last executing test programs: 14m54.914604473s ago: executing program 0 (id=1611): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705", @ANYBLOB=',rootmode=00000000000000000040000,u', @ANYBLOB=',group_id']) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40880, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f00e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd7", 0x3e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f8", 0x2d}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade", 0xac}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c4", 0x66}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b3", 0xb5}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14m53.366899515s ago: executing program 0 (id=1617): sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00", @ANYRES16=0x0, @ANYBLOB="010026bd7000fddbdf250c00000008000300", @ANYRES32=0x0, @ANYBLOB="6935ecba45743e53abe6ea79d516c7406da4f7d6286d875d39962660bd416a360e6fe2fc54ecc79ee3"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x8000) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 14m52.591920801s ago: executing program 0 (id=1619): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ptrace$pokeuser(0x6, 0x0, 0x358, 0x0) syz_open_procfs(0x0, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 14m51.108337152s ago: executing program 0 (id=1625): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 14m50.979845315s ago: executing program 0 (id=1626): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbba547ae160b3208004500001c0000000000029078ac1ede00ac146a42850ceeeb7406554a"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xe8902, 0x0) read$midi(r1, 0x0, 0x3b) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000380)='g', 0x1, 0x8812, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10122, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000500)=@generic={0x0}, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x4180, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x5fe7, 0x800, 0x5, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10000000, 0x146, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2, 0x3, 0x0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0) 14m50.800797659s ago: executing program 0 (id=1627): sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00", @ANYRES16=0x0, @ANYBLOB="010026bd7000fddbdf250c00000008000300", @ANYRES32=0x0, @ANYBLOB="6935ecba45743e53abe6ea79d516c7406da4f7d6286d875d39962660bd416a360e6fe2fc54ecc79ee3"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x8000) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 14m50.583713733s ago: executing program 32 (id=1627): sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00", @ANYRES16=0x0, @ANYBLOB="010026bd7000fddbdf250c00000008000300", @ANYRES32=0x0, @ANYBLOB="6935ecba45743e53abe6ea79d516c7406da4f7d6286d875d39962660bd416a360e6fe2fc54ecc79ee3"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x8000) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 14m36.307337071s ago: executing program 1 (id=1678): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40880, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d98", 0xd9}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f00e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd7", 0x3e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d", 0x30}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15", 0xad}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b3", 0xb5}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14m34.464840189s ago: executing program 1 (id=1684): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000014c0)=[{0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000001300)=ANY=[], 0x128}], 0x1, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000003c0), 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getpeername$inet6(r3, 0x0, &(0x7f0000000280)) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f00000001c0)=0xfffffffffffff801, 0x8) shutdown(r3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000400)={0x2d, "f70d397ad8b4d0057cafe0f60fe4aa8666ddc41ceec0884031115595e052d9aad0bb1f3e50fc3d844ecd66a3f018917d1a23f4206a03e540ca83e682107d1ba58c6a5687c8afe5840f643874fae6530eaba22103503e0420acd533aa26ce1e97b98c069b2485e7bda56151190e23fa952c8c2031884f0e7ee09167b52d3f3e70"}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)}, {0x0}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000000140)="f27f31ffd3e3f26180c9a9e3842113c1b608851802e00f960df1b4803198b2d8d51709d5cdbc2cc3106bb59e3db0f6ef6a95897cb2e83519418c4127fe69b061", 0x40}, {&(0x7f0000000580)}, {&(0x7f0000000100)="7940364f215ede0ad7b89d6ca283776aa513a17c0e8c6949d696019f12b92c063a5093f5a6680ae7149ad935b78f3b4f11756dbaa479ab848681b447a2f5b6", 0x3f}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000900)}], 0x2}}], 0x4, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)="334f4641c8c8d25c391f2416cfb48df8de725977c916d13de77bbe738b048aae317f0d060acc4df29a27d1276687bd29e9288426a6160349cb784977c228030098e6b4d6089a80ce2cc7e5aacd8dfe304af22ffec7ea5917996884b0be05d1af40a8a5ba0e03fc1880442bd504c7fc4d715a3799f1f5aa422c59b6b181f28477bc6c3fad0217f6519a41918d5b4f8059d2428e5783802d03691624d645d6485890edba6984263da5b2a7ea723a32a65add8a8b5379fd3b608325d935e522e9535cfad7b6d22004fff35b7f564b00", 0xce}, {&(0x7f0000000c40)="d520b340add9edabf79cd8c4d389aa560fa57a67343ad0689d1c0e7780f6023ba93124d10d5104b9fb7788987912fa06b3edd2d2fc3b185d7ba34472cf3da4bb4e49e916aa12857ab8406f86609830bbb0727be061e6858265ccf8147ddf976818d51f84e9252555d0fd331426213378024a97aea9aa749db4f62d7239233a8efd2f1c93fe7d702fd8630266707d05462c310285f21a1139febad5c81528ecbda7ca1db03910d310993b4e11d9", 0xad}], 0x2}}, {{&(0x7f0000000500)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000600)="252feb62b00bb5bdef3313dc215f8cc1fe658790414ad065fb8f0f107a2afca0b8ceca1e9e4e9a93663c7ccd13f21f80c3b4a968ecff7de21a54896e66deeda870c4a48324a9aea7c1ea23b29d74b4bdae2f5e836dd5a8399cf1dd4633133615b0d950474837bffc41d6f4076a284214a74a2b6c26a2ab19a05ee523b261c4d375d1454c704c8aa00a7b65f3edb7ae709912a6e677af2640f2a57731a1d1821ebe", 0xa1}, {&(0x7f0000000700)}], 0x2}}, {{&(0x7f0000000780)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000800)="624474d4acd89ca3c566eefe31587e1c42707dc829eaf65179fcde345d65b1d78a7242b5a91ce606a6bb9f4add0208250b830017d96c3dad031f2b860439da394d4f5851652dd9ff", 0x48}], 0x1, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x3, 0x8014) pipe2$watch_queue(&(0x7f00000004c0), 0x80) 14m33.350669103s ago: executing program 1 (id=1688): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0xa4}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) 14m31.543856521s ago: executing program 1 (id=1692): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 14m31.321221205s ago: executing program 1 (id=1694): io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, 0x0, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x45) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) clock_nanosleep(0x0, 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0xf, 0x6, 0x5) mmap(&(0x7f000022f000/0x3000)=nil, 0x3000, 0x300000b, 0x50, 0xffffffffffffffff, 0x8000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x4010000}], 0x0) 14m30.343903006s ago: executing program 1 (id=1698): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbba547ae160b3208004500001c0000000000029078ac1ede00ac146a42850ceeeb7406554a"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xe8902, 0x0) read$midi(r1, 0x0, 0x3b) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000380)='g', 0x1, 0x8812, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x10122, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000500)=@generic={0x0}, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x4180, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x5fe7, 0x800, 0x5, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10000000, 0x146, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2, 0x3, 0x0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0) 14m30.102354201s ago: executing program 33 (id=1698): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbba547ae160b3208004500001c0000000000029078ac1ede00ac146a42850ceeeb7406554a"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xe8902, 0x0) read$midi(r1, 0x0, 0x3b) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000380)='g', 0x1, 0x8812, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x10122, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000500)=@generic={0x0}, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x4180, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x5fe7, 0x800, 0x5, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10000000, 0x146, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2, 0x3, 0x0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0) 12m19.118350166s ago: executing program 2 (id=2109): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x11) ioctl$TIOCSCTTY(r0, 0x540e, 0x1) 12m17.041752859s ago: executing program 2 (id=2112): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit']) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f0000000000)='./file0\x00', 0xca) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r1, 0x0) 12m16.98487966s ago: executing program 4 (id=2114): r0 = socket$pptp(0x18, 0x1, 0x2) sendmmsg$inet(r0, 0x0, 0x0, 0x4008000) 12m16.830297394s ago: executing program 2 (id=2116): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ppoll(&(0x7f00000005c0)=[{}], 0x1, &(0x7f0000000600)={0x0, 0x3938700}, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 12m16.272154195s ago: executing program 4 (id=2118): socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) modify_ldt$write2(0x11, &(0x7f0000000000)={0xb1, 0xffffffffffffffff, 0x4000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x10001, 0xf, 0x4000000000000004, 0xa0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x5, 0xc59}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d69") ptrace$getregset(0x4205, r5, 0x1, &(0x7f00000000c0)={&(0x7f0000000000)=""/120, 0x78}) r6 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@dellinkprop={0x38, 0x6d, 0x2ec9b2c728e3c67, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41001, 0x2e804}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_to_hsr\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r9) syz_usb_disconnect(r6) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r9, 0x40107447, 0x0) ioctl$EVIOCSKEYCODE(r8, 0x40084504, &(0x7f0000000700)=[0x2a]) modify_ldt$write(0x1, &(0x7f0000000100)={0x3, 0x20001000, 0x1000, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) 12m15.915671043s ago: executing program 2 (id=2120): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, 0x0, 0x2000007ff) 12m15.898902703s ago: executing program 2 (id=2121): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @broadcast, @empty}, &(0x7f0000000280)=0xc) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) shutdown(r3, 0x0) accept4$bt_l2cap(r2, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000030000000000000000020000852000000300000018350000040000000000000000000000940000000000000018430000020000000000000000000000076f060003000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702df0008000000b7030000090000008500000006000000850000006e0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2554, 0xd9, &(0x7f0000000100)=""/217, 0x41000, 0x1b, '\x00', r1, 0x25, r0, 0x8, &(0x7f0000000480)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x8, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x12000000}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r5, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0x2516fe2a6eac4bfd}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000900)=[@text64={0x40, 0x0}], 0x1, 0x15, 0x0, 0x0) 12m15.695471297s ago: executing program 2 (id=2122): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000014c0)=[{0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000001300)=ANY=[], 0x128}], 0x1, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000003c0), 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getpeername$inet6(r3, 0x0, &(0x7f0000000280)) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f00000001c0)=0xfffffffffffff801, 0x8) shutdown(r3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000400)={0x2d, "f70d397ad8b4d0057cafe0f60fe4aa8666ddc41ceec0884031115595e052d9aad0bb1f3e50fc3d844ecd66a3f018917d1a23f4206a03e540ca83e682107d1ba58c6a5687c8afe5840f643874fae6530eaba22103503e0420acd533aa26ce1e97b98c069b2485e7bda56151190e23fa952c8c2031884f0e7ee09167b52d3f3e70"}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00', 0x1}, {0x0}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fbfd", 0x3}], 0x4}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)}, {0x0}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000000140)="f27f31ffd3e3f26180c9a9e3842113c1b608851802e00f960df1b4803198b2d8d51709d5cdbc2cc3106bb59e3db0f6ef6a95897cb2e83519418c4127fe69b061", 0x40}, {&(0x7f0000000580)}, {&(0x7f0000000100)="7940364f215ede0ad7b89d6ca283776aa513a17c0e8c6949d696019f12b92c063a5093f5a6680ae7149ad935b78f3b4f11756dbaa479ab848681b447a2f5b6", 0x3f}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000900)}], 0x2}}], 0x4, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)="334f4641c8c8d25c391f2416cfb48df8de725977c916d13de77bbe738b048aae317f0d060acc4df29a27d1276687bd29e9288426a6160349cb784977c228030098e6b4d6089a80ce2cc7e5aacd8dfe304af22ffec7ea5917996884b0be05d1af40a8a5ba0e03fc1880442bd504c7fc4d715a3799f1f5aa422c59b6b181f28477bc6c3fad0217f6519a41918d5b4f8059d2428e5783802d03691624d645d6485890edba6984263da5b2a7ea723a32a65add8a8b5379fd3b608325d935e522e9535cfad7b6d22004fff35b7f564b00", 0xce}, {&(0x7f0000000c40)="d520b340add9edabf79cd8c4d389aa560fa57a67343ad0689d1c0e7780f6023ba93124d10d5104b9fb7788987912fa06b3edd2d2fc3b185d7ba34472cf3da4bb4e49e916aa12857ab8406f86609830bbb0727be061e6858265ccf8147ddf976818d51f84e9252555d0fd331426213378024a97aea9aa749db4f62d7239233a8efd2f1c93fe7d702fd8630266707d05462c310285f21a1139febad5c81528ecbda7ca1db03910d310993b4e11d9", 0xad}], 0x2}}, {{&(0x7f0000000500)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000600)="252feb62b00bb5bdef3313dc215f8cc1fe658790414ad065fb8f0f107a2afca0b8ceca1e9e4e9a93663c7ccd13f21f80c3b4a968ecff7de21a54896e66deeda870c4a48324a9aea7c1ea23b29d74b4bdae2f5e836dd5a8399cf1dd4633133615b0d950474837bffc41d6f4076a284214a74a2b6c26a2ab19a05ee523b261c4d375d1454c704c8aa00a7b65f3edb7ae709912a6e677af2640f2a57731a1d1821ebe", 0xa1}, {&(0x7f0000000700)}], 0x2}}, {{&(0x7f0000000780)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000800)="624474d4acd89ca3c566eefe31587e1c42707dc829eaf65179fcde345d65b1d78a7242b5a91ce606a6bb9f4add0208250b830017d96c3dad031f2b860439da394d4f5851652dd9ff", 0x48}], 0x1, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x3, 0x8014) pipe2$watch_queue(&(0x7f00000004c0), 0x80) 12m15.402498223s ago: executing program 34 (id=2122): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000014c0)=[{0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000001300)=ANY=[], 0x128}], 0x1, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000003c0), 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getpeername$inet6(r3, 0x0, &(0x7f0000000280)) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f00000001c0)=0xfffffffffffff801, 0x8) shutdown(r3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000400)={0x2d, "f70d397ad8b4d0057cafe0f60fe4aa8666ddc41ceec0884031115595e052d9aad0bb1f3e50fc3d844ecd66a3f018917d1a23f4206a03e540ca83e682107d1ba58c6a5687c8afe5840f643874fae6530eaba22103503e0420acd533aa26ce1e97b98c069b2485e7bda56151190e23fa952c8c2031884f0e7ee09167b52d3f3e70"}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00', 0x1}, {0x0}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fbfd", 0x3}], 0x4}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)}, {0x0}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000000140)="f27f31ffd3e3f26180c9a9e3842113c1b608851802e00f960df1b4803198b2d8d51709d5cdbc2cc3106bb59e3db0f6ef6a95897cb2e83519418c4127fe69b061", 0x40}, {&(0x7f0000000580)}, {&(0x7f0000000100)="7940364f215ede0ad7b89d6ca283776aa513a17c0e8c6949d696019f12b92c063a5093f5a6680ae7149ad935b78f3b4f11756dbaa479ab848681b447a2f5b6", 0x3f}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000900)}], 0x2}}], 0x4, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)="334f4641c8c8d25c391f2416cfb48df8de725977c916d13de77bbe738b048aae317f0d060acc4df29a27d1276687bd29e9288426a6160349cb784977c228030098e6b4d6089a80ce2cc7e5aacd8dfe304af22ffec7ea5917996884b0be05d1af40a8a5ba0e03fc1880442bd504c7fc4d715a3799f1f5aa422c59b6b181f28477bc6c3fad0217f6519a41918d5b4f8059d2428e5783802d03691624d645d6485890edba6984263da5b2a7ea723a32a65add8a8b5379fd3b608325d935e522e9535cfad7b6d22004fff35b7f564b00", 0xce}, {&(0x7f0000000c40)="d520b340add9edabf79cd8c4d389aa560fa57a67343ad0689d1c0e7780f6023ba93124d10d5104b9fb7788987912fa06b3edd2d2fc3b185d7ba34472cf3da4bb4e49e916aa12857ab8406f86609830bbb0727be061e6858265ccf8147ddf976818d51f84e9252555d0fd331426213378024a97aea9aa749db4f62d7239233a8efd2f1c93fe7d702fd8630266707d05462c310285f21a1139febad5c81528ecbda7ca1db03910d310993b4e11d9", 0xad}], 0x2}}, {{&(0x7f0000000500)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000600)="252feb62b00bb5bdef3313dc215f8cc1fe658790414ad065fb8f0f107a2afca0b8ceca1e9e4e9a93663c7ccd13f21f80c3b4a968ecff7de21a54896e66deeda870c4a48324a9aea7c1ea23b29d74b4bdae2f5e836dd5a8399cf1dd4633133615b0d950474837bffc41d6f4076a284214a74a2b6c26a2ab19a05ee523b261c4d375d1454c704c8aa00a7b65f3edb7ae709912a6e677af2640f2a57731a1d1821ebe", 0xa1}, {&(0x7f0000000700)}], 0x2}}, {{&(0x7f0000000780)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000800)="624474d4acd89ca3c566eefe31587e1c42707dc829eaf65179fcde345d65b1d78a7242b5a91ce606a6bb9f4add0208250b830017d96c3dad031f2b860439da394d4f5851652dd9ff", 0x48}], 0x1, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x3, 0x8014) pipe2$watch_queue(&(0x7f00000004c0), 0x80) 12m14.11186858s ago: executing program 4 (id=2128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) socket$nl_netfilter(0x10, 0x3, 0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x215, 0x2}, 0x9, 0xffffffff, 0x7, 0x9, r1, r1, 0x4}) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x2, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002ef0afb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) syz_open_procfs(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001ac0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, r0}, 0x68) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x100, 0x80000003, 0x2, 0xc, 0xfffffffe, 0x5, 0x79, 0x1, 0x1, 0x0, 0x40, 0x1, 0x7, 0x1, 0x2, 0xfd, 0xfffffffb, 0xd, 0x5, 0x80000000, 0x8, 0x5, 0x0, 0x20001e58, 0xffffffff, 0xf3a2, 0x3, 0x80000008, 0xa6b5, 0x24a05ffd, 0xffffffff]}) 12m13.012568283s ago: executing program 4 (id=2129): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, 0x0, 0x2000007ff) 12m12.806605838s ago: executing program 4 (id=2132): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @broadcast, @empty}, &(0x7f0000000280)=0xc) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) shutdown(r3, 0x0) accept4$bt_l2cap(r2, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000030000000000000000020000852000000300000018350000040000000000000000000000940000000000000018430000020000000000000000000000076f060003000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702df0008000000b7030000090000008500000006000000850000006e0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2554, 0xd9, &(0x7f0000000100)=""/217, 0x41000, 0x1b, '\x00', r1, 0x25, r0, 0x8, &(0x7f0000000480)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x8, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x12000000}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r6, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0x2516fe2a6eac4bfd}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3c86dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aaff"], 0x0) 12m12.525818893s ago: executing program 4 (id=2134): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x11) ioctl$TIOCSCTTY(r0, 0x540e, 0x1) 12m12.21786594s ago: executing program 35 (id=2134): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x11) ioctl$TIOCSCTTY(r0, 0x540e, 0x1) 7.567739448s ago: executing program 7 (id=4283): r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x80000010}) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xb}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r4, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) 5.915404023s ago: executing program 7 (id=4284): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB=',rootmode=00000000000000000040000,u', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40880, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d98", 0xd9}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f00e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{0x0}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d", 0x30}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15", 0xad}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b3", 0xb5}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.795405555s ago: executing program 5 (id=4286): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 5.758158627s ago: executing program 6 (id=4287): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4c04, 0x6, @dev={0xfe, 0x80, '\x00', 0x35}, 0x22}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) 5.555618751s ago: executing program 6 (id=4289): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB=',rootmode=00000000000000000040000,u', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40880, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d98", 0xd9}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f00e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6", 0x3b}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f8", 0x2d}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15", 0xad}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c4", 0x66}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b3", 0xb5}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.334935116s ago: executing program 6 (id=4290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) 4.833966136s ago: executing program 7 (id=4292): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) io_submit(r3, 0x1, &(0x7f0000001040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x4, r4, 0x0, 0x0, 0x6}]) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet(r5, &(0x7f0000004d00), 0x0, 0xf00) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.783777237s ago: executing program 5 (id=4293): readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x3, 0x2}}, 0x26) mkdirat(0xffffffffffffff9c, 0x0, 0x82) r1 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='mounts\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000240)={0x40000011}) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) lremovexattr(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000500)=@known='trusted.overlay.nlink\x00') r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 4.62980432s ago: executing program 5 (id=4296): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001ac0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) r4 = openat$comedi(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x100, 0x80000003, 0x2, 0xc, 0xfffffffe, 0x5, 0x79, 0x1, 0x1, 0x0, 0x40, 0x1, 0x7, 0x1, 0x2, 0xfd, 0xfffffffb, 0xd, 0x5, 0x80000000, 0x8, 0x5, 0x0, 0x20001e58, 0xffffffff, 0xf3a2, 0x3, 0x80000008, 0xa6b5, 0x24a05ffd, 0xffffffff]}) 4.20826265s ago: executing program 3 (id=4297): readv(0xffffffffffffffff, &(0x7f00000002c0), 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x9, 0x1000}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) mq_open(&(0x7f00000007c0)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x8a\xe0U\xbc%\x05%\xfei\x96\xb0\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\x96yU\x9c\x0f\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V', 0x83, 0x10, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps\x00') r2 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13100}, &(0x7f0000000240), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x21, &(0x7f0000000440), 0x1) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009942, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) 3.551633253s ago: executing program 3 (id=4298): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB=',rootmode=00000000000000000040000,u', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40880, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d98", 0xd9}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f00e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6", 0x3b}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b", 0x2f}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15", 0xad}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c4", 0x66}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b3", 0xb5}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.25614533s ago: executing program 3 (id=4299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0x3, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xffff}}}]}, 0x38}}, 0x4000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2.875661648s ago: executing program 5 (id=4300): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB=',rootmode=00000000000000000040000,u', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40880, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d98", 0xd9}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f00e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{0x0}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d", 0x30}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15", 0xad}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b3", 0xb5}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.875247738s ago: executing program 7 (id=4301): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) syz_emit_ethernet(0x3c, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x48810) recvmsg(0xffffffffffffffff, 0x0, 0x20) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="410404", @ANYRESDEC], 0x7) 2.834683689s ago: executing program 3 (id=4302): r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000040)=[{0x4, 0x7fff, 0x800}, {0x4, 0x70, 0x800}], 0x2) chmod(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000200), 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x88400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0400000004000100040000000500010018000000", @ANYRES32=r3, @ANYBLOB, @ANYRES32, @ANYBLOB="000000000100"/21], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f00000000c0), 0x0, 0x36) r6 = dup(r4) write$UHID_INPUT(r6, 0x0, 0x0) lstat(0x0, 0x0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r7, &(0x7f0000001180)=""/4096, 0x1000) 2.78995587s ago: executing program 5 (id=4303): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.319896941s ago: executing program 7 (id=4304): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.313508922s ago: executing program 6 (id=4305): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705", @ANYBLOB=',rootmode=00000000000000000040000,u', @ANYBLOB=',group_id']) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40880, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f00e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd7", 0x3e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f8", 0x2d}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc291", 0x81}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c4", 0x66}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b3", 0xb5}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.280451032s ago: executing program 5 (id=4306): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff00000000000040001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@ifindex, 0x2e, 0x1, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0]}, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000005c0)={0x1}, 0x8) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcf, 0xcf, 0x7, [@ptr={0x6, 0x0, 0x0, 0x2, 0x5}, @datasec={0xb, 0x4, 0x0, 0xf, 0x3, [{0x1, 0x1, 0x10}, {0x5, 0x0, 0xd929}, {0x3, 0x5c6, 0x8}, {0x2, 0xfffff000, 0x1}], "7bd9b1"}, @enum={0xe, 0x2, 0x0, 0x6, 0x4, [{0xc, 0xfffffffb}, {0x10}]}, @union={0xd, 0x4, 0x0, 0x5, 0x0, 0x8, [{0x5, 0x4, 0x9ad3}, {0x8, 0x4}, {0x6, 0x80, 0x30}, {0x1, 0x0, 0x4}]}, @var={0x4, 0x0, 0x0, 0xe, 0x2}, @float={0x20c}, @var={0x4, 0x0, 0x0, 0xe, 0x1, 0x1}]}, {0x0, [0x5f, 0x1e, 0x30, 0x61, 0x61]}}, &(0x7f00000008c0), 0xef, 0x0, 0x1, 0x1090800}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) 1.205655904s ago: executing program 3 (id=4307): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB=',rootmode=00000000000000000040000,u', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40880, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d98", 0xd9}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f00e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6", 0x3b}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b", 0x2f}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15", 0xad}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c4", 0x66}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b3", 0xb5}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.135714195s ago: executing program 7 (id=4308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xf}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4850) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 294.331083ms ago: executing program 3 (id=4309): r0 = io_uring_setup(0x17ce, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x18, 0x301, 0x270bd24, 0x25dfdbfa, {0x13}}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, 0x0, 0x0, &(0x7f00002ce000/0x1000)=nil, 0x1000, 0x1020800}) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {&(0x7f0000000340)="2009f5", 0x3}], 0x2) 195.508815ms ago: executing program 6 (id=4310): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) 0s ago: executing program 6 (id=4311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000001c00)=r2) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ] type 1 family 0 port 8472 - 0 [ 1202.272954][T18007] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1202.281798][T18007] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1202.386900][T18007] netlink: 'syz.3.3101': attribute type 7 has an invalid length. [ 1203.331431][T18023] syzkaller0: entered promiscuous mode [ 1203.337299][T18023] syzkaller0: entered allmulticast mode [ 1204.553205][T18042] xt_hashlimit: size too large, truncated to 1048576 [ 1204.759480][T15595] pwc: send_video_command error -71 [ 1204.764800][T15595] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1204.805499][T15595] Philips webcam: probe of 8-1:0.0 failed with error -71 [ 1204.883002][T15595] usb 8-1: USB disconnect, device number 28 [ 1205.225495][T18050] netlink: 'syz.3.3113': attribute type 7 has an invalid length. [ 1205.235120][T18050] netlink: 'syz.3.3113': attribute type 7 has an invalid length. [ 1205.392931][T18055] syzkaller0: entered promiscuous mode [ 1205.398640][T18055] syzkaller0: entered allmulticast mode [ 1205.614049][T18064] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3117'. [ 1206.089127][ T6405] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1206.281228][T16516] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1206.301879][ T6405] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.322093][ T6405] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1206.331571][ T6405] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.343956][ T6405] usb 4-1: config 0 descriptor?? [ 1206.354731][ T6405] pwc: Askey VC010 type 2 USB webcam detected. [ 1206.535750][T18085] netlink: 'syz.7.3123': attribute type 7 has an invalid length. [ 1206.544031][T18085] netlink: 'syz.7.3123': attribute type 7 has an invalid length. [ 1208.225718][T18095] syzkaller0: entered promiscuous mode [ 1208.232321][T18095] syzkaller0: entered allmulticast mode [ 1208.723556][T18098] xt_hashlimit: size too large, truncated to 1048576 [ 1209.052306][ T6405] pwc: send_video_command error -71 [ 1209.057561][ T6405] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1209.189230][ T6405] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 1209.217200][ T6405] usb 4-1: USB disconnect, device number 83 [ 1209.284323][T18103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3128'. [ 1209.484732][T16516] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 1209.566405][T18110] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3130'. [ 1209.582368][T18110] netlink: 'syz.6.3130': attribute type 30 has an invalid length. [ 1209.689869][T18109] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3130'. [ 1209.698826][T18109] netlink: 'syz.6.3130': attribute type 30 has an invalid length. [ 1210.069618][T18120] netlink: 'syz.6.3132': attribute type 7 has an invalid length. [ 1210.077736][T18120] netlink: 'syz.6.3132': attribute type 7 has an invalid length. [ 1210.259340][T12179] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1210.292563][T18122] syzkaller1: entered promiscuous mode [ 1210.298185][T18122] syzkaller1: entered allmulticast mode [ 1210.404117][ T5782] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1210.491624][T12179] usb 4-1: Using ep0 maxpacket: 32 [ 1210.541451][T12179] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.566987][T12179] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x1 has invalid maxpacket 1041, setting to 1024 [ 1210.579885][T12179] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1210.589409][T12179] usb 4-1: config 1 interface 2 has no altsetting 0 [ 1210.599886][T12179] usb 4-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 1210.608965][T12179] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.627361][T12179] usb 4-1: Product: syz [ 1210.659474][T12179] usb 4-1: Manufacturer: syz [ 1210.678512][T12179] usb 4-1: SerialNumber: syz [ 1210.766061][T18132] syzkaller0: entered promiscuous mode [ 1210.772371][T18132] syzkaller0: entered allmulticast mode [ 1211.254030][T12179] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1211.286931][T12179] usb 4-1: selecting invalid altsetting 0 [ 1211.392565][T11750] Bluetooth: hci1: command 0x0406 tx timeout [ 1211.782176][T12179] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 1211.800449][T12179] usb 4-1: USB disconnect, device number 84 [ 1211.860419][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1212.166412][T18143] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3139'. [ 1212.504388][ T5782] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 1212.509188][T18150] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3140'. [ 1212.522863][T18150] netlink: 'syz.7.3140': attribute type 30 has an invalid length. [ 1212.659217][T18150] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3140'. [ 1212.671147][T18150] netlink: 'syz.7.3140': attribute type 30 has an invalid length. [ 1213.001084][T17811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1213.053250][T18152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1213.823981][T17811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1213.846003][T18151] netlink: 'syz.6.3141': attribute type 7 has an invalid length. [ 1213.878180][T18151] netlink: 'syz.6.3141': attribute type 7 has an invalid length. [ 1213.962245][T18156] syzkaller0: entered promiscuous mode [ 1213.967927][T18156] syzkaller0: entered allmulticast mode [ 1214.611290][T18163] xt_hashlimit: size too large, truncated to 1048576 [ 1214.681653][ T1062] block nbd7: Possible stuck request ffff8880221a0000: control (read@0,1024B). Runtime 180 seconds [ 1214.692548][ T1062] block nbd7: Possible stuck request ffff888022198000: control (read@1024,3072B). Runtime 180 seconds [ 1214.797204][T18170] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3148'. [ 1215.939445][T16516] Bluetooth: hci0: command 0x040f tx timeout [ 1216.119521][ T5782] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 1216.589344][T18185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3151'. [ 1216.710680][T18185] netlink: 'syz.5.3151': attribute type 30 has an invalid length. [ 1216.800122][T18185] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1216.808889][T18185] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1216.817672][T18185] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1216.826378][T18185] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1216.920611][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3151'. [ 1216.979225][T18186] netlink: 'syz.5.3151': attribute type 30 has an invalid length. [ 1217.001378][T18190] netlink: 'syz.7.3154': attribute type 7 has an invalid length. [ 1217.024601][T18190] netlink: 'syz.7.3154': attribute type 7 has an invalid length. [ 1217.225543][T18193] tc action pedit offset must be on 32 bit boundaries [ 1217.232789][T18193] tc action pedit offset must be on 32 bit boundaries [ 1217.239639][T18193] tc action pedit offset must be on 32 bit boundaries [ 1217.246436][T18193] tc action pedit offset must be on 32 bit boundaries [ 1217.253216][T18193] tc action pedit offset must be on 32 bit boundaries [ 1217.260010][T18193] tc action pedit offset must be on 32 bit boundaries [ 1217.266759][T18193] tc action pedit offset must be on 32 bit boundaries [ 1217.273532][T18193] tc action pedit offset must be on 32 bit boundaries [ 1217.280293][T18193] tc action pedit offset must be on 32 bit boundaries [ 1217.287033][T18193] tc action pedit offset must be on 32 bit boundaries [ 1217.293816][T18193] 0: reclassify loop, rule prio 0, protocol 800 [ 1217.319846][T18196] tmpfs: Unknown parameter 'grpquota2' [ 1217.339624][T18194] syzkaller0: entered promiscuous mode [ 1217.358348][T18194] syzkaller0: entered allmulticast mode [ 1217.527359][T18199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3158'. [ 1217.707228][ T5782] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1218.054534][T18206] netlink: 'syz.3.3160': attribute type 1 has an invalid length. [ 1219.103498][ T5782] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 1219.517657][T18218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3163'. [ 1219.526806][T18218] netlink: 'syz.3.3163': attribute type 30 has an invalid length. [ 1219.546471][T18218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3163'. [ 1219.555662][T18218] netlink: 'syz.3.3163': attribute type 30 has an invalid length. [ 1219.796157][T18223] netlink: 'syz.6.3165': attribute type 7 has an invalid length. [ 1219.841564][T18223] netlink: 'syz.6.3165': attribute type 7 has an invalid length. [ 1219.935028][T18225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3166'. [ 1220.071889][T18227] syzkaller0: entered promiscuous mode [ 1220.077628][T18227] syzkaller0: entered allmulticast mode [ 1220.423980][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 1220.794687][T18239] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3171'. [ 1221.451252][T16516] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 1221.459592][T16703] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1221.894231][T16703] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.988558][T16703] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1222.069047][T16703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.116337][T16703] usb 4-1: config 0 descriptor?? [ 1222.142129][T16703] pwc: Askey VC010 type 2 USB webcam detected. [ 1222.286017][T18249] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3174'. [ 1222.295134][T18249] netlink: 'syz.7.3174': attribute type 30 has an invalid length. [ 1222.307187][T18253] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3174'. [ 1222.317136][T18253] netlink: 'syz.7.3174': attribute type 30 has an invalid length. [ 1222.339357][T18259] netlink: 'syz.6.3176': attribute type 7 has an invalid length. [ 1222.377683][T18259] netlink: 'syz.6.3176': attribute type 7 has an invalid length. [ 1223.837290][ T1062] block