 290.342880][ T8608] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 290.408445][ T8608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 290.409494][ T8608] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 290.513203][ T8608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 290.513812][ T8783] pim6reg: left allmulticast mode [ 290.636470][ T8782] team0: entered allmulticast mode [ 290.636498][ T8782] team_slave_0: entered allmulticast mode [ 290.636517][ T8782] team_slave_1: entered allmulticast mode [ 290.825074][ T4984] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 290.825119][ T4984] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 290.825132][ T4984] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 290.825201][ T4984] loop0: [ 291.268175][ T4984] Dev loop5: unable to read RDB block 7 [ 291.268212][ T4984] loop5: AHDI p1 p2 p3 [ 291.268233][ T4984] loop5: partition table partially beyond EOD, truncated [ 291.268504][ T4984] loop5: p1 start 1601398130 is beyond EOD, truncated [ 291.268525][ T4984] loop5: p2 start 1702059890 is beyond EOD, truncated [ 291.728140][ T5709] usb 10-1: new full-speed USB device number 26 using dummy_hcd [ 291.751916][ T8807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.752436][ T8807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.918171][ T5709] usb 10-1: unable to get BOS descriptor or descriptor too short [ 291.919111][ T5709] usb 10-1: not running at top speed; connect to a high speed hub [ 291.919146][ T5709] usb 10-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 291.919183][ T5709] usb 10-1: too many configurations: 17, using maximum allowed: 8 [ 291.960652][ T5709] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.960715][ T5709] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.007219][ T5709] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.007273][ T5709] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.038540][ T5709] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.038602][ T5709] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.131337][ T5709] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.131405][ T5709] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.149493][ T8799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.161094][ T8799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.241679][ T5709] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.241738][ T5709] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.360149][ T5709] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.360205][ T5709] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.361491][ T5709] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.361539][ T5709] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.435430][ T5709] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.435480][ T5709] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.523574][ T8608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.544704][ T4984] Dev loop5: unable to read RDB block 7 [ 292.544770][ T4984] loop5: AHDI p1 p2 p3 [ 292.544796][ T4984] loop5: partition table partially beyond EOD, truncated [ 292.545061][ T4984] loop5: p1 start 1601398130 is beyond EOD, truncated [ 292.545083][ T4984] loop5: p2 start 1702059890 is beyond EOD, truncated [ 292.615493][ T5709] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.615525][ T5709] usb 10-1: Product: syz [ 292.615540][ T5709] usb 10-1: Manufacturer: syz [ 292.615555][ T5709] usb 10-1: SerialNumber: syz [ 292.886629][ T8608] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.910824][ T8811] __nla_validate_parse: 57 callbacks suppressed [ 292.910886][ T8811] netlink: 72 bytes leftover after parsing attributes in process `syz.7.763'. [ 292.973904][ T8800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.997907][ T8800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.079033][ T5698] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 293.223970][ T5709] usb 10-1: USB disconnect, device number 26 [ 293.252649][ T4142] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.252777][ T4142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.275844][ T5698] usb 6-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 293.346764][ T5698] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 293.346820][ T5698] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 293.346930][ T5698] usb 6-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 293.346957][ T5698] usb 6-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 293.347001][ T5698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.489921][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.490063][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.578835][ T8813] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 294.577671][ T5698] ims_pcu 6-1:1.0: Failed to set line coding, error: -71 [ 294.598759][ T5698] ims_pcu 6-1:1.0: probe with driver ims_pcu failed with error -71 [ 294.722146][ T5698] usb 6-1: USB disconnect, device number 32 [ 295.283440][ T8608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.561538][ T4984] Dev loop5: unable to read RDB block 7 [ 295.561575][ T4984] loop5: AHDI p1 p2 p3 [ 295.561599][ T4984] loop5: partition table partially beyond EOD, truncated [ 295.561823][ T4984] loop5: p1 start 1601398130 is beyond EOD, truncated [ 295.561844][ T4984] loop5: p2 start 1702059890 is beyond EOD, truncated [ 295.721747][ T8608] veth0_vlan: entered promiscuous mode [ 295.806031][ T8608] veth1_vlan: entered promiscuous mode [ 296.177576][ T8608] veth0_macvtap: entered promiscuous mode [ 296.253209][ T8608] veth1_macvtap: entered promiscuous mode [ 296.277873][ T5709] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 296.433127][ T8608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.470134][ T5709] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 296.490514][ T5709] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 