last executing test programs: 6m17.247123485s ago: executing program 1 (id=211): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="30de", 0x2}], 0x1, 0x0, 0x0, 0x24008000}}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x44, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0xd7}, @nested={0x28, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @uid}, @typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x19}}]}, @nested={0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/8, 0x8}], 0x1}, 0x6}], 0x1, 0x28144, 0x0) 6m17.10883483s ago: executing program 1 (id=213): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402", 0x6}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0) 6m16.995183843s ago: executing program 1 (id=215): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[], 0x1000f) write(r0, &(0x7f0000000040)="240000004e0025000307f4f9002304000a04f55f08000100020100020802038005000000", 0x24) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r8, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r11}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r9) 6m15.912453352s ago: executing program 1 (id=223): socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x88901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x104000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="08000000fcffffff0000fbff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) (async) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000080)={{0x1000, 0x2, 0x0, 0x9}, 'syz1\x00', 0x31}) (async) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x51) (async) ioctl$UI_DEV_CREATE(r5, 0x5501) (async) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000180)=0x5baa, 0x4) (async) bind$can_raw(r4, &(0x7f0000000200), 0x10) (async) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000100), 0x4) (async) mknod(&(0x7f0000000080)='./file0\x00', 0x8000, 0x9) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffddc, 0x140408e5) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2) (async) mq_timedreceive(r3, &(0x7f0000000680)=""/145, 0x91, 0x9b5, 0x0) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRES64=r2], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 6m15.6629071s ago: executing program 1 (id=225): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402", 0x6}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0) 6m15.386578389s ago: executing program 1 (id=228): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x50, 0x0, 0x7, 0x8}, {0x6, 0xfc}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000540)=0xfff) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f00000003c0)="2600000022e80100000000000000000078cc6f920a97c99f494e07000000f84fcfb550af0bf9", 0x26) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc)=0x61, 0x4) sendto(r1, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r1, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002c80)=""/4103, 0x1007}], 0x1}, 0x10001}], 0x1, 0x10120, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012"], 0x3}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x3, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r5, 0x0, 0xfffffffffffffffc}, 0x10) write$ppp(r0, &(0x7f0000000480)="1e08", 0x2) 6m14.998076182s ago: executing program 32 (id=228): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x50, 0x0, 0x7, 0x8}, {0x6, 0xfc}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000540)=0xfff) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f00000003c0)="2600000022e80100000000000000000078cc6f920a97c99f494e07000000f84fcfb550af0bf9", 0x26) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc)=0x61, 0x4) sendto(r1, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r1, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002c80)=""/4103, 0x1007}], 0x1}, 0x10001}], 0x1, 0x10120, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012"], 0x3}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x3, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r5, 0x0, 0xfffffffffffffffc}, 0x10) write$ppp(r0, &(0x7f0000000480)="1e08", 0x2) 4m27.080174092s ago: executing program 5 (id=805): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0xd, 0xd4, 0x1, 0x7, 0x0, 0x10001, 0x10}, {0xc0000001, 0x2, 0x0, 0xf, 0x5, 0x1e, 0x1fad}]}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x7800, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x68, 0x4, 0x8, 0x4, 0x0, @multicast1, @empty}}}}) (async) ioctl$VHOST_GET_FEATURES(r3, 0x8008af83, &(0x7f0000000180)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r5, &(0x7f0000003080)=[{{&(0x7f0000000080)=@ax25={{0x3, @rose}, [@null, @remote, @remote, @remote, @remote, @bcast, @default, @rose]}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000100)=""/78, 0x4e}, {&(0x7f0000000200)=""/88, 0x58}, {&(0x7f0000000280)=""/231, 0xe7}, {&(0x7f0000000380)=""/250, 0xfa}, {&(0x7f0000000480)=""/228, 0xe4}, {&(0x7f0000000580)=""/216, 0xd8}, {&(0x7f0000000680)=""/243, 0xf3}, {&(0x7f0000000780)=""/118, 0x76}, {&(0x7f0000000800)=""/47, 0x2f}], 0x9, &(0x7f0000000900)=""/14, 0xe}, 0x7fff}, {{&(0x7f0000000940)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000001a80)=[{&(0x7f00000031c0)=""/149, 0x95}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x2, &(0x7f0000001ac0)=""/4096, 0x1000}, 0x48000000}, {{&(0x7f0000002ac0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000002b40)=""/113, 0x71}, {&(0x7f0000002bc0)=""/110, 0x6e}, {&(0x7f0000002c40)=""/59, 0x3b}, {&(0x7f0000002c80)=""/90, 0x5a}, {&(0x7f0000002d00)=""/19, 0x13}], 0x5, &(0x7f0000002dc0)=""/55, 0x37}, 0x400}, {{&(0x7f0000002e00)=@can, 0x80, &(0x7f0000003040)=[{&(0x7f0000002e80)=""/24, 0x18}, {&(0x7f0000002ec0)=""/242, 0xf2}, {&(0x7f0000002fc0)=""/27, 0x1b}, {&(0x7f0000003000)=""/59, 0x3b}], 0x4}, 0x82}], 0x4, 0x162, &(0x7f0000003180)={0x77359400}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001800010301000d00000b00000a410000ff0300060000000014000100fee3"], 0x30}}, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000a40), &(0x7f0000002d40)=0xc) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000002d80), &(0x7f0000003280)=0xc) sendmsg$nl_generic(r6, &(0x7f0000003800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000037c0)={&(0x7f00000032c0)={0x14, 0x11, 0x8, 0x70bd27, 0x25dfdbff, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4c0c1) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000000206010400000000000000000000078008001140000000000500150007000000050001000700000005000d000a000000050004000000000009000204000000310000000011000300686173683a6e65742c6e657400000000"], 0x60}}, 0x0) 4m26.908881331s ago: executing program 5 (id=807): r0 = syz_open_dev$media(&(0x7f00000001c0), 0x2c26, 0x82543) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae03, 0xd1) connect$unix(r3, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x39, 0x0, 0x0, 0x3, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600290001401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m26.611861283s ago: executing program 5 (id=808): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$vcsa(0x0, 0xa40d, 0x2a8102) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000300)={0xe62b, 0x80000000000000, 0x309, 0x0, 0x9, 0x9f69, 0x0, 0x200000000002000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x30, 0x80000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000001c0)=0xc) r7 = syz_open_procfs(r6, &(0x7f00000002c0)='syscall\x00') r8 = socket(0x31, 0x3, 0x0) write(r8, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) preadv(r7, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010700ffffffc400000052"], 0x14}}, 0x4008010) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x50) writev(r9, &(0x7f0000000280)=[{&(0x7f0000000180)="e9", 0x1}], 0x1) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x1) 4m25.13505564s ago: executing program 5 (id=816): r0 = syz_io_uring_setup(0x178b, &(0x7f0000000180)={0x0, 0x0, 0x13291}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000000)=0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="9ffbc97e8ecb8ef62e4bfbcc15aa9f6bf9006007fa8c67a7744980297b8210941b5b883e6f0f30974770ee3ab35a9ddf3c664bc7dcc45470ab58dbd49fff65ea8e4507d804f4c7d3588455217947e47395a4bbc43457237079152baa28bcff6109284df4d7fbd9559c050719168d2592aca50cdfb0454c7e0286b4bfb6d1a24433a98c80fc5853bc4c9d644dfa518591bbea3e1ed869aa2b45b58df4b5fa5cc46653b3e4460667945d204cc95337608d9ffe84c8366a231c31403fb72895387a99a61b50c5ec559f289d6879a3102fe63317b76b9a500bb7ca1948da3cbab890a44c7460", 0xe4}], 0x1, &(0x7f0000000380)=[@ip_ttl={{0x14, 0x0, 0x2, 0x67}}], 0x18}, 0x14) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x234) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6}]}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0/../file0/../file0/file0\x00', 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000040)=0xfffffffe) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x5c, 0x10, 0x40d, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8009}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x9}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x844}, 0x0) 4m24.926685343s ago: executing program 5 (id=818): r0 = socket$inet6(0x2d, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000040)={0x0, 0xffff0c0a}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000001100)={r3, 0x9, 0x30, 0x7f, 0x1}, &(0x7f0000001140)=0x18) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r3, 0x58bb}, &(0x7f00000000c0)=0x8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) ptrace$pokeuser(0x6, r4, 0x7, 0x4) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)={0x14, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4844}, 0x20) bind$inet6(r0, &(0x7f0000000000)={0x2d, 0x4e20, 0xfd9, @local, 0xb4d0}, 0x1c) 4m24.651516554s ago: executing program 5 (id=820): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x5, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x200001d4}, 0x8840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[], 0x6) close(r2) write(r0, 0x0, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x48300, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r5, 0x80045006, &(0x7f0000000200)) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) close(r2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, 0xffffffffffffffff, &(0x7f0000000080)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=0x0) r8 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000001c0)=""/178, 0xb2}], 0x2) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$FUSE(r9, &(0x7f0000002280)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000000100)={0x0, 0x2a, 0x1, @tid=r7}, &(0x7f0000000140)) sendmsg$sock(r2, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x8010) 4m24.43191179s ago: executing program 33 (id=820): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x5, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x200001d4}, 0x8840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[], 0x6) close(r2) write(r0, 0x0, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x48300, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r5, 0x80045006, &(0x7f0000000200)) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) close(r2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, 0xffffffffffffffff, &(0x7f0000000080)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=0x0) r8 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000001c0)=""/178, 0xb2}], 0x2) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$FUSE(r9, &(0x7f0000002280)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000000100)={0x0, 0x2a, 0x1, @tid=r7}, &(0x7f0000000140)) sendmsg$sock(r2, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x8010) 6.627929046s ago: executing program 0 (id=2106): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0xc, 0x8301) ioctl$SG_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x1, 0x1, 0x215, 0x265, 0x660, r0}) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pidfd_send_signal(r1, 0x21, 0x0, 0x4) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 6.443764081s ago: executing program 3 (id=2107): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x28300, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '!\x91.\xdb)\xda\vY\x9a\xf0\x16}AL\xe3', 0x3a, '\\xB\x00-^{', 0x3a, './file1'}, 0x3d) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150000100000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x400000000000047, 0x0) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000000180)) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r4, 0x4068aea3, &(0x7f0000000000)={0xa4, 0x0, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 6.203534615s ago: executing program 0 (id=2108): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmsg$nl_netfilter(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x16c}, 0x1, 0x0, 0x0, 0x488e0}, 0x4040010) recvmsg$can_raw(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="680000001200050928bd700002dcdf2521090b004e224e26fcffffff23090000000000000600000001040000040000000300000002000000", @ANYRES32=0x0, @ANYBLOB="000001000520000031000000040000001900010007ba140002a0"], 0x68}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r4, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") unshare(0x2a020480) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000040}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, r6, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x8, 0x4004, 0x10001, 0x2}}}, ["", "", "", ""]}, 0x30}}, 0x20000080) r7 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000740)=0x1, 0x4) r8 = socket$inet6(0xa, 0x1, 0x6) sendmsg$inet6(r8, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000780)="b9756efbb544a7f57f73b59a835acc98869668d3e7fd201354d9cc7f5f8a1c9a35", 0x21}, {&(0x7f00000007c0)="cd047e6cce0b92c34303705f98f6f829290be9d1d77e67a093d4be4ff127d148a8dc6699b6b72f430600b8a71bd5c0fb520232589777448cd80e6eae23ee8e8b0a5b4854f76b8baa920e9796644b6fe34d0a66f4ab8967404a72e7d3382a0ba9d9e90c2a8573eb3ab54299010c7bcee16293d949eb96c2f640bc7da0a8728f711b35f3d8b20d9ca0b7384ffab36ad467", 0x90}, {&(0x7f0000000880)="e0b98ae39fdac2623088b2ed25fbde4d069d1bfdc990152263e0b49c87b61262e2367f94129c1fe658c054a98610dd6828191ab96ef5020c3ddd276e69aee443319b17c7bad511a5637db4ef894bfba2ee0ad9fa60e01bf7f9e2c057c8bd5d570370f97ccb777ccd8d20a778e2037eeb9d6af0a109a179cb418043b30a40e5b92eefac313c281c54c36b37daa6a5a89ee4bddeb378a55d582c3414a51c", 0x9d}], 0x3, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x390}, 0x8010) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x6e0, 0x2b0, 0x540, 0x540, 0x380, 0x540, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x288, 0x2b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @private2}}, @common=@inet=@hashlimit2={{0x150}, {'caif0\x00', {0x17b, 0x5f7, 0x4, 0x1, 0x1000, 0x4000, 0x2, 0x0, 0x18}, {0x100000001}}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0x7}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x740) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000ac0), 0x191800, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r9, 0x3b71, &(0x7f0000000bc0)={0x20, 0x6, &(0x7f0000000b00)="c5aede8c761bbb12ab7fb3f6a0d48541f08454302241b1a2694ce99478e213e32214121206e3ecd764c1eb9145f7533346e56806e1d406430f981c4336fee2cd86869bad5861c9c33511978de9e90497c9c3cdd3985aa188b01d466f98713ee746e498363babc7f2c5fcaf3571e370651f6ee1e1c76608d890fa872922d68578032aa400817474a2a306a0dbdf5217c39736d71348b1eac931d1b4880c46db2f677635", 0xb5aa, 0x5}) 5.969871446s ago: executing program 0 (id=2110): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000997aa910c6250290ba41010203010902120001000000000904"], 0x0) syz_usb_connect_ath9k(0x3, 0x66, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) 5.767202094s ago: executing program 3 (id=2111): set_mempolicy(0x1, &(0x7f00000001c0)=0xe7, 0xb) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {}, [{}], {0x4, 0x1}, [], {0x10, 0x6}}, 0x2c, 0x0) (async) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', &(0x7f0000000400)=""/254, 0x145) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023893) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00005200060005000100000008000800", @ANYRES16=r3], 0x2c}}, 0x20008000) (async) io_uring_setup(0x2527, &(0x7f0000000040)={0x0, 0xbd62, 0x200, 0x1, 0x229, 0x0, r1}) (async) unshare(0x6a040000) set_mempolicy(0x0, &(0x7f0000000000)=0x3, 0xc) 4.417910855s ago: executing program 4 (id=2121): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = msgget$private(0x0, 0x0) msgsnd(r1, 0x0, 0x8, 0x800) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r5, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r7, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x3, {}, {}, @result={0x1f00}}], 0x1c) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000002c0)=""/99) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000140)=0x5, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40800) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) unshare(0x22020600) r10 = eventfd2(0xe5c, 0x80000) r11 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000240)={r11, 0x7, 0x2, r10}) 4.299402558s ago: executing program 3 (id=2122): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000140)=0x9, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8, 0xd6a6, 0xfffffffb, 0x128, 0xd, 0xe7, 0xc, 0x4007fff, 0x3, 0xaa, 0x6, 0x0, 0x80000000, 0x4, 0x8, 0x2, 0x5, 0x2, 0x6, 0x5, 0x7ff, 0x43, 0x101, 0x600, 0x1ff, 0x9, 0x6, 0x3, 0xdd, 0x800, 0xf, 0x5, 0x2, 0x1, 0x7f, 0x1, 0x1, 0x0, 0x7, 0x5805, 0x2, 0x8, 0x8, 0x1000, 0x0, 0x4, 0x32, 0x0, 0x4af, 0x10001, 0xfffffffc, 0x2, 0x1, 0x3b98, 0x6, 0x1, 0x1, 0x100, 0xd, 0x9, 0x7, 0x6, 0xfffffff8, 0x7, 0xe22, 0xff, 0xf, 0x2, 0x4, 0x0, 0x402, 0x80000001, 0x6, 0x7, 0x3ff, 0x2, 0x5, 0xc, 0x8, 0xe9, 0x3, 0x3ff, 0x4d4b, 0x1, 0x5, 0x3, 0xfffffff4, 0xb6a, 0x1, 0x8, 0x570c, 0x1, 0x4, 0x1, 0x1000, 0x3, 0x9, 0x4, 0x0, 0x80, 0xa0a2, 0x2a, 0x8, 0x1, 0x7fff, 0x3, 0x2, 0x10001, 0x3ff, 0x9, 0x7, 0x4, 0x7, 0x7fff, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x47, 0x743fa18c, 0xbaa3, 0xe, 0x9, 0x226, 0x0, 0xfff, 0x9, 0x8, 0x4, 0x3ff, 0x6, 0x79e6, 0x0, 0xfffffffb, 0x4, 0x8, 0x9, 0x2, 0x10, 0x7, 0xd5, 0x2, 0x1, 0x6, 0x10001, 0x2, 0x2, 0x2, 0x2, 0x6, 0xfffff001, 0x1, 0x6f62, 0x344, 0x2, 0x7, 0x0, 0x2, 0x7, 0x7, 0x8, 0x9, 0x2, 0x0, 0x0, 0x9, 0x401, 0x4, 0x1, 0x4, 0x6, 0x934, 0x0, 0x0, 0x8, 0x3ff, 0x7fffffff, 0x2, 0x8000, 0xa9b, 0x80010, 0xfffffff2, 0x100, 0x7, 0xdb, 0x7fff, 0x3, 0xd5, 0x2, 0x0, 0x15, 0xffff, 0x7295, 0x4, 0x3dd, 0x0, 0x3, 0x9, 0x4, 0xb, 0x10001, 0xd01, 0x7, 0x6, 0xfffffff9, 0x7, 0x0, 0x2, 0x4564, 0x1, 0x5c6, 0x653b, 0x2, 0x0, 0xffffffb1, 0x7, 0xab3, 0x3, 0x3, 0x80000000, 0xffff, 0x7ff, 0xe339, 0x6, 0xe, 0x7, 0x7, 0xa, 0x9, 0x2, 0x8, 0x4, 0x6, 0x5, 0xfffffff4, 0x7, 0x80, 0x3, 0x1c000000, 0x7, 0x3, 0x5, 0x49c, 0x81, 0x80000000, 0xa, 0x4, 0x3, 0x14, 0x3, 0xff, 0x4, 0x9, 0x0, 0x9]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x31}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xb80a7000) creat(&(0x7f0000001040)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xb4) 4.198907347s ago: executing program 0 (id=2124): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de90f600700902120001000000", @ANYRES32], 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='0') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.095560587s ago: executing program 6 (id=2125): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000000)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000001080)="b6502b35087fcb4588f5772bec0fabde2d0004c3215a2175f9383ed5b439799c0796376157f68eb300cb1692a80a7eb2e05fa83759286d168ddf912fd0a565cfc47589aa5278712fd020f126b7a40ec7d8397bd766cb491daa1f5a8a96a920e7593fb4d8afdb97e66fa3cfd24bec0c78224ce8c06e6d4582a29f502038a6ed545fcc03cb1ba9e859c86e4f3c4dee55034166db7194", 0x95}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) recvmmsg$unix(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10001, 0x0) (async) recvmmsg$unix(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10001, 0x0) 2.638526344s ago: executing program 3 (id=2127): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000040)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x3, 0x9, 0x129}) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f00000000c0)={0x100000000000000, 0xeeee0000, 0x8000000000000001, 0x2, 0x1f}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x620040, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000540)={0x2, 0x4, @start={r3, 0x0, "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", "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"}, [0x6, 0x7, 0x200, 0x8, 0x8, 0x5, 0x5, 0x72, 0xc87c, 0x7, 0xc, 0xfffffffffffffffb, 0x4, 0x9, 0x2, 0x1, 0x80, 0x7ff, 0x7fffffff, 0x7fff, 0x0, 0x8, 0x2, 0x4, 0x0, 0x416, 0x8, 0x4b62b3fc, 0x0, 0x4, 0x8, 0x83, 0x5e4f, 0x80000000, 0x7, 0x7, 0xfffffffffffffffe, 0x2, 0x3, 0x6, 0x800, 0x4, 0x0, 0x401, 0xfffffffffffffff9, 0x7, 0x7d, 0xd, 0x7, 0x3, 0x0, 0x0, 0x7, 0x8, 0xa8, 0x401, 0x4, 0x3, 0xffffffffffffffff, 0x27bd8951, 0x3, 0x7, 0x5, 0x2]}) r5 = openat$incfs(r1, &(0x7f0000000f80)='.log\x00', 0x802, 0x40) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000fc0)) (async) ioctl$RTC_PIE_OFF(r5, 0x7006) sendmsg$IPSET_CMD_RENAME(r5, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x20, 0x5, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040044}, 0xf8d13a0b69fa7c4e) (async, rerun: 32) r6 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (rerun: 32) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r6) io_setup(0xffffffff, &(0x7f0000001100)=0x0) io_cancel(r7, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0xfa, r5, &(0x7f0000001140)="fb3cd822f7696442837aad52e0bb3bcfc1a6a9d70195829d267cc7accf683b567413d88ee087cebe1524e7b1475a8f4c9bc33272439e29eb24978918bfabb83b9bf671f0a14b6781322900f6fb1989e6f3e38b41b2c2c824c23221c1b5023c459eddfe92fa88aca7aecb6e99e38bf2b16474daa105d73c9a70dc7c2edaa5819ab90f3a6b80a1", 0x86, 0x1000, 0x0, 0x3}, &(0x7f0000001240)) (async, rerun: 32) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000001280)=0x5) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000001380)={'sit0\x00', &(0x7f00000012c0)={'sit0\x00', 0x0, 0x700, 0x80, 0x800, 0x8001, {{0x22, 0x4, 0x0, 0x1, 0x88, 0x66, 0x0, 0x2, 0x29, 0x0, @multicast2, @rand_addr=0x64010102, {[@cipso={0x86, 0x4a, 0x2, [{0x5, 0xf, "3051eb78832dcebbebaf5fde72"}, {0x6, 0x12, "eea6e1b288b8bd6daebfde4c22fe8113"}, {0x5, 0x12, "67913ace261c293387e3b79bf4676a04"}, {0x2, 0x2}, {0x0, 0xb, "46bc6235c51024c6eb"}, {0x1, 0x4, "55b3"}]}, @end, @timestamp={0x44, 0x28, 0xc3, 0x0, 0x5, [0x9, 0x9, 0x5, 0xba, 0x2, 0x0, 0x8, 0xffff7fff, 0x9]}]}}}}}) sendmsg$can_j1939(r5, &(0x7f0000001540)={&(0x7f00000013c0)={0x1d, r8, 