nbd3: Possible stuck request ffff888021f70000: control (read@0,1024B). Runtime 270 seconds [ 1223.848272][ T1062] block nbd3: Possible stuck request ffff888021f70200: control (read@1024,3072B). Runtime 270 seconds [ 1225.069084][T16703] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1225.101867][T16703] pwc: recv_control_msg error -71 req 02 val 2700 [ 1225.139165][T16703] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1225.208076][T16703] pwc: recv_control_msg error -71 req 04 val 1000 [ 1225.268407][T16703] pwc: recv_control_msg error -71 req 04 val 1300 [ 1225.401059][T16703] pwc: recv_control_msg error -71 req 04 val 1400 [ 1225.464498][T16703] pwc: recv_control_msg error -71 req 02 val 2000 [ 1225.557165][T16703] pwc: recv_control_msg error -71 req 02 val 2100 [ 1225.566717][T16703] pwc: recv_control_msg error -71 req 04 val 1500 [ 1225.577177][T16703] pwc: recv_control_msg error -71 req 02 val 2500 [ 1225.586676][T16703] pwc: recv_control_msg error -71 req 02 val 2400 [ 1225.598748][T16703] pwc: recv_control_msg error -71 req 02 val 2600 [ 1225.622639][T18290] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3183'. [ 1225.645020][T16703] pwc: recv_control_msg error -71 req 02 val 2900 [ 1225.755301][T16703] pwc: recv_control_msg error -71 req 02 val 2800 [ 1225.809917][T16703] pwc: recv_control_msg error -71 req 04 val 1100 [ 1225.827268][T16703] pwc: recv_control_msg error -71 req 04 val 1200 [ 1225.845132][T16703] pwc: Registered as video103. [ 1226.040168][T16703] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input70 [ 1226.109381][T16703] usb 4-1: USB disconnect, device number 85 [ 1226.315593][T16516] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 1226.777962][T18304] netlink: 'syz.3.3187': attribute type 7 has an invalid length. [ 1226.812926][T18299] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3186'. [ 1226.822053][T18299] netlink: 'syz.7.3186': attribute type 30 has an invalid length. [ 1226.830564][T18299] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3186'. [ 1226.839474][T18299] netlink: 'syz.7.3186': attribute type 30 has an invalid length. [ 1226.861306][T18304] netlink: 'syz.3.3187': attribute type 7 has an invalid length. [ 1227.593051][T16703] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1227.885060][T16703] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.955707][T16703] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1227.979070][T16703] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.992320][T18321] bridge0: port 3(bond0) entered blocking state [ 1227.992333][T16703] usb 8-1: config 0 descriptor?? [ 1227.995868][T16703] pwc: Askey VC010 type 2 USB webcam detected. [ 1227.998659][T18321] bridge0: port 3(bond0) entered disabled state [ 1228.037439][T18321] bond0: entered allmulticast mode [ 1228.049244][T18321] bond_slave_0: entered allmulticast mode [ 1228.055032][T18321] bond_slave_1: entered allmulticast mode [ 1228.082272][T18321] bond0: entered promiscuous mode [ 1228.088207][T18325] binder: 18322:18325 ioctl c0306201 0 returned -14 [ 1228.095007][T18321] bond_slave_0: entered promiscuous mode [ 1228.106071][T18321] bond_slave_1: entered promiscuous mode [ 1228.113842][T18325] binder: 18322:18325 ioctl c0306201 200000000080 returned -14 [ 1228.286421][T18331] xt_hashlimit: size too large, truncated to 1048576 [ 1228.737950][ T6405] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 1229.362664][T18336] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3197'. [ 1229.382047][ T6405] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1229.416863][ T6405] usb 7-1: config 0 has no interface number 0 [ 1229.431411][ T6405] usb 7-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 1229.476868][ T6405] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1229.497663][ T6405] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1229.521793][ T6405] usb 7-1: Product: syz [ 1229.535577][ T6405] usb 7-1: SerialNumber: syz [ 1229.566290][ T6405] usb 7-1: config 0 descriptor?? [ 1229.629934][ T6405] usbhid 7-1:0.8: couldn't find an input interrupt endpoint [ 1229.929995][ T6405] usb 7-1: USB disconnect, device number 33 [ 1230.350734][T16703] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1230.360623][T16703] pwc: recv_control_msg error -71 req 02 val 2700 [ 1230.389334][T16703] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1230.413820][T16703] pwc: recv_control_msg error -71 req 04 val 1000 [ 1230.451068][T16703] pwc: recv_control_msg error -71 req 04 val 1300 [ 1230.459553][T16703] pwc: recv_control_msg error -71 req 04 val 1400 [ 1230.487300][T16703] pwc: recv_control_msg error -71 req 02 val 2000 [ 1230.506942][T16703] pwc: recv_control_msg error -71 req 02 val 2100 [ 1230.585788][T16516] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 1230.591031][T18346] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3199'. [ 1230.602659][T18346] netlink: 'syz.7.3199': attribute type 30 has an invalid length. [ 1230.751087][T18346] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3199'. [ 1230.760183][T18346] netlink: 'syz.7.3199': attribute type 30 has an invalid length. [ 1231.009165][T16703] pwc: recv_control_msg error -71 req 04 val 1500 [ 1231.010258][T18345] netlink: 'syz.5.3200': attribute type 7 has an invalid length. [ 1231.016234][T16703] pwc: recv_control_msg error -71 req 02 val 2500 [ 1231.048309][T18345] netlink: 'syz.5.3200': attribute type 7 has an invalid length. [ 1231.057158][T16703] pwc: recv_control_msg error -71 req 02 val 2400 [ 1231.069746][T16703] pwc: recv_control_msg error -71 req 02 val 2600 [ 1231.118875][T16703] pwc: recv_control_msg error -71 req 02 val 2900 [ 1231.170023][T16703] pwc: recv_control_msg error -71 req 02 val 2800 [ 1231.199995][T16703] pwc: recv_control_msg error -71 req 04 val 1100 [ 1231.221911][T16703] pwc: recv_control_msg error -71 req 04 val 1200 [ 1231.447575][T16703] pwc: Registered as video103. [ 1231.705546][T16703] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input71 [ 1232.300938][T18354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1232.369827][T16703] usb 8-1: USB disconnect, device number 29 [ 1233.024969][T18370] syzkaller0: entered promiscuous mode [ 1233.030571][T18370] syzkaller0: entered allmulticast mode [ 1233.224735][T18380] netlink: 'syz.3.3211': attribute type 7 has an invalid length. [ 1233.237719][T18380] netlink: 'syz.3.3211': attribute type 7 has an invalid length. [ 1233.357181][T18382] binder: 18381:18382 ioctl c0306201 0 returned -14 [ 1233.373407][T16516] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 1233.374120][T18382] binder: 18381:18382 ioctl c0306201 200000000080 returned -14 [ 1233.387937][T12026] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1233.664587][T12026] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.807751][T12026] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1233.819342][T12026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.847860][T12026] usb 6-1: config 0 descriptor?? [ 1233.856956][T18378] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3209'. [ 1233.865996][T18378] netlink: 'syz.6.3209': attribute type 30 has an invalid length. [ 1233.877431][T12026] pwc: Askey VC010 type 2 USB webcam detected. [ 1233.888665][T18378] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3209'. [ 1233.897739][T18378] netlink: 'syz.6.3209': attribute type 30 has an invalid length. [ 1233.909386][T16703] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 1233.980198][T18389] xt_hashlimit: size too large, truncated to 1048576 [ 1234.568572][T16703] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 1234.579339][T16703] usb 8-1: config 0 has no interface number 0 [ 1234.585443][T16703] usb 8-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 1234.614874][T16703] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1234.636604][T16703] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1234.647375][T16703] usb 8-1: Product: syz [ 1234.659523][T16703] usb 8-1: SerialNumber: syz [ 1234.690801][T16703] usb 8-1: config 0 descriptor?? [ 1234.705654][T16703] usbhid 8-1:0.8: couldn't find an input interrupt endpoint [ 1235.220506][T16703] usb 8-1: USB disconnect, device number 30 [ 1235.572192][T18398] tmpfs: Unknown parameter 'grpquota2' [ 1236.628360][T12026] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1236.689201][T12026] pwc: recv_control_msg error -71 req 02 val 2700 [ 1236.979133][T12026] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1237.009930][T12026] pwc: recv_control_msg error -71 req 04 val 1000 [ 1237.038621][T12026] pwc: recv_control_msg error -71 req 04 val 1300 [ 1237.074136][T12026] pwc: recv_control_msg error -71 req 04 val 1400 [ 1237.107038][T12026] pwc: recv_control_msg error -71 req 02 val 2000 [ 1237.130547][T12026] pwc: recv_control_msg error -71 req 02 val 2100 [ 1237.152916][T12026] pwc: recv_control_msg error -71 req 04 val 1500 [ 1237.303954][T12026] pwc: recv_control_msg error -71 req 02 val 2500 [ 1237.344414][T12026] pwc: recv_control_msg error -71 req 02 val 2400 [ 1237.382355][T12026] pwc: recv_control_msg error -71 req 02 val 2600 [ 1237.418827][T12026] pwc: recv_control_msg error -71 req 02 val 2900 [ 1237.477186][T12026] pwc: recv_control_msg error -71 req 02 val 2800 [ 1237.509529][T12026] pwc: recv_control_msg error -71 req 04 val 1100 [ 1237.629132][T16516] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 1237.789536][T12026] pwc: recv_control_msg error -71 req 04 val 1200 [ 1238.039577][T12026] pwc: Registered as video103. [ 1238.046153][T12026] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input72 [ 1238.046723][T18421] netlink: 'syz.7.3220': attribute type 7 has an invalid length. [ 1238.089722][T18421] netlink: 'syz.7.3220': attribute type 7 has an invalid length. [ 1238.123690][T12026] usb 6-1: USB disconnect, device number 43 [ 1238.131603][T18417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3221'. [ 1238.140547][T18417] netlink: 'syz.3.3221': attribute type 30 has an invalid length. [ 1238.148884][T18417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3221'. [ 1238.157920][T18417] netlink: 'syz.3.3221': attribute type 30 has an invalid length. [ 1238.288673][T18427] binder: 18426:18427 ioctl c0306201 0 returned -14 [ 1238.325550][T18427] binder: 18426:18427 ioctl c0306201 200000000080 returned -14 [ 1238.619309][T15595] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1238.799086][T12026] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 1238.841220][T15595] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.872625][T15595] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1238.917705][T15595] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.946079][T15595] usb 8-1: config 0 descriptor?? [ 1238.983425][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.992196][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.013653][T15595] pwc: Askey VC010 type 2 USB webcam detected. [ 1239.157899][T12026] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1239.213161][T12026] usb 6-1: config 0 has no interface number 0 [ 1239.229344][T12026] usb 6-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 1239.260912][T12026] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1239.289035][T12026] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1239.297140][T12026] usb 6-1: Product: syz [ 1239.307977][T12026] usb 6-1: SerialNumber: syz [ 1239.323486][T12026] usb 6-1: config 0 descriptor?? [ 1239.335507][T12026] usbhid 6-1:0.8: couldn't find an input interrupt endpoint [ 1240.403354][T12026] usb 6-1: USB disconnect, device number 44 [ 1240.903617][T18455] netlink: 'syz.6.3232': attribute type 7 has an invalid length. [ 1240.912101][T18455] netlink: 'syz.6.3232': attribute type 7 has an invalid length. [ 1241.128195][T18464] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3236'. [ 1241.137260][T18464] netlink: 'syz.6.3236': attribute type 10 has an invalid length. [ 1241.146074][T18464] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3236'. [ 1241.161099][T18464] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.170239][T18464] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.179199][T18464] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.188022][T18464] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.197080][T18464] geneve2: entered promiscuous mode [ 1241.202454][T18464] geneve2: entered allmulticast mode [ 1241.209137][T16703] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1241.270597][T18466] tmpfs: Unknown parameter 'grpquota2' [ 1241.471882][T15595] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1241.487948][T15595] pwc: recv_control_msg error -71 req 02 val 2700 [ 1241.495713][T15595] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1241.502008][T16703] usb 4-1: Using ep0 maxpacket: 32 [ 1241.514628][T15595] pwc: recv_control_msg error -71 req 04 val 1000 [ 1241.528085][T16703] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.529342][T15595] pwc: recv_control_msg error -71 req 04 val 1300 [ 1241.949232][T15595] pwc: recv_control_msg error -71 req 04 val 1400 [ 1242.051354][T15595] pwc: recv_control_msg error -71 req 02 val 2000 [ 1242.154965][T15595] pwc: recv_control_msg error -71 req 02 val 2100 [ 1242.193049][T16703] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x1 has invalid maxpacket 1041, setting to 1024 [ 1242.204069][T16703] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1242.213151][T16703] usb 4-1: config 1 interface 2 has no altsetting 0 [ 1242.236986][T15595] pwc: recv_control_msg error -71 req 04 val 1500 [ 1242.239234][T16703] usb 4-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 1242.255956][T16703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.266712][T16703] usb 4-1: Product: syz [ 1242.271244][T16703] usb 4-1: Manufacturer: syz [ 1242.276675][T15595] pwc: recv_control_msg error -71 req 02 val 2500 [ 1242.309696][T16703] usb 4-1: SerialNumber: syz [ 1242.338313][T15595] pwc: recv_control_msg error -71 req 02 val 2400 [ 1242.401670][T15595] pwc: recv_control_msg error -71 req 02 val 2600 [ 1242.460045][T15595] pwc: recv_control_msg error -71 req 02 val 2900 [ 1242.480672][T15595] pwc: recv_control_msg error -71 req 02 val 2800 [ 1242.496298][T15595] pwc: recv_control_msg error -71 req 04 val 1100 [ 1242.526035][T15595] pwc: recv_control_msg error -71 req 04 val 1200 [ 1242.762196][T15595] pwc: Registered as video103. [ 1242.784418][T15595] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input73 [ 1242.803049][T16703] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1242.810089][T16703] usb 4-1: selecting invalid altsetting 0 [ 1242.826815][T16703] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 1242.851418][T16703] usb 4-1: USB disconnect, device number 86 [ 1242.934690][T15595] usb 8-1: USB disconnect, device number 31 [ 1242.966642][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1243.609234][T18486] netlink: 'syz.5.3242': attribute type 7 has an invalid length. [ 1243.621884][T18486] netlink: 'syz.5.3242': attribute type 7 has an invalid length. [ 1244.210343][T15595] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1244.451941][T15595] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1244.463337][T15595] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1244.475542][T15595] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.536969][T15595] usb 8-1: config 0 descriptor?? [ 1244.600483][T15595] pwc: Askey VC010 type 2 USB webcam detected. [ 1244.748566][ T1062] block nbd7: Possible stuck request ffff8880221a0000: control (read@0,1024B). Runtime 210 seconds [ 1244.759489][ T1062] block nbd7: Possible stuck request ffff888022198000: control (read@1024,3072B). Runtime 210 seconds [ 1244.807654][T18508] netlink: 'syz.3.3251': attribute type 7 has an invalid length. [ 1244.816087][T18508] netlink: 'syz.3.3251': attribute type 7 has an invalid length. [ 1247.069803][T16703] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1247.320301][T16703] usb 6-1: Using ep0 maxpacket: 32 [ 1247.332691][T16703] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1247.344968][T16703] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1247.361712][T18529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3258'. [ 1247.362356][T16703] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1247.380572][T16703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.410760][T16703] usb 6-1: config 0 descriptor?? [ 1247.421881][T16703] hub 6-1:0.0: USB hub found [ 1247.771491][T15595] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1247.789854][T15595] pwc: recv_control_msg error -71 req 02 val 2700 [ 1247.794070][T16703] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1247.799420][T15595] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1247.843147][T15595] pwc: recv_control_msg error -71 req 04 val 1000 [ 1247.851525][T15595] pwc: recv_control_msg error -71 req 04 val 1300 [ 1247.859728][T15595] pwc: recv_control_msg error -71 req 04 val 1400 [ 1247.867857][T15595] pwc: recv_control_msg error -71 req 02 val 2000 [ 1247.876159][T15595] pwc: recv_control_msg error -71 req 02 val 2100 [ 1247.888842][T15595] pwc: recv_control_msg error -71 req 04 val 1500 [ 1247.898050][T15595] pwc: recv_control_msg error -71 req 02 val 2500 [ 1247.946107][T15595] pwc: recv_control_msg error -71 req 02 val 2400 [ 1248.000596][T15595] pwc: recv_control_msg error -71 req 02 val 2600 [ 1248.009090][T15595] pwc: recv_control_msg error -71 req 02 val 2900 [ 1248.017751][T15595] pwc: recv_control_msg error -71 req 02 val 2800 [ 1248.028069][T15595] pwc: recv_control_msg error -71 req 04 val 1100 [ 1248.036377][T15595] pwc: recv_control_msg error -71 req 04 val 1200 [ 1248.062530][T15595] pwc: Registered as video103. [ 1248.102049][T15595] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input74 [ 1248.161172][T15595] usb 8-1: USB disconnect, device number 32 [ 1248.223412][T16703] usbhid 6-1:0.0: can't add hid device: -71 [ 1248.239961][T16703] usbhid: probe of 6-1:0.0 failed with error -71 [ 1248.294861][T18539] netlink: 'syz.3.3261': attribute type 7 has an invalid length. [ 1248.304727][T16703] usb 6-1: USB disconnect, device number 45 [ 1248.336656][T18539] netlink: 'syz.3.3261': attribute type 7 has an invalid length. [ 1249.438939][T18566] netlink: 'syz.7.3271': attribute type 7 has an invalid length. [ 1249.447188][T18566] netlink: 'syz.7.3271': attribute type 7 has an invalid length. [ 1249.897248][T18578] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1500) ! [ 1249.992653][T18578] syzkaller0: entered promiscuous mode [ 1249.998345][T18578] syzkaller0: entered allmulticast mode [ 1250.358616][T18594] netlink: 'syz.3.3281': attribute type 7 has an invalid length. [ 1250.366816][T18594] netlink: 'syz.3.3281': attribute type 7 has an invalid length. [ 1251.189192][T16703] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1251.379251][T16703] usb 6-1: Using ep0 maxpacket: 32 [ 1251.385856][T16703] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.396123][T16703] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x1 has invalid maxpacket 1041, setting to 1024 [ 1251.407166][T16703] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1251.416243][T16703] usb 6-1: config 1 interface 2 has no altsetting 0 [ 1251.425122][T16703] usb 6-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 1251.434293][T16703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.442540][T16703] usb 6-1: Product: syz [ 1251.446714][T16703] usb 6-1: Manufacturer: syz [ 1251.451375][T16703] usb 6-1: SerialNumber: syz [ 1251.693371][T16703] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1251.701842][T16703] usb 6-1: selecting invalid altsetting 0 [ 1251.725344][T16703] snd-usb-audio: probe of 6-1:1.0 failed with error -71 [ 1251.738934][T16703] usb 6-1: USB disconnect, device number 46 [ 1251.772276][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1252.497317][T18614] tmpfs: Unknown parameter 'grpquota2' [ 