last executing test programs: 56.205335234s ago: executing program 2 (id=2636): add_key(&(0x7f0000000180)='rxrpc\x00', 0x0, &(0x7f00000001c0)="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", 0x216, 0xffffffffffffffff) 54.87518444s ago: executing program 2 (id=2644): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000440), 0x56) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r1, 0x42, 0x4000}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000580)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 54.19834162s ago: executing program 2 (id=2649): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000000)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000140)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000200)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x3, 0x256}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1000, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x20146, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xacdc, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x400, 0x2, 0x367}}], 0x1, &(0x7f0000000540)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f0000000800)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r14, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a809000008000b000000000006000100070000000c000f00050000000000000005000500"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r15 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r15, &(0x7f0000000f40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r15, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r10, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x804) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f000000db40)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1, 0xa, 0x10, 0x10, 0x10, 0x2710, 0xea60}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) 49.874866309s ago: executing program 2 (id=2679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x2, 0x0) (async) openat$fault_inject(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/fail_usercopy/probability\x00', 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000003c0)={0x4, 0xfff, 0x1bf, 0x42000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000700)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delvlan={0x38, 0x71, 0x8, 0x0, 0x25dfdbfe, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c95}, 0x40) (async) pipe2(&(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000b40)={0x0, 0x0, 0x400, 0x2, 0x55}, &(0x7f0000000bc0)=0x0, &(0x7f0000000c00)=0x0, &(0x7f0000000c40)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000c80)=@IORING_OP_SENDMSG={0x9, 0x0, 0x20, r4, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x7, 0x3ed763469f8f58cc}) (async) time(0xfffffffffffffffc) (async) read$watch_queue(r4, &(0x7f0000000d40)=""/188, 0xbc) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r10, 0x4068aea3, &(0x7f0000000500)={0xa4, 0x0, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000580)=@x86={0x10, 0x4, 0x1, 0x0, 0xffff, 0x5, 0x5, 0x1, 0xa, 0x8, 0x8, 0x14, 0x0, 0x40005, 0x10, 0xfe, 0x85, 0x7, 0x1, '\x00', 0x6, 0x4}) (async) ioctl$KVM_GET_SREGS(r11, 0x8138ae83, &(0x7f00000005c0)) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r8, {0xffe0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x20000010) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r8, {0xffe0, 0x7}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x28, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x2}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7fff, 0x7, 0x9}, {{0x2, 0x1}, {0x4, 0x1}}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4004880) 49.103706505s ago: executing program 2 (id=2686): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000005c0)=0x7) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x135) openat$binderfs(0xffffffffffffff9c, &(0x7f00000008c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) (async, rerun: 32) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e20, 0x200, @loopback, 0x1}, @ib={0x1b, 0x0, 0xc, {"7d735931001016095e000303ff010001"}, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r4}}, 0x10) (async, rerun: 32) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {0x0, r4}}, 0x18) (async, rerun: 32) r5 = syz_usb_connect(0x0, 