0x1, {0x0, 0xff, 0x3}, 0x1fa}, 0x18, &(0x7f0000001500)={&(0x7f0000001400)="162c803f828994752250224ebd9e2d9b8c15a7b17b4144e34a27fbe2dc372dbb3719ff9471aa67d32d72b4c7aa35f36a64e68f26842d89e9cde1d9f6085e6ce0c9093f581ea08d4d6bf2ef76531e43f6d21f1c4379765ba2ff64bdf2f158138b7781050ab592fd6c6053a97c5c0297c909e8f466577ed72646da88fa21787d1d89026940334023cc0a8fcdc601341d6655c2712f16d426c680a141804e7f5951cf09322af804bcc512ace8f85e1b78cceb95f16c6d724fc1b48a64f314e8aa01603be8a0e699b7732afce9013665408f291d8443e5588a0993822f03b3afe1c110ce2d9fa3f361fdcba1908a0e222a8f9baae8ca1282f6d69d", 0xf9}, 0x1, 0x0, 0x0, 0x41}, 0x11) (async, rerun: 32) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001580), 0x1c9001, 0x0) (rerun: 32) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r6) r10 = syz_usb_connect$uac2(0x3, 0xec, &(0x7f00000015c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3263, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xda, 0x3, 0x1, 0x7, 0x80, 0xa, {0x8, 0xb, 0x0, 0x2, 0x1, 0xa, 0x20, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff, 0xb, 0x3d, 0x2}, [@source_unit={0x8, 0x24, 0xa, 0x7, 0x2, 0xc, 0x10}, @feature_unit={0x11, 0x24, 0x6, 0x1, 0x1, [0x6, 0x5, 0x7, 0x9, 0xb, 0xc]}, @selector_unit={0xa, 0x24, 0xb, 0x80, 0x5, "859947261c"}, @sample_rate={0x11, 0x24, 0xd, 0x1, 0x2, 0x6, [0x139034d54c62e476, 0xc96016159fa9751a, 0x2, 0x0, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x6, 0x7, 0x8, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xa, 0x3, 0x1, {0x8, 0x25, 0x1, 0x83, 0x0, 0x4, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x5, 0xff, 0x34}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x40, 0xbb6b, 0x7, 0x6}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x6}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xb8, 0x4, 0xfa, 0x6, '['}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2a, 0x3, 0x1, 0x8, "e30279"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x6, 0x4, {0x8, 0x25, 0x1, 0x0, 0x30, 0x97, 0x8}}}}}}}}]}}, &(0x7f0000001780)={0xa, &(0x7f00000016c0)={0xa, 0x6, 0x200, 0x7, 0xd, 0x7, 0x10, 0x5}, 0x30, &(0x7f0000001700)={0x5, 0xf, 0x30, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x88, 0x10, 0x6, 0x5, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x9, 0x1}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x10, 0xf, 0x9f0, [0x3f00]}]}, 0x1, [{0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x300a}}]}) syz_usb_control_io(r10, &(0x7f00000019c0)={0x2c, &(0x7f00000017c0)={0x40, 0xe, 0xa1, {0xa1, 0x0, "7dd13c9f85f623da505c4ec5c2235975a70d1aa6f37970d9dc6e5cd798eca417b47b8d744ba493ccba38785ac760dd4b642fc7c3e79e0a96c30f63165cbc074b5439a47db411076a3d891c4c31ee512f782f4a30534882ec05b34ca5b462fd56944a98938979525c7a1aa50c6c394637fc807f88c48941eceb86f88f18aa83ff827a92ec57121af780dcdba01c69a94fe0f1cc50ef18690e3b5db9a7cce2b8"}}, &(0x7f0000001880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}, &(0x7f00000018c0)={0x0, 0xf, 0x45, {0x5, 0xf, 0x45, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x5, 0x72f3}, @ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x7fff, 0x0, 0x2, [0xc000, 0x30, 0x0]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "4f6fef1376934673c76d177cc2e8d712"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xf7, 0x7f, 0x49}]}}, &(0x7f0000001940)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x8, 0x8, 0x50, "aefc3d0c", "38ad3005"}}, &(0x7f0000001980)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x21, 0x0, 0x5, 0x81, 0x1, 0x7, 0xff}}}, &(0x7f0000001e40)={0x84, &(0x7f0000001a00)={0x40, 0x14, 0x74, "312ac0be22ffa60f07b68f50164e01e6890ee5501279705b25b675ccbaf68158a2ee9c943b2bdcaee3758356f90ce7e903f1c3e91deed6b36bae18506b67b41849f7fb6a48d2d0bd84ac444beab3a5f0bb61b4a4fe91dd05afd1e00b53fd84629c6ffb9df9679d43c5681915798be3c37d98ea49"}, &(0x7f0000001a80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001ac0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001b00)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000001b40)={0x20, 0x0, 0x8, {0x3e0, 0x40, [0xf0]}}, &(0x7f0000001b80)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000001bc0)={0x40, 0x9, 0x1, 0xc}, &(0x7f0000001c00)={0x40, 0xb, 0x2, "1db7"}, &(0x7f0000001c40)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000001c80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001cc0)={0x40, 0x17, 0x6}, &(0x7f0000001d00)={0x40, 0x19, 0x2, "c6bc"}, &(0x7f0000001d40)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000001d80)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001dc0)={0x40, 0x1e, 0x1, 0x4d}, &(0x7f0000001e00)={0x40, 0x21, 0x1, 0x38}}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000002000)={r9, &(0x7f0000001f00)='\x00', 0x64300, &(0x7f0000001f40)={@align=0xa, {0x2, 0x3a9, 0x1bbc1f74, 0xf8}}, 0x400, &(0x7f0000001f80)={@_ha_fsid}, &(0x7f0000001fc0)=0xfffffffa}) ioctl$BTRFS_IOC_GET_DEV_STATS(r11, 0xc4089434, &(0x7f0000002040)={r4, 0xfffffffffffffff1, 0x0, [0x7, 0xb, 0x2, 0xca3d, 0x1f70], [0x40, 0x80000001, 0x2, 0x10, 0x4, 0x80000000, 0x6, 0x8000000000000001, 0x8, 0x6, 0x7f, 0x8001, 0x3, 0x5, 0x7, 0x10, 0x7, 0x2a5, 0x4e5, 0x1, 0xd42, 0x8001, 0xfffffffffffffff7, 0x9, 0x81, 0x9, 0x9, 0x7, 0x3, 0x200000000, 0x5, 0x9, 0x9, 0xb, 0x4, 0x5, 0x44, 0x6, 0x7, 0x61d, 0x645, 0x3ff, 0x8000000000000001, 0x6, 0xa, 0x6, 0x6, 0x2000, 0xa8, 0x100000001, 0x6, 0x180000000, 0x0, 0x8, 0xffffffffffffffff, 0x9, 0x7, 0xfffffffffffffff7, 0xc7, 0xb7, 0x3, 0xffffffffffffff02, 0x8b, 0xced3, 0x1ff, 0x80000000, 0x5, 0x8000000000000000, 0x6, 0xfffffffffffffffb, 0x10001, 0x20000000000, 0x4c12, 0x0, 0x5, 0x1, 0x8, 0x3, 0x487, 0x7, 0x8, 0x4, 0x10, 0xc92, 0xf, 0xec, 0x7c, 0x297, 0xffff, 0xffffffffffffffff, 0x6, 0x5, 0x0, 0x1b5, 0x1ff, 0x4e65cc72, 0x3, 0x1, 0x1, 0x7f, 0x17, 0x5, 0x4, 0x5, 0x8, 0x3ff, 0x7, 0x3, 0xff, 0x9ae9, 0x295, 0x5, 0x4, 0x2189, 0x8, 0x9, 0x0, 0x7fff, 0x6af4cf48, 0x5, 0x3]}) (async, rerun: 64) close(r11) (async, rerun: 64) r12 = geteuid() read$FUSE(0xffffffffffffffff, &(0x7f00000024c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_route(r1, &(0x7f0000004a00)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000049c0)={&(0x7f0000004500)=@can_newroute={0x4bc, 0x18, 0x100, 0x70bd26, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7e, 0x6c, 0x66, 0x0, 0x3, "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", 0x1, "bf110b61e89f8f5727c064897ecba4b4816cbeaf"}}, @CGW_MOD_UID={0x8, 0xe, r12}, @CGW_CS_CRC8={0x11e, 0x6, {0x3b, 0x6a, 0x16, 0x6, 0xe, "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", 0x1, "943dabe99022a28a70f3f597be23aa2f30994976"}}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x5, 0x0, 0x0, 0x0, "c51ef3b9e3b7caa1"}, 0x3}}, @CGW_MOD_UID={0x8, 0xe, r13}, @CGW_CS_CRC8={0x11e, 0x6, {0x6, 0x18, 0x44, 0x4, 0x2, "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", 0x2, "58b17d5bf55075f2f31cb4292d7aa20a79c44efe"}}, @CGW_CS_CRC8={0x11e, 0x6, {0x23, 0x3e, 0x28, 0xfb, 0x0, "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", 0x0, "13a0f3e08cbad87db78bac0709641ae044bf668d"}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000000) (async) r14 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000004a40), 0x400302, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r14, 0x80045017, &(0x7f0000004a80)) 2.556443451s ago: executing program 2 (id=2128): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@loopback, 0x4d5, 0x6c}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}]}]}, 0x1ac}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010000000000000000002001000080ffffffffffffff00000000ac1414aa000000000000000000000000000000050000000c0a"], 0xfc}}, 0x0) 2.471400852s ago: executing program 4 (id=2129): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48010000060a0b04000000000000000002000000300004802c000180090001007866726d000000001c0002800800024000000000080001400000001105000300000000000900010073797a30000000000900020073797a3200000000ec0007"], 0x170}, 0x1, 0x0, 0x0, 0x8800}, 0xfc851d372f3ac962) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000240)={0xf000, 0x3000, 0x0, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000003c0)={0x1, 0x3000, 0x4, r3}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 2.347037751s ago: executing program 2 (id=2130): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0x5015, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8000, 0x5a) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1}) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0x5015, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x8000, 0x5a) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) (async) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) (async) 2.313690226s ago: executing program 4 (id=2131): sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x1, 0x9, 0x801, 0x0, 0x0, {0x2, 0x0, 0xc}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x36}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000700000000040014001a80100004800c0005"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) 2.226670971s ago: executing program 2 (id=2132): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e6400"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="240012800b00010062726964676500"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01"], 0x3c}}, 0x0) 2.190178183s ago: executing program 4 (id=2133): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) (async) syz_open_dev$video4linux(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001900)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5b00e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000200081dc000000000300000002"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) 2.07461613s ago: executing program 6 (id=2134): sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="e7006429f6a46f04a8b6935a26d8ee912e", 0x11, 0x4000081, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x54}, 0x1c) (async, rerun: 64) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x5d, 0x100) (rerun: 64) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) (async) epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/cpu_byteorder', 0x111000, 0x100) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x140d, 0x304, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000240)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xf, "5316169ef2fd87"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000001240)={{r2, 0x9, 0x7, 0x7f, 0x5, 0x100000001, 0x0, 0x5, 0x9, 0x3, 0x5, 0x8, 0x1000000000000, 0xc9, 0xf}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$FITHAW(r1, 0xc0045878) (async, rerun: 64) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000001300)) (async, rerun: 64) fcntl$setflags(r0, 0x2, 0x0) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) quotactl_fd$Q_GETINFO(r3, 0xffffffff80000500, 0xee00, &(0x7f0000001380)) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001400), r1) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000001580)={'gre0\x00', &(0x7f0000001440)={'syztnl0\x00', 0x0, 0x10, 0x700, 0x5, 0xd, {{0x3b, 0x4, 0x3, 0x5, 0xec, 0x67, 0x0, 0x2, 0x29, 0x0, @loopback, @private=0xa010102, {[@lsrr={0x83, 0x13, 0x4b, [@multicast1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @timestamp_prespec={0x44, 0x4c, 0x10, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}, {@dev={0xac, 0x14, 0x14, 0x23}, 0xc3}, {@remote, 0xd112}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x4}, {@multicast2, 0x3}, {@remote, 0x7ff}, {@local, 0xb11}, {@multicast2, 0xb}, {@loopback, 0x1861611b}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x47, 0x1, [{0x1, 0xc, "9c1801f5e8b54deb907a"}, {0x1, 0xf, "d49b46db1007acdc16c160cf5f"}, {0x1, 0xb, "797213bbfc63fee66c"}, {0x0, 0x4, "37fb"}, {0x5, 0x3, "1c"}, {0x5, 0x11, "1cfd84521ee65d5108e560b9b5f860"}, {0x1, 0x3, "0f"}]}, @lsrr={0x83, 0x1b, 0x26, [@rand_addr=0x64010102, @multicast1, @broadcast, @remote, @local, @multicast2]}, @generic={0x89, 0x12, "13f4ec909adf57cd24fb31a928ef0862"}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001600)={'syztnl0\x00', &(0x7f00000015c0)={'erspan0\x00', 0x0, 0x10, 0x8, 0xfffff6b9, 0xf7c, {{0x8, 0x4, 0x3, 0x9, 0x20, 0x67, 0x0, 0x40, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xb, 0xcf, [@remote, @private=0xa010101]}]}}}}}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000001640)={@remote, 0x0}, &(0x7f0000001680)=0x14) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001740)={r1, 0x58, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001800)={'ip6gre0\x00', &(0x7f0000001780)={'syztnl0\x00', 0x0, 0x2f, 0xc, 0x5e, 0x9, 0x1, @dev={0xfe, 0x80, '\x00', 0x10}, @mcast2, 0x80, 0x8000, 0xe8, 0x3}}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001840)={'vxcan0\x00', 0x0}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001900)={'ip6gre0\x00', &(0x7f0000001880)={'ip6tnl0\x00', 0x0, 0x2f, 0xc, 0x5, 0x5, 0x2, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x80, 0x3, 0x6}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000001ac0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001940)={0x118, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfa2ea939bc22cfb5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4004834}, 0x8001) (async) shutdown(r1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001b00)=""/14, 0xe}], 0x1) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002300)={&(0x7f0000001cc0)={{0x14}, [@NFT_MSG_DELCHAIN={0x17c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_HOOK={0x68, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x672bad31}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_USERDATA={0xff, 0xc, "93f2a6870de3b08337abe9de30a01bed47b7021bbf0c4695bccab6544efd5e0b764e2407819e9f45ca67355d55d6969b0bf696f9c1d5ac20bfd88fb6d91fe8b064a29fcb2ca6fe215910c29c6724b8b6ed12351e79bf20442fa83f67b85d46a92f9277ff9fc78fece37a56699f4daaddbe682f3bd01f8c31587a4c10e119517c78d806291edd251b552adcfcd202fd95923dec8a764a66514d67f49b4d96c9ef4c13e3bbbe7cd17534257ad7f2bfd79423da2e7b8d90c524054c8a0b91fe36fc415f79dc5590db5a35b9ab84487d40b4395fe56513c43ed01de9ef4ca8011b3d298f8f60413c2e81f83574537e388add6e0fa61c96e671416da309"}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}}, @NFT_MSG_NEWCHAIN={0x1d8, 0x3, 0xa, 0x200, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x40000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7db409a4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'xfrm0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3eece334}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x102, 0xc, "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"}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x9156a05c56ef5803, 0x0, 0x0, {0x2, 0x0, 0x401}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x258, 0xb, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x160}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}, @NFTA_SET_DESC={0x208, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xbcc0}, @NFTA_SET_DESC_CONCAT={0x48, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdeba}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf0000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x37}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x42}, @NFTA_SET_DESC_CONCAT={0x1a4, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x998}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa16}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffeffff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5ccee5d3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x78}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf64d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffd64}]}]}]}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @dup={{0x8}, @void}}]}], {0x14}}, 0x628}, 0x1, 0x0, 0x0, 0x800}, 0x80) (rerun: 32) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002380)=r1, 0x4) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000023c0), 0x100040, 0x0) (async, rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000002400)={0xc, 0x0, 0x0}) (rerun: 32) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000002440)={0x28, 0x4, r12, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000}) 2.073584822s ago: executing program 0 (id=2135): socket$kcm(0x11, 0x200000000000003, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r2, 0x400, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000100)=0x3000, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) 1.851077629s ago: executing program 3 (id=2136): sendmsg$rds(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)=""/128, 0x80}, {&(0x7f00000000c0)=""/22, 0x16}], 0x2, &(0x7f0000000300)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000140)=""/120, 0x78}, &(0x7f00000001c0), 0x12}}, @cswp={0x58, 0x114, 0x7, {{0x8, 0x4}, &(0x7f0000000200)=0x8, &(0x7f0000000240)=0x6, 0x400, 0x40, 0x80, 0x3, 0x8, 0xc50a}}, @mask_cswp={0x58, 0x114, 0x9, {{0xd8ea, 0xb}, &(0x7f0000000280)=0x80, &(0x7f00000002c0)=0x2, 0x9, 0xf4c7, 0x3338, 0xc, 0x61, 0x1}}], 0xe0, 0x800}, 0x1) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000440)={0x40, 0xfd}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) fanotify_init(0x10, 0x101000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000540)={&(0x7f0000000500)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000580)={0x0, {0x2, 0x4e21, @rand_addr=0x64010100}, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @multicast1}, 0x110, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffff01, 0x5, 0x9}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000640)={r2, 0x21}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000700)={0x9, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000740)={r3, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f0000000780)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01864c1, &(0x7f00000007c0)={r4, 0x1, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000800)=0x20) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000840)=""/42, 0x2a, 0x1, &(0x7f0000000880)={0x2, 0x4e21, @loopback}, 0x10) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r1, 0xc0106441, &(0x7f00000008c0)={0x0, 0x0, 0x100000000}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r1, 0xc0186445, &(0x7f0000000900)={0x3, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r1, 0xc0186445, &(0x7f0000000980)={0x7, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r1, 0xc0106450, &(0x7f0000000a00)={0x0, 0x1, 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01864c2, &(0x7f0000000a40)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000a80)={0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r1, 0xc0106450, &(0x7f0000000b40)={0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01864c2, &(0x7f0000000b80)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f0000000bc0)={0x0, 0x1, r5}) ioctl$DRM_IOCTL_PANTHOR_VM_BIND(r1, 0xc0186443, &(0x7f0000000d80)={r6, 0x1, {0x30, 0x4, &(0x7f0000000cc0)=[{0xf0000000, r7, 0x0, 0x7e, 0x6, {0x10, 0x2, &(0x7f0000000940)=[{0x0, r4, 0x1}, {0x80000000, r4, 0xa629}]}}, {0x20000000, r8, 0xf75a, 0x1, 0x39, {0x10, 0x1, &(0x7f00000009c0)=[{0x80000000, r4, 0x2}]}}, {0xe0000006, r9, 0xfffffffffffffff7, 0xfffffffffffffffa, 0xef, {0x10, 0x5, &(0x7f0000000ac0)=[{0x1, r10, 0x4}, {0x0, r4, 0x4}, {0x80000000, r11, 0x4}, {0x80000000, r4, 0x5}, {0xff, r4, 0x9}]}}, {0xd0000005, r12, 0x4, 0x9, 0x3, {0x10, 0x9, &(0x7f0000000c00)=[{0x0, r4, 0xffff}, {0x0, r4, 0x23}, {0xff, r13, 0x3}, {0x0, 0x0, 0x9}, {0x0, r14, 0xbd}, {0x1, r4, 0x2}, {0x1, r4, 0x7c1d}, {0x0, r4, 0x1}, {0x80000000, r4, 0x3}]}}]}}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000dc0)=r1, 0x4) sendmsg$qrtr(r1, &(0x7f0000001fc0)={&(0x7f0000000e00)={0x2a, 0x2, 0xfffffffe}, 0xc, &(0x7f0000001e80)=[{&(0x7f0000000e40)="5960b48d33ff0b71", 0x8}, {&(0x7f0000000e80)="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", 0x1000}], 0x2, &(0x7f0000001ec0)=[{0xe0, 0x1, 0x4, "051e330c724e8b2a501707aece262c5bbd7c35b6cacd22c784487e75a064cfc81b3dc49854b2b2f79a6c020c7cf177cf3f0e0543a05a276a177c8280329f042e02380d276e328868ef106959da44e20441e34015c7ad509dc13f8b148cd14504854f6f19dc8150e57c0391eeefe8b908e5f52c74eb6813c0ca1660706ddd5d6ee46f270df2b62d140ee0e7a5c9d4165594f12168594291ab371c168a83326220ccd57f26365483eb376d3295b7c769e851c997749ae6e8af44689379913525db2677af9fe13430acc3c45ea7cb31b27c"}], 0xe0, 0x400c010}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002000)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000002040)={0x9, 0x400, 0x8}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f00000020c0)) 1.825762937s ago: executing program 6 (id=2137): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x3a0af83a) shutdown(r2, 0x1) listen(r2, 0x28) poll(&(0x7f00000001c0)=[{r2, 0x6465e38fd7d2b875}], 0x1, 0x404) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000100)=0x8) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fsync(r3) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000007f000001000000000000000000000000ac1414bb47a3d5ac6e2ce82366f7cf390002000000000000000000000000000000020000000000000000000000000000000000000000b8b45325782712117769ff00e6d5e0b60ef71ad11c4f07cabbfa28d6083be6dc5a2ecd1dde18657603d8962c06", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000000006c000000ac1414bb00000000000000000000000000000000000000000100000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000003000000000000000a0004000000000000000000480003006465666c61746500"/240], 0x138}}, 0x40080) 1.698874976s ago: executing program 3 (id=2138): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100e2bbd7000fbdbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d75ec74696361737400"], 0x50}}, 0x20000080) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2090) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) write(r3, &(0x7f0000000fc0), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000ec0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000080)='\xf6\x98l_\xf5<\x1a_6:', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', 0x0, &(0x7f00000007c0)='\x00', &(0x7f0000000900)='\x01-\x00\xb6\xb7\xe1\x7fl\xd5\xf8G\xfdQ=\xc3\xd4\x02RP\xb2\xbf\x99\xfc\x10\" \x93)\xc5\x93\x98\x11\xe0\xd4\x14\x9a\f#LU\xda\xeb\f\x03\xa4\xf7\x85\xddYL\xf7\xf2\xc4\xff@+\x04^\xcc\xc8\xa1\x9f\xa7p\xd2\xaa\xa2^\xa6\xd1\v\xd1\xdd+o\x91\xc8\x90\xeebUCE\xdc=\x89\x86\x81S\x038', &(0x7f0000000840)='\x10!