1253.054156][T18582] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1254.143821][T18637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3294'. [ 1254.354572][ T1062] block nbd3: Possible stuck request ffff888021f70000: control (read@0,1024B). Runtime 300 seconds [ 1254.365672][ T1062] block nbd3: Possible stuck request ffff888021f70200: control (read@1024,3072B). Runtime 300 seconds [ 1254.401502][T18646] netlink: 'syz.3.3298': attribute type 7 has an invalid length. [ 1254.409574][T18646] netlink: 'syz.3.3298': attribute type 7 has an invalid length. [ 1254.471354][T18653] xt_NFQUEUE: number of total queues is 0 [ 1254.575361][T18655] batadv_slave_1: entered promiscuous mode [ 1254.962807][T18652] batadv_slave_1: left promiscuous mode [ 1255.604987][T18664] syzkaller1: entered promiscuous mode [ 1255.614733][T18664] syzkaller1: entered allmulticast mode [ 1256.089178][T15595] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1256.289181][T15595] usb 4-1: Using ep0 maxpacket: 32 [ 1256.296772][T15595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1256.314875][T15595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1256.325105][T15595] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1256.334272][T15595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.347832][T15595] usb 4-1: config 0 descriptor?? [ 1256.364579][T15595] hub 4-1:0.0: USB hub found [ 1256.565751][T15595] hub 4-1:0.0: 1 port detected [ 1257.180836][T12179] usb 4-1: USB disconnect, device number 87 [ 1257.186861][T15595] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1257.420022][T18648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1257.994171][T18685] Cannot find set identified by id 0 to match [ 1258.025147][T18683] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1258.487729][T18686] batadv_slave_1: entered promiscuous mode [ 1258.671012][T18684] batadv_slave_1: left promiscuous mode [ 1259.605065][T18719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1259.635081][T13439] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 1259.667912][T13439] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 1259.714430][T13439] bond0: now running without any active interface! [ 1259.837009][T18723] Cannot find set identified by id 0 to match [ 1260.039548][T18726] batadv_slave_1: entered promiscuous mode [ 1260.171182][T18728] smc: net device vlan1 applied user defined pnetid SYZ2 [ 1260.434874][T18720] batadv_slave_1: left promiscuous mode [ 1260.605240][T18742] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3329'. [ 1260.889472][T16703] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1261.069199][T16703] usb 6-1: Using ep0 maxpacket: 32 [ 1261.121968][T16703] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.163219][T16703] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x1 has invalid maxpacket 1041, setting to 1024 [ 1261.210316][T16703] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1261.249214][T16703] usb 6-1: config 1 interface 2 has no altsetting 0 [ 1261.285250][T16703] usb 6-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 1261.325875][T16703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.382483][T16703] usb 6-1: Product: syz [ 1261.386684][T16703] usb 6-1: Manufacturer: syz [ 1261.422199][T16703] usb 6-1: SerialNumber: syz [ 1261.478912][T18760] Cannot find set identified by id 0 to match [ 1262.038210][T16703] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1262.061639][T16703] usb 6-1: selecting invalid altsetting 0 [ 1262.108194][T16703] snd-usb-audio: probe of 6-1:1.0 failed with error -71 [ 1262.149225][T16703] usb 6-1: USB disconnect, device number 47 [ 1262.212542][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1262.271465][T18770] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3340'. [ 1262.357715][T18774] netlink: 756 bytes leftover after parsing attributes in process `syz.6.3341'. [ 1262.417524][T18774] bridge0: port 3(dummy0) entered blocking state [ 1262.424266][T18774] bridge0: port 3(dummy0) entered forwarding state [ 1262.847642][T18791] Cannot find set identified by id 0 to match [ 1263.297862][T18797] batadv_slave_1: entered promiscuous mode [ 1263.520882][T18788] batadv_slave_1: left promiscuous mode [ 1264.077847][T18823] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1264.397205][T18830] Cannot find set identified by id 0 to match [ 1264.589328][T18831] batadv_slave_1: entered promiscuous mode [ 1264.625359][ T6405] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1264.872211][ T6405] usb 8-1: Using ep0 maxpacket: 32 [ 1264.962795][T18829] batadv_slave_1: left promiscuous mode [ 1264.970380][ T6405] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1264.989099][ T6405] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1265.029484][ T6405] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1265.062034][ T6405] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.091893][ T6405] usb 8-1: config 0 descriptor?? [ 1265.126800][ T6405] hub 8-1:0.0: USB hub found [ 1265.455754][ T6405] hub 8-1:0.0: 1 port detected [ 1266.578040][T16703] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 1267.720160][ T6405] usb 8-1: USB disconnect, device number 33 [ 1268.261058][T18862] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1268.617881][T18874] Cannot find set identified by id 0 to match [ 1268.695061][T18879] batadv_slave_1: entered promiscuous mode [ 1269.159805][T18873] batadv_slave_1: left promiscuous mode [ 1269.551188][T18895] syzkaller0: entered promiscuous mode [ 1269.556857][T18895] syzkaller0: entered allmulticast mode [ 1269.603057][T18895] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3383'. [ 1269.626069][T18895] vlan2: entered allmulticast mode [ 1269.637696][T18895] bridge0: entered allmulticast mode [ 1269.830017][T16703] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1270.019292][T16703] usb 8-1: Using ep0 maxpacket: 32 [ 1270.026500][T16703] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.037841][T16703] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1270.047956][T16703] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1270.058017][T16703] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.058532][T18903] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1270.084140][T16703] usb 8-1: config 0 descriptor?? [ 1270.102486][T16703] hub 8-1:0.0: USB hub found [ 1270.423267][T16703] hub 8-1:0.0: 1 port detected [ 1271.234623][ T6405] usb 8-1: USB disconnect, device number 34 [ 1271.275657][T16703] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 1271.748135][T18917] Cannot find set identified by id 0 to match [ 1272.349069][ T5782] Bluetooth: hci4: command 0x0406 tx timeout [ 1274.676691][T18918] batadv_slave_1: entered promiscuous mode [ 1274.685429][T18919] batadv_slave_1: left promiscuous mode [ 1274.825734][ T1062] block nbd7: Possible stuck request ffff8880221a0000: control (read@0,1024B). Runtime 240 seconds [ 1274.836592][ T1062] block nbd7: Possible stuck request ffff888022198000: control (read@1024,3072B). Runtime 240 seconds [ 1275.280359][T18949] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1275.377486][ T6405] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1277.379082][T16516] Bluetooth: hci4: command 0x0406 tx timeout [ 1278.001758][ T6405] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1278.023204][ T6405] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1278.049021][ T6405] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.071488][ T6405] usb 4-1: config 0 descriptor?? [ 1278.111680][ T6405] usb 4-1: can't set config #0, error -71 [ 1278.129361][ T6405] usb 4-1: USB disconnect, device number 88 [ 1278.235233][T18969] Cannot find set identified by id 0 to match [ 1278.358992][T18971] batadv_slave_1: entered promiscuous mode [ 1278.954257][T18968] batadv_slave_1: left promiscuous mode [ 1279.104528][T18983] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1279.489243][T16703] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1279.692332][T16703] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1279.722835][T16703] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1279.744292][T16703] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.770915][T16703] usb 8-1: config 0 descriptor?? [ 1280.011708][T16703] usbhid 8-1:0.0: can't add hid device: -71 [ 1280.017770][T16703] usbhid: probe of 8-1:0.0 failed with error -71 [ 1280.049955][T16703] usb 8-1: USB disconnect, device number 35 [ 1280.350489][T19002] binder: 19001:19002 ioctl c0306201 0 returned -14 [ 1280.358169][T19002] binder: 19001:19002 ioctl c0306201 200000000080 returned -14 [ 1280.425643][T19007] Cannot find set identified by id 0 to match [ 1280.657716][T19009] batadv_slave_1: entered promiscuous mode [ 1280.669342][T15595] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 1280.722724][T16703] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1280.901623][T15595] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1280.911334][T15595] usb 4-1: config 0 has no interface number 0 [ 1280.917841][T15595] usb 4-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 1280.940502][T15595] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1280.950819][T15595] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1280.959062][T15595] usb 4-1: Product: syz [ 1280.964102][T15595] usb 4-1: SerialNumber: syz [ 1281.027795][T16703] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1281.045697][T19005] batadv_slave_1: left promiscuous mode [ 1281.061792][T16703] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1281.062945][T15595] usb 4-1: config 0 descriptor?? [ 1281.071070][T16703] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.099952][T16703] usb 8-1: config 0 descriptor?? [ 1281.122272][T15595] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 1281.358267][ T6405] usb 4-1: USB disconnect, device number 89 [ 1281.931750][T16703] aiptek 8-1:0.0: Aiptek using 400 ms programming speed [ 1281.953202][T16703] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input75 [ 1282.342151][T16703] usb 8-1: USB disconnect, device number 36 [ 1282.348140][ C0] aiptek 8-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1283.082552][T19034] Cannot find set identified by id 0 to match [ 1283.399018][T19036] batadv_slave_1: entered promiscuous mode [ 1283.723670][T19033] batadv_slave_1: left promiscuous mode [ 1283.888617][T19043] binder: 19042:19043 ioctl c0306201 0 returned -14 [ 1283.898655][T19043] binder: 19042:19043 ioctl c0306201 200000000080 returned -14 [ 1284.349156][T15595] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 1284.419418][ T1062] block nbd3: Possible stuck request ffff888021f70000: control (read@0,1024B). Runtime 330 seconds [ 1284.430495][ T1062] block nbd3: Possible stuck request ffff888021f70200: control (read@1024,3072B). Runtime 330 seconds [ 1284.551614][T15595] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1284.574459][T15595] usb 6-1: config 0 has no interface number 0 [ 1284.593189][T15595] usb 6-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 1284.626883][T15595] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1284.645371][T15595] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1284.669877][T15595] usb 6-1: Product: syz [ 1284.682357][T15595] usb 6-1: SerialNumber: syz [ 1284.702796][T15595] usb 6-1: config 0 descriptor?? [ 1284.726487][T15595] usbhid 6-1:0.8: couldn't find an input interrupt endpoint [ 1284.941879][T15595] usb 6-1: USB disconnect, device number 48 [ 1285.103199][T19055] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3433'. [ 1285.912678][T19072] xt_NFQUEUE: number of total queues is 0 [ 1286.175644][T19077] batadv_slave_1: entered promiscuous mode [ 1286.474934][T19071] batadv_slave_1: left promiscuous mode [ 1286.830554][T19091] binder: 19090:19091 ioctl c0306201 0 returned -14 [ 1286.838098][T19091] binder: 19090:19091 ioctl c0306201 200000000080 returned -14 [ 1287.160235][ T6405] usb 8-1: new full-speed USB device number 37 using dummy_hcd [ 1287.173519][T19102] Cannot find set identified by id 0 to match [ 1287.312603][T19103] batadv_slave_1: entered promiscuous mode [ 1287.521011][ T6405] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 1287.696907][ T6405] usb 8-1: config 0 has no interface number 0 [ 1287.715287][ T6405] usb 8-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 1287.771084][T19101] batadv_slave_1: left promiscuous mode [ 1287.779868][ T6405] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1287.789183][ T6405] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1287.797279][ T6405] usb 8-1: Product: syz [ 1287.802904][ T6405] usb 8-1: SerialNumber: syz [ 1287.823723][ T6405] usb 8-1: config 0 descriptor?? [ 1287.846044][ T6405] usbhid 8-1:0.8: couldn't find an input interrupt endpoint [ 1288.049201][ T6405] usb 8-1: USB disconnect, device number 37 [ 1288.786102][T19121] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1288.900128][T19126] Cannot find set identified by id 0 to match [ 1289.023979][T19133] batadv_slave_1: entered promiscuous mode [ 1289.449072][T16703] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1289.487196][T19125] batadv_slave_1: left promiscuous mode [ 1289.769526][T16703] usb 6-1: Using ep0 maxpacket: 32 [ 1289.785533][T16703] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.796245][T16703] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x1 has invalid maxpacket 1041, setting to 1024 [ 1289.823935][T16703] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1289.843270][T16703] usb 6-1: config 1 interface 2 has no altsetting 0 [ 1289.861947][T16703] usb 6-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 1289.877543][T16703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.904379][T16703] usb 6-1: Product: syz [ 1289.930419][T16703] usb 6-1: Manufacturer: syz [ 1289.948092][T16703] usb 6-1: SerialNumber: syz [ 1290.156613][T19146] input: syz1 as /devices/virtual/input/input76 [ 1290.555935][T16703] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1290.565840][T16703] usb 6-1: selecting invalid altsetting 0 [ 1290.662753][T16703] snd-usb-audio: probe of 6-1:1.0 failed with error -71 [ 1290.696917][T16703] usb 6-1: USB disconnect, device number 49 [ 1290.793451][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1291.268427][T19160] syzkaller0: entered promiscuous mode [ 1291.274367][T19160] syzkaller0: entered allmulticast mode [ 1291.908933][T19165] Cannot find set identified by id 0 to match [ 1291.997786][T19167] batadv_slave_1: entered promiscuous mode [ 1292.574964][T19164] batadv_slave_1: left promiscuous mode [ 1292.582364][T19174] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1292.742205][ T5782] Bluetooth: hci4: command 0x0406 tx timeout [ 1292.979783][T19179] input: syz1 as /devices/virtual/input/input77 [ 1293.985991][T19193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3482'. [ 1294.981946][T19219] input: syz1 as /devices/virtual/input/input78 [ 1295.462618][T19223] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3490'. [ 1296.482795][T19230] syzkaller0: entered promiscuous mode [ 1296.498637][T19230] syzkaller0: entered allmulticast mode [ 1299.386988][T19265] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3500'. [ 1299.523652][T19266] input: syz1 as /devices/virtual/input/input79 [ 1300.423110][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.445861][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.884483][T19289] syzkaller0: entered promiscuous mode [ 1300.904196][T19289] syzkaller0: entered allmulticast mode [ 1301.859075][T15595] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1302.053295][T15595] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1302.071853][T15595] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1302.081372][T15595] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.105631][T15595] usb 8-1: config 0 descriptor?? [ 1302.326704][T15595] usbhid 8-1:0.0: can't add hid device: -71 [ 1302.341499][T15595] usbhid: probe of 8-1:0.0 failed with error -71 [ 1302.352271][T15595] usb 8-1: USB disconnect, device number 38 [ 1302.954301][T15595] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1303.172483][T15595] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1303.188996][T15595] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1303.198133][T15595] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.217685][T15595] usb 8-1: config 0 descriptor?? [ 1303.395260][T19301] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3512'. [ 1304.071001][T15595] aiptek 8-1:0.0: Aiptek using 400 ms programming speed [ 1304.084323][T15595] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input80 [ 1304.266470][T19316] input: syz1 as /devices/virtual/input/input81 [ 1304.400448][T12026] usb 8-1: USB disconnect, device number 39 [ 1304.400495][ C1] aiptek 8-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1304.909463][ T1062] block nbd7: Possible stuck request ffff8880221a0000: control (read@0,1024B). Runtime 270 seconds [ 1304.920272][ T1062] block nbd7: Possible stuck request ffff888022198000: control (read@1024,3072B). Runtime 270 seconds [ 1305.506108][T19333] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1500) ! [ 1305.515961][T19333] syzkaller0: entered promiscuous mode [ 1305.533737][T19333] syzkaller0: entered allmulticast mode [ 1306.649329][T12026] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1306.849058][T12026] usb 4-1: Using ep0 maxpacket: 32 [ 1307.594022][T19358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1307.964906][T12026] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.117526][T12026] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x1 has invalid maxpacket 1041, setting to 1024 [ 1308.129137][T12026] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1308.138694][T12026] usb 4-1: config 1 interface 2 has no altsetting 0 [ 1308.148602][T12026] usb 4-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 1308.162947][T12026] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.202496][T12026] usb 4-1: Product: syz [ 1308.206770][T12026] usb 4-1: Manufacturer: syz [ 1308.220664][T19362] input: syz1 as /devices/virtual/input/input82 [ 1308.266128][T12026] usb 4-1: SerialNumber: syz [ 1308.428847][T19366] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1500) ! [ 1308.445481][T19366] syzkaller0: entered promiscuous mode [ 1308.451514][T19366] syzkaller0: entered allmulticast mode [ 1308.618514][T12026] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1308.634306][T12026] usb 4-1: selecting invalid altsetting 0 [ 1308.664833][T12026] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 1308.714151][T12026] usb 4-1: USB disconnect, device number 90 [ 1308.811939][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1310.986886][T19386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1311.807000][T19394] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1500) ! [ 1311.848364][T19394] syzkaller0: entered promiscuous mode [ 1311.879208][T19394] syzkaller0: entered allmulticast mode [ 1313.906972][T19417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1314.440693][T19423] input: syz1 as /devices/virtual/input/input83 [ 1314.525684][ T1062] block nbd3: Possible stuck request ffff888021f70000: control (read@0,1024B). Runtime 360 seconds [ 1314.538531][ T1062] block nbd3: Possible stuck request ffff888021f70200: control (read@1024,3072B). Runtime 360 seconds [ 1316.189054][T16703] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1317.119012][T16703] usb 4-1: Using ep0 maxpacket: 32 [ 1317.832377][T19453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1318.352317][T16703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1318.363524][T16703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1318.373512][T16703] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1318.382745][T16703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.394174][T16703] usb 4-1: config 0 descriptor?? [ 1318.405103][T16703] hub 4-1:0.0: USB hub found [ 1318.605158][T16703] hub 4-1:0.0: 1 port detected [ 1318.725014][T19462] netlink: 'syz.5.3565': attribute type 1 has an invalid length. [ 1319.321351][T16703] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1319.358466][T16703] usb 4-1: USB disconnect, device number 91 [ 1319.365734][ T6405] usb 4-1: Failed to suspend device, error -19 [ 1319.659518][T19472] input: syz1 as /devices/virtual/input/input84 [ 1319.914624][T19478] tipc: Started in network mode [ 1319.926481][T19478] tipc: Node identity 2a8cdd0a1914, cluster identity 4711 [ 1319.953849][T19478] tipc: Enabled bearer , priority 0 [ 1320.179105][T19479] syzkaller0: entered promiscuous mode [ 1320.184925][T19479] syzkaller0: entered allmulticast mode [ 1320.196625][T19479] tipc: Resetting bearer [ 1320.372537][T19477] tipc: Resetting bearer [ 1322.965264][T19477] tipc: Disabling bearer [ 1322.978679][T16703] tipc: Node number set to 865656074 [ 1324.099841][T15595] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1324.289015][T15595] usb 8-1: Using ep0 maxpacket: 32 [ 1324.323411][T15595] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1324.326899][T19523] input: syz1 as /devices/virtual/input/input85 [ 1324.358299][T15595] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1324.382905][T15595] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1324.414434][T15595] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.455371][T15595] usb 8-1: config 0 descriptor?? [ 1324.486418][T15595] hub 8-1:0.0: USB hub found [ 1324.719857][T15595] hub 8-1:0.0: 1 port detected [ 1325.345416][ T27] usb 8-1: USB disconnect, device number 40 [ 1325.351589][T15595] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 1325.417805][T19530] netlink: 'syz.5.3586': attribute type 1 has an invalid length. [ 1326.856297][T19512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1326.997564][T19552] tmpfs: Unknown parameter 'grpquota2' [ 1328.439317][T16703] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1329.066845][T19564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1329.770149][T16703] usb 7-1: Using ep0 maxpacket: 32 [ 1329.783484][T16703] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1329.800874][T16703] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1329.813507][T16703] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1329.832368][T16703] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.854326][T16703] usb 7-1: config 0 descriptor?? [ 1329.882150][T16703] hub 7-1:0.0: USB hub found [ 1330.119087][T16703] hub 7-1:0.0: 1 port detected [ 1330.757351][ T6405] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 1330.770666][ T6405] usb 7-1: USB disconnect, device number 34 [ 1330.776713][T16703] usb 7-1: Failed to suspend device, error -19 [ 1331.700162][T16703] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1332.024385][T16703] usb 6-1: Using ep0 maxpacket: 32 [ 1332.106222][T16703] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.119481][T16703] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x1 has invalid maxpacket 1041, setting to 1024 [ 1332.151159][T16703] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1332.171156][T16703] usb 6-1: config 1 interface 2 has no altsetting 0 [ 1332.212218][T16703] usb 6-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 1332.245591][T16703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.254344][T16703] usb 6-1: Product: syz [ 1332.258774][T16703] usb 6-1: Manufacturer: syz [ 1332.269341][T16703] usb 6-1: SerialNumber: syz [ 1332.569477][T16703] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1332.576348][T16703] usb 6-1: selecting invalid altsetting 0 [ 1332.597707][T16703] snd-usb-audio: probe of 6-1:1.0 failed with error -71 [ 1332.611685][T16703] usb 6-1: USB disconnect, device number 50 [ 1332.657434][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1333.197061][T19633] tmpfs: Unknown parameter 'grpquota2' [ 1334.980189][ T1062] block nbd7: Possible stuck request ffff8880221a0000: control (read@0,1024B). Runtime 300 seconds [ 1334.992124][ T1062] block nbd7: Possible stuck request ffff888022198000: control (read@1024,3072B). Runtime 300 seconds [ 1335.088285][T19643] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3615'. [ 1335.729149][T19648] syzkaller0: entered promiscuous mode [ 1335.752975][T19648] syzkaller0: entered allmulticast mode [ 1336.616120][T19669] syzkaller1: entered promiscuous mode [ 1336.623773][T19669] syzkaller1: entered allmulticast mode [ 1339.389836][T19671] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3625'. [ 1339.639721][T19704] syzkaller0: entered promiscuous mode [ 1339.649029][T19704] syzkaller0: entered allmulticast mode [ 1341.130884][T19722] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3635'. [ 1341.323386][T19728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1342.352518][T19749] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1342.782589][T19764] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3648'. [ 1344.579971][ T1062] block nbd3: Possible stuck request ffff888021f70000: control (read@0,1024B). Runtime 390 seconds [ 1344.591161][ T1062] block nbd3: Possible stuck request ffff888021f70200: control (read@1024,3072B). Runtime 390 seconds [ 1346.013082][T19809] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3660'. [ 1346.197939][T19811] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1346.867821][T19842] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3669'. [ 1347.465887][T15595] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1347.679287][T15595] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1347.739734][T15595] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1347.771047][T15595] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.891740][T15595] usb 7-1: config 0 descriptor?? [ 1348.172264][T15595] usbhid 7-1:0.0: can't add hid device: -71 [ 1348.178325][T15595] usbhid: probe of 7-1:0.0 failed with error -71 [ 1348.226256][T15595] usb 7-1: USB disconnect, device number 35 [ 1348.416902][T19891] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3680'. [ 1348.499961][T19892] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1348.759116][T15595] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1348.971339][T15595] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1349.123669][T15595] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1349.133204][T15595] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.177673][T15595] usb 7-1: config 0 descriptor?? [ 1350.505577][T19934] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3691'. [ 1350.588537][T19936] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1500) ! [ 1350.599042][ T27] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1350.779047][ T27] usb 6-1: Using ep0 maxpacket: 32 [ 1350.795591][ T27] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.810558][ T27] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x1 has invalid maxpacket 1041, setting to 1024 [ 1350.823311][ T27] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1350.835191][ T27] usb 6-1: config 1 interface 2 has no altsetting 0 [ 1350.848606][ T27] usb 6-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 1350.861838][T15595] aiptek 7-1:0.0: Aiptek using 400 ms programming speed [ 1350.871674][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.883943][T15595] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input86 [ 1350.897948][ T27] usb 6-1: Product: syz [ 1350.903601][ T27] usb 6-1: Manufacturer: syz [ 1350.910303][ T27] usb 6-1: SerialNumber: syz [ 1351.076469][T15595] usb 7-1: USB disconnect, device number 36 [ 1351.082581][ C1] aiptek 7-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1351.186513][ T27] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1351.206420][ T27] usb 6-1: selecting invalid altsetting 0 [ 1351.261434][ T27] snd-usb-audio: probe of 6-1:1.0 failed with error -71 [ 1351.276554][ T27] usb 6-1: USB disconnect, device number 51 [ 1351.351854][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1352.384013][T19972] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1354.386030][T19971] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3700'. [ 1355.239157][T15595] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1355.528605][T15595] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1355.556622][T15595] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1355.669138][T15595] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.706802][T15595] usb 7-1: config 0 descriptor?? [ 1355.767281][T20015] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1500) ! [ 1356.006454][T15595] usbhid 7-1:0.0: can't add hid device: -71 [ 1356.012613][T15595] usbhid: probe of 7-1:0.0 failed with error -71 [ 1356.022427][T15595] usb 7-1: USB disconnect, device number 37 [ 1356.529135][T15595] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1356.749396][T15595] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1356.778093][T15595] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1356.791239][T15595] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.809869][T15595] usb 7-1: config 0 descriptor?? [ 1357.109464][T16703] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1357.369360][T16703] usb 6-1: Using ep0 maxpacket: 32 [ 1357.402522][T16703] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1357.439573][T16703] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1357.449710][T16703] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1357.500225][T16703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.581535][T16703] usb 6-1: config 0 descriptor?? [ 1357.597706][T16703] hub 6-1:0.0: USB hub found [ 1357.659978][T15595] aiptek 7-1:0.0: Aiptek using 400 ms programming speed [ 1357.672346][T15595] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input87 [ 1357.830449][T16703] hub 6-1:0.0: 1 port detected [ 1357.891896][ T6405] usb 7-1: USB disconnect, device number 38 [ 1357.891895][ C1] aiptek 7-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1357.997935][T20059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1358.635668][T15595] usb 6-1: USB disconnect, device number 52 [ 1358.684726][T16703] hub 6-1:0.0: activate --> -19 [ 1360.739162][T16516] Bluetooth: hci4: command 0x0406 tx timeout [ 1361.310421][ T6405] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1361.349412][T15595] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1361.499045][ T6405] usb 8-1: Using ep0 maxpacket: 32 [ 1361.506132][ T6405] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.516345][ T6405] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x1 has invalid maxpacket 1041, setting to 1024 [ 1361.527361][ T6405] usb 8-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1361.536415][ T6405] usb 8-1: config 1 interface 2 has no altsetting 0 [ 1361.542214][T15595] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1361.545363][ T6405] usb 8-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 1361.558862][T15595] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1361.563164][ T6405] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.563188][ T6405] usb 8-1: Product: syz [ 1361.579110][T15595] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.580442][ T6405] usb 8-1: Manufacturer: syz [ 1361.600977][T15595] usb 7-1: config 0 descriptor?? [ 1361.601539][ T6405] usb 8-1: SerialNumber: syz [ 1361.819957][T15595] usbhid 7-1:0.0: can't add hid device: -71 [ 1361.826186][T15595] usbhid: probe of 7-1:0.0 failed with error -71 [ 1361.841377][T15595] usb 7-1: USB disconnect, device number 39 [ 1361.865642][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.873701][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.886852][ T6405] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1361.893683][ T6405] usb 8-1: selecting invalid altsetting 0 [ 1361.917628][ T6405] snd-usb-audio: probe of 8-1:1.0 failed with error -71 [ 1361.936784][ T6405] usb 8-1: USB disconnect, device number 41 [ 1361.968665][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1362.399223][T15595] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1362.659558][T15595] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1362.687279][T15595] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1362.698111][T15595] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.723025][T15595] usb 7-1: config 0 descriptor?? [ 1363.622069][T15595] aiptek 7-1:0.0: Aiptek using 400 ms programming speed [ 1363.652441][T15595] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input88 [ 1363.843855][ T6405] usb 7-1: USB disconnect, device number 40 [ 1363.843851][ C1] aiptek 7-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1364.939263][ T6405] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1365.674437][ T1062] block nbd7: Possible stuck request ffff8880221a0000: control (read@0,1024B). Runtime 330 seconds [ 1365.685712][ T1062] block nbd7: Possible stuck request ffff888022198000: control (read@1024,3072B). Runtime 330 seconds [ 1365.883325][ T6405] usb 8-1: Using ep0 maxpacket: 32 [ 1365.929267][ T6405] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1365.947194][ T6405] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x1 has invalid maxpacket 1041, setting to 1024 [ 1365.959748][ T6405] usb 8-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1366.105572][ T6405] usb 8-1: config 1 interface 2 has no altsetting 0 [ 1366.136926][ T6405] usb 8-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 1366.149079][ T6405] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.157365][ T6405] usb 8-1: Product: syz [ 1366.162739][ T6405] usb 8-1: Manufacturer: syz [ 1366.167504][ T6405] usb 8-1: SerialNumber: syz [ 1366.710070][ T6405] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1366.718221][ T6405] usb 8-1: selecting invalid altsetting 0 [ 1366.735139][ T6405] snd-usb-audio: probe of 8-1:1.0 failed with error -71 [ 1366.754906][ T6405] usb 8-1: USB disconnect, device number 42 [ 1366.876156][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1367.379073][T16516] Bluetooth: hci4: command 0x0406 tx timeout [ 1367.489053][T15595] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1367.851293][T15595] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1367.879026][T15595] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1367.889218][T15595] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.920529][T15595] usb 7-1: config 0 descriptor?? [ 1368.229682][T15595] usbhid 7-1:0.0: can't add hid device: -71 [ 1368.249666][T15595] usbhid: probe of 7-1:0.0 failed with error -71 [ 1368.277227][T15595] usb 7-1: USB disconnect, device number 41 [ 1368.962778][ T6405] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1369.215272][T20210] syzkaller0: entered promiscuous mode [ 1369.221121][T20210] syzkaller0: entered allmulticast mode [ 1369.271130][ T6405] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1369.283760][ T6405] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1369.293802][ T6405] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.305024][ T6405] usb 7-1: config 0 descriptor?? [ 1369.959601][T12026] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1370.141606][ T6405] aiptek 7-1:0.0: Aiptek using 400 ms programming speed [ 1370.157392][ T6405] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input89 [ 1370.176009][T12026] usb 6-1: Using ep0 maxpacket: 32 [ 1370.189407][T12026] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1370.224795][T12026] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x1 has invalid maxpacket 1041, setting to 1024 [ 1370.279059][T12026] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1370.306768][T12026] usb 6-1: config 1 interface 2 has no altsetting 0 [ 1370.325111][T12026] usb 6-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 1370.334999][T12026] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.343303][T12026] usb 6-1: Product: syz [ 1370.347518][T12026] usb 6-1: Manufacturer: syz [ 1370.356417][ C0] aiptek 7-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1370.365665][T12026] usb 6-1: SerialNumber: syz [ 1370.375319][ T6405] usb 7-1: USB disconnect, device number 42 [ 1370.633985][T12026] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1370.646549][T12026] usb 6-1: selecting invalid altsetting 0 [ 1370.684544][T12026] snd-usb-audio: probe of 6-1:1.0 failed with error -71 [ 1370.707451][T12026] usb 6-1: USB disconnect, device number 53 [ 1370.755405][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1372.712757][T20253] syzkaller0: entered promiscuous mode [ 1372.718283][T20253] syzkaller0: entered allmulticast mode [ 1374.668142][ T1062] block nbd3: Possible stuck request ffff888021f70000: control (read@0,1024B). Runtime 420 seconds [ 1374.679320][ T1062] block nbd3: Possible stuck request ffff888021f70200: control (read@1024,3072B). Runtime 420 seconds [ 1374.749141][ T5782] Bluetooth: hci4: command 0x0406 tx timeout [ 1375.387305][T20284] syzkaller0: entered promiscuous mode [ 1375.394858][T20284] syzkaller0: entered allmulticast mode [ 1375.449871][T12026] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1375.671018][T12026] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1375.683459][T20261] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1375.703881][T12026] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1375.721350][T12026] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.748606][T12026] usb 7-1: config 0 descriptor?? [ 1376.015679][T12026] usbhid 7-1:0.0: can't add hid device: -71 [ 1376.031094][T12026] usbhid: probe of 7-1:0.0 failed with error -71 [ 1376.068262][T12026] usb 7-1: USB disconnect, device number 43 [ 1376.461730][T20296] nbd: nbd3 already in use [ 1376.467653][T20296] nbd: must specify a size in bytes for the device [ 1376.634502][T12026] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1376.869834][T12026] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1376.881062][T12026] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1376.890434][T12026] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.901006][T12026] usb 7-1: config 0 descriptor?? [ 1377.756133][T12026] aiptek 7-1:0.0: Aiptek using 400 ms programming speed [ 1377.769302][T12026] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input90 [ 1377.969983][T12026] usb 7-1: USB disconnect, device number 44 [ 1377.975960][ C0] aiptek 7-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1379.284403][T20317] syzkaller0: entered promiscuous mode [ 1379.297697][T20317] syzkaller0: entered allmulticast mode [ 1380.183024][ T5782] Bluetooth: hci4: command 0x0406 tx timeout [ 1382.099201][ T27] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1382.343082][T20322] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1383.009042][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 1383.021737][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1383.037696][ T27] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x1 has invalid maxpacket 1041, setting to 1024 [ 1383.057743][ T27] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1383.075964][ T27] usb 4-1: config 1 interface 2 has no altsetting 0 [ 1383.088864][ T27] usb 4-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 1383.098432][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.112322][ T27] usb 4-1: Product: syz [ 1383.128502][ T27] usb 4-1: Manufacturer: syz [ 1383.133449][ T27] usb 4-1: SerialNumber: syz [ 1383.348439][T20370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1383.399316][ T27] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1383.408383][ T27] usb 4-1: selecting invalid altsetting 0 [ 1383.438719][ T27] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 1383.464990][ T27] usb 4-1: USB disconnect, device number 92 [ 1383.527298][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1383.977965][T20377] syzkaller0: entered promiscuous mode [ 1383.989302][T20377] syzkaller0: entered allmulticast mode [ 1384.075110][T20380] syzkaller0: entered promiscuous mode [ 1384.083858][T20380] syzkaller0: entered allmulticast