0x371, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) (async) write$char_usb(r6, &(0x7f0000000700)="10", 0x20) (async) close(r6) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000b80)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async) syz_usb_control_io(r5, 0x0, 0x0) (async, rerun: 64) r8 = landlock_create_ruleset(&(0x7f0000000bc0)={0x536f}, 0x30, 0x0) (rerun: 64) landlock_restrict_self(r8, 0xe) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00@\x00\x00\x00\x00\x00'], 0x20}}, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000009c0)) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000a00)=@arm64={0x10, 0x41, 0xb2}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000a40)={0x1, 0x0, [{0x340, 0x0, 0x80000006}]}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 46.585825673s ago: executing program 2 (id=2700): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000180)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x44}}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) unshare(0x4000000) syz_usb_connect(0x0, 0x45, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000440)) io_setup(0x8, &(0x7f0000000480)=0x0) io_submit(r5, 0x1, &(0x7f00000004c0)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000540)='-3', 0x2}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000580)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, &(0x7f0000000600)) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000640), 0x88002, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000680)=0xd) r7 = open(&(0x7f00000006c0)='./bus\x00', 0x143142, 0xc0) ftruncate(r7, 0x2007ffb) getrandom(&(0x7f0000000700)=""/286, 0xffffff9a, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880), &(0x7f00000008c0), 0x401, r8, 0x0, 0xa002a0}, 0x38) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000900), 0x88800, 0x0) sendfile(r6, r7, 0x0, 0x1000000201002) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r1, 0x4068aea3, &(0x7f0000000380)={0xd4, 0x0, 0xedcd}) 31.608679401s ago: executing program 32 (id=2700): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000180)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x44}}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) unshare(0x4000000) syz_usb_connect(0x0, 0x45, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000440)) io_setup(0x8, &(0x7f0000000480)=0x0) io_submit(r5, 0x1, &(0x7f00000004c0)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000540)='-3', 0x2}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000580)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, &(0x7f0000000600)) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000640), 0x88002, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000680)=0xd) r7 = open(&(0x7f00000006c0)='./bus\x00', 0x143142, 0xc0) ftruncate(r7, 0x2007ffb) getrandom(&(0x7f0000000700)=""/286, 0xffffff9a, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880), &(0x7f00000008c0), 0x401, r8, 0x0, 0xa002a0}, 0x38) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000900), 0x88800, 0x0) sendfile(r6, r7, 0x0, 0x1000000201002) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r1, 0x4068aea3, &(0x7f0000000380)={0xd4, 0x0, 0xedcd}) 12.409684355s ago: executing program 5 (id=2875): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="020000000400000004000000f1ffe709d7fb0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) (async, rerun: 32) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@arena={0x21, 0x0, 0x0, 0x25, 0x20000, r0, 0x1, '\x00', r1, r2, 0x3, 0x4, 0x2}, 0x50) close(0x3) (async) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000002c0)={0x34, &(0x7f0000000300)={0x0, 0x12, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000400)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$uac3(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000500)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r6, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x24002080) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) (async) ioctl$SNDCTL_TMR_STOP(r3, 0x5403) (async, rerun: 64) r7 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r8, 0x1, 0x4b, 0x0, &(0x7f00000000c0)) (async) poll(&(0x7f0000000100)=[{r0}, {r3, 0x8104}, {r7, 0x80}, {r0, 0x1}, {r3, 0x4003}, {r8, 0x8020}, {r0, 0x1102}, {r0, 0x4c4}, {r3}], 0x9, 0xeb) 9.797744807s ago: executing program 5 (id=2882): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001480), 0x201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) getsockopt$inet_mptcp_MPTCP_FULL_INFO(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) 9.177331333s ago: executing program 5 (id=2886): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000780)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000007c0)={'batadv_slave_0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000800)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff8}, {0x8, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x6, 0x2000080, 0x1}, @multicast2, @multicast2, 0x0, 0x8001}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000a80)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) write$tun(r2, &(0x7f0000000ac0)=ANY=[], 0xfdef) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r8 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r8, &(0x7f0000000200)={0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="000b20000000200eb7637c75f31eceac6046df5b6f7154000000000000000000000000000000adba8f906f79de3687e52841410ab010b3224037936dbd3acf8e60522561c3cfa01cdb421a15d158f46b4e2e47a1b13d84bbf01f54d80becfeb1f429ddbffd4e468b7df33899730236c1768e520d40cef56b7c284d80ce93", @ANYRES16=r6, @ANYRESDEC=r2, @ANYRESOCT=r3], &(0x7f0000000c40)=ANY=[@ANYBLOB="00039e0000009e03806116fd136179da6fc0a662483a2ae7e241674c1b04f5ea53db813b9be8f2211cf421b7aa6a0d600eddd82b45d271c2d3847de2a06d522f64a173b5746359d575b4d66d4b7ce96a1360f9cc7f6788cbe0aee8be3812519df3340bc3e3faad9a1a47f2e70a5d5b5fdf8263a29717024c6de59a3e848ec23b2fb1d2cedd0d9177af789192494b5193b4f47502da3a14b600"/164, @ANYRES8=0x0]}, &(0x7f0000000740)={0x1c, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1], &(0x7f00000002c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000b80)=ANY=[]}) 9.059075847s ago: executing program 4 (id=2888): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x213, &(0x7f0000000040)={0x0, 0xfa8d, 0x40, 0x3, 0x800001fe}) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000140)={0x0, 0x30b7, 0x0, 0x2, 0x8000377}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000280)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x6, 0xa26, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff, 0x0, 0x4}}}, &(0x7f0000000340)) r4 = getpid() r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103a42, 0x32) sigaltstack(&(0x7f0000000700)={0x0, 0x80000001}, 0x0) r6 = io_uring_setup(0xc90, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x800}) io_uring_register$IORING_UNREGISTER_RING_FDS(r6, 0x15, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff}], 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000800), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000840)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r7, r7, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000880)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000008c0)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000900)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c00000010000305ffffffffffffffff00000000", @ANYRES32=0x0, @ANYBLOB="44000000000000001c0012800b00010065727370616e00000c000280062003188183e100"], 0x3c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) sendmmsg(r8, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000ac0)="143613d0273152d4b270d784e4b24ddb50a607917dcde0e686ffe2dd57eecac45d1c0ac375910a54b3e528064f9f7b32ccf09a58fb853f01fde40747682aae9fe62528aa079cb20dec920ed135a376c4d7101a28e00a4f0ac80a53e476c16191dfae8a4d677c356e032bae46e8f2", 0x6e}, {&(0x7f0000000b40)="a83e1667578a94c8099b2308f1b3f5776f9e35504e45f3208326b731ef98fa9a9d438256fd5ed0549c9226720f2211f477657ce3286025be7740cf9a847d261f63f7b7f62a81cca5ecf99d9863ee4637e92c49005f8af6d0e9cbba7eb4a15292066520a620f77f92105f69870313d59ec234", 0x72}, {&(0x7f0000000bc0)="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", 