%{@{+\x00', &(0x7f0000000880)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f00000008c0)='-\xf3\x00', &(0x7f0000000980)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a80)='::-$[]#:{\x00']}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f00000000c0)='-\xf3\x00']}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x11, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 1.660266293s ago: executing program 2 (id=2139): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x5, 0x0, 0x9, 0xa, 0x0, 0x0, 0x25dfdbfb, [@sadb_address={0x3, 0x6, 0x3c, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0xff}, @sadb_address={0x3, 0x5, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x10, r0, 0x0) 1.572359746s ago: executing program 6 (id=2140): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@loopback, 0x4d5, 0x6c}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}]}]}, 0x1ac}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000003000000000000000000000ac1414aa000000000000000000000000000000050000000c0a"], 0xfc}}, 0x0) 1.415465448s ago: executing program 4 (id=2141): ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000200)) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)={0x0, 0x9, '\x00', [@pad1, @pad1, @jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic={0x4, 0x29, "ee19b3ce1be2366fca9ce4dc0b272214ef33402aa83861c9d3ca2634ece42e53d99497f6a6ae8a778b"}]}, 0x58) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r2, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2963}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a8000081"], 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.41316236s ago: executing program 6 (id=2142): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) iopl(0x3) syz_clone3(&(0x7f0000002380)={0x144200780, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0x4, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x8, 0x92000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002740)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x74}}, 0x40000d4) preadv(r4, &(0x7f0000000580)=[{&(0x7f0000000040)=""/103, 0x67}], 0x1000000000000212, 0xc002a0, 0xcbea) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x40c400, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000680)={0x74, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x3, 0x1, 0x3f}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/209, 0xd1, 0x1, 0x10}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/177, 0xb1, 0x0, 0xc}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}, @acquire_done, @acquire_done={0x40106309, 0x2}], 0x1b, 0x0, &(0x7f0000000640)="ce4303b7869dfbdebb02e9b93cfa0fe7e2f6839af1bbc1ad603b41"}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f0000000540)="43210098") r9 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r9, 0x80045017, 0x0) r10 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0xfffffffffffffffd, 0x84d65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r10, 0x4112, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r9, 0x8010500c, &(0x7f0000000080)) get_robust_list(r2, 0x0, &(0x7f0000000200)) pidfd_send_signal(r1, 0x21, 0x0, 0x4) 1.335319444s ago: executing program 2 (id=2143): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000280)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000140)=[@op={0x18}], 0x19, 0x20000000}], 0x1, 0x4040870) keyctl$get_persistent(0x16, 0x0, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x182, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0xa) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000180)=0x14000000000) 1.09660599s ago: executing program 0 (id=2144): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000200)="66b9a00d00000f32dbd567f0879f00a00000670f4fa1ea000000660f388080062e0f01c5baf80c66b8d789868866efbafc0cec0f0666b9800000c00f320f304466b8010000000f23d80f21f86635800000300f23f866350a00000044360f01d1", 0x60}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @ioapic={0x4, 0xd, 0x67, 0x0, 0x0, [{0xf8, 0x1, 0xd, '\x00', 0x3}, {0x14, 0xdc, 0x10, '\x00', 0x3}, {0x5, 0x2, 0x1, '\x00', 0x7}, {0x0, 0x5, 0x6, '\x00', 0x3}, {0x1, 0x8, 0x40, '\x00', 0x1}, {0xa5, 0x2, 0x8, '\x00', 0xa4}, {0x9, 0x5, 0x3, '\x00', 0x5}, {0x2, 0x3, 0x81, '\x00', 0xed}, {0x4, 0x9, 0xaf, '\x00', 0x6}, {0x6, 0x3, 0x7, '\x00', 0x5}, {0x0, 0x6, 0xfc}, {0x8, 0x4, 0x0, '\x00', 0xfd}, {0xe, 0x2, 0x1, '\x00', 0x1}, {0xe1, 0x2, 0xfb, '\x00', 0x5}, {0x5, 0x7, 0xff}, {0x2c, 0x5, 0x54, '\x00', 0xd}, {0x6, 0x99, 0x4, '\x00', 0x6}, {0xfd, 0x4, 0x7, '\x00', 0x3}, {0x3b, 0x9, 0x1, '\x00', 0x15}, {0x6, 0x2, 0x9, '\x00', 0x6}, {0x9, 0x81, 0x0, '\x00', 0x20}, {0x4, 0xc0, 0x8, '\x00', 0x2}, {0x25, 0x3, 0x8, '\x00', 0xa4}, {0xfc, 0x7, 0x1, '\x00', 0xc}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x8000000000000035, 0x400ffc, 0x14000000215b9037, 0x20000000040190, 0x1, 0x11, 0x8000000000f2, 0x7, 0x3, 0x20000005, 0x5, 0xc6bd, 0x568, 0x45, 0x5, 0xff], 0x6006, 0x1c0293}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x1000002, 0x1, 0x10001000}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r6, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f0000002d40)=[{{&(0x7f0000000480)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000002900)=[{&(0x7f0000002dc0)=""/4107, 0x100b}], 0x1, &(0x7f0000002940)=""/149, 0x95}, 0xe3c0}, {{&(0x7f0000002a00)=@isdn, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002a80)=""/182, 0xb6}, {&(0x7f0000002b40)=""/162, 0xa2}, {&(0x7f0000002c00)=""/199, 0xc7}], 0x3}, 0x3}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r9, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x2000000000000102, &(0x7f00000003c0)=ANY=[@ANYBLOB="18110000", @ANYRESOCT=r7, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r10, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r10}}, 0x1c) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) 1.065118725s ago: executing program 2 (id=2145): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x80000001, 0x2, 0xfffffffd, 0x0, 0xbd, 0x5, 0xffff, 0x4a, 0x1000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000340)={&(0x7f0000000000/0x1000)=nil, 0x1000}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) listen(0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) r11 = eventfd2(0x0, 0x0) io_submit(r10, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, r11}]) io_getevents(r10, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0) shutdown(0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 860.42334ms ago: executing program 4 (id=2146): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x267a, &(0x7f0000000140)={0x0, 0x52a0, 0x8000, 0x1, 0x8e}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random="0100eb00"}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000002c7d2d7d00000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000a284dffca7a90000000000e7772d2e5b4e106d0000000080600000000000000000080000000000000000000100000000000044000500ac1414aa000092000000000000002000000080003c00000000000000ffffffff0000000000000000000000000000000000030000000000000000"], 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x184, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x134, 0x11, [{@in=@multicast1, @in=@local, @in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in=@loopback, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x4, 0x0, 0x3503, 0xa, 0x2}]}]}, 0x184}}, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r8 = creat(&(0x7f0000000300)='./file0\x00', 0x68) landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f00000001c0)='./file0\x00', r9, &(0x7f0000000200)='.\x02\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='.\x02\x00', r9, &(0x7f0000000000)='./file0\x00', 0x2) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r4, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) fcntl$lock(r3, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff, 0xb}) syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, 0xfffffffffffffffc) 0s ago: executing program 6 (id=2147): syz_usb_connect$uac2(0x2, 0x137, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201010200000010da0b1440400001020301090225010301096005080b0102010820030904000000010120000924010190065700000c2403030252c10bd6220f05040206ff0100102402010402060509070000000406000c24030101040903030600f507240c09040e0710240202060204a2010300000000030000240d0502000600000300030002000904010000010220000904010101010220000d240202090001005463c6d55910240109068700000000a02b1f000002090501090800080dff08250100300905000904020000010220000904020101010220001124020201000004107cf1d441fd5e7e8e1024"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) (async) r0 = landlock_create_ruleset(&(0x7f00000001c0)={0x3050, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x3, 0x1, 0x1}, 0x18, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(r3, 0xd) r4 = getpgrp(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r4}) (async) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}, @typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50) kernel console output (not intermixed with test programs): 8727][T12308] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 431.062906][T12308] bond5 (unregistering): Released all slaves [ 431.327931][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1781'. [ 431.355700][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1781'. [ 431.540796][ T24] usb 3-1: USB disconnect, device number 103 [ 431.672026][T12327] netlink: 'syz.3.1785': attribute type 1 has an invalid length. [ 431.970688][T12342] : renamed from vlan0 (while UP) [ 432.064367][ T24] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 432.234381][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 432.246871][ T24] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 432.255457][ T24] usb 1-1: config 0 has no interface number 0 [ 432.263862][ T24] usb 1-1: config 0 interface 184 has no altsetting 0 [ 432.279111][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 432.294129][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.310155][ T24] usb 1-1: Product: syz [ 432.314722][ T24] usb 1-1: Manufacturer: syz [ 432.319534][ T24] usb 1-1: SerialNumber: syz [ 432.331972][ T24] usb 1-1: config 0 descriptor?? [ 432.748934][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 432.765547][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 432.785604][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 432.800152][ T24] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 432.810994][ T806] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 432.825728][ T24] usb 1-1: USB disconnect, device number 74 [ 432.835153][ T9] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 432.893459][T12358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1794'. [ 432.944431][ T806] usb 3-1: device descriptor read/64, error -71 [ 432.994290][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 433.000811][ T9] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 433.011262][ T9] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 433.026778][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 433.036004][ T9] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 433.044763][ T9] usb 5-1: Product: syz [ 433.048940][ T9] usb 5-1: Manufacturer: syz [ 433.058868][ T9] hub 5-1:4.0: bad descriptor, ignoring hub [ 433.065973][ T9] hub 5-1:4.0: probe with driver hub failed with error -5 [ 433.076000][ T9] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 433.131280][T12362] loop2: detected capacity change from 0 to 7 [ 433.140599][T12362] Dev loop2: unable to read RDB block 7 [ 433.146383][T12362] loop2: AHDI p1 p2 p3 [ 433.150645][T12362] loop2: partition table partially beyond EOD, truncated [ 433.158563][T12362] loop2: p1 start 1818582900 is beyond EOD, truncated [ 433.166077][T12362] loop2: p3 start 335544320 is beyond EOD, truncated [ 433.184374][ T806] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 433.267009][T12354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.296226][T12354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.317359][T12354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.329076][T12354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.334285][ T806] usb 3-1: device descriptor read/64, error -71 [ 433.466285][ T806] usb usb3-port1: attempt power cycle [ 433.481931][T12380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 433.604294][ T5687] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 433.672861][ T5702] usb 5-1: USB disconnect, device number 92 [ 433.769339][ T5687] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 433.778640][ T5687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.786969][ T5687] usb 4-1: Product: syz [ 433.791226][ T5687] usb 4-1: Manufacturer: syz [ 433.796252][ T5687] usb 4-1: SerialNumber: syz [ 433.802891][ T5687] usb 4-1: config 0 descriptor?? [ 433.812690][ T5687] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 433.820583][ T5687] dvb-usb: bulk message failed: -22 (4/0) [ 433.827024][ T806] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 433.834728][ T5687] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 433.845405][ T5687] dvb-usb: bulk message failed: -22 (5/0) [ 433.851166][ T5687] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 433.867009][ T806] usb 3-1: device descriptor read/8, error -71 [ 433.873458][ T5687] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 433.888113][ T5687] dvb-usb: Pinnacle 450e DVB-S USB2.0 error while loading driver (-19) [ 433.974286][ T5702] usb 5-1: new low-speed USB device number 93 using dummy_hcd [ 433.994516][ T5695] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 434.124277][ T806] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 434.126290][ T5702] usb 5-1: config 0 has no interfaces? [ 434.140222][ T5702] usb 5-1: string descriptor 0 read error: -22 [ 434.146776][ T5695] usb 1-1: Using ep0 maxpacket: 16 [ 434.151989][ T5702] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.d6 [ 434.161717][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.162557][ T806] usb 3-1: device descriptor read/8, error -71 [ 434.171233][ T5695] usb 1-1: config 7 has an invalid interface number: 152 but max is 0 [ 434.185832][ T5695] usb 1-1: config 7 descriptor has 1 excess byte, ignoring [ 434.193917][ T5702] usb 5-1: config 0 descriptor?? [ 434.199600][ T5695] usb 1-1: config 7 has no interface number 0 [ 434.206073][ T5695] usb 1-1: config 7 interface 152 altsetting 190 endpoint 0x4 has an invalid bInterval 253, changing to 7 [ 434.219508][ T5695] usb 1-1: config 7 interface 152 altsetting 190 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 434.230823][ T5695] usb 1-1: config 7 interface 152 altsetting 190 endpoint 0x6 has invalid wMaxPacketSize 0 [ 434.241172][ T5695] usb 1-1: config 7 interface 152 altsetting 190 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.254478][ T5695] usb 1-1: config 7 interface 152 has no altsetting 0 [ 434.262901][ T5695] usb 1-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=66.6d [ 434.272390][ T5695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.280714][ T5695] usb 1-1: Product: syz [ 434.285313][ T5695] usb 1-1: Manufacturer: syz [ 434.290014][ T5695] usb 1-1: SerialNumber: syz [ 434.296002][ T806] usb usb3-port1: unable to enumerate USB device [ 434.426324][T12376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.436406][T12376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.520981][ T5695] usbtest 1-1:7.152: couldn't get endpoints, -71 [ 434.527992][ T5702] usb 5-1: USB disconnect, device number 93 [ 434.533953][ T5695] usbtest 1-1:7.152: probe with driver usbtest failed with error -71 [ 434.576782][ T5695] usb 1-1: USB disconnect, device number 75 [ 434.914312][ T5702] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 435.050904][T12394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1808'. [ 435.050922][T12393] netlink: 16158 bytes leftover after parsing attributes in process `syz.0.1808'. [ 435.068698][ T5702] usb 5-1: unable to get BOS descriptor or descriptor too short [ 435.079219][T12394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.079498][ T5702] usb 5-1: config 129 has an invalid interface number: 80 but max is 0 [ 435.096389][ T5702] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 435.105612][ T5702] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 435.114948][ T5702] usb 5-1: config 129 has no interface number 0 [ 435.121230][ T5702] usb 5-1: config 129 has no interface number 1 [ 435.134982][ T5702] usb 5-1: config 129 interface 80 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 435.151633][ T5702] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 435.165916][ T5702] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 435.179138][ T5702] usb 5-1: config 129 interface 80 has no altsetting 0 [ 435.193175][ T5702] usb 5-1: config 129 interface 5 has no altsetting 0 [ 435.211785][ T5702] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 435.221245][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.230332][ T5702] usb 5-1: SerialNumber: syz [ 435.278871][T12401] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 435.294454][T12400] kernel profiling enabled (shift: 7) [ 435.381405][T12406] use of bytesused == 0 is deprecated and will be removed in the future, [ 435.390283][T12406] use the actual size instead. [ 435.461931][ T5702] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 435.469801][ T5702] usb 5-1: MIDIStreaming interface descriptor not found [ 435.553549][ T5702] usb 5-1: USB disconnect, device number 94 [ 436.285620][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 436.285636][ T29] audit: type=1326 audit(1777813074.885:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12420 comm="syz.2.1816" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f172f39cdd9 code=0x0 [ 436.339839][T12424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.348547][T12424] batadv_slave_0: entered promiscuous mode [ 436.380532][ T5687] usb 4-1: USB disconnect, device number 113 [ 436.432271][T12427] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 436.456409][ T806] usb 5-1: new low-speed USB device number 95 using dummy_hcd [ 436.593836][T12440] netlink: 'syz.6.1823': attribute type 1 has an invalid length. [ 436.605608][ T5702] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 436.626944][ T806] usb 5-1: config 0 has no interfaces? [ 436.638306][ T806] usb 5-1: string descriptor 0 read error: -22 [ 436.649984][ T806] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.d6 [ 436.668865][ T806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.679907][ T806] usb 5-1: config 0 descriptor?? [ 436.689464][T12440] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 436.711322][T12443] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1823'. [ 436.721982][T12440] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 436.748473][T12443] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1823'. [ 436.759854][T12443] 8021q: adding VLAN 0 to HW filter on device bond2 [ 436.770164][ T5702] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.783001][ T5702] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 436.799797][T12440] macvlan1: entered promiscuous mode [ 436.806967][T12440] macvlan1: entered allmulticast mode [ 436.813261][ T5702] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 436.822584][T12440] bond2: entered promiscuous mode [ 436.830309][T12440] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 436.837432][ T5702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 436.847224][ T5702] usb 1-1: SerialNumber: syz [ 436.852364][T12440] bond2: left promiscuous mode [ 436.899859][T12423] program syz.4.1817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 436.913064][T12423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.933284][T12423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.946243][ T9] usb 5-1: USB disconnect, device number 95 [ 437.873764][T12474] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 437.995715][ T5703] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 438.111143][T12480] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1834'. [ 438.187024][ T5703] usb 5-1: Using ep0 maxpacket: 8 [ 438.233734][T12481] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1834'. [ 438.255383][ T5703] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 438.268945][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.303090][T12485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.320981][ T5703] usb 5-1: Product: syz [ 438.322770][T12485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.339886][T12480] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1834'. [ 438.349118][ T5703] usb 5-1: Manufacturer: syz [ 438.358179][ T5703] usb 5-1: SerialNumber: syz [ 438.392183][T12456] vivid-000: disconnect [ 438.412267][ T5703] usb 5-1: config 0 descriptor?? [ 438.429606][ T5703] gspca_main: se401-2.14.0 probing 047d:5003 [ 438.581217][T12456] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 438.626594][ T5702] usb 1-1: 0:2 : does not exist [ 438.639574][ T5702] usb 1-1: unit 5 not found! [ 438.715905][ T5702] usb 1-1: USB disconnect, device number 76 [ 438.832538][ T5703] gspca_se401: Frame size: 0x0 1/16th janggu [ 438.834782][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.838947][ T5703] gspca_se401: Frame size: 10x0 bayer [ 438.860058][ T5703] gspca_se401: Frame size: 12x9 bayer [ 438.869566][ T5703] gspca_se401: Frame size: 0x0 1/16th janggu [ 438.877954][ T5703] gspca_se401: Frame size: 0x0 1/16th janggu [ 438.893943][ T5703] gspca_se401: Frame size: 0x0 1/16th janggu [ 439.058830][ T5703] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input46 [ 439.141443][ T5703] usb 5-1: USB disconnect, device number 96 [ 439.657627][T12498] netlink: 'syz.4.1840': attribute type 1 has an invalid length. [ 439.719685][T12498] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 439.735210][T12498] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 439.770754][T12500] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1840'. [ 439.817447][T12500] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1840'. [ 439.843547][T12500] 8021q: adding VLAN 0 to HW filter on device bond5 [ 439.864276][ T5703] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 439.896087][T12498] macvlan2: entered promiscuous mode [ 439.907475][T12498] macvlan2: entered allmulticast mode [ 439.917711][T12498] bond5: entered promiscuous mode [ 439.929398][T12498] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 439.945790][T12498] bond5: left promiscuous mode [ 439.986396][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.993180][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.014332][ T5703] usb 3-1: Using ep0 maxpacket: 8 [ 440.033855][ T5703] usb 3-1: unable to get BOS descriptor or descriptor too short [ 440.053652][ T5703] usb 3-1: config 1 has an invalid interface number: 229 but max is 0 [ 440.062439][ T5703] usb 3-1: config 1 has