mode [ 1384.904125][ T5782] Bluetooth: hci4: command 0x0406 tx timeout [ 1385.038675][T20395] nbd: nbd7 already in use [ 1385.044113][T20395] nbd: must specify a size in bytes for the device [ 1385.229749][ T5782] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 1390.121862][T20398] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3805'. [ 1390.131000][T20398] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3805'. [ 1390.156125][T20398] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1390.165066][T20398] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1390.174069][T20398] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1390.182867][T20398] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1390.199343][T20399] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3805'. [ 1390.208349][T20399] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3805'. [ 1391.160734][T20418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1391.724971][T20425] nbd: nbd7 already in use [ 1391.731624][T20425] nbd: must specify a size in bytes for the device [ 1392.179564][ T5782] Bluetooth: hci4: command 0x0406 tx timeout [ 1392.710093][T20428] syzkaller0: entered promiscuous mode [ 1392.728291][T20428] syzkaller0: entered allmulticast mode [ 1394.097457][ T5782] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 1395.787741][ T1062] block nbd7: Possible stuck request ffff8880221a0000: control (read@0,1024B). Runtime 360 seconds [ 1395.798590][ T1062] block nbd7: Possible stuck request ffff888022198000: control (read@1024,3072B). Runtime 360 seconds [ 1395.884712][T20460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3821'. [ 1395.895265][T20460] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3821'. [ 1395.928371][T20464] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3821'. [ 1395.942962][T20464] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3821'. [ 1396.037581][T20475] syzkaller0: entered promiscuous mode [ 1396.044145][T20475] syzkaller0: entered allmulticast mode [ 1396.709457][ T5142] udevd[5142]: worker [5768] /devices/virtual/block/nbd3 timeout; kill it [ 1396.939123][ T5142] udevd[5142]: seq 20322 '/devices/virtual/block/nbd3' killed [ 1396.946693][ T5142] udevd[5142]: worker [5790] /devices/virtual/block/nbd7 timeout; kill it [ 1397.009270][ T5142] udevd[5142]: seq 20861 '/devices/virtual/block/nbd7' killed [ 1397.053179][T20485] nbd: nbd6 already in use [ 1397.058292][T20485] nbd: must specify a size in bytes for the device [ 1397.206239][T13442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1397.248150][T13442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1397.268623][T20491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1398.776120][T20503] syzkaller0: entered promiscuous mode [ 1398.789145][T20503] syzkaller0: entered allmulticast mode [ 1398.989243][ T5782] Bluetooth: hci4: command 0x0406 tx timeout [ 1399.230346][ T5782] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 1402.192911][T20508] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3832'. [ 1402.201975][T20508] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3832'. [ 1402.214038][T20509] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3832'. [ 1402.224873][T20509] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3832'. [ 1402.341764][T20543] nbd: nbd6 already in use [ 1402.346902][T20543] nbd: must specify a size in bytes for the device [ 1402.376663][T20531] syzkaller0: entered promiscuous mode [ 1402.389284][T20531] syzkaller0: entered allmulticast mode [ 1402.481558][T20547] tmpfs: Unknown parameter 'grpquota2' [ 1404.753597][ T1062] block nbd3: Possible stuck request ffff888021f70000: control (read@0,1024B). Runtime 450 seconds [ 1404.764746][ T1062] block nbd3: Possible stuck request ffff888021f70200: control (read@1024,3072B). Runtime 450 seconds [ 1405.331031][ T5782] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 1406.387808][T20587] syzkaller0: entered promiscuous mode [ 1406.428998][T20587] syzkaller0: entered allmulticast mode [ 1406.447241][T20578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3844'. [ 1406.456212][T20578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3844'. [ 1406.465767][T20581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3844'. [ 1406.475915][T20594] nbd: nbd7 already in use [ 1406.481178][T20594] nbd: must specify a size in bytes for the device [ 1406.498211][T20581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3844'. [ 1409.431851][T20640] nbd: nbd5 already in use [ 1409.436991][T20640] nbd: must specify a size in bytes for the device [ 1409.863610][ T5782] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 1409.915363][T20646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3858'. [ 1409.924348][T20646] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3858'. [ 1409.937332][T20646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3858'. [ 1409.946299][T20646] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3858'. [ 1410.272810][T20656] syzkaller0: entered promiscuous mode [ 1410.288755][T20656] syzkaller0: entered allmulticast mode [ 1412.248113][T20667] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1500) ! [ 1412.536758][T20675] nbd: nbd5 already in use [ 1412.541943][T20675] nbd: must specify a size in bytes for the device [ 1412.730347][ T5782] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 1412.895210][T20686] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3870'. [ 1412.924256][T20686] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3870'. [ 1413.865452][T20697] syzkaller0: entered promiscuous mode [ 1413.875802][T20697] syzkaller0: entered allmulticast mode [ 1416.805635][ T5782] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 1417.106285][T20743] nbd: nbd6 already in use [ 1417.112741][T20743] nbd: must specify a size in bytes for the device [ 1417.330344][T20739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3882'. [ 1417.339949][T20739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3882'. [ 1417.829179][T20761] syzkaller0: entered promiscuous mode [ 1417.835421][T20761] syzkaller0: entered allmulticast mode [ 1420.654412][T20789] nbd: nbd7 already in use [ 1420.663559][T20789] nbd: must specify a size in bytes for the device [ 1420.750083][T20785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1420.892210][ T5782] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 1421.345073][T20794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3894'. [ 1421.356567][T20794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3894'. [ 1422.091563][T20818] syzkaller0: entered promiscuous mode [ 1422.130835][T20818] syzkaller0: entered allmulticast mode [ 1423.305823][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.313058][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.599559][T12026] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1423.821252][T12026] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1423.848330][T12026] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1423.878132][T12026] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.898035][T12026] usb 4-1: config 0 descriptor?? [ 1424.142761][T12026] usbhid 4-1:0.0: can't add hid device: -71 [ 1424.153147][T12026] usbhid: probe of 4-1:0.0 failed with error -71 [ 1424.168637][T12026] usb 4-1: USB disconnect, device number 93 [ 1424.741557][T12026] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1424.951517][T12026] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.962917][T12026] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1424.972440][T12026] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.995316][T12026] usb 4-1: config 0 descriptor?? [ 1425.472281][ T5782] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 1425.757434][T20856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3905'. [ 1425.767130][T20856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3905'. [ 1425.888543][ T1062] block nbd7: Possible stuck request ffff8880221a0000: control (read@0,1024B). Runtime 390 seconds [ 1425.900848][ T1062] block nbd7: Possible stuck request ffff888022198000: control (read@1024,3072B). Runtime 390 seconds [ 1425.912383][T12026] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 1425.934371][T12026] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input91 [ 1426.142862][ T27] usb 4-1: USB disconnect, device number 94 [ 1426.142968][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1427.020380][T20886] syzkaller0: entered promiscuous mode [ 1427.028566][T20886] syzkaller0: entered allmulticast mode [ 1427.250635][T12026] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1427.449137][T12026] usb 8-1: Using ep0 maxpacket: 32 [ 1427.456997][T12026] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1427.477181][T12026] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1427.502409][T12026] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1427.512050][T12026] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.524851][T12026] usb 8-1: config 0 descriptor?? [ 1427.558146][T12026] hub 8-1:0.0: USB hub found [ 1427.773031][T12026] hub 8-1:0.0: 1 port detected [ 1428.353572][ T5782] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 1428.403991][T12026] hub 8-1:0.0: activate --> -90 [ 1430.129389][T15595] usb 8-1: USB disconnect, device number 43 [ 1430.169302][T20904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3917'. [ 1430.181198][T20905] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3917'. [ 1431.489705][ T5782] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 1431.493189][T20941] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3927'. [ 1431.591250][T20941] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3927'. [ 1432.065701][T20943] syzkaller0: entered promiscuous mode [ 1432.075867][T20943] syzkaller0: entered allmulticast mode [ 1434.888226][ T1062] block nbd3: Possible stuck request ffff888021f70000: control (read@0,1024B). Runtime 480 seconds [ 1434.899388][ T1062] block nbd3: Possible stuck request ffff888021f70200: control (read@1024,3072B). Runtime 480 seconds [ 1435.661873][ T5782] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 1435.667873][T20989] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3938'. [ 1435.679102][T20989] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3938'. [ 1435.869782][T20989] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3938'. [ 1435.878971][T20989] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3938'. [ 1437.767083][T20991] nbd: nbd5 already in use [ 1437.773548][T20991] nbd: must specify a size in bytes for the device [ 1437.917042][T20997] syzkaller0: entered promiscuous mode [ 1437.949145][T20997] syzkaller0: entered allmulticast mode [ 1440.415121][T21030] Cannot find set identified by id 0 to match [ 1441.382853][T21034] batadv_slave_1: entered promiscuous mode [ 1441.540516][T21045] batadv_slave_1: left promiscuous mode [ 1441.825591][ T5782] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 1442.319860][T21056] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3950'. [ 1442.328776][T21056] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3950'. [ 1442.338175][T21056] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3950'. [ 1442.347226][T21056] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3950'. [ 1442.461228][T21065] syzkaller0: entered promiscuous mode [ 1442.490234][T21065] syzkaller0: entered allmulticast mode [ 1443.335852][T21090] Cannot find set identified by id 0 to match [ 1444.254315][T12026] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1444.463368][T12026] usb 8-1: Using ep0 maxpacket: 32 [ 1444.472207][T12026] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.482734][T12026] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x1 has invalid maxpacket 1041, setting to 1024 [ 1444.494396][T12026] usb 8-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1444.504021][T12026] usb 8-1: config 1 interface 2 has no altsetting 0 [ 1444.515294][T12026] usb 8-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 1444.524543][T12026] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.532630][T12026] usb 8-1: Product: syz [ 1444.536947][T12026] usb 8-1: Manufacturer: syz [ 1444.544699][T12026] usb 8-1: SerialNumber: syz [ 1444.836596][T12026] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1444.844637][T12026] usb 8-1: selecting invalid altsetting 0 [ 1444.881415][T12026] snd-usb-audio: probe of 8-1:1.0 failed with error -71 [ 1444.915046][T12026] usb 8-1: USB disconnect, device number 44 [ 1444.961209][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1445.888121][T21091] batadv_slave_1: entered promiscuous mode [ 1445.911580][T21092] batadv_slave_1: left promiscuous mode [ 1446.206569][ T5782] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 1446.646388][T21114] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3963'. [ 1446.655351][T21114] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3963'. [ 1446.689436][T21114] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3963'. [ 1446.698615][T21114] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3963'. [ 1447.318299][T21138] Cannot find set identified by id 0 to match [ 1447.469521][ T27] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1447.470801][T21140] batadv_slave_1: entered promiscuous mode [ 1447.669105][ T27] usb 7-1: Using ep0 maxpacket: 32 [ 1447.685403][ T27] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1447.697240][ T27] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1447.707471][ T27] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1447.716781][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.770128][ T27] usb 7-1: config 0 descriptor?? [ 1447.798448][ T27] hub 7-1:0.0: USB hub found [ 1447.986497][ T27] hub 7-1:0.0: 1 port detected [ 1448.090892][T21142] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1448.622509][ T27] hub 7-1:0.0: activate --> -90 [ 1448.826580][ T27] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 1448.827098][T12026] usb 7-1: USB disconnect, device number 45 [ 1450.285039][T21140] batadv_slave_1: left promiscuous mode [ 1450.544341][ T5782] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 1451.331949][T21182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3976'. [ 1451.341927][T21182] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3976'. [ 1451.486219][T21173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3976'. [ 1451.495326][T21173] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3976'. [ 1451.585474][T21187] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1500) ! [ 1451.612933][T21187] syzkaller0: entered promiscuous mode [ 1451.621150][T21187] syzkaller0: entered allmulticast mode [ 1451.624896][T21191] Cannot find set identified by id 0 to match [ 1451.631962][T21189] syzkaller0: entered promiscuous mode [ 1451.640589][T21189] syzkaller0: entered allmulticast mode [ 1451.988579][T21193] batadv_slave_1: entered promiscuous mode [ 1452.442647][T21190] batadv_slave_1: left promiscuous mode [ 1452.569078][T21200] syzkaller0: entered promiscuous mode [ 1452.574588][T21200] syzkaller0: entered allmulticast mode [ 1454.477554][T21207] syzkaller0: entered promiscuous mode [ 1454.483291][T21207] syzkaller0: entered allmulticast mode [ 1454.700143][T21210] netlink: 'syz.6.3987': attribute type 7 has an invalid length. [ 1454.708058][T21210] netlink: 'syz.6.3987': attribute type 7 has an invalid length. [ 1454.814520][ T5782] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 1454.928623][T21217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3990'. [ 1454.940002][T12026] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1454.951789][T21217] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3990'. [ 1455.019011][T21217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3990'. [ 1455.036788][T21217] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3990'. [ 1455.286899][T12026] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1455.319013][T21220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1455.332022][T12026] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1455.341956][T21219] syzkaller0: entered promiscuous mode [ 1455.347635][T21219] syzkaller0: entered allmulticast mode [ 1455.363997][T12026] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.396312][T12026] usb 8-1: config 0 descriptor?? [ 1455.561254][T21227] Cannot find set identified by id 0 to match [ 1455.779044][T12026] usbhid 8-1:0.0: can't add hid device: -71 [ 1455.814264][T21229] batadv_slave_1: entered promiscuous mode [ 1455.989347][ T1062] block nbd7: Possible stuck request ffff8880221a0000: control (read@0,1024B). Runtime 420 seconds [ 1455.989448][T12026] usbhid: probe of 8-1:0.0 failed with error -71 [ 1456.000468][ T1062] block nbd7: Possible stuck request ffff888022198000: control (read@1024,3072B). Runtime 420 seconds [ 1456.112645][T12026] usb 8-1: USB disconnect, device number 45 [ 1456.196261][T21226] batadv_slave_1: left promiscuous mode [ 1456.281184][T21236] syzkaller0: entered promiscuous mode [ 1456.286712][T21236] syzkaller0: entered allmulticast mode [ 1456.402294][T21243] netlink: 'syz.3.3999': attribute type 7 has an invalid length. [ 1456.413689][T21243] netlink: 'syz.3.3999': attribute type 7 has an invalid length. [ 1456.499031][T12026] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1456.700119][ T5782] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 1456.956857][T12026] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1457.115304][T12026] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1457.124854][T12026] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.143154][T21254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4001'. [ 1457.152118][T21254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4001'. [ 1457.161954][T21254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4001'. [ 1457.170838][T21254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4001'. [ 1457.203763][T12026] usb 8-1: config 0 descriptor?? [ 1457.284128][T21261] syzkaller0: entered promiscuous mode [ 1457.295763][T21261] syzkaller0: entered allmulticast mode [ 1457.422647][T21267] Cannot find set identified by id 0 to match [ 1457.757578][T21270] batadv_slave_1: entered promiscuous mode [ 1457.992169][T21268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1458.033089][T21266] batadv_slave_1: left promiscuous mode [ 1458.098262][T21277] syzkaller0: entered promiscuous mode [ 1458.104102][T21277] syzkaller0: entered allmulticast mode [ 1458.199784][T12026] aiptek 8-1:0.0: Aiptek using 400 ms programming speed [ 1458.208672][T12026] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input92 [ 1458.255092][T21279] netlink: 'syz.6.4009': attribute type 7 has an invalid length. [ 1458.264530][T21279] netlink: 'syz.6.4009': attribute type 7 has an invalid length. [ 1458.279705][T15595] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1458.438681][ T27] usb 8-1: USB disconnect, device number 46 [ 1458.438773][ C0] aiptek 8-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1458.469046][T15595] usb 4-1: Using ep0 maxpacket: 32 [ 1458.491548][T15595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1458.515605][T15595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1458.540173][T15595] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1458.576967][T15595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.616684][T15595] usb 4-1: config 0 descriptor?? [ 1458.644396][T15595] hub 4-1:0.0: USB hub found [ 1458.805377][ T5782] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 1458.926726][T21298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4012'. [ 1458.930142][T15595] hub 4-1:0.0: 1 port detected [ 1458.942673][T21298] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4012'. [ 1458.969163][T21298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4012'. [ 1458.978171][T21298] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4012'. [ 1459.640426][T15595] hub 