0xfe}, {&(0x7f0000000cc0)="8b5be6ff0cab659790aeefbcf3c0c1f3fd676444da9c597ed52c54dd4b40470ce437367bfae5547ba2a7e5db3db1ef03c5d8f0848dbca0d7379df980a7752edf7f291a167f17b697990f2380ee842c3910174199a0a8f1330dee31fd3f9f61403b481be78d0c859eb11876db9795c7c20e602ca67be55c88b9efa3a6555280767cba41edf78d7129b6d3a420ac9d775b0acc638323df0e925ab7a4da50b8e58a1a90f18a32a38ca7f68bd7804c4646ad320ac5cfcb1ec55a2882be1eb9f87f0197a68fbbc3b5c0c008e47ac9f06e75d51e25ac3bfab6cddf8158312565a73d10328b65aefc32b8b889fecb9262259690321c091a298c891bc5036c25778b7d46db3a3130f3bdecc23b7896db92ad2762f9acf02cbbac3406826ae295f99a6fb50f7a73e7738b5a04e2ed3dcd00524dacd51fa44166619cdd534eda91bcb5b83f7820d1218ee2008dd567023a65072c8ac6f1c0bae8a8e3d4b87d4acd25ccd2be290464c1541040d3b170731c6677e5a8645c474cda8672dfe4e46d01461091cbb35fd56783c114e67d97ea498f6d5da3ec96ee527019763a751f4310766b1a059bc162fdd7208064787344905ba69f98eccb744ccb052f0659dc8510b8fdddc3e067cd6fed7f25c90113e5dcdd1e21ba4ea3963db685874aa7c1cd3b0a1152477a9ad94fae1cbc86b70c3ee77914887455b788c4e8578c8eabcc", 0x1fa}, {&(0x7f0000000ec0)="9edac3d653025a591d1ac930ab3d84bc039bb59990288cb7f4a6a6b21e418d99e96102dc3e8ba0b5be599dddabca3eddce02f1f9ae87a60da90c06825da96e96d5385a0b90d07575f9d26e6270928699d0eedd89313599e50741e437ed17ce4a59a11b2c6e6dd585fb2b127fc843cea8df211c6f8b87def592966b0ff45b1b5f3cbdf95d65a0102c16891df2feff28bdb4bf1a2117fbdfeb12947703ef3b38adf122f9453539ffbb298c64394bdf1599c318480b233c2e1e17f03e0b74f46efd60985526", 0xc4}, {&(0x7f0000000fc0)}, {&(0x7f0000001000)="c6af36c277b4b70ecafd6506a840259b69a4d8171c4a41382ce9c9699f44bba5def25d60a3e3d5d38fd87fc6f2f6592e88c35723dda2089f5119cc12d030ef7abc632140c69fe21ad9edcfb1c99b0633cdabb633397c3954f6752ac246554bc16e1ee17fd0fa89efc9c648d4c335a4f9e11436af9e7cb786ec4202d9d97653c6d52805df5a1b01c3062a85db6ed41dfef720f450c04bb5fd3cd7ae2697309321dd7f51d8ca3f31d8af94ee0e9383fc30284b4fef8bc3a2376847eeec27cb049a8c1b5db4aaa65590", 0xc8}, {&(0x7f0000001100)="1c89c8eb9910874af373d08315d8701219d86c8cc3078366b58011fc5068b120b17bfb6599b8ce823592f8bafb9142d27c68f28023256238a49d004a67d3e0ff01e834ce43", 0x45}], 0x8, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x260}}], 0x1, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) sync() r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYRES8=r10, @ANYRES16=r4, @ANYRES8, @ANYRES32=r10, @ANYRES8=r5, @ANYRESOCT], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001480)={'syzkaller1\x00', 0x200}) readv(r11, &(0x7f00000014c0)=[{&(0x7f0000001500)=""/214, 0xd6}], 0x1) 7.444245799s ago: executing program 4 (id=2891): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r1, 0x5606, 0x3) ioctl$TCXONC(r1, 0x5608, 0x3) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000b00), 0x2000c0, 0x0) r3 = openat(r2, &(0x7f0000000b40)='root/proc/sys\x00', 0x10000, 0x0) lseek(r3, 0x1, 0x0) getdents(r3, &(0x7f0000000b80)=""/171, 0xab) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f00000001c0)='SET\x00', 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) ioctl$SNDCTL_SYNTH_INFO(r4, 0xc08c5102, &(0x7f0000000880)={"7ae2c128b4504a858327bfbaef46f2673603c471feea7c9c81ab2373f488", 0x1, 0x1, 0x1, 0x1, 0x699, 0x7, 0xe45, 0x4, [0x7, 0x4, 0x1, 0x4, 0x5, 0x2, 0x3, 0x2, 0xa, 0x8, 0x58c6, 0xa, 0x1, 0xca7, 0x0, 0x18e, 0x1, 0xf86, 0x3]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000980)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000009c0)={0x0, 0x1, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000a00)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xc}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x10}]}}]}, 0x40}}, 0x2000400c) close_range(r5, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x2b, 0x7, 0x0) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r12, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x260, 0x130, 0xb, 0x148, 0x0, 0x148, 0x1c8, 0x230, 0x242, 0x1c8, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {0x7f}, {}, 0x73, 0x0, 0x70}, 0x0, 0xd0, 0x130, 0x0, {0xff0f000000000000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@owner={{0x38}, {0x0, 0x0, 0x0, 0xee00, 0x3, 0x6}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x4, 0x1, 0x0, 0x4], 0x9, 0x4}, {0x0, [0x1, 0x2, 0x0, 0x0, 0x4, 0x2], 0x5, 0x5}}}}, {{@uncond, 0xec010000, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x4, 0x2}, {0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000600)={[&(0x7f0000000240)='(\\*-\x00', &(0x7f0000000280)='\\\x14-]\x00', &(0x7f00000002c0)='SET\x00']}, &(0x7f0000000800)={[&(0x7f0000000640)=':-#[(/\x00', &(0x7f0000000680)=':\\$\x0e{]\x00', &(0x7f00000006c0)='\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='\'-^+d{\x00', &(0x7f0000000780)='#/\\:\xf0+.