no interface number 0 [ 440.070085][ T5703] usb 3-1: config 1 interface 229 has no altsetting 0 [ 440.085861][ T5703] usb 3-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=a5.73 [ 440.097490][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.106993][ T5703] usb 3-1: Product: syz [ 440.111247][ T5703] usb 3-1: Manufacturer: syz [ 440.116484][ T5703] usb 3-1: SerialNumber: syz [ 440.359544][ T5703] usb 3-1: selecting invalid altsetting 1 [ 440.366511][ T5703] comedi comedi5: could not switch to alternate setting 1 [ 440.373648][ T5703] usbduxfast 3-1:1.229: driver 'usbduxfast' failed to auto-configure device. [ 440.386665][ T5703] usb 3-1: USB disconnect, device number 108 [ 440.414587][ T5687] usb 1-1: new low-speed USB device number 77 using dummy_hcd [ 440.544281][ T5687] usb 1-1: device descriptor read/64, error -71 [ 440.584306][ T806] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 440.736002][ T806] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 440.744019][ T806] usb 5-1: can't read configurations, error -22 [ 440.784804][ T5687] usb 1-1: new low-speed USB device number 78 using dummy_hcd [ 440.874981][ T806] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 440.924458][ T5687] usb 1-1: device descriptor read/64, error -71 [ 441.044717][ T5687] usb usb1-port1: attempt power cycle [ 441.051847][ T806] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 441.060108][ T806] usb 5-1: can't read configurations, error -22 [ 441.067105][ T806] usb usb5-port1: attempt power cycle [ 441.204723][ T5703] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 441.354513][ T5703] usb 3-1: Using ep0 maxpacket: 8 [ 441.361910][ T5703] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.374063][ T5703] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 441.383217][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 441.391553][ T5703] usb 3-1: Product: syz [ 441.394317][ T5687] usb 1-1: new low-speed USB device number 79 using dummy_hcd [ 441.395782][ T5703] usb 3-1: Manufacturer: syz [ 441.407905][ T5703] usb 3-1: SerialNumber: syz [ 441.414554][ T806] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 441.414661][ T5703] usb 3-1: config 0 descriptor?? [ 441.422877][ T5687] usb 1-1: device descriptor read/8, error -71 [ 441.436973][ T5703] imon_raw 3-1:0.0: IR endpoint missing [ 441.447638][ T806] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 441.455968][ T806] usb 5-1: can't read configurations, error -22 [ 441.604287][ T806] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 441.636190][ T806] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 441.650664][ T24] usb 3-1: USB disconnect, device number 109 [ 441.658651][ T806] usb 5-1: can't read configurations, error -22 [ 441.666893][ T806] usb usb5-port1: unable to enumerate USB device [ 441.677151][ T5687] usb 1-1: new low-speed USB device number 80 using dummy_hcd [ 441.706201][ T5687] usb 1-1: device descriptor read/8, error -71 [ 441.814764][ T5687] usb usb1-port1: unable to enumerate USB device [ 442.164274][ T24] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 442.326595][ T24] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 442.336113][ T24] usb 4-1: config 0 has no interface number 0 [ 442.342426][ T24] usb 4-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 442.354694][ T24] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 442.363892][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.372058][ T24] usb 4-1: Product: syz [ 442.376420][ T24] usb 4-1: Manufacturer: syz [ 442.381015][ T24] usb 4-1: SerialNumber: syz [ 442.388458][ T24] usb 4-1: config 0 descriptor?? [ 442.414573][T12537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1851'. [ 442.549359][T12541] IPVS: set_ctl: invalid protocol: 0 0.32.0.0:14336 [ 442.561129][T12540] IPVS: set_ctl: invalid protocol: 12336 48.48.48.48:12336 [ 442.630648][T12542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.641127][T12542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.711688][ T24] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 442.721557][ T24] keyspan 4-1:0.133: unsupported endpoint type 0 [ 442.729107][ T24] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 442.737125][ T24] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 442.744958][ T24] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 442.754070][ T24] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 442.766345][ T24] usb 4-1: USB disconnect, device number 114 [ 442.780819][ T24] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 442.794709][ T24] keyspan 4-1:0.133: device disconnected [ 443.121141][T12549] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1854'. [ 443.286131][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1857'. [ 443.295587][T12555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1857'. [ 443.409310][T12560] netlink: 'syz.2.1858': attribute type 1 has an invalid length. [ 443.469606][T12565] netlink: 'syz.4.1859': attribute type 13 has an invalid length. [ 443.483647][T12564] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 443.506712][T12564] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 443.527861][T12560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1858'. [ 443.591754][T12567] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1858'. [ 443.601369][ T5687] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 443.646709][T12567] 8021q: adding VLAN 0 to HW filter on device bond5 [ 443.702331][T12560] macvlan2: entered promiscuous mode [ 443.711687][T12560] macvlan2: entered allmulticast mode [ 443.720337][T12560] bond5: entered promiscuous mode [ 443.726843][T12560] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 443.746206][T12560] bond5: left promiscuous mode [ 443.787964][ T5687] usb 1-1: Using ep0 maxpacket: 32 [ 443.801962][ T5687] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 443.812033][ T5687] usb 1-1: config 0 has no interface number 0 [ 443.831035][ T5687] usb 1-1: config 0 interface 184 has no altsetting 0 [ 443.855008][ T5687] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 443.864563][ T5687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.902596][ T5687] usb 1-1: Product: syz [ 443.916923][ T5687] usb 1-1: Manufacturer: syz [ 443.934734][ T5687] usb 1-1: SerialNumber: syz [ 443.953762][ T5687] usb 1-1: config 0 descriptor?? [ 444.204906][ T5703] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 444.364322][ T5703] usb 3-1: Using ep0 maxpacket: 32 [ 444.375916][ T5703] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.403192][ T9] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 444.407461][ T5687] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 444.411208][ T5703] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.432032][ T5687] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 444.463467][ T5687] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 444.475723][ T5687] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 444.509225][ T5687] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 444.511115][ T5703] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.548215][ T5687] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 444.571619][ T5703] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 444.574843][ T5687] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 444.612916][ T5703] usb 3-1: config 0 interface 0 has no altsetting 0 [ 444.620379][ T5703] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 444.627125][ T5687] usb 1-1: USB disconnect, device number 81 [ 444.631302][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.660062][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.674809][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.707371][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 444.742918][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 444.754736][ T5703] usb 3-1: config 0 descriptor?? [ 444.766412][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.783572][ T9] usb 4-1: config 0 descriptor?? [ 445.034314][ T5695] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 445.149201][ T5703] hid (null): invalid report_size 55607 [ 445.167833][ T5703] corsair-cpro 0003:1B1C:0C10.0023: invalid report_size 55607 [ 445.184502][ T5703] corsair-cpro 0003:1B1C:0C10.0023: item 0 2 1 7 parsing failed [ 445.186070][ T5687] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 445.205038][ T5703] corsair-cpro 0003:1B1C:0C10.0023: probe with driver corsair-cpro failed with error -22 [ 445.215100][ T5695] usb 5-1: Using ep0 maxpacket: 32 [ 445.222958][ T5695] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 445.236699][ T5695] usb 5-1: config 0 has no interface number 0 [ 445.242955][ T5695] usb 5-1: config 0 interface 67 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 445.268625][ T9] plantronics 0003:047F:FFFF.0024: item fetching failed at offset 6/15 [ 445.285045][ T5695] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 445.294664][ T9] plantronics 0003:047F:FFFF.0024: parse failed [ 445.301005][ T5695] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.324563][ T9] plantronics 0003:047F:FFFF.0024: probe with driver plantronics failed with error -22 [ 445.334377][ T5695] usb 5-1: Product: syz [ 445.338560][ T5695] usb 5-1: Manufacturer: syz [ 445.343152][ T5695] usb 5-1: SerialNumber: syz [ 445.365224][ T5687] usb 1-1: unable to get BOS descriptor or descriptor too short [ 445.375789][ T5695] usb 5-1: config 0 descriptor?? [ 445.385500][ T5695] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 445.405438][ T5687] usb 1-1: config 13 has an invalid interface number: 50 but max is 3 [ 445.416137][ T5695] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 445.416212][ T5687] usb 1-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 445.438665][ T5687] usb 1-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 445.448526][ T5687] usb 1-1: config 13 has no interface number 0 [ 445.459591][ T5687] usb 1-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 445.502783][ T5687] usb 1-1: config 13 interface 50 has no altsetting 0 [ 445.512808][ T5687] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 445.522769][ T5687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.531156][ T5687] usb 1-1: Product: syz [ 445.536493][ T5687] usb 1-1: Manufacturer: syz [ 445.537303][ T5695] usb 3-1: USB disconnect, device number 110 [ 445.541274][ T5687] usb 1-1: SerialNumber: syz [ 445.613324][T12594] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1867'. [ 445.797381][T12600] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1868'. [ 445.868268][ T5687] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 445.869494][ T1165] usb 1-1: Failed to submit usb control message: -71 [ 445.885143][ T1165] usb 1-1: unable to send the bmi data to the device: -71 [ 445.893822][ T1165] usb 1-1: unable to get target info from device [ 445.901667][ T1165] usb 1-1: could not get target info (-71) [ 445.902044][ T5687] usb 1-1: USB disconnect, device number 82 [ 445.914543][ T1165] usb 1-1: could not probe fw (-71) [ 445.965247][ T24] usb 5-1: USB disconnect, device number 101 [ 446.576045][ T5687] usb 4-1: USB disconnect, device number 115 [ 446.635808][T12615] netlink: 'syz.4.1872': attribute type 1 has an invalid length. [ 446.684297][ T5695] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 446.713908][T12615] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 446.726139][T12615] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 446.746135][T12617] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1872'. [ 446.800803][T12618] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1872'. [ 446.832449][T12618] 8021q: adding VLAN 0 to HW filter on device bond6 [ 446.845926][ T5695] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 446.862312][ T5695] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 446.881022][ T5695] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 446.900631][ T5695] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 446.918388][ T5695] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 446.936943][ T5695] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 446.946964][ T5695] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 446.962171][T12615] macvlan2: entered promiscuous mode [ 446.968184][ T5695] usb 1-1: Product: syz [ 446.972549][T12615] macvlan2: entered allmulticast mode [ 446.978305][ T5695] usb 1-1: Manufacturer: syz [ 446.988212][T12615] bond6: entered promiscuous mode [ 447.002076][ T5695] cdc_wdm 1-1:1.0: skipping garbage [ 447.018318][ T5695] cdc_wdm 1-1:1.0: skipping garbage [ 447.023892][T12615] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 447.037010][ T5695] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 447.049817][T12615] bond6: left promiscuous mode [ 447.056397][ T5695] cdc_wdm 1-1:1.0: Unknown control protocol [ 447.163322][T12624] could not allocate digest TFM handle poly1305-generic [ 447.476764][ T24] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 447.564271][ T5687] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 447.656474][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.674021][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 447.707541][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 447.717371][ T5687] usb 3-1: Using ep0 maxpacket: 16 [ 447.722964][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.737382][ T5687] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 447.750796][ T24] usb 4-1: config 0 descriptor?? [ 447.755855][ T5687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.765011][ T5687] usb 3-1: Product: syz [ 447.771391][ T5687] usb 3-1: Manufacturer: syz [ 447.776986][ T5687] usb 3-1: SerialNumber: syz [ 447.787972][ T5687] usb 3-1: config 0 descriptor?? [ 447.807097][ T5687] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 447.829591][ T5703] usb 1-1: USB disconnect, device number 83 [ 447.843293][T12650] bridge_slave_0: left allmulticast mode [ 447.880964][T12650] bridge_slave_0: left promiscuous mode [ 447.922431][T12650] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.969072][T12631] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 448.036185][ T5695] usb 3-1: USB disconnect, device number 111 [ 448.212747][T12668] trusted_key: encrypted_key: insufficient parameters specified [ 448.342618][T12674] xt_connbytes: Forcing CT accounting to be enabled [ 448.350823][T12674] set match dimension is over the limit! [ 448.494259][ T5695] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 448.547469][ T24] ath6kl: Failed to read usb control message: -71 [ 448.556696][ T24] ath6kl: Unable to read the bmi data from the device: -71 [ 448.564515][ T24] ath6kl: Unable to recv target info: -71 [ 448.571170][ T24] ath6kl: Failed to init ath6kl core: -71 [ 448.577622][ T24] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 448.591315][ T24] usb 4-1: USB disconnect, device number 116 [ 448.627301][ T5687] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 448.644483][ T5695] usb 1-1: Using ep0 maxpacket: 32 [ 448.652499][ T5695] usb 1-1: unable to get BOS descriptor or descriptor too short [ 448.661825][ T5695] usb 1-1: config 6 has an invalid interface number: 118 but max is 0 [ 448.679733][ T5695] usb 1-1: config 6 has no interface number 0 [ 448.687031][ T5695] usb 1-1: config 6 interface 118 has no altsetting 0 [ 448.697372][ T5695] usb 1-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=89.62 [ 448.709876][ T5695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.711921][T12677] __nla_validate_parse: 1 callbacks suppressed [ 448.711935][T12677] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1889'. [ 448.718513][ T5695] usb 1-1: Product: syz [ 448.738784][ T5695] usb 1-1: Manufacturer: syz [ 448.743438][ T5695] usb 1-1: SerialNumber: syz [ 448.817279][ T5687] usb 5-1: config 0 has no interfaces? [ 448.831799][ T5687] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 448.847162][ T5687] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.866387][ T5687] usb 5-1: config 0 descriptor?? [ 448.965409][ T5695] gspca_main: mars-2.14.0 probing 093a:050f [ 448.981740][ T5695] usb 1-1: USB disconnect, device number 84 [ 449.087569][ T5687] usb 5-1: USB disconnect, device number 102 [ 449.373961][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1892'. [ 449.554288][ T5687] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 449.726404][ T5687] usb 5-1: unable to get BOS descriptor or descriptor too short [ 449.750692][ T5687] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 449.785451][ T5687] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 449.817396][ T5687] usb 5-1: string descriptor 0 read error: -22 [ 449.829714][ T5687] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 449.842683][ T5687] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.874293][ T24] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 450.036742][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.050603][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 450.066082][ T5687] usb 5-1: Can't get UAC3 power state for id 10 [ 450.074907][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 450.102998][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 450.113119][ T24] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 450.135686][ T24] usb 1-1: Manufacturer: syz [ 450.157695][ T24] usb 1-1: config 0 descriptor?? [ 450.185315][ T24] smsusb:smsusb_probe: board id=9, interface number 0 [ 450.206343][ T24] smsusb:smsusb_probe: Device initialized with return code -19 [ 450.380737][ T806] usb 1-1: USB disconnect, device number 85 [ 450.554708][ T24] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 450.622455][ T29] audit: type=1326 audit(1777813089.215:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12701 comm="syz.3.1897" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff26c99cdd9 code=0x0 [ 450.699114][ T5687] usb 5-1: 2:0: failed to get current value for ch 0 (-32) [ 450.755985][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 450.766159][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.776601][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 450.786968][ T24] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 450.798893][ T24] usb 3-1: New USB device found, idVendor=0441, idProduct=4248, bcdDevice= 0.40 [ 450.808070][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.816297][ T24] usb 3-1: Product: syz [ 450.820483][ T24] usb 3-1: Manufacturer: syz [ 450.825223][ T24] usb 3-1: SerialNumber: syz [ 451.008871][T12708] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1899'. [ 451.041779][T12696] binder_alloc: 12695: binder_alloc_buf size 16384 failed, no address space [ 451.053174][T12696] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 451.069576][T12710] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1900'. [ 451.814445][T12725] usb 5-1: Can't get UAC3 power state for id 10 [ 451.831376][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 451.840579][T12725] usb 5-1: Cannot change Power Domain ID: 10 to state: 0. Err: -71 [ 451.857899][ T5687] usb 5-1: USB disconnect, device number 103 [ 451.863155][ T24] usb 3-1: MIDIStreaming interface descriptor not found [ 451.868912][T12725] usb 5-1: Can't get UAC3 power state for id 10 [ 451.876573][T12725] usb 5-1: Cannot change Power Domain ID: 10 to state: 1. Err: -19 [ 451.906882][T12730] binder: 12722:12730 ioctl 4018620d 0 returned -22 [ 452.046221][ T24] usb 3-1: USB disconnect, device number 112 [ 452.390883][T12740] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1911'. [ 452.424567][ T9] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 452.596441][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.627771][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.666652][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 452.717205][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 452.731789][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.753408][ T9] usb 1-1: config 0 descriptor?? [ 453.192706][ T9] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 453.218913][ T9] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 453.235744][ T9] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 453.253907][ T9] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 453.267800][ T9] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 453.289157][ T9] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 453.294057][T12753] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1914'. [ 453.304317][ T9] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 453.324052][ T9] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 453.339936][T12755] binder: 12754:12755 ioctl c00c620f 200000000200 returned -22 [ 453.360681][ T9] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 453.373102][ T9] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 453.385249][T12736] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1908'. [ 453.405379][ T9] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 453.565337][T12769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1917'. [ 453.589969][ T29] audit: type=1326 audit(1777813092.175:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12760 comm="syz.3.1917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26c99cdd9 code=0x7ffc0000 [ 453.625471][ T3353] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.628570][T12770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.650531][ T29] audit: type=1326 audit(1777813092.175:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12760 comm="syz.3.1917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff26c99cdd9 code=0x7ffc0000 [ 453.683032][T12770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.709354][ T29] audit: type=1326 audit(1777813092.175:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12760 comm="syz.3.1917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26c99cdd9 code=0x7ffc0000 [ 453.791698][ T29] audit: type=1326 audit(1777813092.175:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12760 comm="syz.3.1917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff26c99cdd9 code=0x7ffc0000 [ 453.792125][ T3353] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.898776][ T29] audit: type=1326 audit(1777813092.175:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12760 comm="syz.3.1917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26c99cdd9 code=0x7ffc0000 [ 453.966499][ T29] audit: type=1326 audit(1777813092.175:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12760 