is Bulk; changing to Interrupt [ 296.529322][ T5709] usb 6-1: string descriptor 0 read error: -22 [ 296.529476][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.594927][ T8837] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 296.622186][ T8608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.722213][ T5709] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 296.722278][ T5709] usb 6-1: MIDIStreaming interface descriptor not found [ 296.762891][ T137] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.991004][ T4142] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.050874][ T137] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.050935][ T137] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.672126][ T8596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.672151][ T8596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.884967][ T5709] usb 6-1: USB disconnect, device number 33 [ 298.217296][ T1044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.217322][ T1044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.878267][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.896918][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.612263][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.629293][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 424.071146][ T5629] Bluetooth: hci0: command 0x0406 tx timeout [ 441.271485][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.291325][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.299133][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 509.315207][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.464262][ T4984] Dev loop5: unable to read RDB block 7 [ 512.464365][ T4984] loop5: AHDI p1 p2 p3 [ 512.464393][ T4984] loop5: partition table partially beyond EOD, truncated [ 536.337459][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 536.344557][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8857/1:b..l [ 536.352593][ C1] rcu: (detected by 1, t=10502 jiffies, g=45745, q=523432 ncpus=2) [ 536.360611][ C1] task:syz.5.773 state:R running task stack:25608 pid:8857 tgid:8857 ppid:6591 task_flags:0x40044c flags:0x00080002 [ 536.374865][ C1] Call Trace: [ 536.378450][ C1] [ 536.381534][ C1] __schedule+0x17db/0x58f0 [ 536.386292][ C1] ? __lock_acquire+0x747/0x2de0 [ 536.391538][ C1] ? __pfx___schedule+0x10/0x10 [ 536.396515][ C1] preempt_schedule_irq+0x4b/0x90 [ 536.401553][ C1] irqentry_exit+0x14f/0x910 [ 536.406206][ C1] ? trace_irq_disable+0x3b/0x140 [ 536.411274][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 536.417459][ C1] RIP: 0010:unwind_next_frame+0x19e0/0x2550 [ 536.423380][ C1] Code: 89 c6 e8 33 0e 00 00 84 c0 0f 84 4e 01 00 00 48 bb 00 00 00 00 00 fc ff df 48 8b 44 24 10 0f b6 04 18 84 c0 0f 85 7b 08 00 00 <40> b5 01 8b 44 24 5c 41 39 06 4c 8b 6c 24 50 0f 85 63 01 00 00 48 [ 536.443630][ C1] RSP: 0018:ffffc9000eb7f280 EFLAGS: 00000246 [ 536.450068][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000001 [ 536.458842][ C1] RDX: ffffc9000eb7f368 RSI: dffffc0000000000 RDI: ffffc9000eb7f6c8 [ 536.466917][ C1] RBP: 1ffffffff22410a8 R08: ffffc9000eb7f6c8 R09: 0000000000000000 [ 536.474934][ C1] R10: ffffc9000eb7f378 R11: fffff52001d6fe71 R12: dffffc0000000000 [ 536.482915][ C1] R13: ffffffff91208541 R14: ffffc9000eb7f328 R15: ffffc9000eb7f370 [ 536.490919][ C1] ? __kasan_slab_free+0x5c/0x80 [ 536.496067][ C1] ? unwind_next_frame+0x8f/0x2550 [ 536.501387][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 536.507920][ C1] arch_stack_walk+0x11b/0x150 [ 536.512795][ C1] ? kmem_cache_free_bulk+0x1ae/0x10d0 [ 536.518363][ C1] stack_trace_save+0xa9/0x100 [ 536.523221][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 536.528765][ C1] ? __lock_acquire+0x747/0x2de0 [ 536.533700][ C1] kasan_save_track+0x3e/0x80 [ 536.538451][ C1] ? kasan_save_track+0x3e/0x80 [ 536.543718][ C1] ? kasan_save_free_info+0x40/0x50 [ 536.549026][ C1] ? __kasan_slab_free+0x5c/0x80 [ 536.554019][ C1] kasan_save_free_info+0x40/0x50 [ 536.559150][ C1] __kasan_slab_free+0x5c/0x80 [ 536.563913][ C1] kmem_cache_free_bulk+0x1ae/0x10d0 [ 536.569371][ C1] ? mte_dead_leaves+0x36d/0x390 [ 536.574434][ C1] mt_destroy_walk+0x144/0x810 [ 536.579388][ C1] __mt_destroy+0x1c2/0x280 [ 536.584009][ C1] exit_mmap+0x4d7/0x9f0 [ 536.588479][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 536.593416][ C1] ? __pfx_exit_aio+0x10/0x10 [ 536.598148][ C1] ? uprobe_clear_state+0x2a4/0x3d0 [ 536.603391][ C1] __mmput+0x118/0x420 [ 536.607484][ C1] exit_mm+0x221/0x2d0 [ 536.611555][ C1] do_exit+0x6cd/0x2360 [ 536.615728][ C1] ? __pfx_do_exit+0x10/0x10 [ 536.620380][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 536.625594][ C1] do_group_exit+0x22d/0x2f0 [ 536.630176][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 536.635369][ C1] get_signal+0x121b/0x12c0 [ 536.639881][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 536.646047][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 536.652482][ C1] ? vm_mmap_pgoff+0x35a/0x4e0 [ 536.657261][ C1] exit_to_user_mode_loop+0x10e/0x770 [ 536.662717][ C1] ? rcu_is_watching+0x16/0xb0 [ 536.667483][ C1] do_syscall_64+0x328/0x520 [ 536.672537][ C1] ? trace_irq_disable+0x3b/0x140 [ 536.677864][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.684183][ C1] ? clear_bhb_loop+0x70/0xc0 [ 536.689147][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.695254][ C1] RIP: 0033:0x7f749759dec2 [ 536.699714][ C1] RSP: 002b:00007f749794faf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 536.708314][ C1] RAX: 00007f74953f5000 RBX: 0000000000000000 RCX: 00007f749759dec2 [ 536.716600][ C1] RDX: 0000000000000000 RSI: 0000000000402000 RDI: 0000000000000000 [ 536.725467][ C1] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 536.734017][ C1] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000003 [ 536.742220][ C1] R13: 0000000000000005 R14: 0000000000000000 R15: 00007f7497825fa0 [ 536.750494][ C1]