\x00', &(0x7f00000007c0)='\x00']}) sendmsg$inet(r11, &(0x7f0000000840)={&(0x7f0000000080)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20004898) 6.49834593s ago: executing program 4 (id=2895): timer_create(0x2, &(0x7f0000000100)={0x0, 0x1e, 0x3572d51265516fff, @thr={&(0x7f0000000000)="03bdcdc6d07568dc74c26f13ce8dc0708f22df2a5c67a31009033b17a969baa9f7ca9a7b97e94ff4dad3d6e7c140ba3d088fbea2eb86cde6a2f424b3fcdef2b8aa78cd44ec3fb8c8d271025079615722b49c3465823a93816312afe2325875374d5e879a484962cca9a5547e7101182b5e6e845c8b904a0ddbc737185591cbef2780", &(0x7f00000000c0)="1d4835aab7bd65dbe0ff2d"}}, &(0x7f0000000140)) r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = mq_open(&(0x7f0000000200)='\xc3\x00', 0x800, 0x49, &(0x7f0000000240)={0x2, 0xa123, 0x9, 0x5}) mq_notify(r1, &(0x7f0000000300)={0x0, 0x3e, 0x1, @thr={&(0x7f0000000280)="66ec99aa6629c481912f91c3af4a52fd939718bdf167ae9c63e9dc00fbbc583edf8a", &(0x7f00000002c0)="749d0c0b6f94718732e41e6b11dd388a434f53f2"}}) mq_timedreceive(r1, &(0x7f0000000340)=""/4096, 0x1000, 0x5, 0x0) r2 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000001340)='./binderfs/binder_logs/transactions\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2a) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001380)={'/dev/syzrnull', 0x0}, 0x6082, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/kernel/rcu_stall_count', 0x40400, 0x10) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x1, 0x4) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000001400)='nolazytime\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001440)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000014c0)={0xa, 0x4, 0xfa00, {r5}}, 0xc) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000001540)={'filter\x00', 0x7, 0x4, 0x418, 0x220, 0x110, 0x0, 0x330, 0x330, 0x330, 0x4, &(0x7f0000001500), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x35}, @loopback, 0xffffff00, 0xff, 0xe, 0x6, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x5, 0x2e, 0x7, 0x442, 0xdf, 0x8000, 'pim6reg0\x00', 'vlan0\x00', {0xff}, {}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @multicast1, @rand_addr=0x64010102, 0xd}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @mac, @empty, @multicast2, 0x8, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @rand_addr=0x64010100, @remote, 0x8, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000019c0), 0x2, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001a40)={0x1, &(0x7f0000001a00)=[{0xa, 0x4, 0x5, 0x2}]}) r8 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(r4, 0x84, 0x7d, &(0x7f0000001a80)={0x2, 0x5}, &(0x7f0000001ac0)=0x8) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000001b00)={0x21}, 0x21) fcntl$setflags(r1, 0x2, 0x0) r9 = add_key$keyring(&(0x7f0000001b40), &(0x7f0000001b80)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r9, &(0x7f0000001bc0)='trusted\x00', &(0x7f0000001c00)='\x00') setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000001c40)=0x2, 0x4) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) close_range(r7, r0, 0x2) r10 = accept4$unix(r2, &(0x7f0000001c80), &(0x7f0000001d00)=0x6e, 0x1800) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000001d80)={0xcb96, 0x0, &(0x7f0000001d40)=[r10, r8, r2]}, 0x3) ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000001dc0)) 6.25362347s ago: executing program 4 (id=2897): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 5.725371927s ago: executing program 4 (id=2899): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000040)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f00000002c0)={0x1, 0x81, 0x95, 0x1, 0x200, 0x8000000000000000, 0x1, 0x9, 0x4, 0x8, 0x936, 0x4}) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80984120, &(0x7f00000003c0)) syz_usb_connect$uac1(0x0, 0xb7, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000000000000732b34004000010203010902a500030104600f090400003e250b8fd519f4a109e35ddea8"], 0x0) 5.649314065s ago: executing program 5 (id=2900): sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='mode\x00', &(0x7f00000000c0)='7', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x80, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000000880)={&(0x7f00000008c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000940)="af", 0x1}], 0x1, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000008400000000000000ff5b"], 0x18, 0x20000001}, 