comm="syz.3.1917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff26c99cdd9 code=0x7ffc0000 [ 454.012222][ T29] audit: type=1326 audit(1777813092.175:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12760 comm="syz.3.1917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26c99cdd9 code=0x7ffc0000 [ 454.037491][ T29] audit: type=1326 audit(1777813092.175:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12760 comm="syz.3.1917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff26c99cdd9 code=0x7ffc0000 [ 454.077129][ T3353] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.086452][ T29] audit: type=1326 audit(1777813092.175:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12760 comm="syz.3.1917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26c99cdd9 code=0x7ffc0000 [ 454.098721][ T3353] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.271264][ T9] usb 1-1: USB disconnect, device number 86 [ 454.341822][T12779] netlink: 'syz.0.1920': attribute type 5 has an invalid length. [ 454.373909][T12779] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1920'. [ 454.374751][ T5703] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 454.565542][ T5703] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 454.574360][ T5703] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 454.590049][ T5703] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 454.614002][ T5703] usb 5-1: config 220 has no interface number 2 [ 454.635259][ T5703] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 454.664451][ T5703] usb 5-1: config 220 interface 0 has no altsetting 0 [ 454.679094][ T5703] usb 5-1: config 220 interface 76 has no altsetting 0 [ 454.694257][ T5703] usb 5-1: config 220 interface 1 has no altsetting 0 [ 454.708090][ T5703] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 454.734481][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.748860][ T5703] usb 5-1: Product: syz [ 454.759861][ T5703] usb 5-1: Manufacturer: syz [ 454.774891][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078ebc000: rx timeout, send abort [ 454.783251][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888078ebc000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 454.831470][ T5703] usb 5-1: SerialNumber: syz [ 454.915334][T12790] netlink: 'syz.3.1922': attribute type 2 has an invalid length. [ 454.927231][T12790] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1922'. [ 455.001612][T12783] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1921'. [ 455.080677][ T5703] usb 5-1: selecting invalid altsetting 0 [ 455.103059][ T5703] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 455.140064][ T5703] uvcvideo 5-1:220.0: No valid video chain found. [ 455.173262][ T5703] usb 5-1: selecting invalid altsetting 0 [ 455.188013][ T5703] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 455.216363][ T5703] usb 5-1: USB disconnect, device number 104 [ 455.399656][T12786] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4286884795 (8573769590 ns) > initial count (2713559212 ns). Using initial count to start timer. [ 455.541908][T12805] netlink: 'syz.2.1928': attribute type 1 has an invalid length. [ 455.884245][ T46] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 455.896791][T12820] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 455.906779][T12820] PKCS7: Only support pkcs7_signedData type [ 456.004411][ T5703] usb 5-1: new low-speed USB device number 105 using dummy_hcd [ 456.034727][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 456.041562][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.053285][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.063136][ T46] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 456.072901][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.083234][ T46] usb 1-1: config 0 descriptor?? [ 456.092081][ T46] hub 1-1:0.0: USB hub found [ 456.156736][ T5703] usb 5-1: config 0 has no interfaces? [ 456.165470][ T5703] usb 5-1: string descriptor 0 read error: -22 [ 456.171861][ T5703] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.d6 [ 456.181434][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.192132][ T5703] usb 5-1: config 0 descriptor?? [ 456.294380][ T46] hub 1-1:0.0: 1 port detected [ 456.637072][T12828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1935'. [ 456.909804][T12809] netlink: 'syz.0.1930': attribute type 13 has an invalid length. [ 456.918077][T12809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1930'. [ 456.934587][T12809] netlink: 'syz.0.1930': attribute type 13 has an invalid length. [ 456.942594][T12809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1930'. [ 456.961231][ T46] hub 1-1:0.0: activate --> -90 [ 457.014659][ T9] usb 3-1: new low-speed USB device number 113 using dummy_hcd [ 457.094303][ T46] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 457.163034][ T24] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 457.172326][ T24] usb 1-1: USB disconnect, device number 87 [ 457.177224][ T9] usb 3-1: Invalid ep0 maxpacket: 64 [ 457.246512][ T46] usb 4-1: config 7 has an invalid interface number: 97 but max is 3 [ 457.254723][ T46] usb 4-1: config 7 has an invalid interface number: 138 but max is 3 [ 457.262915][ T46] usb 4-1: config 7 has an invalid interface number: 136 but max is 3 [ 457.272821][ T46] usb 4-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 457.281583][ T46] usb 4-1: config 7 has an invalid interface number: 86 but max is 3 [ 457.289936][ T46] usb 4-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 457.298926][ T46] usb 4-1: config 7 has an invalid interface number: 111 but max is 3 [ 457.307314][ T46] usb 4-1: config 7 has an invalid interface number: 16 but max is 3 [ 457.315454][ T46] usb 4-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 457.324138][ T46] usb 4-1: config 7 has 6 interfaces, different from the descriptor's value: 4 [ 457.324449][ T9] usb 3-1: new low-speed USB device number 114 using dummy_hcd [ 457.333109][ T46] usb 4-1: config 7 has no interface number 0 [ 457.333127][ T46] usb 4-1: config 7 has no interface number 1 [ 457.333142][ T46] usb 4-1: config 7 has no interface number 2 [ 457.333156][ T46] usb 4-1: config 7 has no interface number 3 [ 457.333171][ T46] usb 4-1: config 7 has no interface number 4 [ 457.333185][ T46] usb 4-1: config 7 has no interface number 5 [ 457.378057][ T46] usb 4-1: config 7 interface 97 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 457.388711][ T46] usb 4-1: config 7 interface 97 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 457.399702][ T46] usb 4-1: config 7 interface 97 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 457.410626][ T46] usb 4-1: config 7 interface 138 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 457.421324][ T46] usb 4-1: config 7 interface 138 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 457.432785][ T46] usb 4-1: config 7 interface 138 altsetting 8 bulk endpoint 0x6 has invalid maxpacket 16 [ 457.442880][ T46] usb 4-1: config 7 interface 138 altsetting 8 has 5 endpoint descriptors, different from the interface descriptor's value: 15 [ 457.456073][ T46] usb 4-1: config 7 interface 136 altsetting 53 endpoint 0xF has an invalid bInterval 182, changing to 11 [ 457.467441][ T46] usb 4-1: config 7 interface 136 altsetting 53 bulk endpoint 0xC has invalid maxpacket 1023 [ 457.477720][ T46] usb 4-1: config 7 interface 136 altsetting 53 has a duplicate endpoint with address 0x7, skipping [ 457.488515][ T46] usb 4-1: config 7 interface 136 altsetting 53 has a duplicate endpoint with address 0xD, skipping [ 457.494795][ T9] usb 3-1: Invalid ep0 maxpacket: 64 [ 457.499315][ T46] usb 4-1: config 7 interface 136 altsetting 53 has an endpoint descriptor with address 0x49, changing to 0x9 [ 457.516561][ T46] usb 4-1: config 7 interface 136 altsetting 53 has a duplicate endpoint with address 0x9, skipping [ 457.527711][ T46] usb 4-1: config 7 interface 136 altsetting 53 endpoint 0xA has an invalid bInterval 255, changing to 7 [ 457.528770][ T9] usb usb3-port1: attempt power cycle [ 457.539041][ T46] usb 4-1: config 7 interface 136 altsetting 53 has a duplicate endpoint with address 0x7, skipping [ 457.539088][ T46] usb 4-1: config 7 interface 136 altsetting 53 bulk endpoint 0x2 has invalid maxpacket 16 [ 457.567618][ T46] usb 4-1: config 7 interface 136 altsetting 53 has 8 endpoint descriptors, different from the interface descriptor's value: 9 [ 457.581891][ T46] usb 4-1: too many endpoints for config 7 interface 86 altsetting 8: 167, using maximum allowed: 30 [ 457.593727][ T46] usb 4-1: config 7 interface 86 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 457.604648][ T46] usb 4-1: config 7 interface 86 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 457.615516][ T46] usb 4-1: config 7 interface 86 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 457.626470][ T46] usb 4-1: config 7 interface 86 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 167 [ 457.639772][ T46] usb 4-1: config 7 interface 111 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 457.651215][ T46] usb 4-1: config 7 interface 111 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 457.662219][ T46] usb 4-1: config 7 interface 111 altsetting 3 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 457.673427][ T46] usb 4-1: config 7 interface 16 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 457.686049][ T46] usb 4-1: config 7 interface 16 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 457.696753][ T46] usb 4-1: config 7 interface 16 altsetting 8 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 457.708400][ T46] usb 4-1: config 7 interface 16 altsetting 8 has a duplicate endpoint with address 0x81, skipping [ 457.719107][ T46] usb 4-1: config 7 interface 16 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 457.729725][ T46] usb 4-1: config 7 interface 16 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 457.740450][ T46] usb 4-1: config 7 interface 16 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 457.751404][ T46] usb 4-1: config 7 interface 16 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 457.762219][ T46] usb 4-1: config 7 interface 138 has no altsetting 0 [ 457.769029][ T46] usb 4-1: config 7 interface 136 has no altsetting 0 [ 457.775820][ T46] usb 4-1: config 7 interface 86 has no altsetting 0 [ 457.782479][ T46] usb 4-1: config 7 interface 111 has no altsetting 0 [ 457.789261][ T46] usb 4-1: config 7 interface 16 has no altsetting 0 [ 457.798667][ T46] usb 4-1: New USB device found, idVendor=10c4, idProduct=8857, bcdDevice=bf.27 [ 457.807843][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.815960][ T46] usb 4-1: Product: ї [ 457.820150][ T46] usb 4-1: Manufacturer: 댿飅갗惿뾗髑Čႂ쉩탪绽ᨾ壘䟍㮔㫝ᗪ﵄쭻꺹禯ہ [ 457.831037][ T46] usb 4-1: SerialNumber: 궋⻊睳攀㡭﩯폾縅震ﮑ꿿恚喆脏望ꦙ꨹뼉㜝쇳̈́퓞ᨕ馉蓙娯ꝧ厛᝗Ⰽ⛌鷱뱖퐭蛠磐Ẩ⑔㹢邖旁ဿᒁ狶᪩趖럭셏䃾꿚引⭘ [ 457.914592][ T9] usb 3-1: new low-speed USB device number 115 using dummy_hcd [ 457.935065][ T9] usb 3-1: Invalid ep0 maxpacket: 64 [ 458.070370][ T46] cp210x 4-1:7.97: cp210x converter detected [ 458.076569][ T9] usb 3-1: new low-speed USB device number 116 using dummy_hcd [ 458.077036][ T46] cp210x 4-1:7.97: failed to get vendor val 0x370b size 1: -71 [ 458.091834][ T46] cp210x 4-1:7.97: querying part number failed [ 458.105177][ T46] usb 4-1: cp210x converter now attached to ttyUSB0 [ 458.105878][ T9] usb 3-1: Invalid ep0 maxpacket: 64 [ 458.126568][ T46] cp210x 4-1:7.138: cp210x converter detected [ 458.133919][ T46] cp210x 4-1:7.138: failed to get vendor val 0x370b size 1: -71 [ 458.142096][ T46] cp210x 4-1:7.138: querying part number failed [ 458.142565][ T9] usb usb3-port1: unable to enumerate USB device [ 458.162795][ T46] usb 4-1: cp210x converter now attached to ttyUSB1 [ 458.173784][ T46] cp210x 4-1:7.136: cp210x converter detected [ 458.174448][ T46] cp210x 4-1:7.136: failed to get vendor val 0x370b size 1: -71 [ 458.174471][ T46] cp210x 4-1:7.136: querying part number failed [ 458.180443][ T46] usb 4-1: cp210x converter now attached to ttyUSB2 [ 458.197906][ T46] cp210x 4-1:7.86: cp210x converter detected [ 458.198656][ T46] cp210x 4-1:7.86: failed to get vendor val 0x370b size 1: -71 [ 458.198671][ T46] cp210x 4-1:7.86: querying part number failed [ 458.201927][ T46] usb 4-1: cp210x converter now attached to ttyUSB3 [ 458.205716][ T46] cp210x 4-1:7.111: cp210x converter detected [ 458.206074][ T46] cp210x 4-1:7.111: failed to get vendor val 0x370b size 1: -71 [ 458.206095][ T46] cp210x 4-1:7.111: querying part number failed [ 458.208488][ T46] usb 4-1: cp210x converter now attached to ttyUSB4 [ 458.214644][ T46] cp210x 4-1:7.16: cp210x converter detected [ 458.215321][ T46] cp210x 4-1:7.16: failed to get vendor val 0x370b size 1: -71 [ 458.215337][ T46] cp210x 4-1:7.16: querying part number failed [ 458.227142][ T46] usb 4-1: cp210x converter now attached to ttyUSB5 [ 458.241913][ T46] usb 4-1: USB disconnect, device number 117 [ 458.246493][ T46] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 458.246991][ T46] cp210x 4-1:7.97: device disconnected [ 458.253984][ T46] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 458.256849][ T46] cp210x 4-1:7.138: device disconnected [ 458.266305][ T46] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 458.270979][ T46] cp210x 4-1:7.136: device disconnected [ 458.278778][ T46] cp210x ttyUSB3: cp210x converter now disconnected from ttyUSB3 [ 458.285862][ T46] cp210x 4-1:7.86: device disconnected [ 458.292093][ T46] cp210x ttyUSB4: cp210x converter now disconnected from ttyUSB4 [ 458.292503][ T46] cp210x 4-1:7.111: device disconnected [ 458.300314][ T46] cp210x ttyUSB5: cp210x converter now disconnected from ttyUSB5 [ 458.302585][ T46] cp210x 4-1:7.16: device disconnected [ 458.707343][T12850] syzkaller0: entered promiscuous mode [ 458.707358][T12850] syzkaller0: entered allmulticast mode [ 458.777139][ T9] usb 5-1: USB disconnect, device number 105 [ 459.120090][T12859] netlink: 'syz.3.1945': attribute type 1 has an invalid length. [ 459.197712][ T9] usb 5-1: new full-speed USB device number 106 using dummy_hcd [ 459.211534][T12862] kAFS: unable to lookup cell '' [ 459.281798][T12863] bond1: (slave geneve2): making interface the new active one [ 459.295337][T12863] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 459.306361][ T96] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 459.324882][ T96] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 459.334903][ T96] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 459.343986][ T96] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 459.365877][ T9] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 459.377377][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.390859][ T9] usb 5-1: config 0 has no interface number 0 [ 459.397798][ T9] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 459.412462][ T9] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 459.460203][ T9] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 459.497346][ T9] usb 5-1: config 0 interface 52 has no altsetting 0 [ 459.509483][ T9] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 459.524250][ T9] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 459.540795][ T9] usb 5-1: Manufacturer: syz [ 459.553907][ T9] usb 5-1: config 0 descriptor?? [ 459.566054][ T9] hub 5-1:0.52: bad descriptor, ignoring hub [ 459.599397][ T9] hub 5-1:0.52: probe with driver hub failed with error -5 [ 459.794075][T12852] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 459.860927][ T9] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 459.917425][ T9] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -5 [ 460.154589][ T5703] usb 5-1: USB disconnect, device number 106 [ 460.244380][ T9] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 460.408979][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 460.416549][ T9] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 460.428250][ T9] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 460.446322][ T5687] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 460.462207][ T9] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 460.488936][T12887] loop9: detected capacity change from 0 to 524287935 [ 460.495813][ T9] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 460.528265][ T9] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 460.539945][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.582101][ T9] usb 3-1: Product: syz [ 460.602444][ T9] usb 3-1: Manufacturer: syz [ 460.614214][ T9] usb 3-1: SerialNumber: syz [ 460.634380][ T5687] usb 1-1: Using ep0 maxpacket: 16 [ 460.638774][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 460.669397][ T5687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.708000][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input48 [ 460.727385][ T5687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.773119][ T5687] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 460.809417][ T5687] usb 1-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 460.830762][ T5687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.852825][ T5687] usb 1-1: config 0 descriptor?? [ 460.866282][ T9] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 460.878570][ T9] (id 0x00) [ 460.974323][ T5695] usb 5-1: new low-speed USB device number 107 using dummy_hcd [ 461.013122][T12896] IPVS: length: 44 != 5511463160 [ 461.018410][ T9] rc_core: IR keymap rc-imon-pad not found [ 461.025584][ T9] Registered IR keymap rc-empty [ 461.031823][ T9] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 461.044535][ T9] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 461.076337][ T9] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 461.096815][ T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input49 [ 461.148638][ T5695] usb 5-1: config 0 has no interfaces? [ 461.166590][ T5695] usb 5-1: string descriptor 0 read error: -22 [ 461.176133][ T5695] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.d6 [ 461.189088][ T9] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:117> initialized [ 461.198622][ T5695] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.229631][ T5695] usb 5-1: config 0 descriptor?? [ 461.302333][ T5687] hid_parser_main: 5 callbacks suppressed [ 461.302353][ T5687] wacom 0003:056A:0315.0026: unknown main item tag 0x0 [ 461.352831][ T5687] wacom 0003:056A:0315.0026: unknown main item tag 0x0 [ 461.384398][ T5687] wacom 0003:056A:0315.0026: unknown main item tag 0x0 [ 461.419191][ T5687] wacom 0003:056A:0315.0026: unknown main item tag 0x0 [ 461.439744][ T5687] wacom 0003:056A:0315.0026: unknown main item tag 0x0 [ 461.463330][ T5687] wacom 0003:056A:0315.0026: unknown main item tag 0x0 [ 461.477134][ T5687] wacom 0003:056A:0315.0026: unknown main item tag 0x0 [ 461.484129][ T5687] wacom 0003:056A:0315.0026: unknown main item tag 0x0 [ 461.493384][ T5687] wacom 0003:056A:0315.0026: unknown main item tag 0x0 [ 461.500437][ T5687] wacom 0003:056A:0315.0026: unknown main item tag 0x0 [ 461.528125][ T5687] usb 1-1: USB disconnect, device number 88 [ 461.655972][T12915] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1958'. [ 461.877549][T12927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1961'. [ 461.899377][T12927] netlink: 'syz.3.1961': attribute type 1 has an invalid length. [ 461.912137][T12927] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1961'. [ 461.931678][T12929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1961'. [ 462.247678][T12932] imon:send_packet: packet tx failed (-71) [ 462.247983][ T5695] usb 3-1: USB disconnect, device number 117 [ 462.273906][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 462.273922][ T29] audit: type=1326 audit(1777813100.865:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12936 comm="syz.0.1963" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5bd9cdd9 code=0x7ffc0000 [ 462.316415][T12932] imon:vfd_write: send packet #3 failed [ 462.338448][T12943] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1965'. [ 462.348781][ T29] audit: type=1326 audit(1777813100.865:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12936 comm="syz.0.1963" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5bd9cdd9 code=0x7ffc0000 [ 462.448526][ T29] audit: type=1326 audit(1777813100.865:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12936 comm="syz.0.1963" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6c5bd9cdd9 code=0x7ffc0000 [ 462.509584][ T29] audit: type=1326 audit(1777813100.865:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12936 comm="syz.0.1963" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5bd9cdd9 code=0x7ffc0000 [ 462.554761][ T29] audit: type=1326 audit(1777813100.865:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12936 comm="syz.0.1963" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5bd9cdd9 code=0x7ffc0000 [ 462.583856][ T5630] Bluetooth: hci2: command 0x0406 tx timeout [ 462.629460][ T29] audit: type=1326 audit(1777813100.865:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12936 comm="syz.0.1963" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f6c5bd9cdd9 code=0x7ffc0000 [ 462.656973][ T9] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 462.714608][ T29] audit: type=1326 audit(1777813100.865:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12936 comm="syz.0.1963" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5bd9cdd9 code=0x7ffc0000 [ 462.771906][ T29] audit: type=1326 audit(1777813100.865:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12936 comm="syz.0.1963" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6c5bd9cdd9 code=0x7ffc0000 [ 462.826974][ T29] audit: type=1326 audit(1777813100.865:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12936 comm="syz.0.1963" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5bd9cdd9 code=0x7ffc0000 [ 462.862369][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 462.886449][ T9] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 462.907974][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 462.937191][ T29] audit: type=1326 audit(1777813100.865:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12936 comm="syz.0.1963" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c5bd9cdd9 code=0x7ffc0000 [ 462.963809][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.978961][ T9] usb 4-1: Product: syz [ 462.985756][ T9] usb 4-1: Manufacturer: syz [ 462.993636][ T9] usb 4-1: SerialNumber: syz [ 463.021296][ T9] r8152-cfgselector 4-1: Unknown version 0x0000 [ 463.034968][T12946] futex_wake_op: syz.2.1966 tries to shift op by 36; fix this program [ 463.059856][ T9] r8152-cfgselector 4-1: config 0 