4-1:0.0: activate --> -90 [ 1459.674466][T21310] Cannot find set identified by id 0 to match [ 1459.779453][T21312] batadv_slave_1: entered promiscuous mode [ 1459.876247][T15595] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1459.885964][T15595] usb 4-1: Failed to suspend device, error -19 [ 1459.885979][T12026] usb 4-1: USB disconnect, device number 95 [ 1460.243522][T21313] syzkaller0: entered promiscuous mode [ 1460.257271][T21313] syzkaller0: entered allmulticast mode [ 1460.276447][T21309] batadv_slave_1: left promiscuous mode [ 1460.375869][T21318] netlink: 'syz.5.4018': attribute type 7 has an invalid length. [ 1460.384144][T21318] netlink: 'syz.5.4018': attribute type 7 has an invalid length. [ 1460.948979][ T5782] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 1461.126810][T21345] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4023'. [ 1461.135928][T21345] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4023'. [ 1461.579092][T21354] Cannot find set identified by id 0 to match [ 1461.751378][T21355] batadv_slave_1: entered promiscuous mode [ 1461.870490][T21359] netlink: 'syz.6.4028': attribute type 7 has an invalid length. [ 1461.881974][T21359] netlink: 'syz.6.4028': attribute type 7 has an invalid length. [ 1461.904203][T21356] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1462.278555][T21353] batadv_slave_1: left promiscuous mode [ 1462.649115][T12026] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1462.859043][T12026] usb 7-1: Using ep0 maxpacket: 32 [ 1463.767491][T12026] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1464.284016][T12026] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1464.331040][T12026] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1464.358968][T12026] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.405147][T12026] usb 7-1: config 0 descriptor?? [ 1464.440860][T16516] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 1464.445886][T21383] __nla_validate_parse: 2 callbacks suppressed [ 1464.445901][T21383] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4034'. [ 1464.467702][T21383] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4034'. [ 1464.563414][T21383] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4034'. [ 1464.572584][T21383] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4034'. [ 1464.829045][T16516] Bluetooth: hci4: command 0x0406 tx timeout [ 1464.854190][T12026] hub 7-1:0.0: USB hub found [ 1465.088602][T12026] hub 7-1:0.0: 1 port detected [ 1465.323221][T21398] netlink: 'syz.5.4039': attribute type 7 has an invalid length. [ 1465.351510][T21398] netlink: 'syz.5.4039': attribute type 7 has an invalid length. [ 1465.566917][ T1062] block nbd3: Possible stuck request ffff888021f70000: control (read@0,1024B). Runtime 510 seconds [ 1465.577750][ T1062] block nbd3: Possible stuck request ffff888021f70200: control (read@1024,3072B). Runtime 510 seconds [ 1465.655068][ T6405] hub 7-1:0.0: activate --> -90 [ 1465.767357][T21404] syzkaller0: entered promiscuous mode [ 1465.772992][T21404] syzkaller0: entered allmulticast mode [ 1465.856637][T12026] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 1465.865367][ T6405] usb 7-1: USB disconnect, device number 46 [ 1466.333234][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1466.344983][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1466.353470][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1466.385354][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1466.402938][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1466.427328][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1466.549547][ T5782] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 1467.544405][T21416] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4044'. [ 1467.553483][T21416] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4044'. [ 1467.563141][T21416] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4044'. [ 1467.572061][T21416] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4044'. [ 1467.906066][T21413] chnl_net:caif_netlink_parms(): no params data found [ 1468.109897][T21413] bridge0: port 1(bridge_slave_0) entered blocking state [ 1468.117234][T21413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1468.124627][T21413] bridge_slave_0: entered allmulticast mode [ 1468.132224][T21413] bridge_slave_0: entered promiscuous mode [ 1468.141603][T21413] bridge0: port 2(bridge_slave_1) entered blocking state [ 1468.149335][T21413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1468.163554][T21413] bridge_slave_1: entered allmulticast mode [ 1468.171273][T21413] bridge_slave_1: entered promiscuous mode [ 1468.254152][T21413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1468.272819][T21413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1468.317226][T21413] team0: Port device team_slave_0 added [ 1468.329985][T21413] team0: Port device team_slave_1 added [ 1468.339221][T21458] syzkaller0: entered promiscuous mode [ 1468.361649][T21458] syzkaller0: entered allmulticast mode [ 1468.454922][T21413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1468.463186][T21413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1468.490666][T21413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1468.502466][ T5782] Bluetooth: hci3: command tx timeout [ 1468.523960][T21413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1468.531017][T21413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1468.558285][T21413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1468.635239][T21413] hsr_slave_0: entered promiscuous mode [ 1468.643070][T21413] hsr_slave_1: entered promiscuous mode [ 1468.859373][ T6405] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1469.049358][ T6405] usb 7-1: Using ep0 maxpacket: 32 [ 1469.117612][ T6405] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1469.163731][ T6405] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1469.214012][T21413] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1469.277647][ T6405] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1469.372264][ T6405] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.600018][ T6405] usb 7-1: config 0 descriptor?? [ 1469.673167][ T6405] hub 7-1:0.0: USB hub found [ 1469.707287][T21413] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1469.898631][T21413] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1469.950127][ T6405] hub 7-1:0.0: 1 port detected [ 1470.137953][T21413] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1470.173643][ T5782] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 1470.693149][ T6405] hub 7-1:0.0: activate --> -90 [ 1470.706717][ T5782] Bluetooth: hci3: command tx timeout [ 1470.749836][T21480] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4055'. [ 1470.758771][T21480] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4055'. [ 1470.768593][T21480] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4055'. [ 1470.777731][T21480] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4055'. [ 1470.895248][T16703] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 1470.902830][T12026] usb 7-1: USB disconnect, device number 47 [ 1470.918400][T21413] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1470.946052][T21413] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1470.963567][T21489] syzkaller0: entered promiscuous mode [ 1470.971256][T21489] syzkaller0: entered allmulticast mode [ 1470.978607][T21413] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1470.996079][T21413] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1471.117889][T21413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1471.155126][T21413] 8021q: adding VLAN 0 to HW filter on device team0 [ 1471.196430][T13431] bridge0: port 1(bridge_slave_0) entered blocking state [ 1471.203625][T13431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1471.218157][T13431] bridge0: port 2(bridge_slave_1) entered blocking state [ 1471.225384][T13431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1471.316402][T21413] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1472.396589][T21507] vivid-002: kernel_thread() failed [ 1472.532869][T21413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1472.672960][T21517] tmpfs: Unknown parameter 'grpquota2' [ 1472.739511][ T5782] Bluetooth: hci3: command tx timeout [ 1473.679988][ T5782] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 1474.236460][T21522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4066'. [ 1474.245760][T21522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4066'. [ 1474.262901][T21522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4066'. [ 1474.272107][T21522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4066'. [ 1474.299960][T21413] veth0_vlan: entered promiscuous mode [ 1474.329972][T21413] veth1_vlan: entered promiscuous mode [ 1474.396665][T21413] veth0_macvtap: entered promiscuous mode [ 1474.416939][T21413] veth1_macvtap: entered promiscuous mode [ 1474.508806][T21537] syzkaller0: entered promiscuous mode [ 1474.514771][T21537] syzkaller0: entered allmulticast mode [ 1474.527741][T21413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1474.546098][T21413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1474.829336][ T5782] Bluetooth: hci3: command tx timeout [ 1474.919213][T12179] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1475.124703][T12179] usb 8-1: Using ep0 maxpacket: 32 [ 1475.132872][T12179] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1475.145801][T12179] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1475.155947][T12179] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1475.165410][T12179] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.180579][T12179] usb 8-1: config 0 descriptor?? [ 1475.190238][T12179] hub 8-1:0.0: USB hub found [ 1475.393768][T12179] hub 8-1:0.0: 1 port detected [ 1476.009561][T15595] hub 8-1:0.0: activate --> -90 [ 1476.216617][T15595] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 1476.223620][T12179] usb 8-1: USB disconnect, device number 47 [ 1477.765946][T21413] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.779975][T21413] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.798956][T21413] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.807663][T21413] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.989357][T21553] syzkaller0: entered promiscuous mode [ 1477.994876][T21553] syzkaller0: entered allmulticast mode [ 1478.021314][T21413] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 1478.049016][T21413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1478.081745][T13431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1478.096673][T13431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1478.216776][ T5782] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 1478.725519][T13431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1478.742063][T21564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4076'. [ 1478.751007][T21564] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4076'. [ 1478.761060][T21564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4076'. [ 1478.770010][T21564] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4076'. [ 1478.788964][T13431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1480.713778][T21600] syzkaller0: entered promiscuous mode [ 1480.755024][ T5782] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 1480.803022][T21600] syzkaller0: entered allmulticast mode [ 1481.147957][T21602] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4085'. [ 1481.157172][T21602] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4085'. [ 1481.166376][T21606] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4085'. [ 1481.188118][T21606] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4085'. [ 1481.438626][T21614] syzkaller0: entered promiscuous mode [ 1481.447712][T21614] syzkaller0: entered allmulticast mode [ 1482.272262][T21618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1484.748639][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.758332][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.026079][ T1062] block nbd7: Possible stuck request ffff8880221a0000: control (read@0,1024B). Runtime 450 seconds [ 1486.037276][ T1062] block nbd7: Possible stuck request ffff888022198000: control (read@1024,3072B). Runtime 450 seconds [ 1488.113864][T21671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1488.638787][T21673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4097'. [ 1488.647767][T21673] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4097'. [ 1488.670887][T21673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4097'. [ 1488.679832][T21673] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4097'. [ 1490.230566][T21723] syzkaller0: entered promiscuous mode [ 1490.251888][T21723] syzkaller0: entered allmulticast mode [ 1490.447559][T21726] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1491.110460][ T5782] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 1491.116988][T21735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4111'. [ 1491.127864][T21735] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4111'. [ 1491.181724][T21735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4111'. [ 1491.191953][T21735] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4111'. [ 1493.213579][T21741] nbd: nbd5 already in use [ 1493.218621][T21741] nbd: must specify a size in bytes for the device [ 1493.364154][T21751] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4114'. [ 1494.823736][T21785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4124'. [ 1494.833016][T21785] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4124'. [ 1494.976455][T21785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4124'. [ 1494.986638][T21785] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4124'. [ 1495.619444][T18909] block nbd3: Possible stuck request ffff888021f70000: control (read@0,1024B). Runtime 540 seconds [ 1495.666082][T18909] block nbd3: Possible stuck request ffff888021f70200: control (read@1024,3072B). Runtime 540 seconds [ 1496.915478][T21788] nbd: nbd3 already in use [ 1496.920749][T21788] nbd: must specify a size in bytes for the device [ 1498.231368][ T5782] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 1498.240301][T21828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4135'. [ 1498.256515][T21828] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4135'. [ 1498.420352][T21828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4135'. [ 1498.436288][T21828] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4135'. [ 1498.455849][T21830] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4134'. [ 1499.998287][ T5782] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 1500.004202][T21869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4145'. [ 1500.016205][T21869] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4145'. [ 1500.242330][T21869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4145'. [ 1500.254286][T21869] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4145'. [ 1501.619724][ T5782] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 1501.619972][T21918] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4152'. [ 1502.064315][T21915] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4154'. [ 1502.073334][T21915] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4154'. [ 1502.082978][T21915] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4154'. [ 1502.092133][T21915] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4154'. [ 1503.244679][T21953] nbd: nbd7 already in use [ 1503.261983][T21953] nbd: must specify a size in bytes for the device [ 1503.280445][ T5782] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 1503.315365][T21957] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4165'. [ 1504.259020][T15595] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1504.439000][T15595] usb 7-1: Using ep0 maxpacket: 32 [ 1504.505743][T21973] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1504.518575][T15595] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.612472][T15595] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x1 has invalid maxpacket 1041, setting to 1024 [ 1504.625095][T15595] usb 7-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1504.635650][T15595] usb 7-1: config 1 interface 2 has no altsetting 0 [ 1504.665903][T15595] usb 7-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 1504.679239][T15595] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.704975][T15595] usb 7-1: Product: syz [ 1504.718395][T15595] usb 7-1: Manufacturer: syz [ 1504.725788][T15595] usb 7-1: SerialNumber: syz [ 1505.039797][T15595] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1505.060129][T15595] usb 7-1: selecting invalid altsetting 0 [ 1505.072870][T21982] __nla_validate_parse: 3 callbacks suppressed [ 1505.072885][T21982] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4174'. [ 1505.121969][T15595] snd-usb-audio: probe of 7-1:1.0 failed with error -71 [ 1505.174351][T15595] usb 7-1: USB disconnect, device number 48 [ 1505.248552][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1505.838639][T21988] syzkaller0: entered promiscuous mode [ 1505.879936][T21988] syzkaller0: entered allmulticast mode [ 1506.484035][ T5782] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 1506.668801][T22000] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4178'. [ 1507.365494][T21974] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1507.714861][T22020] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1507.996332][T22026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4186'. [ 1508.246371][T22028] tmpfs: Unknown parameter 'grpquota2' [ 1510.499959][T22014] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1510.730721][ T5782] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 1511.596048][T22053] vivid-000: kernel_thread() failed [ 1511.995259][T22065] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4197'. [ 1514.422161][T22081] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4204'. [ 1516.099329][T18909] block nbd7: Possible stuck request ffff8880221a0000: control (read@0,1024B). Runtime 480 seconds [ 1516.119247][T18909] block nbd7: Possible stuck request ffff888022198000: control (read@1024,3072B). Runtime 480 seconds [ 1516.475771][ T5782] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 1516.926658][T22090] tmpfs: Unknown parameter 'grpquota2' [ 1517.459143][T12179] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1517.649170][T12179] usb 6-1: Using ep0 maxpacket: 32 [ 1517.673698][T12179] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1517.737108][T12179] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1517.764285][T12179] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1517.775268][T12179] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.793808][T12179] usb 6-1: config 0 descriptor?? [ 1517.812070][T12179] hub 6-1:0.0: USB hub found [ 1518.030676][T12179] hub 6-1:0.0: 1 port detected [ 1518.569146][ T27] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1518.638471][T12179] hub 6-1:0.0: activate --> -90 [ 1518.713765][T22111] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4214'. [ 1518.769296][ T27] usb 8-1: Using ep0 maxpacket: 32 [ 1518.780024][ T27] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1518.790928][ T27] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x1 has invalid maxpacket 1041, setting to 1024 [ 1518.802069][ T27] usb 8-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1518.811310][ T27] usb 8-1: config 1 interface 2 has no altsetting 0 [ 1518.821545][ T27] usb 8-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 1518.832271][ T27] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.841984][T12179] hub 6-1:0.0: hub_ext_port_status failed (err = 3) [ 1518.848661][ T27] usb 8-1: Product: syz [ 1518.852972][ T27] usb 8-1: Manufacturer: syz [ 1518.857783][ T27] usb 8-1: SerialNumber: syz [ 