0x20008000) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f00000009c0)=@assoc_value={0x0}, &(0x7f0000000a00)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000a40)={r5, 0x3}, 0x8) add_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, &(0x7f0000000200)="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"/1369, 0x559, 0xffffffffffffffff) 5.590943042s ago: executing program 3 (id=2901): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000025c0)={0x1, &(0x7f0000002600)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000002640), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000002680)={0x20004, r0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x21, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000340)="05", 0x1, 0x4040094, &(0x7f0000000380)={0x11, 0x10, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000002700)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000002740)={0x0, 0x0, r2}) 5.209605296s ago: executing program 1 (id=2902): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="b9800000c00f3235000100000f300f20c035000000800f22c066ba6100b805000000efc4e1555538c4c1b1d24900660f60c50f2055660fae3a66bad004edc744240000000080c7442402f8ff0000c7442406000000000f011c24", 0x5a}], 0x1, 0x44, 0x0, 0x0) syz_usb_connect$uac1(0x6, 0xd7, &(0x7f00000025c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x800c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0x40, 0x10, 0xc5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x40, 0x13}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x302, 0x6, 0x4, 0xfe}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x8, 0xf6, 0x94, 0x2}, @as_header={0x7, 0x24, 0x1, 0x5, 0x7, 0x2}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x1, 0x0, 0x14, 0xab}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x12, 0xf, 0x0, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xcf, 0x40, 0x6, {0x7, 0x25, 0x1, 0xc, 0x5, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x8, 0x4, 0xcc}, @as_header={0x7, 0x24, 0x1, 0x2, 0x3, 0x3e6ca846b4b9ca64}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x10, 0x3ff, 0x7, 0x6d}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xb, 0x1, 0x5, 0xc, "10d1", "b6c3"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1b9, 0x8, 0x1, "378911"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x3c, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x10, 0x80, 0x0, {0x7, 0x25, 0x1, 0xc, 0x3, 0x40}}}}}}}}]}}, &(0x7f0000002840)={0xa, &(0x7f00000026c0)={0xa, 0x6, 0x0, 0x1, 0x9, 0xad, 0xff, 0x6}, 0x3a, &(0x7f0000002700)={0x5, 0xf, 0x3a, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x1, 0xf000, 0xe, [0xfe8f, 0xf, 0xf, 0x3f, 0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x5, 0xfa, 0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x24, 0x5b, 0xf4, 0x9, 0x2}]}, 0x3, [{0x4, &(0x7f0000002740)=@lang_id={0x4, 0x3, 0x812}}, {0x63, &(0x7f0000002780)=@string={0x63, 0x3, "426cae0a1cd57822d2833ff2e53f1c46c901fb6b69506a56b7e44bf0ca5c9e175b0a0e08a5d1f7b7de81019875d0e5b76a35403cd2168f8980cd115e01fb9eb8ec9e0610380829e26e2c4d43f94dd3805fa6888e21e96c95e3f012ed9f13fd0393"}}, {0x4, &(0x7f0000002800)=@lang_id={0x4, 0x3, 0x421}}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80020, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000500)=@vmx={0x5, 0x0, 0x2080, {0x80a0000, 0xfec00000, {0x5}, 0x1, 0x2}, {"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", "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"}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000002880)=ANY=[@ANYBLOB="680000000206010800000000000000000100000a11000300686173683a69702c706f7274000000000900020073797a30000000000500010007000000050004000016000005000500020000001c000780050015000700000008001240000000000500140006"], 0x68}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8000) r5 = add_key(&(0x7f00000001c0)='blacklist\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="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", 0xfa, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, &(0x7f0000000340)) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000015000/0x18000)=nil, &(0x7f0000002580)=[@text64={0x40, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r6, &(0x7f00000004c0)=[{&(0x7f0000000000)="d67ef9260003b6ba476c824cdb423686486e74516fd66dc06061821f1bb9bc801e017e3768d7ef211c8be3426b43a510f1e5ae01042d92725d", 