descriptor?? [ 463.293957][T12943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.317221][T12943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.324268][ T46] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 463.497063][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 463.515961][ T46] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 463.527483][ T46] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 2047, setting to 1024 [ 463.546998][T12948] netlink: 'syz.0.1967': attribute type 13 has an invalid length. [ 463.559008][T12948] netlink: 'syz.0.1967': attribute type 17 has an invalid length. [ 463.561455][ T46] usb 3-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 463.577876][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.589713][ T46] usb 3-1: Product: syz [ 463.596807][ T46] usb 3-1: Manufacturer: syz [ 463.601976][ T46] usb 3-1: SerialNumber: syz [ 463.697755][T12948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.722037][T12948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.725189][T12953] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1967'. [ 463.741932][ T5695] usb 5-1: USB disconnect, device number 107 [ 463.885862][T12948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.900186][ T9] r8152-cfgselector 4-1: Unknown version 0x0000 [ 463.901491][ T46] usb 3-1: USB disconnect, device number 118 [ 463.910262][ T9] r8152-cfgselector 4-1: No union descriptors [ 463.931109][ T9] r8152-cfgselector 4-1: USB disconnect, device number 118 [ 463.949406][T12948] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 463.962381][T12948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 464.001627][T12948] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 464.012437][ T6492] udevd[6492]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 464.046265][T12951] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1968'. [ 464.062456][T12952] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1968'. [ 464.107606][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.114817][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.121507][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1971'. [ 464.172830][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.180008][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.273503][T12962] team0: Failed to send options change via netlink (err -105) [ 464.285330][T12962] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 464.306708][T12962] team0: Port device team_slave_0 removed [ 464.940777][T12983] syzkaller0: entered promiscuous mode [ 464.958350][T12983] syzkaller0: entered allmulticast mode [ 465.044299][ T5695] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 465.206597][ T5695] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 465.220635][ T5695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.241823][ T5695] usb 5-1: config 0 descriptor?? [ 465.266101][ T5695] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 465.424963][ T5702] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 465.472456][ T5695] gp8psk: usb in 128 operation failed. [ 465.575681][ T5702] usb 4-1: device descriptor read/64, error -71 [ 465.732794][ T5695] gp8psk: usb in 146 operation failed. [ 465.755738][ T5695] gp8psk: failed to get FW version [ 465.770052][ T5695] gp8psk: FPGA Version = 52 [ 465.854433][ T5702] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 465.970600][ T5695] gp8psk: usb in 138 operation failed. [ 465.983210][ T5695] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 466.006532][ T5702] usb 4-1: device descriptor read/64, error -71 [ 466.019716][ T5695] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 466.052562][ T5695] usb 5-1: USB disconnect, device number 108 [ 466.124539][ T5702] usb usb4-port1: attempt power cycle [ 466.474587][ T5702] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 466.508192][ T5702] usb 4-1: device descriptor read/8, error -71 [ 466.544251][ T46] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 466.609113][T13025] syzkaller0: entered promiscuous mode [ 466.625978][T13025] syzkaller0: entered allmulticast mode [ 466.715082][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 466.723310][ T46] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 466.736447][ T46] usb 3-1: config 0 has no interface number 0 [ 466.752488][ T46] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 466.764291][ T5702] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 466.791593][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.794944][ T5702] usb 4-1: device descriptor read/8, error -71 [ 466.806540][ T46] usb 3-1: Product: syz [ 466.810796][ T46] usb 3-1: Manufacturer: syz [ 466.815796][ T46] usb 3-1: SerialNumber: syz [ 466.833635][ T46] usb 3-1: config 0 descriptor?? [ 466.857988][ T46] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 466.882753][T13027] tipc: Enabled bearer , priority 0 [ 466.883779][T13029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1990'. [ 466.908691][T13029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1990'. [ 466.919332][T13026] tipc: Disabling bearer [ 466.925963][ T5702] usb usb4-port1: unable to enumerate USB device [ 466.991573][T13030] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1990'. [ 467.067798][ T46] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 467.079872][T13036] sysfs: cannot create duplicate filename '/class/ieee80211/1^!' [ 467.083193][T13035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.111392][T13036] CPU: 0 UID: 0 PID: 13036 Comm: syz.6.1992 Tainted: G L syzkaller #0 PREEMPT(full) [ 467.111419][T13036] Tainted: [L]=SOFTLOCKUP [ 467.111426][T13036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 467.111441][T13036] Call Trace: [ 467.111452][T13036] [ 467.111459][T13036] dump_stack_lvl+0xe8/0x150 [ 467.111494][T13036] sysfs_warn_dup+0x8e/0xa0 [ 467.111516][T13036] sysfs_do_create_link_sd+0xc0/0x110 [ 467.111539][T13036] device_add_class_symlinks+0x1cf/0x240 [ 467.111564][T13036] device_add+0x475/0xbb0 [ 467.111588][T13036] wiphy_register+0x1dc5/0x2dc0 [ 467.111629][T13036] ? __pfx_wiphy_register+0x10/0x10 [ 467.111652][T13036] ? __pfx_netdev_run_todo+0x10/0x10 [ 467.111676][T13036] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 467.111701][T13036] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 467.111729][T13036] ieee80211_register_hw+0x3d82/0x4a70 [ 467.111767][T13036] ? ieee80211_register_hw+0x1931/0x4a70 [ 467.111815][T13036] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 467.111843][T13036] ? __asan_memset+0x22/0x50 [ 467.111863][T13036] ? __hrtimer_setup+0x1b7/0x260 [ 467.111883][T13036] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 467.111908][T13036] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 467.111957][T13036] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 467.111974][T13036] ? kstrndup+0xbf/0x160 [ 467.112002][T13036] hwsim_new_radio_nl+0xf6a/0x1c00 [ 467.112043][T13036] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 467.112073][T13036] ? rcu_is_watching+0x15/0xb0 [ 467.112093][T13036] ? trace_kmalloc+0x2a/0xf0 [ 467.112122][T13036] ? __nla_parse+0x40/0x60 [ 467.112149][T13036] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 467.112167][T13036] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 467.112193][T13036] genl_family_rcv_msg_doit+0x22a/0x330 [ 467.112218][T13036] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 467.112248][T13036] ? bpf_lsm_capable+0x9/0x20 [ 467.112263][T13036] ? security_capable+0x7e/0x2c0 [ 467.112292][T13036] genl_rcv_msg+0x61c/0x7a0 [ 467.112316][T13036] ? __pfx_genl_rcv_msg+0x10/0x10 [ 467.112333][T13036] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 467.112352][T13036] ? __pfx_ref_tracker_free+0x10/0x10 [ 467.112386][T13036] netlink_rcv_skb+0x232/0x4b0 [ 467.112410][T13036] ? __pfx_genl_rcv_msg+0x10/0x10 [ 467.112428][T13036] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 467.112466][T13036] ? down_read+0x270/0x2e0 [ 467.112495][T13036] ? genl_rcv+0xd/0x40 [ 467.112514][T13036] genl_rcv+0x28/0x40 [ 467.112529][T13036] netlink_unicast+0x75c/0x8e0 [ 467.112561][T13036] netlink_sendmsg+0x813/0xb40 [ 467.112592][T13036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.112617][T13036] ? aa_sock_msg_perm+0xf1/0x1b0 [ 467.112641][T13036] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 467.112666][T13036] ____sys_sendmsg+0x972/0x9f0 [ 467.112687][T13036] ? __might_fault+0xaf/0x130 [ 467.112713][T13036] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.112744][T13036] ? import_iovec+0x73/0xa0 [ 467.112771][T13036] ___sys_sendmsg+0x2a5/0x360 [ 467.112791][T13036] ? __lock_acquire+0x6b5/0x2cf0 [ 467.112814][T13036] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.112842][T13036] ? futex_wake+0x4ac/0x580 [ 467.112891][T13036] ? __fget_files+0x2a/0x420 [ 467.112911][T13036] ? __fget_files+0x3a0/0x420 [ 467.112942][T13036] __x64_sys_sendmsg+0x1bd/0x2a0 [ 467.112967][T13036] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 467.112999][T13036] ? rcu_is_watching+0x15/0xb0 [ 467.113029][T13036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.113048][T13036] do_syscall_64+0x15f/0xf80 [ 467.113067][T13036] ? trace_irq_disable+0x3b/0x140 [ 467.113090][T13036] ? clear_bhb_loop+0x40/0x90 [ 467.113111][T13036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.113128][T13036] RIP: 0033:0x7f8ca7f9cdd9 [ 467.113145][T13036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.113160][T13036] RSP: 002b:00007f8ca8f0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.113178][T13036] RAX: ffffffffffffffda RBX: 00007f8ca8216090 RCX: 00007f8ca7f9cdd9 [ 467.113190][T13036] RDX: 0000000004004004 RSI: 0000200000000100 RDI: 0000000000000003 [ 467.113202][T13036] RBP: 00007f8ca8032d69 R08: 0000000000000000 R09: 0000000000000000 [ 467.113213][T13036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.113223][T13036] R13: 00007f8ca8216128 R14: 00007f8ca8216090 R15: 00007f8ca833fa48 [ 467.113253][T13036] [ 467.135395][T13035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.559138][ T46] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 467.605886][T13038] sysfs: cannot create duplicate filename '/class/ieee80211/1^!' [ 467.645356][T13038] CPU: 1 UID: 0 PID: 13038 Comm: syz.6.1992 Tainted: G L syzkaller #0 PREEMPT(full) [ 467.645383][T13038] Tainted: [L]=SOFTLOCKUP [ 467.645390][T13038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 467.645401][T13038] Call Trace: [ 467.645410][T13038] [ 467.645417][T13038] dump_stack_lvl+0xe8/0x150 [ 467.645436][T13038] sysfs_warn_dup+0x8e/0xa0 [ 467.645450][T13038] sysfs_do_create_link_sd+0xc0/0x110 [ 467.645466][T13038] device_add_class_symlinks+0x1cf/0x240 [ 467.645480][T13038] device_add+0x475/0xbb0 [ 467.645494][T13038] wiphy_register+0x1dc5/0x2dc0 [ 467.645516][T13038] ? __pfx_wiphy_register+0x10/0x10 [ 467.645528][T13038] ? __pfx_netdev_run_todo+0x10/0x10 [ 467.645542][T13038] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 467.645556][T13038] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 467.645571][T13038] ieee80211_register_hw+0x3d82/0x4a70 [ 467.645592][T13038] ? ieee80211_register_hw+0x1931/0x4a70 [ 467.645617][T13038] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 467.645632][T13038] ? __asan_memset+0x22/0x50 [ 467.645643][T13038] ? __hrtimer_setup+0x1b7/0x260 [ 467.645655][T13038] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 467.645669][T13038] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 467.645702][T13038] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 467.645712][T13038] ? kstrndup+0xbf/0x160 [ 467.645727][T13038] hwsim_new_radio_nl+0xf6a/0x1c00 [ 467.645750][T13038] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 467.645766][T13038] ? rcu_is_watching+0x15/0xb0 [ 467.645778][T13038] ? trace_kmalloc+0x2a/0xf0 [ 467.645795][T13038] ? __nla_parse+0x40/0x60 [ 467.645810][T13038] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 467.645820][T13038] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 467.645834][T13038] genl_family_rcv_msg_doit+0x22a/0x330 [ 467.645847][T13038] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 467.645864][T13038] ? bpf_lsm_capable+0x9/0x20 [ 467.645873][T13038] ? security_capable+0x7e/0x2c0 [ 467.645888][T13038] genl_rcv_msg+0x61c/0x7a0 [ 467.645901][T13038] ? __pfx_genl_rcv_msg+0x10/0x10 [ 467.645909][T13038] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 467.645920][T13038] ? __pfx_ref_tracker_free+0x10/0x10 [ 467.645938][T13038] netlink_rcv_skb+0x232/0x4b0 [ 467.645951][T13038] ? __pfx_genl_rcv_msg+0x10/0x10 [ 467.645961][T13038] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 467.645982][T13038] ? down_read+0x270/0x2e0 [ 467.645993][T13038] ? genl_rcv+0xd/0x40 [ 467.646003][T13038] genl_rcv+0x28/0x40 [ 467.646011][T13038] netlink_unicast+0x75c/0x8e0 [ 467.646028][T13038] netlink_sendmsg+0x813/0xb40 [ 467.646045][T13038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.646059][T13038] ? aa_sock_msg_perm+0xf1/0x1b0 [ 467.646072][T13038] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 467.646085][T13038] ____sys_sendmsg+0x972/0x9f0 [ 467.646098][T13038] ? __might_fault+0xaf/0x130 [ 467.646113][T13038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.646130][T13038] ? import_iovec+0x73/0xa0 [ 467.646145][T13038] ___sys_sendmsg+0x2a5/0x360 [ 467.646157][T13038] ? __lock_acquire+0x6b5/0x2cf0 [ 467.646170][T13038] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.646186][T13038] ? futex_wait+0x2a2/0x390 [ 467.646212][T13038] ? __fget_files+0x2a/0x420 [ 467.646223][T13038] ? __fget_files+0x3a0/0x420 [ 467.646240][T13038] __x64_sys_sendmsg+0x1bd/0x2a0 [ 467.646253][T13038] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 467.646270][T13038] ? rcu_is_watching+0x15/0xb0 [ 467.646286][T13038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.646297][T13038] do_syscall_64+0x15f/0xf80 [ 467.646308][T13038] ? trace_irq_disable+0x3b/0x140 [ 467.646321][T13038] ? clear_bhb_loop+0x40/0x90 [ 467.646332][T13038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.646342][T13038] RIP: 0033:0x7f8ca7f9cdd9 [ 467.646353][T13038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.646361][T13038] RSP: 002b:00007f8ca8eec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.646373][T13038] RAX: ffffffffffffffda RBX: 00007f8ca8216180 RCX: 00007f8ca7f9cdd9 [ 467.646379][T13038] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 467.646386][T13038] RBP: 00007f8ca8032d69 R08: 0000000000000000 R09: 0000000000000000 [ 467.646392][T13038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.646398][T13038] R13: 00007f8ca8216218 R14: 00007f8ca8216180 R15: 00007f8ca833fa48 [ 467.646415][T13038] [ 468.273292][T13046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1996'. [ 468.319423][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1997'. [ 468.329784][T13050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.346275][T13050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.444264][ T9] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 468.595869][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 468.604765][ T5702] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 468.613930][ T9] usb 1-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 468.629579][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 468.650494][ T9] usb 1-1: config 1 has no interface number 1 [ 468.661979][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 468.684652][ T9] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 468.709739][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 468.726585][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.739160][ T9] usb 1-1: Product: syz [ 468.743374][ T9] usb 1-1: Manufacturer: syz [ 468.749663][ T9] usb 1-1: SerialNumber: syz [ 468.776718][ T5702] usb 4-1: unable to get BOS descriptor or descriptor too short [ 468.787373][ T5702] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.798803][ T5702] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 468.810580][ T5702] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 468.820126][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.828464][ T5702] usb 4-1: Product: syz [ 468.832754][ T5702] usb 4-1: Manufacturer: syz [ 468.837716][ T5702] usb 4-1: SerialNumber: syz [ 468.852407][ T5702] usb 4-1: selecting invalid altsetting 1 [ 468.859153][ T5702] usb 4-1: unit 6 not found! [ 469.056024][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 469.056040][ T29] audit: type=1326 audit(1777813107.655:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13047 comm="syz.3.1998" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff26c99cdd9 code=0x0 [ 469.320430][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 469.328712][ T5687] usb 3-1: USB disconnect, device number 119 [ 469.367413][ T5687] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 469.398587][ T5687] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 469.459905][ T5687] quatech2 3-1:0.51: device disconnected [ 469.484718][T13062] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2001'. [ 469.580041][T13068] tipc: Enabled bearer , priority 0 [ 469.643132][T13067] tipc: Disabling bearer [ 469.961904][T13083] sctp: [Deprecated]: syz.2.2006 (pid 13083) Use of int in max_burst socket option. [ 469.961904][T13083] Use struct sctp_assoc_value instead [ 470.492271][T13096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.506040][T13099] xt_l2tp: invalid flags combination: 0 [ 470.513105][T13096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.593886][T13104] fuse: fd is not a fuse device [ 470.613406][T13106] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2009'. [ 470.915308][T13119] bond0: entered allmulticast mode [ 470.920556][T13119] bond_slave_0: entered allmulticast mode [ 470.926606][T13119] bond_slave_1: entered allmulticast mode [ 471.014340][ T24] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 471.144242][ T24] usb 3-1: device descriptor read/64, error -71 [ 471.225873][ T995] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 471.369535][ T5702] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 471.380124][ T9] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 471.394622][ T24] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 471.403211][ T995] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 471.411289][ T9] usb 1-1: MIDIStreaming interface descriptor not found [ 471.421766][ T5702] usb 4-1: USB disconnect, device number 123 [ 471.431846][ T995] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 471.462359][ T995] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 471.488908][ T995] usb 5-1: config 0 interface 0 has no altsetting 0 [ 471.508325][ T995] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 471.511532][ T6492] udevd[6492]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 471.533697][ T995] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 471.544908][ T9] usb 1-1: USB disconnect, device number 89 [ 471.566522][ T24] usb 3-1: device descriptor read/64, error -71 [ 471.590342][ T995] usb 5-1: config 0 interface 0 has no altsetting 0 [ 471.615951][ T995] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 471.626531][ T995] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 471.648956][ T995] usb 5-1: config 0 interface 0 has no altsetting 0 [ 471.657312][ T995] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 471.684678][ T24] usb usb3-port1: attempt power cycle [ 471.688622][ T995] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 471.715162][ T995] usb 5-1: config 0 interface 0 has no altsetting 0 [ 471.716636][ T6492] udevd[6492]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 471.758239][ T995] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 471.779529][ T995] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 471.816914][ T995] usb 5-1: config 0 interface 0 has no altsetting 0 [ 471.837444][ T995] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 471.850518][ T995] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 471.872111][ T995] usb 5-1: config 0 interface 0 has no altsetting 0 [ 471.883369][ T995] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 471.904128][ T995] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 471.925035][ T995] usb 5-1: config 0 interface 0 has no altsetting 0 [ 471.941388][ T995] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 471.951031][ T9] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 471.952043][T13130] tipc: Enabled bearer , priority 0 [ 471.958896][ T995] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 471.977934][ T995] usb 5-1: config 0 interface 0 has no altsetting 0 [ 471.992482][ T995] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 472.001976][ T995] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 472.013832][ T995] usb 5-1: Product: syz [ 472.018514][ T995] usb 5-1: Manufacturer: syz [ 472.023186][ T995] usb 5-1: SerialNumber: syz [ 472.031368][ T995] usb 5-1: config 0 descriptor?? [ 472.040410][T13129] tipc: Disabling bearer [ 472.056956][ T995] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 472.084262][ T24] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 472.104767][ T24] usb 3-1: device descriptor read/8, error -71 [ 472.124660][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 472.133836][ T9] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 472.147822][ T9] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 472.163237][ T9] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 472.176449][ T9] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 472.192955][ T9] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 472.193627][T13135] syzkaller0: entered promiscuous mode [ 472.202556][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.209026][T13135] syzkaller0: entered allmulticast mode [ 472.217037][ T9] usb 1-1: Product: syz [ 472.233813][ T9] usb 1-1: Manufacturer: syz [ 472.238752][ T9] usb 1-1: SerialNumber: syz [ 472.260648][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 472.283959][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input50 [ 472.332537][ C0] usb 5-1: yurex_control_callback - control failed: -71 [ 472.342284][ T995] usb 5-1: USB disconnect, device number 109 [ 472.361815][ T995] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 472.377952][ T24] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 472.406858][ T24] usb 3-1: device descriptor read/8, error -71 [ 472.474470][ T9] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 472.482960][ T9] (id 0x00) [ 472.534660][ T24] usb usb3-port1: unable to enumerate USB device [ 472.536395][ T9] rc_core: IR keymap rc-imon-pad not found [ 472.548754][ T9] Registered IR keymap rc-empty [ 472.553714][ T9] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 472.564874][ T9] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 472.675383][ T9] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 472.688675][ T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input51 [ 472.703373][ T9] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:90> initialized [ 472.864258][ T24] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 472.991784][T13143] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 473.034703][ T24] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 473.043350][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 473.054580][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 473.066502][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 473.074000][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 473.083594][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 473.094535][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 473.102116][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 473.111272][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 473.122240][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 473.129807][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 473.138753][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 473.149633][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 473.157532][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 473.166462][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 473.177738][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 473.185890][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 473.194954][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 473.205897][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 473.213361][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 473.222504][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 473.233576][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 473.241101][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 473.244396][ T9] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 473.254510][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 473.269475][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 473.278385][ T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 473.287851][ T24] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 473.296758][ T24] usb 5-1: Product: syz [ 473.300991][ T24] usb 5-1: Manufacturer: syz [ 473.306042][ T24] usb 5-1: SerialNumber: syz [ 473.312548][ T24] usb 5-1: config 0 descriptor?? [ 473.321269][ T24] yurex 5-1:0.0: USB YUREX device now attached to Yurex #1 [ 473.406638][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.419809][ T9] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 473.429174][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.437235][ T9] usb 4-1: Product: syz [ 473.441602][ T9] usb 4-1: Manufacturer: syz [ 473.446569][ T9] usb 4-1: SerialNumber: syz [ 473.453443][ T9] usb 4-1: config 0 descriptor?? [ 473.663489][T13143] syzkaller0: entered promiscuous mode [ 473.669190][T13143] syzkaller0: entered allmulticast mode [ 473.795706][ T5687] usb 4-1: USB disconnect, device number 124 [ 473.871601][T13148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2022'. [ 473.893664][T13148] macvlan2: entered allmulticast mode [ 473.899343][T13148] hsr0: entered allmulticast mode [ 473.906130][T13148] hsr_slave_0: entered allmulticast mode [ 473.917149][T13148] hsr_slave_1: entered allmulticast mode [ 473.922872][T13148] hsr0: entered promiscuous mode [ 473.943098][ T9] usb 1-1: USB disconnect, device number 90 [ 474.109133][T13152] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.116723][T13152] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.218248][T13152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.259910][ T1165] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.275647][ T1165] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.289917][ T1165] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.302447][ T1165] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.337942][T13155] netlink: 'syz.2.2025': attribute type 1 has an invalid length. [ 474.379096][T13155] batman_adv: batadv0: Adding interface: gretap1 [ 474.381044][T13159] input: syz1 as /devices/virtual/input/input52 [ 474.394092][T13155] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.433938][T13155] batman_adv: batadv0: Interface activated: gretap1 [ 474.600205][ T5695] usb 5-1: USB disconnect, device number 110 [ 474.626822][ T5695] yurex 5-1:0.0: USB YUREX #1 now disconnected [ 474.801000][T13168] syzkaller0: entered promiscuous mode [ 474.820208][T13168] syzkaller0: entered allmulticast mode [ 474.853972][T13170] syzkaller0: entered promiscuous mode [ 474.860074][T13170] syzkaller0: entered allmulticast mode [ 474.887866][T13174] syz.0.2031: vmalloc error: size 18446744073699066186, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 474.911547][T13174] CPU: 1 UID: 0 PID: 13174 Comm: syz.0.2031 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.911576][T13174] Tainted: [L]=SOFTLOCKUP [ 474.911583][T13174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 474.911594][T13174] Call Trace: [ 474.911602][T13174] [ 474.911609][T13174] dump_stack_lvl+0xe8/0x150 [ 474.911637][T13174] warn_alloc+0x249/0x340 [ 474.911664][T13174] ? __UNIQUE_ID_modinfo_13714+0x64b0c98b/0xffffffffffeca841 [ 474.911689][T13174] ? __pfx_warn_alloc+0x10/0x10 [ 474.911742][T13174] __vmalloc_node_range_noprof+0x132/0x1750 [ 474.911768][T13174] ? __mutex_trylock_common+0x158/0x260 [ 474.911794][T13174] ? __pfx___mutex_trylock_common+0x10/0x10 [ 474.911820][T13174] ? __UNIQUE_ID_modinfo_13714+0x64b0c98b/0xffffffffffeca841 [ 474.911842][T13174] ? trace_contention_end+0x3d/0x140 [ 474.911865][T13174] ? __mutex_lock+0x319/0x1550 [ 474.911895][T13174] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 474.911917][T13174] ? tomoyo_path_number_perm+0x219/0x630 [ 474.911938][T13174] ? dvb_demux_do_ioctl+0x320/0x540 [ 474.911963][T13174] ? __pfx___mutex_lock+0x10/0x10 [ 474.911984][T13174] ? __UNIQUE_ID_modinfo_13714+0x64b0c98b/0xffffffffffeca841 [ 474.912054][T13174] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 474.912081][T13174] vmalloc_noprof+0xb2/0xe0 [ 474.912104][T13174] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 474.912126][T13174] ? __UNIQUE_ID_modinfo_13714+0x64b0c98b/0xffffffffffeca841 [ 474.912148][T13174] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 474.912181][T13174] dvb_demux_do_ioctl+0x45d/0x540 [ 474.912201][T13174] ? __UNIQUE_ID_modinfo_13714+0x64b0c98b/0xffffffffffeca841 [ 474.912224][T13174] ? __UNIQUE_ID_modinfo_13714+0x64b0c98b/0xffffffffffeca841 [ 474.912244][T13174] dvb_usercopy+0x199/0x2e0 [ 474.912261][T13174] ? __UNIQUE_ID_modinfo_13714+0x64b0c98b/0xffffffffffeca841 [ 474.912283][T13174] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 474.912302][T13174] ? __pfx_dvb_usercopy+0x10/0x10 [ 474.912331][T13174] ? __fget_files+0x3a0/0x420 [ 474.912349][T13174] ? __fget_files+0x2a/0x420 [ 474.912368][T13174] ? __UNIQUE_ID_modinfo_13714+0x64b0c98b/0xffffffffffeca841 [ 474.912390][T13174] ? __UNIQUE_ID_modinfo_13714+0x64b0c98b/0xffffffffffeca841 [ 474.912409][T13174] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 474.912428][T13174] ? __UNIQUE_ID_modinfo_13714+0x64b0c98b/0xffffffffffeca841 [ 474.912448][T13174] dvb_demux_ioctl+0x29/0x40 [ 474.912469][T13174] __se_sys_ioctl+0xfc/0x170 [ 474.912492][T13174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.912510][T13174] do_syscall_64+0x15f/0xf80 [ 474.912530][T13174] ? trace_irq_disable+0x3b/0x140 [ 474.912554][T13174] ? clear_bhb_loop+0x40/0x90 [ 474.912574][T13174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.912591][T13174] RIP: 0033:0x7f6c5bd9cdd9 [ 474.912609][T13174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.912624][T13174] RSP: 002b:00007f6c5cbe2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 474.912642][T13174] RAX: ffffffffffffffda RBX: 00007f6c5c015fa0 RCX: 00007f6c5bd9cdd9 [ 474.912656][T13174] RDX: ffffffffff60014a RSI: 0000000000006f2d RDI: 0000000000000003 [ 474.912668][T13174] RBP: 00007f6c5be32d69 R08: 0000000000000000 R09: 0000000000000000 [ 474.912679][T13174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.912690][T13174] R13: 00007f6c5c016038 R14: 00007f6c5c015fa0 R15: 00007f6c5c13fa48 [ 474.912713][T13174] ? __UNIQUE_ID_modinfo_13714+0x64b0c98b/0xffffffffffeca841 [ 474.912740][T13174] [ 474.912770][T13174] Mem-Info: [ 475.266972][T13174] active_anon:7504 inactive_anon:0 isolated_anon:0 [ 475.266972][T13174] active_file:16647 inactive_file:40170 isolated_file:0 [ 475.266972][T13174] unevictable:768 dirty:195 writeback:0 [ 475.266972][T13174] slab_reclaimable:6776 slab_unreclaimable:114530 [ 475.266972][T13174] mapped:34002 shmem:1294 pagetables:1811 [ 475.266972][T13174] sec_pagetables:0 bounce:0 [ 475.266972][T13174] kernel_misc_reclaimable:0 [ 475.266972][T13174] free:1284812 free_pcp:9666 free_cma:0 [ 475.312624][T13174] Node 0 active_anon:30016kB inactive_anon:0kB active_file:66588kB inactive_file:160480kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136008kB dirty:780kB writeback:0kB shmem:3640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13736kB pagetables:7092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 475.348948][T13174] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 475.382175][T13174] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 475.414061][ T46] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 475.443253][T13174] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 475.460765][T13174] Node 0 DMA32 free:1175596kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29916kB inactive_anon:0kB active_file:66588kB inactive_file:160480kB unevictable:1536kB writepending:780kB zspages:0kB present:3129332kB managed:2552668kB mlocked:0kB bounce:0kB free_pcp:38960kB local_pcp:20720kB free_cma:0kB [ 475.518043][T13174] lowmem_reserve[]: 0 0 0 0 0 [ 475.524854][T13181] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2032'. [ 475.542286][T13174] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 475.571779][ T46] usb 4-1: device descriptor read/64, error -71 [ 475.579386][T13181] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2032'. [ 475.588607][T13174] lowmem_reserve[]: 0 0 0 0 0 [ 475.602426][T13174] Node 1 Normal free:3948292kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 475.649125][T13174] lowmem_reserve[]: 0 0 0 0 0 [ 475.653996][T13174] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 475.668397][T13174] Node 0 DMA32: 6531*4kB (UM) 3336*8kB (UME) 1987*16kB (UME) 427*32kB (UME) 252*64kB (UME) 230*128kB (UME) 151*256kB (UME) 36*512kB (UME) 38*1024kB (UME) 5*2048kB (UME) 226*4096kB (M) = 1175772kB [ 475.689514][T13174] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 475.704007][T13174] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 4*16kB (UM) 5*32kB (UM) 4*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 2*2048kB (UM) 962*4096kB (UM) = 3948292kB [ 475.723029][T13174] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 475.733063][T13174] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 475.742544][T13174] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 475.783288][T13174] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 475.814912][ T46] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 475.827629][T13174] 58102 total pagecache pages [ 475.840953][T13188] trusted_key: encrypted_key: insufficient parameters specified [ 475.849023][T13174] 0 pages in swap cache [ 475.853272][T13174] Free swap = 124996kB [ 475.861779][T13174] Total swap = 124996kB [ 475.903609][T13174] 2097051 pages RAM [ 475.908925][T13174] 0 pages HighMem/MovableOnly [ 475.913771][T13174] 427101 pages reserved [ 475.918240][T13174] 0 pages cma reserved [ 475.994431][ T46] usb 4-1: device descriptor read/64, error -71 [ 476.114663][ T46] usb usb4-port1: attempt power cycle [ 476.320004][T13208] : renamed from bond_slave_0 (while UP) [ 476.376168][T13212] bridge_slave_0 (unregistering): left allmulticast mode [ 476.394387][T13212] bridge_slave_0 (unregistering): left promiscuous mode [ 476.404643][T13212] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.474372][ T46] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 476.514876][ T46] usb 4-1: device descriptor read/8, error -71 [ 476.577365][T13215] program syz.0.2041 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 476.727449][T13217] syzkaller0: entered promiscuous mode [ 476.735298][T13217] syzkaller0: entered allmulticast mode [ 476.794861][ T46] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 476.834753][ T46] usb 4-1: device descriptor read/8, error -71 [ 476.902382][T13221] syzkaller0: entered promiscuous mode [ 476.915241][T13221] syzkaller0: entered allmulticast mode [ 476.942818][T13223] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2045'. [ 476.955768][T13223] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2045'. [ 476.974818][ T46] usb usb4-port1: unable to enumerate USB device [ 477.120298][T13226] Cannot find del_set index 4 as target [ 477.274254][T13235] fuse: Unknown parameter 'GLZ_h'wϱu-#W{(9΄Xp5jybRՈ]b6C9]' [ 477.458190][T13245] netlink: 'syz.6.2052': attribute type 10 has an invalid length. [ 477.525167][T13245] veth0_to_bond: entered allmulticast mode [ 477.535190][T13245] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 477.915864][T13255] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2055'. [ 477.931580][T13255] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.968535][T13255] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2055'. [ 477.994938][T13255] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.002115][T13255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.030479][T13255] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2055'. [ 478.049408][T13255] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.459003][T13270] binder: BINDER_SET_CONTEXT_MGR already set [ 478.466697][T13270] binder: 13269:13270 ioctl 4018620d 200000004a80 returned -16 [ 478.485400][T13267] syzkaller0: entered promiscuous mode [ 478.501136][T13267] syzkaller0: entered allmulticast mode [ 478.688332][ T29] audit: type=1326 audit(1777813117.275:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13276 comm="syz.4.2063" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f5099cdd9 code=0x0 [ 478.773249][T13279] openvswitch: netlink: Message has 1 unknown bytes. [ 478.783960][T13279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.910716][ T29] audit: type=1326 audit(1777813117.505:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.3.2069" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26c99cdd9 code=0x7ffc0000 [ 478.980284][ T29] audit: type=1326 audit(1777813117.535:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.3.2069" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff26c99cdd9 code=0x7ffc0000 [ 479.008533][T13293] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2069'. [ 479.047349][ T29] audit: type=1326 audit(1777813117.535:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.3.2069" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26c99cdd9 code=0x7ffc0000 [ 479.102562][ T29] audit: type=1326 audit(1777813117.535:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.3.2069" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26c99cdd9 code=0x7ffc0000 [ 479.154245][ T29] audit: type=1326 audit(1777813117.535:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.3.2069" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff26c99cdd9 code=0x7ffc0000 [ 479.484514][ T5695] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 479.638197][ T29] audit: type=1326 audit(1777813118.235:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.3.2069" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26c99cdd9 code=0x7ffc0000 [ 479.644334][ T5695] usb 3-1: Using ep0 maxpacket: 32 [ 479.709461][ T29] audit: type=1326 audit(1777813118.235:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.3.2069" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26c99cdd9 code=0x7ffc0000 [ 479.775529][ T5695] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 479.786718][ T5695] usb 3-1: config 0 has no interface number 0 [ 479.792870][ T5695] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 479.807336][ T5695] usb 3-1: config 0 interface 89 has no altsetting 0 [ 479.818889][ T5695] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 479.839602][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.848269][ T5695] usb 3-1: Product: syz [ 479.852736][ T5695] usb 3-1: Manufacturer: syz [ 479.870684][ T5695] usb 3-1: SerialNumber: syz [ 479.890153][ T5695] usb 3-1: config 0 descriptor?? [ 479.909341][ T5695] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 479.925723][ T5695] em28xx 3-1:0.89: Video interface 89 found: [ 480.501239][ T5695] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 480.637481][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 480.797485][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.808610][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 480.827166][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.841179][ T9] usb 4-1: config 0 descriptor?? [ 480.873145][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 481.146993][ T5695] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 481.179769][ T5695] em28xx 3-1:0.89: board has no eeprom [ 481.244280][ T5695] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 481.263382][ T5695] em28xx 3-1:0.89: analog set to bulk mode. [ 481.282235][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 481.290157][ T5702] em28xx 3-1:0.89: Registering V4L2 extension [ 481.315458][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 481.331404][ T5695] usb 3-1: USB disconnect, device number 124 [ 481.342888][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 481.351525][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 481.373158][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 481.385541][ T5695] em28xx 3-1:0.89: Disconnecting em28xx [ 481.399924][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 481.414133][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 481.428287][ T5702] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 481.435941][ T5702] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 481.445318][ T5702] em28xx 3-1:0.89: No AC97 audio processor [ 481.451660][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 481.463629][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 481.484707][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 481.503323][ T5702] usb 3-1: Decoder not found [ 481.518242][ T5702] em28xx 3-1:0.89: failed to create media graph [ 481.525577][ T5702] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 481.555937][ T5702] em28xx 3-1:0.89: Registering snapshot button... [ 481.602391][ T5702] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input54 [ 481.650488][ T5702] em28xx 3-1:0.89: Remote control support is not available for this card. [ 481.659362][ T5695] em28xx 3-1:0.89: Closing input extension [ 481.666958][ T5695] em28xx 3-1:0.89: Deregistering snapshot button [ 481.726169][ T46] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 481.738751][T13316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2076'. [ 481.805402][ T5695] em28xx 3-1:0.89: Freeing device [ 481.831536][T13350] binder: BINDER_SET_CONTEXT_MGR already set [ 481.853868][T13350] binder: 13349:13350 ioctl 4018620d 200000000100 returned -16 [ 481.883014][T13350] binder: BINDER_SET_CONTEXT_MGR already set [ 481.897711][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 481.909993][T13350] binder: 13349:13350 ioctl 4018620d 200000004a80 returned -16 [ 481.932340][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.932430][ T5702] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 481.968680][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.007659][ T46] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 482.031283][ T46] usb 5-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 482.039941][ T46] usb 5-1: Manufacturer: syz [ 482.042410][T13353] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2087'. [ 482.047905][ T46] usb 5-1: config 0 descriptor?? [ 482.066668][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 482.075861][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 482.082722][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 482.090460][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 482.098409][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 482.106988][ T9] pwc: Registered as video103. [ 482.116746][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input56 [ 482.145587][ T9] usb 4-1: USB disconnect, device number 3 [ 482.232199][T13356] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 482.246469][ T5695] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 482.258312][T13356] PKCS7: Only support pkcs7_signedData type [ 482.406396][ T5695] usb 3-1: unable to get BOS descriptor or descriptor too short [ 482.415823][ T5695] usb 3-1: not running at top speed; connect to a high speed hub [ 482.426971][ T5695] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 482.444626][ T5695] usb 3-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 482.455859][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.465930][ T5695] usb 3-1: Product: syz [ 482.474101][ T5695] usb 3-1: Manufacturer: syz [ 482.483052][ T5695] usb 3-1: SerialNumber: syz [ 482.716156][ T5695] qmi_wwan 3-1:251.0: probe with driver qmi_wwan failed with error -22 [ 482.779319][ T5695] usb 3-1: USB disconnect, device number 125 [ 483.197207][T13377] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2094'. [ 483.709664][T13395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.742887][T13395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.832497][T13398] syzkaller0: entered promiscuous mode [ 483.839442][T13398] syzkaller0: entered allmulticast mode [ 484.080197][T13408] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2105'. [ 484.183511][T13411] tap0: tun_chr_ioctl cmd 1074025692 [ 484.598387][ T46] usbhid 5-1:0.0: can't add hid device: -71 [ 484.631063][ T46] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 484.692931][ T46] usb 5-1: USB disconnect, device number 111 [ 484.755002][T13423] netlink: 211896 bytes leftover