1519.630287][T12179] usb 6-1: USB disconnect, device number 54 [ 1519.780263][ T27] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1519.787030][ T27] usb 8-1: selecting invalid altsetting 0 [ 1519.851076][ T27] snd-usb-audio: probe of 8-1:1.0 failed with error -71 [ 1520.029115][ T27] usb 8-1: USB disconnect, device number 48 [ 1520.094359][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1520.135466][T22125] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4217'. [ 1520.385743][ T5782] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 1520.938343][T22138] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4223'. [ 1522.646262][T22152] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1522.860360][ T5782] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 1523.374011][T22152] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1523.554132][T22152] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1523.753368][T22152] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1523.788669][T22184] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4232'. [ 1524.157294][T22198] nbd: nbd3 already in use [ 1524.177680][T22198] nbd: must specify a size in bytes for the device [ 1524.370681][T22152] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1524.481719][T22152] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1524.558366][T22152] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1524.868009][T22152] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1525.010427][T22214] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4239'. [ 1525.299626][T22219] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4242'. [ 1525.701420][ T1062] block nbd3: Possible stuck request ffff888021f70000: control (read@0,1024B). Runtime 570 seconds [ 1525.722812][ T1062] block nbd3: Possible stuck request ffff888021f70200: control (read@1024,3072B). Runtime 570 seconds [ 1526.187877][T22236] nbd: nbd7 already in use [ 1526.239999][T22236] nbd: must specify a size in bytes for the device [ 1526.909683][T22246] syzkaller0: entered promiscuous mode [ 1526.942152][T22246] syzkaller0: entered allmulticast mode [ 1527.498694][T22257] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4254'. [ 1527.704683][T22266] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 1527.882105][ T27] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1528.036670][T22276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4258'. [ 1528.089098][ T27] usb 8-1: Using ep0 maxpacket: 32 [ 1528.118638][ T27] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1528.122018][T22278] tmpfs: Unknown parameter 'grpquota2' [ 1528.329448][ T27] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x1 has invalid maxpacket 1041, setting to 1024 [ 1528.342762][ T27] usb 8-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1528.352688][ T27] usb 8-1: config 1 interface 2 has no altsetting 0 [ 1528.362378][ T27] usb 8-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 1528.371547][ T27] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.379641][ T27] usb 8-1: Product: syz [ 1528.383989][ T27] usb 8-1: Manufacturer: syz [ 1528.388605][ T27] usb 8-1: SerialNumber: syz [ 1529.089578][ T27] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1529.105141][ T27] usb 8-1: selecting invalid altsetting 0 [ 1529.168088][ T27] snd-usb-audio: probe of 8-1:1.0 failed with error -71 [ 1529.232363][ T27] usb 8-1: USB disconnect, device number 49 [ 1529.293112][T22286] nbd: nbd5 already in use [ 1529.374117][T22285] nbd: must specify a size in bytes for the device [ 1529.404135][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1530.504402][T22296] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4265'. [ 1530.671398][T22301] syzkaller0: entered promiscuous mode [ 1530.680239][T22301] syzkaller0: entered allmulticast mode [ 1531.887127][T22323] nbd: must specify a size in bytes for the device [ 1531.987573][T22325] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4274'. [ 1532.368562][T22329] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4275'. [ 1535.151249][T22363] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4285'. [ 1536.694103][T22410] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4296'. [ 1538.664162][T22378] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1538.996474][T22429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1539.873016][T22457] syzkaller0: entered promiscuous mode [ 1539.878544][T22457] syzkaller0: entered allmulticast mode [ 1541.061003][ T29] INFO: task udevd:5768 blocked for more than 143 seconds. [ 1541.068283][ T29] Not tainted syzkaller #0 [ 1541.073711][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1541.082764][ T29] task:udevd state:D stack:25512 pid:5768 ppid:5142 flags:0x00004006 [ 1541.092320][ T29] Call Trace: [ 1541.095653][ T29] [ 1541.098596][ T29] __schedule+0x15ae/0x4660 [ 1541.104567][ T29] ? asan.module_dtor+0x20/0x20 [ 1541.109740][ T29] ? mark_lock+0x94/0x320 [ 1541.115855][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 1541.121306][ T29] ? lock_chain_count+0x20/0x20 [ 1541.126198][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1541.131669][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1541.137298][ T29] schedule+0xbd/0x170 [ 1541.141827][ T29] io_schedule+0x80/0xd0 [ 1541.146106][ T29] folio_wait_bit_common+0x881/0xfa0 [ 1541.152010][ T29] ? folio_wait_bit+0x30/0x30 [ 1541.156715][ T29] ? _compound_head+0x120/0x120 [ 1541.183713][ T29] ? filemap_add_folio+0x190/0x3d0 [ 1541.191420][ T29] ? __filemap_get_folio+0x71e/0xbe0 [ 1541.196736][ T29] ? blkdev_writepage+0x30/0x30 [ 1541.215559][ T29] do_read_cache_folio+0x1c0/0x7f0 [ 1541.227143][ T29] ? blkdev_writepage+0x30/0x30 [ 1541.236887][ T29] read_part_sector+0xd2/0x350 [ 1541.244660][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 1541.254833][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 1541.260777][ T29] ? put_partition+0x360/0x360 [ 1541.272409][ T29] ? alloc_pages+0x4e1/0x740 [ 1541.280936][ T29] bdev_disk_changed+0x755/0x1450 [ 1541.286090][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 1541.291688][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 1541.296996][ T29] ? iput+0x33f/0x900 [ 1541.301281][ T29] blkdev_get_whole+0x30d/0x390 [ 1541.306255][ T29] blkdev_get_by_dev+0x3a9/0x610 [ 1541.311266][ T29] blkdev_open+0x14e/0x360 [ 1541.315711][ T29] do_dentry_open+0x880/0x14b0 [ 1541.320691][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 1541.325306][ T29] path_openat+0x284f/0x3270 [ 1541.329986][ T29] ? do_sys_openat2+0xda/0x1d0 [ 1541.334844][ T29] ? __x64_sys_openat+0x139/0x160 [ 1541.339921][ T29] ? verify_lock_unused+0x140/0x140 [ 1541.345156][ T29] ? do_filp_open+0x430/0x430 [ 1541.349984][ T29] do_filp_open+0x1f2/0x430 [ 1541.354500][ T29] ? vfs_tmpfile+0x480/0x480 [ 1541.359154][ T29] ? _raw_spin_unlock+0x28/0x40 [ 1541.364251][ T29] ? alloc_fd+0x590/0x640 [ 1541.368600][ T29] do_sys_openat2+0x134/0x1d0 [ 1541.373456][ T29] ? do_sys_open+0xe0/0xe0 [ 1541.377884][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1541.384308][ T29] ? lock_chain_count+0x20/0x20 [ 1541.389291][ T29] __x64_sys_openat+0x139/0x160 [ 1541.394178][ T29] do_syscall_64+0x55/0xb0 [ 1541.398613][ T29] ? clear_bhb_loop+0x40/0x90 [ 1541.403356][ T29] ? clear_bhb_loop+0x40/0x90 [ 1541.408051][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1541.414235][ T29] RIP: 0033:0x7fec858a7407 [ 1541.418648][ T29] RSP: 002b:00007ffc50955940 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1541.427224][ T29] RAX: ffffffffffffffda RBX: 00007fec85f84880 RCX: 00007fec858a7407 [ 1541.435272][ T29] RDX: 00000000000a0800 RSI: 0000563bd4f34280 RDI: ffffffffffffff9c [ 1541.443298][ T29] RBP: 0000563bd4f33910 R08: 0000000000000000 R09: 0000000000000000 [ 1541.451342][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000563bd4f48830 [ 1541.459377][ T29] R13: 0000563bd4f4b410 R14: 0000000000000000 R15: 0000563bd4f48830 [ 1541.467612][ T29] [ 1541.470737][ T29] INFO: task udevd:5790 blocked for more than 143 seconds. [ 1541.477945][ T29] Not tainted syzkaller #0 [ 1541.483449][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1541.492193][ T29] task:udevd state:D stack:23144 pid:5790 ppid:5142 flags:0x00004006 [ 1541.501583][ T29] Call Trace: [ 1541.504944][ T29] [ 1541.507938][ T29] __schedule+0x15ae/0x4660 [ 1541.512581][ T29] ? asan.module_dtor+0x20/0x20 [ 1541.517523][ T29] ? mark_lock+0x94/0x320 [ 1541.522169][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 1541.527234][ T29] ? lock_chain_count+0x20/0x20 [ 1541.532155][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1541.537201][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1541.542877][ T29] schedule+0xbd/0x170 [ 1541.546957][ T29] io_schedule+0x80/0xd0 [ 1541.551244][ T29] folio_wait_bit_common+0x881/0xfa0 [ 1541.556546][ T29] ? folio_wait_bit+0x30/0x30 [ 1541.561273][ T29] ? _compound_head+0x120/0x120 [ 1541.566139][ T29] ? filemap_add_folio+0x190/0x3d0 [ 1541.571666][ T29] ? __filemap_get_folio+0x71e/0xbe0 [ 1541.577194][ T29] ? blkdev_writepage+0x30/0x30 [ 1541.582097][ T29] do_read_cache_folio+0x1c0/0x7f0 [ 1541.587218][ T29] ? blkdev_writepage+0x30/0x30 [ 1541.592211][ T29] read_part_sector+0xd2/0x350 [ 1541.597031][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 1541.602458][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 1541.607753][ T29] ? put_partition+0x360/0x360 [ 1541.612586][ T29] ? alloc_pages+0x4e1/0x740 [ 1541.617191][ T29] bdev_disk_changed+0x755/0x1450 [ 1541.622596][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 1541.628432][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 1541.634027][ T29] ? iput+0x33f/0x900 [ 1541.638027][ T29] blkdev_get_whole+0x30d/0x390 [ 1541.643506][ T29] blkdev_get_by_dev+0x3a9/0x610 [ 1541.648502][ T29] blkdev_open+0x14e/0x360 [ 1541.653163][ T29] do_dentry_open+0x880/0x14b0 [ 1541.657954][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 1541.662583][ T29] path_openat+0x284f/0x3270 [ 1541.667192][ T29] ? do_sys_openat2+0xda/0x1d0 [ 1541.672425][ T29] ? __x64_sys_openat+0x139/0x160 [ 1541.677467][ T29] ? verify_lock_unused+0x140/0x140 [ 1541.682723][ T29] ? do_filp_open+0x430/0x430 [ 1541.687421][ T29] do_filp_open+0x1f2/0x430 [ 1541.691986][ T29] ? vfs_tmpfile+0x480/0x480 [ 1541.696601][ T29] ? _raw_spin_unlock+0x28/0x40 [ 1541.715942][ T29] ? alloc_fd+0x590/0x640 [ 1541.720476][ T29] do_sys_openat2+0x134/0x1d0 [ 1541.725196][ T29] ? do_sys_open+0xe0/0xe0 [ 1541.729766][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1541.735778][ T29] ? lock_chain_count+0x20/0x20 [ 1541.741665][ T29] __x64_sys_openat+0x139/0x160 [ 1541.746543][ T29] do_syscall_64+0x55/0xb0 [ 1541.751280][ T29] ? clear_bhb_loop+0x40/0x90 [ 1541.755986][ T29] ? clear_bhb_loop+0x40/0x90 [ 1541.760735][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1541.766652][ T29] RIP: 0033:0x7fec858a7407 [ 1541.774558][ T29] RSP: 002b:00007ffc50955940 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1541.785149][ T29] RAX: ffffffffffffffda RBX: 00007fec85f84880 RCX: 00007fec858a7407 [ 1541.793299][ T29] RDX: 00000000000a0800 RSI: 0000563bd4f45e40 RDI: ffffffffffffff9c [ 1541.804756][ T29] RBP: 0000563bd4f33910 R08: 0000000000000000 R09: 0000000000000000 [ 1541.812904][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000563bd4f33fb0 [ 1541.821100][ T29] R13: 0000563bd4f4b410 R14: 0000000000000000 R15: 0000563bd4f33fb0 [ 1541.829161][ T29] [ 1541.832257][ T29] [ 1541.832257][ T29] Showing all locks held in the system: [ 1541.840055][ T29] 1 lock held by khungtaskd/29: [ 1541.844949][ T29] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1541.856352][ T29] 2 locks held by getty/5530: [ 1541.861146][ T29] #0: ffff888031e020a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1541.874581][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 1541.886062][ T29] 2 locks held by kworker/1:3/5765: [ 1541.891666][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1541.902862][ T29] #1: ffffc900045ffd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1541.914943][ T29] 1 lock held by udevd/5768: [ 1541.920469][ T29] #0: ffff888021eed4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 1541.931061][ T29] 1 lock held by udevd/5790: [ 1541.935693][ T29] #0: ffff8880220f54c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 1541.945753][ T29] 3 locks held by kworker/0:7/6405: [ 1541.951026][ T29] #0: ffff888017c71d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1541.963667][ T29] #1: ffffc9000c9f7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1541.974770][ T29] #2: ffffffff8e3bfe48 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x92/0xd90 [ 1541.984706][ T29] 2 locks held by kworker/u4:13/13423: [ 1541.990279][ T29] 3 locks held by kworker/u4:23/13436: [ 1541.995739][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1542.007526][ T29] #1: ffffc90010b0fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1542.018577][ T29] #2: ffffffff8e3bfe48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1542.027647][ T29] 1 lock held by syz.5.4306/22464: [ 1542.032902][ T29] #0: ffffffff8e3bfe48 (rtnl_mutex){+.+.}-{3:3}, at: tcx_prog_query+0x86/0x140 [ 1542.042313][ T29] 2 locks held by syz.7.4308/22456: [ 1542.047518][ T29] #0: ffffffff8e3bfe48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 1542.056732][ T29] #1: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 1542.067695][ T29] 2 locks held by syz.6.4311/22470: [ 1542.073240][ T29] #0: ffff8880756a6820 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 1542.083860][ T29] #1: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 1542.094839][ T29] 1 lock held by syz.6.4311/22472: [ 1542.100194][ T29] #0: ffffffff8e3bfe48 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f7/0x2070 [ 1542.109593][ T29] 1 lock held by syz.6.4311/22473: [ 1542.114734][ T29] #0: ffffffff8e3bfe48 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140 [ 1542.123641][ T29] 1 lock held by syz.6.4311/22475: [ 1542.128753][ T29] #0: ffffffff8e3bfe48 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f7/0x2070 [ 1542.138189][ T29] [ 1542.143661][ T29] ============================================= [ 1542.143661][ T29] [ 1542.152188][ T29] NMI backtrace for cpu 0 [ 1542.156517][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1542.163717][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1542.173767][ T29] Call Trace: [ 1542.177044][ T29] [ 1542.179969][ T29] dump_stack_lvl+0x18c/0x250 [ 1542.184638][ T29] ? __wake_up_klogd+0xd9/0x100 [ 1542.189492][ T29] ? show_regs_print_info+0x20/0x20 [ 1542.194709][ T29] ? load_image+0x420/0x420 [ 1542.199235][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 1542.204175][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1542.210336][ T29] ? load_image+0x420/0x420 [ 1542.214849][ T29] ? wq_watchdog_touch+0xef/0x170 [ 1542.219880][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1542.225937][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1542.231928][ T29] watchdog+0xf59/0xfa0 [ 1542.236102][ T29] ? watchdog+0x1e1/0xfa0 [ 1542.240422][ T29] kthread+0x2fa/0x390 [ 1542.244486][ T29] ? hungtask_pm_notify+0x50/0x50 [ 1542.249521][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1542.254121][ T29] ret_from_fork+0x48/0x80 [ 1542.258545][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1542.263125][ T29] ret_from_fork_asm+0x11/0x20 [ 1542.267893][ T29] [ 1542.271606][ T29] Sending NMI from CPU 0 to CPUs 1: [ 1542.276904][ C1] NMI backtrace for cpu 1 [ 1542.276923][ C1] CPU: 1 PID: 5763 Comm: syz-executor Not tainted syzkaller #0 [ 1542.276939][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1542.276948][ C1] RIP: 0010:check_preemption_disabled+0x60/0x110 [ 1542.276968][ C1] Code: 00 48 3b 4c 24 08 0f 85 c4 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d c3 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 <74> cc 65 4c 8b 3d 86 ca 7f 75 41 f6 47 2f 04 74 0a 41 83 bf 10 04 [ 1542.276981][ C1] RSP: 0018:ffffc900045efa70 EFLAGS: 00000046 [ 1542.276995][ C1] RAX: 0000000000000001 RBX: ffffffff8a8d826f RCX: 0000000080000000 [ 1542.277007][ C1] RDX: 0000000000000000 RSI: ffffffff8acacb80 RDI: ffffffff8b1c7be0 [ 1542.277018][ C1] RBP: ffffc900045efb70 R08: ffff888021fa001b R09: 1ffff110043f4003 [ 1542.277029][ C1] R10: dffffc0000000000 R11: ffffed10043f4004 R12: dffffc0000000000 [ 1542.277040][ C1] R13: dffffc0000000000 R14: 0000000000000a06 R15: 1ffff920008bdf5c [ 1542.277051][ C1] FS: 000055557ddab500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1542.277065][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1542.277076][ C1] CR2: 0000001b33724220 CR3: 0000000078e83000 CR4: 00000000003506e0 [ 1542.277089][ C1] Call Trace: [ 1542.277095][ C1] [ 1542.277101][ C1] ? _raw_spin_lock_irqsave+0x8f/0x100 [ 1542.277123][ C1] lockdep_hardirqs_off+0xab/0x100 [ 1542.277143][ C1] ? debug_objects_fill_pool+0x8b/0x790 [ 1542.277163][ C1] ? _raw_spin_lock_irqsave+0x8f/0x100 [ 1542.277183][ C1] trace_hardirqs_off+0x12/0x40 [ 1542.277209][ C1] _raw_spin_lock_irqsave+0x8f/0x100 [ 1542.277230][ C1] ? _raw_spin_lock+0x40/0x40 [ 1542.277254][ C1] hrtimer_start_range_ns+0xf5/0x1080 [ 1542.277275][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1542.277292][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 1542.277310][ C1] do_nanosleep+0x17e/0x5e0 [ 1542.277332][ C1] ? do_nanosleep+0x80/0x5e0 [ 1542.277352][ C1] ? usleep_range_state+0x1b0/0x1b0 [ 1542.277371][ C1] ? __asan_memset+0x22/0x40 [ 1542.277390][ C1] ? __hrtimer_init+0x189/0x270 [ 1542.277407][ C1] hrtimer_nanosleep+0x175/0x370 [ 1542.277423][ C1] ? __might_fault+0xc6/0x120 [ 1542.277439][ C1] ? nanosleep_copyout+0x120/0x120 [ 1542.277456][ C1] ? __remove_hrtimer+0x470/0x470 [ 1542.277473][ C1] ? timespec64_add_safe+0x1f0/0x1f0 [ 1542.277498][ C1] __se_sys_clock_nanosleep+0x30f/0x3a0 [ 1542.277519][ C1] ? __x64_sys_clock_nanosleep+0xb0/0xb0 [ 1542.277537][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1542.277558][ C1] do_syscall_64+0x55/0xb0 [ 1542.277574][ C1] ? clear_bhb_loop+0x40/0x90 [ 1542.277588][ C1] ? clear_bhb_loop+0x40/0x90 [ 1542.277603][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1542.277623][ C1] RIP: 0033:0x7f37ec558fd7 [ 1542.277634][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1542.277647][ C1] RSP: 002b:00007ffe26272e10 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 1542.277662][ C1] RAX: ffffffffffffffda RBX: 000055557ddab500 RCX: 00007f37ec558fd7 [ 1542.277672][ C1] RDX: 00007ffe26272e50 RSI: 0000000000000000 RDI: 0000000000000000 [ 1542.277682][ C1] RBP: 00007ffe26273330 R08: 0000000000000000 R09: 0000000000000000 [ 1542.277691][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 1542.277700][ C1] R13: 00007ffe26272e8c R14: 00007ffe26272f20 R15: 0000000000000000 [ 1542.277718][ C1] [ 1542.278052][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1542.619827][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1542.627014][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1542.637055][ T29] Call Trace: [ 1542.640327][ T29] [ 1542.643247][ T29] dump_stack_lvl+0x18c/0x250 [ 1542.647945][ T29] ? show_regs_print_info+0x20/0x20 [ 1542.653133][ T29] ? load_image+0x420/0x420 [ 1542.657633][ T29] panic+0x2ca/0x720 [ 1542.661529][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 1542.666024][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 1542.671562][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 1542.677026][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1542.683179][ T29] watchdog+0xf98/0xfa0 [ 1542.687329][ T29] ? watchdog+0x1e1/0xfa0 [ 1542.691652][ T29] kthread+0x2fa/0x390 [ 1542.695710][ T29] ? hungtask_pm_notify+0x50/0x50 [ 1542.700727][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1542.705305][ T29] ret_from_fork+0x48/0x80 [ 1542.709712][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1542.714293][ T29] ret_from_fork_asm+0x11/0x20 [ 1542.719059][ T29] [ 1542.722388][ T29] Kernel Offset: disabled [ 1542.726696][ T29] Rebooting in 86400 seconds..