after parsing attributes in process `syz.4.2109'. [ 485.144272][ T5790] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 485.326122][ T5790] usb 1-1: Using ep0 maxpacket: 16 [ 485.351847][ T5790] usb 1-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=41.ba [ 485.387411][ T5790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.431326][ T5790] usb 1-1: Product: syz [ 485.454645][ T5790] usb 1-1: Manufacturer: syz [ 485.462632][ T5790] usb 1-1: SerialNumber: syz [ 485.492499][ T5790] usb 1-1: config 0 descriptor?? [ 485.719317][T13427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.761837][T13427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.828089][T13446] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2115'. [ 485.865194][ T5790] snd-usb-hiface 1-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 485.981563][T13449] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2116'. [ 485.998307][ T995] usb 1-1: USB disconnect, device number 93 [ 486.114042][T13451] SET target dimension over the limit! [ 486.311630][T13458] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 486.721804][T13475] netlink: 'syz.6.2123': attribute type 3 has an invalid length. [ 486.924272][ T5790] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 486.968815][T13471] netlink: 'syz.4.2121': attribute type 2 has an invalid length. [ 487.117044][ T5790] usb 1-1: Using ep0 maxpacket: 16 [ 487.126465][ T5790] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.150766][ T5790] usb 1-1: config 0 interface 0 has no altsetting 0 [ 487.167555][ T5790] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 487.198014][ T5790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.248200][ T5790] usb 1-1: config 0 descriptor?? [ 487.877919][T13479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.909561][T13479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.140302][ T5790] usbhid 1-1:0.0: can't add hid device: -71 [ 488.161146][ T5790] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 488.188577][ T5790] usb 1-1: USB disconnect, device number 94 [ 488.319288][T13491] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2128'. [ 488.642400][T13506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2132'. [ 488.732752][T13510] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2132'. [ 488.760656][T13511] netlink: 45 bytes leftover after parsing attributes in process `syz.4.2133'. [ 488.811325][T13512] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2133'. [ 488.821582][T13517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2132'. [ 488.862620][T13517] 8021q: adding VLAN 0 to HW filter on device bond6 [ 489.250429][T13532] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2140'. [ 489.492676][ T29] audit: type=1326 audit(1777813128.085:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13536 comm="syz.6.2142" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca7f9cdd9 code=0x7ffc0000 [ 489.609020][ T29] audit: type=1326 audit(1777813128.115:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13536 comm="syz.6.2142" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca7f9cdd9 code=0x7ffc0000 [ 489.759115][ T29] audit: type=1326 audit(1777813128.125:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13536 comm="syz.6.2142" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f8ca7f9cdd9 code=0x7ffc0000 [ 489.899907][ T29] audit: type=1326 audit(1777813128.125:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13536 comm="syz.6.2142" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca7f9cdd9 code=0x7ffc0000 [ 489.948193][ T29] audit: type=1326 audit(1777813128.125:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13536 comm="syz.6.2142" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f8ca7f9cdd9 code=0x7ffc0000 [ 490.050885][T13552] syzkaller0: entered promiscuous mode [ 490.058271][T13552] syzkaller0: entered allmulticast mode [ 490.175657][T13558] tipc: Failed to remove unknown binding: 66,1,1/4210685498:4200796909/4200796911 [ 490.217204][T13560] tipc: Enabled bearer , priority 0 [ 490.261766][ T29] audit: type=1326 audit(1777813128.855:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13536 comm="syz.6.2142" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca7f9cdd9 code=0x7ffc0000 [ 490.331890][T13560] tipc: Resetting bearer [ 490.363071][ T29] audit: type=1326 audit(1777813128.885:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13536 comm="syz.6.2142" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca7f9cdd9 code=0x7ffc0000 [ 490.700859][T13549] tipc: Resetting bearer [ 490.775974][T13549] tipc: Disabling bearer [ 490.871789][T13570] [ 490.874130][T13570] ===================================================== [ 490.881041][T13570] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 490.888483][T13570] syzkaller #0 Tainted: G L [ 490.894437][T13570] ----------------------------------------------------- [ 490.901342][T13570] syz.6.2147/13570 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 490.909040][T13570] ffffffff8e60a058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 490.917712][T13570] [ 490.917712][T13570] and this task is already holding: [ 490.925053][T13570] ffff8880276f7ca0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 490.933755][T13570] which would create a new lock dependency: [ 490.939627][T13570] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 490.947210][T13570] [ 490.947210][T13570] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 490.956657][T13570] (&dev->event_lock#2){..-.}-{3:3} [ 490.956679][T13570] [ 490.956679][T13570] ... which became SOFTIRQ-irq-safe at: [ 490.969530][T13570] lock_acquire+0x106/0x350 [ 490.974103][T13570] _raw_spin_lock_irqsave+0x40/0x60 [ 490.979367][T13570] input_inject_event+0xa4/0x330 [ 490.984378][T13570] led_trigger_event+0x138/0x210 [ 490.989418][T13570] kbd_bh+0x1c6/0x2e0 [ 490.993470][T13570] tasklet_action_common+0x2da/0x4b0 [ 490.998832][T13570] handle_softirqs+0x22a/0x840 [ 491.003666][T13570] __irq_exit_rcu+0xca/0x220 [ 491.008325][T13570] irq_exit_rcu+0x9/0x30 [ 491.012633][T13570] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 491.018333][T13570] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 491.024378][T13570] _raw_spin_unlock_irqrestore+0x47/0x80 [ 491.030075][T13570] do_con_write+0x45ad/0x58f0 [ 491.034818][T13570] con_write+0x27/0x290 [ 491.039038][T13570] n_tty_write+0xd4f/0x1220 [ 491.043628][T13570] file_tty_write+0x558/0xa10 [ 491.048372][T13570] vfs_write+0x61d/0xb90 [ 491.052685][T13570] ksys_write+0x150/0x270 [ 491.057089][T13570] do_syscall_64+0x15f/0xf80 [ 491.061753][T13570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.067712][T13570] [ 491.067712][T13570] to a SOFTIRQ-irq-unsafe lock: [ 491.074708][T13570] (tasklist_lock){.+.+}-{3:3} [ 491.074726][T13570] [ 491.074726][T13570] ... which became SOFTIRQ-irq-unsafe at: [ 491.087335][T13570] ... [ 491.087342][T13570] lock_acquire+0x106/0x350 [ 491.094469][T13570] _raw_read_lock+0x36/0x50 [ 491.099040][T13570] __do_wait+0xde/0x740 [ 491.103268][T13570] do_wait+0x1e7/0x510 [ 491.107406][T13570] kernel_wait+0xd6/0x1c0 [ 491.111800][T13570] call_usermodehelper_exec_work+0xbe/0x230 [ 491.117762][T13570] process_scheduled_works+0xb5d/0x1860 [ 491.123374][T13570] worker_thread+0xa53/0xfc0 [ 491.128028][T13570] kthread+0x388/0x470 [ 491.132193][T13570] ret_from_fork+0x514/0xb70 [ 491.136857][T13570] ret_from_fork_asm+0x1a/0x30 [ 491.141688][T13570] [ 491.141688][T13570] other info that might help us debug this: [ 491.141688][T13570] [ 491.151899][T13570] Chain exists of: [ 491.151899][T13570] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 491.151899][T13570] [ 491.164906][T13570] Possible interrupt unsafe locking scenario: [ 491.164906][T13570] [ 491.173200][T13570] CPU0 CPU1 [ 491.178543][T13570] ---- ---- [ 491.183883][T13570] lock(tasklist_lock); [ 491.188109][T13570] local_irq_disable(); [ 491.194848][T13570] lock(&dev->event_lock#2); [ 491.202026][T13570] lock(&f_owner->lock); [ 491.208854][T13570] [ 491.212285][T13570] lock(&dev->event_lock#2); [ 491.217114][T13570] [ 491.217114][T13570] *** DEADLOCK *** [ 491.217114][T13570] [ 491.225235][T13570] 2 locks held by syz.6.2147/13570: [ 491.230423][T13570] #0: ffff8880519eb9d0 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b6/0x4f0 [ 491.238918][T13570] #1: ffff8880276f7ca0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 491.248022][T13570] [ 491.248022][T13570] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 491.258429][T13570] -> (&dev->event_lock#2){..-.}-{3:3} { [ 491.264240][T13570] IN-SOFTIRQ-W at: [ 491.268466][T13570] lock_acquire+0x106/0x350 [ 491.275124][T13570] _raw_spin_lock_irqsave+0x40/0x60 [ 491.282474][T13570] input_inject_event+0xa4/0x330 [ 491.289563][T13570] led_trigger_event+0x138/0x210 [ 491.296655][T13570] kbd_bh+0x1c6/0x2e0 [ 491.302798][T13570] tasklet_action_common+0x2da/0x4b0 [ 491.310244][T13570] handle_softirqs+0x22a/0x840 [ 491.317162][T13570] __irq_exit_rcu+0xca/0x220 [ 491.323904][T13570] irq_exit_rcu+0x9/0x30 [ 491.330294][T13570] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 491.338076][T13570] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 491.346203][T13570] _raw_spin_unlock_irqrestore+0x47/0x80 [ 491.353986][T13570] do_con_write+0x45ad/0x58f0 [ 491.360805][T13570] con_write+0x27/0x290 [ 491.367102][T13570] n_tty_write+0xd4f/0x1220 [ 491.373750][T13570] file_tty_write+0x558/0xa10 [ 491.380572][T13570] vfs_write+0x61d/0xb90 [ 491.386963][T13570] ksys_write+0x150/0x270 [ 491.393438][T13570] do_syscall_64+0x15f/0xf80 [ 491.400182][T13570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.408224][T13570] INITIAL USE at: [ 491.412356][T13570] lock_acquire+0x106/0x350 [ 491.418919][T13570] _raw_spin_lock_irqsave+0x40/0x60 [ 491.426175][T13570] input_inject_event+0xa4/0x330 [ 491.433196][T13570] kbd_led_trigger_activate+0xbc/0x100 [ 491.440727][T13570] led_trigger_set+0x535/0x960 [ 491.447558][T13570] led_trigger_set_default+0x260/0x2a0 [ 491.455079][T13570] led_classdev_register_ext+0x787/0x9c0 [ 491.462771][T13570] input_leds_connect+0x517/0x790 [ 491.469855][T13570] input_register_device+0xce0/0x1140 [ 491.477285][T13570] atkbd_connect+0x71e/0xa10 [ 491.483932][T13570] serio_driver_probe+0x82/0xb0 [ 491.490845][T13570] really_probe+0x267/0xaf0 [ 491.497410][T13570] __driver_probe_device+0x1ef/0x380 [ 491.504776][T13570] driver_probe_device+0x4f/0x240 [ 491.511859][T13570] __driver_attach+0x34c/0x640 [ 491.518681][T13570] bus_for_each_dev+0x23b/0x2c0 [ 491.525680][T13570] serio_handle_event+0x1af/0xf80 [ 491.532769][T13570] process_scheduled_works+0xb5d/0x1860 [ 491.540373][T13570] worker_thread+0xa53/0xfc0 [ 491.547028][T13570] kthread+0x388/0x470 [ 491.553161][T13570] ret_from_fork+0x514/0xb70 [ 491.559814][T13570] ret_from_fork_asm+0x1a/0x30 [ 491.566642][T13570] } [ 491.569378][T13570] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 491.578642][T13570] -> (&client->buffer_lock){....}-{3:3} { [ 491.584524][T13570] INITIAL USE at: [ 491.588571][T13570] lock_acquire+0x106/0x350 [ 491.594966][T13570] _raw_spin_lock+0x2e/0x40 [ 491.601357][T13570] evdev_pass_values+0xb9/0xbd0 [ 491.608096][T13570] evdev_events+0x1e6/0x340 [ 491.614500][T13570] input_pass_values+0x288/0x890 [ 491.621324][T13570] input_event_dispose+0x330/0x6b0 [ 491.628321][T13570] input_inject_event+0x1dc/0x330 [ 491.635252][T13570] evdev_write+0x325/0x4c0 [ 491.641559][T13570] vfs_write+0x29a/0xb90 [ 491.647692][T13570] ksys_write+0x150/0x270 [ 491.653910][T13570] do_syscall_64+0x15f/0xf80 [ 491.660389][T13570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.668171][T13570] } [ 491.670825][T13570] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 491.679126][T13570] ... acquired at: [ 491.683081][T13570] _raw_spin_lock+0x2e/0x40 [ 491.687786][T13570] evdev_pass_values+0xb9/0xbd0 [ 491.692795][T13570] evdev_events+0x1e6/0x340 [ 491.697450][T13570] input_pass_values+0x288/0x890 [ 491.702541][T13570] input_event_dispose+0x330/0x6b0 [ 491.707805][T13570] input_inject_event+0x1dc/0x330 [ 491.712981][T13570] evdev_write+0x325/0x4c0 [ 491.717550][T13570] vfs_write+0x29a/0xb90 [ 491.721943][T13570] ksys_write+0x150/0x270 [ 491.726424][T13570] do_syscall_64+0x15f/0xf80 [ 491.731166][T13570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.737214][T13570] [ 491.739525][T13570] -> (&new->fa_lock){....}-{3:3} { [ 491.744708][T13570] INITIAL USE at: [ 491.748664][T13570] lock_acquire+0x106/0x350 [ 491.754878][T13570] _raw_write_lock_irq+0x3d/0x50 [ 491.761526][T13570] fasync_remove_entry+0xf1/0x1c0 [ 491.768265][T13570] lease_modify+0x4f7/0x6c0 [ 491.774482][T13570] locks_remove_file+0x5f0/0xf70 [ 491.781131][T13570] __fput+0x3ae/0xa60 [ 491.786827][T13570] task_work_run+0x1d9/0x270 [ 491.793133][T13570] exit_to_user_mode_loop+0xed/0x480 [ 491.800141][T13570] do_syscall_64+0x33e/0xf80 [ 491.806463][T13570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.814077][T13570] INITIAL READ USE at: [ 491.818471][T13570] lock_acquire+0x106/0x350 [ 491.825126][T13570] _raw_read_lock_irqsave+0x48/0x60 [ 491.832480][T13570] kill_fasync+0x199/0x4d0 [ 491.839049][T13570] lease_break_callback+0x26/0x30 [ 491.846228][T13570] __break_lease+0x81f/0x1ea0 [ 491.853089][T13570] try_break_deleg+0xfc/0x180 [ 491.859931][T13570] notify_change+0xb5a/0xf40 [ 491.866677][T13570] do_truncate+0x1c2/0x250 [ 491.873245][T13570] path_openat+0x2f89/0x3860 [ 491.879983][T13570] do_file_open+0x23e/0x4a0 [ 491.886634][T13570] do_sys_openat2+0x113/0x200 [ 491.893463][T13570] __x64_sys_openat+0x138/0x170 [ 491.900484][T13570] do_syscall_64+0x15f/0xf80 [ 491.907225][T13570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.915277][T13570] } [ 491.917842][T13570] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 491.926577][T13570] ... acquired at: [ 491.930441][T13570] _raw_read_lock_irqsave+0x48/0x60 [ 491.935791][T13570] kill_fasync+0x199/0x4d0 [ 491.940359][T13570] evdev_pass_values+0x627/0xbd0 [ 491.945450][T13570] evdev_events+0x1e6/0x340 [ 491.950105][T13570] input_pass_values+0x288/0x890 [ 491.955197][T13570] input_event_dispose+0x330/0x6b0 [ 491.960456][T13570] input_inject_event+0x1dc/0x330 [ 491.965629][T13570] evdev_write+0x325/0x4c0 [ 491.970196][T13570] vfs_write+0x29a/0xb90 [ 491.974592][T13570] ksys_write+0x150/0x270 [ 491.979071][T13570] do_syscall_64+0x15f/0xf80 [ 491.983811][T13570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.989853][T13570] [ 491.992158][T13570] -> (&f_owner->lock){....}-{3:3} { [ 491.997343][T13570] INITIAL USE at: [ 492.001230][T13570] lock_acquire+0x106/0x350 [ 492.007278][T13570] _raw_write_lock_irq+0x3d/0x50 [ 492.013778][T13570] __f_setown+0x67/0x370 [ 492.019562][T13570] fcntl_dirnotify+0x3f9/0x6a0 [ 492.025862][T13570] do_fcntl+0x77e/0x1a20 [ 492.031645][T13570] __se_sys_fcntl+0xc8/0x150 [ 492.037792][T13570] do_syscall_64+0x15f/0xf80 [ 492.043930][T13570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.051359][T13570] INITIAL READ USE at: [ 492.055664][T13570] lock_acquire+0x106/0x350 [ 492.062140][T13570] _raw_read_lock_irqsave+0x48/0x60 [ 492.069309][T13570] send_sigio+0x38/0x370 [ 492.075529][T13570] kill_fasync+0x24d/0x4d0 [ 492.081920][T13570] lease_break_callback+0x26/0x30 [ 492.088924][T13570] __break_lease+0x81f/0x1ea0 [ 492.095583][T13570] try_break_deleg+0xfc/0x180 [ 492.102229][T13570] notify_change+0xb5a/0xf40 [ 492.108791][T13570] do_truncate+0x1c2/0x250 [ 492.115182][T13570] path_openat+0x2f89/0x3860 [ 492.121753][T13570] do_file_open+0x23e/0x4a0 [ 492.128236][T13570] do_sys_openat2+0x113/0x200 [ 492.134907][T13570] __x64_sys_openat+0x138/0x170 [ 492.141747][T13570] do_syscall_64+0x15f/0xf80 [ 492.148310][T13570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.156195][T13570] } [ 492.158669][T13570] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 492.167492][T13570] ... acquired at: [ 492.171288][T13570] _raw_read_lock_irqsave+0x48/0x60 [ 492.176646][T13570] send_sigio+0x38/0x370 [ 492.181057][T13570] kill_fasync+0x24d/0x4d0 [ 492.185633][T13570] lease_break_callback+0x26/0x30 [ 492.190819][T13570] __break_lease+0x81f/0x1ea0 [ 492.195650][T13570] try_break_deleg+0xfc/0x180 [ 492.200474][T13570] notify_change+0xb5a/0xf40 [ 492.205211][T13570] do_truncate+0x1c2/0x250 [ 492.209781][T13570] path_openat+0x2f89/0x3860 [ 492.214522][T13570] do_file_open+0x23e/0x4a0 [ 492.219175][T13570] do_sys_openat2+0x113/0x200 [ 492.223998][T13570] __x64_sys_openat+0x138/0x170 [ 492.228998][T13570] do_syscall_64+0x15f/0xf80 [ 492.233740][T13570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.239779][T13570] [ 492.242079][T13570] [ 492.242079][T13570] the dependencies between the lock to be acquired [ 492.242085][T13570] and SOFTIRQ-irq-unsafe lock: [ 492.255568][T13570] -> (tasklist_lock){.+.+}-{3:3} { [ 492.260666][T13570] HARDIRQ-ON-R at: [ 492.264621][T13570] lock_acquire+0x106/0x350 [ 492.270754][T13570] _raw_read_lock+0x36/0x50 [ 492.276888][T13570] __do_wait+0xde/0x740 [ 492.282669][T13570] do_wait+0x1e7/0x510 [ 492.288364][T13570] kernel_wait+0xd6/0x1c0 [ 492.294323][T13570] call_usermodehelper_exec_work+0xbe/0x230 [ 492.301844][T13570] process_scheduled_works+0xb5d/0x1860 [ 492.309013][T13570] worker_thread+0xa53/0xfc0 [ 492.315234][T13570] kthread+0x388/0x470 [ 492.320929][T13570] ret_from_fork+0x514/0xb70 [ 492.327144][T13570] ret_from_fork_asm+0x1a/0x30 [ 492.333533][T13570] SOFTIRQ-ON-R at: [ 492.337490][T13570] lock_acquire+0x106/0x350 [ 492.343620][T13570] _raw_read_lock+0x36/0x50 [ 492.349752][T13570] __do_wait+0xde/0x740 [ 492.355537][T13570] do_wait+0x1e7/0x510 [ 492.361233][T13570] kernel_wait+0xd6/0x1c0 [ 492.367191][T13570] call_usermodehelper_exec_work+0xbe/0x230 [ 492.374708][T13570] process_scheduled_works+0xb5d/0x1860 [ 492.381878][T13570] worker_thread+0xa53/0xfc0 [ 492.388092][T13570] kthread+0x388/0x470 [ 492.393793][T13570] ret_from_fork+0x514/0xb70 [ 492.400095][T13570] ret_from_fork_asm+0x1a/0x30 [ 492.406489][T13570] INITIAL USE at: [ 492.410359][T13570] lock_acquire+0x106/0x350 [ 492.416402][T13570] _raw_write_lock_irq+0x3d/0x50 [ 492.422920][T13570] copy_process+0x2b4c/0x4440 [ 492.429137][T13570] kernel_clone+0x284/0x8f0 [ 492.435181][T13570] user_mode_thread+0x110/0x180 [ 492.441572][T13570] rest_init+0x23/0x300 [ 492.447263][T13570] start_kernel+0x38a/0x3e0 [ 492.453307][T13570] x86_64_start_reservations+0x24/0x30 [ 492.460305][T13570] x86_64_start_kernel+0x143/0x1c0 [ 492.466954][T13570] common_startup_64+0x13e/0x147 [ 492.473434][T13570] INITIAL READ USE at: [ 492.477736][T13570] lock_acquire+0x106/0x350 [ 492.484217][T13570] _raw_read_lock+0x36/0x50 [ 492.490707][T13570] __do_wait+0xde/0x740 [ 492.496843][T13570] do_wait+0x1e7/0x510 [ 492.502885][T13570] kernel_wait+0xd6/0x1c0 [ 492.509187][T13570] call_usermodehelper_exec_work+0xbe/0x230 [ 492.517050][T13570] process_scheduled_works+0xb5d/0x1860 [ 492.524588][T13570] worker_thread+0xa53/0xfc0 [ 492.531150][T13570] kthread+0x388/0x470 [ 492.537191][T13570] ret_from_fork+0x514/0xb70 [ 492.543751][T13570] ret_from_fork_asm+0x1a/0x30 [ 492.550486][T13570] } [ 492.552961][T13570] ... key at: [] tasklist_lock+0x18/0x40 [ 492.560669][T13570] ... acquired at: [ 492.564449][T13570] _raw_read_lock+0x36/0x50 [ 492.569103][T13570] send_sigurg+0x12b/0x420 [ 492.573670][T13570] sk_send_sigurg+0x6c/0x2e0 [ 492.578405][T13570] queue_oob+0x42c/0x4f0 [ 492.582796][T13570] unix_stream_sendmsg+0xcb1/0xe80 [ 492.588066][T13570] ____sys_sendmsg+0x972/0x9f0 [ 492.592989][T13570] ___sys_sendmsg+0x2a5/0x360 [ 492.597814][T13570] __x64_sys_sendmsg+0x1bd/0x2a0 [ 492.602901][T13570] do_syscall_64+0x15f/0xf80 [ 492.607666][T13570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.613708][T13570] [ 492.616008][T13570] [ 492.616008][T13570] stack backtrace: [ 492.621872][T13570] CPU: 0 UID: 0 PID: 13570 Comm: syz.6.2147 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.621885][T13570] Tainted: [L]=SOFTLOCKUP [ 492.621889][T13570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 492.621895][T13570] Call Trace: [ 492.621901][T13570] [ 492.621905][T13570] dump_stack_lvl+0xe8/0x150 [ 492.621917][T13570] __lock_acquire+0x2a94/0x2cf0 [ 492.621932][T13570] ? send_sigurg+0x12b/0x420 [ 492.621943][T13570] lock_acquire+0x106/0x350 [ 492.621952][T13570] ? send_sigurg+0x12b/0x420 [ 492.621966][T13570] _raw_read_lock+0x36/0x50 [ 492.621976][T13570] ? send_sigurg+0x12b/0x420 [ 492.621987][T13570] send_sigurg+0x12b/0x420 [ 492.621999][T13570] sk_send_sigurg+0x6c/0x2e0 [ 492.622009][T13570] queue_oob+0x42c/0x4f0 [ 492.622019][T13570] ? __pfx_queue_oob+0x10/0x10 [ 492.622028][T13570] ? __schedule+0x17ca/0x5680 [ 492.622038][T13570] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 492.622052][T13570] unix_stream_sendmsg+0xcb1/0xe80 [ 492.622064][T13570] ? __lock_acquire+0x6b5/0x2cf0 [ 492.622073][T13570] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 492.622087][T13570] ? aa_sock_msg_perm+0xda/0x1b0 [ 492.622099][T13570] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 492.622111][T13570] ____sys_sendmsg+0x972/0x9f0 [ 492.622122][T13570] ? __might_fault+0xaf/0x130 [ 492.622134][T13570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 492.622147][T13570] ? import_iovec+0x73/0xa0 [ 492.622160][T13570] ___sys_sendmsg+0x2a5/0x360 [ 492.622171][T13570] ? __lock_acquire+0x6b5/0x2cf0 [ 492.622181][T13570] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.622193][T13570] ? futex_wait+0x2a2/0x390 [ 492.622211][T13570] ? __fget_files+0x2a/0x420 [ 492.622221][T13570] ? __fget_files+0x3a0/0x420 [ 492.622233][T13570] __x64_sys_sendmsg+0x1bd/0x2a0 [ 492.622244][T13570] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 492.622257][T13570] ? rcu_is_watching+0x15/0xb0 [ 492.622270][T13570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.622279][T13570] do_syscall_64+0x15f/0xf80 [ 492.622289][T13570] ? trace_irq_disable+0x3b/0x140 [ 492.622302][T13570] ? clear_bhb_loop+0x40/0x90 [ 492.622312][T13570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.622322][T13570] RIP: 0033:0x7f8ca7f9cdd9 [ 492.622332][T13570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.622340][T13570] RSP: 002b:00007f8ca8f0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.622352][T13570] RAX: ffffffffffffffda RBX: 00007f8ca8216090 RCX: 00007f8ca7f9cdd9 [ 492.622358][T13570] RDX: 00000000240408c1 RSI: 0000200000000080 RDI: 0000000000000005 [ 492.622365][T13570] RBP: 00007f8ca8032d69 R08: 0000000000000000 R09: 0000000000000000 [ 492.622371][T13570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.622376][T13570] R13: 00007f8ca8216128 R14: 00007f8ca8216090 R15: 00007f8ca833fa48 [ 492.622386][T13570]