0x1}], 0x1b) 5.158248513s ago: executing program 3 (id=2903): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000440), 0x56) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r1, 0x42, 0x4000}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000580)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 5.054265626s ago: executing program 3 (id=2904): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000410000007b8af8ff000000009408ffd000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000000480)='syzkaller\x00', 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="d2ff0600600100004199dec6aa4a", 0x0, 0x40d5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.942838858s ago: executing program 3 (id=2905): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000400)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000004c0)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$printer(r0, &(0x7f0000000500)={0x14, &(0x7f0000000540)={0x40, 0x1, 0x38, {0x38, 0xd, "b1d3effd4e14e607f9d63c241af56ed4581cc2f3905ce236fad647f0fe3076b68c78fabf5261d1b760f65a4109fc4c69b47371705eb7"}}, 0x0}, &(0x7f0000000580)={0x34, &(0x7f00000005c0)={0x40, 0xf, 0xf6, "729b42dfbd524f0e5fd9ce1c45eebe859bbc720b4422b8d302369474a62bb04de6e00e77e96e6c4c9592afbac110393f9fa231a09b35e9a1b91ecd4c8a61364b35cc236f8c31e1acdef1f4e1f06851cba0636dffc7a65f00bc197efb62575e6854c5a80027ae4012a6a914bbb4eee529a49b78130e770e60d868cba1af81c5b808e77e587594b5df342917dfc8bbcd249fe64caeb3143ae904a71ee077b5604bc788500a734294f266a3857945fed51129c00b4a260f47f6eb2840b2d7df9d33e61b120e6dbdd1b5f8c27f255d8e3824327efdc06dc43d64a72151ffc077902236ae28c148a537789a1932c6dfdf1128ed55dd16a79b"}, &(0x7f00000006c0)={0x0, 0xa, 0x1}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000740)={0x20, 0x0, 0x1b, {0x19, "c9e29e2c7e8e818202b84caf1b4cb1a13edd9f2557ee813b26"}}, &(0x7f0000000840)={0x20, 0x1, 0x1, 0xe2}, 0x0}) (async, rerun: 32) syz_usb_control_io$hid(r0, &(0x7f0000000ac0)={0x24, &(0x7f0000000880)={0x40, 0x11, 0x8a, {0x8a, 0x22, "0c8129baffb8cfcde7d4f7de19a28cc727ce8db3f019a7e10372413cf432f6353399e9d207bb0964a6072cc1ee553fb43e8d83de90ee0ff084a0a25008b5c0323f223241505532425264a6f8070b3863d8bda254e3f3596772d5124229f8f9999401a48f4658ca9a6f7c8d70c7d663e50a9792570087ff14077dabbaf36003daebb4ad0a6682bae9"}}, &(0x7f0000000940)={0x0, 0x3, 0xc0, @string={0xc0, 0x3, "2057428a8d146327d64b226322455f7c609054071b550179ffb2d93811649399a237ebbb2cc2d24352e620fe7385f837d48362ddf24828d5577a7314de9c3a9c52f8bc54e88b1e8ef66670c8b3f3c15ec385ffb0d1bed1de0fbe005dcc566411aa1deaea9ebc5c2ace28991116fd65ac55905a133a421e03ce9131a8a2e3253c97fc7f47f0d72f5c30069fd95b398832f08066828d01cf7670afea777d6b2e10a9b563fb0c28599182a2caa9463f22d7c4403e99247193d1d4e81e5ddf8e"}}, &(0x7f0000000a40)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x4, "a233e0f7"}]}}, &(0x7f0000000a80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x8, 0x1, {0x22, 0xcea}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b00)={0x40, 0x0, 0x5, "47111f26d2"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x2d}, &(0x7f0000000bc0)={0x20, 0x1, 0x9a, "e51e43c86b5e8ffc992f1bbe8f0332414bf7b981aaf648d0dab3b28a6a013d3385bde31c9d41bcf5afa7a8c6d0786ab7c0f562dc501a62f3cef5ec07d1c3c7ed8981c6b3cf8afd7263a19f48ce99cf498bff90ade4b86bf967bf424ad89629e311dc057082152d685583932fe2773cac34bec81dafe5160c89a42b57f77e3089259fb0a82b6a5856c62da4682a2a8db6fb580a5db1ae50899fbf"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000d00)=0xffffffff, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x1, &(0x7f0000000140)={0x0, 0x21, 0x4}, 0x0) (async, rerun: 32) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x0, 0x0, 0x3ed4, 0x5}) (async, rerun: 32) timer_settime(0x0, 0x1, &(0x7f00000001c0), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2424, 0x4822}, [@IFLA_NET_NS_PID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2c040941}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (rerun: 32) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(r5) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x80480, 0x0) write$USERIO_CMD_REGISTER(r6, &(0x7f0000000080)={0x0, 0x4}, 0x2) 4.333921872s ago: executing program 5 (id=2906): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00d748a346004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="0017010100004dd5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00d748a346004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="0017010100004dd5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 3.556090867s ago: executing program 1 (id=2907): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x8, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0x1]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x9, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x81, 0xf4240, 0x0, 0x0, 0x1}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000140), 0x318, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) socket(0x2b, 0x800, 0x7) r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) ioctl$XFS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000280)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'lo\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000f1401002abd7000000300000c004500c1"], 0x1c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000480)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000004c0)={0x7, 0x8, 0xfa00, {r6, 0x2000000a}}, 0x10) syz_80211_inject_frame(&(0x7f0000000500), &(0x7f0000000540)=ANY=[@ANYBLOB], 0x3a) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000080)=0xa9e) 2.749578826s ago: executing program 1 (id=2908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) syz_usb_connect$uac2(0x0, 0x90, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3f19, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x0, 0x40, 0x80, {0x8, 0xb, 0x1, 0x2, 0x1, 0xff, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xdd2d, 0xa, 0x1e, 0xfd}, [@effect_unit={0x9, 0x24, 0x7, 0x1, 0x2, 0x4, [0x1]}, @output_terminal={0xc, 0x24, 0x3, 0x3, 0x1fe, 0x6, 0x2, 0x1, 0x81, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x8, 0x37, {0x8, 0x25, 0x1, 0x80, 0x14, 0x5, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x2, 0xe2, 0x4, {0x8, 0x25, 0x1, 0x81, 0x3, 0x2, 0x499f}}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) flock(r1, 0x2) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = gettid() r5 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') getdents64(r5, &(0x7f00000002c0)=""/48, 0x59) getdents(r5, &(0x7f0000000340)=""/180, 0xb4) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_getres(0xffffffffffffffed, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="050000", 0x3) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000140)={'bridge0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000550005000000", @ANYBLOB="20000100", @ANYRES32=r7], 0x38}}, 0x0) flock(r1, 0x5) 2.52525013s ago: executing program 4 (id=2909): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000000c0)={0x2, 0x0, r0}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000680)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000700)="06c3", 0xffd8}], 0x1) r4 = syz_open_dev$vbi(&(0x7f0000000740), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000780)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x9ddd, 0x722, 0x8, 0x10007, 0x7f, 0x27, 0x31, {0x200, 0x6fd8e8eb}, 0x3, 0xed}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0xe3, 0x8f, 0x7, 0x10, 0xa5c, 0x2033, 0x3b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xbd, 0x50, 0x3, "", [{{0x9, 0x4, 0xc1, 0x6, 0x0, 0x50, 0xbf, 0x4b, 0x3}}]}}]}}, 0x0) 2.175753708s ago: executing program 0 (id=2887): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f10000000bfc00000002000000000020"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001400)='cpu.stat\x00', 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001040), r3) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x30, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xa1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x98, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r5, {0x1, 0x3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x68, 0x2, [@TCA_FLOWER_ACT={0x64, 0x3, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xb75}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xc}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x0, 0x1, 0x3, 0x403}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xffffffff}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20005891}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001680)={'ip6_vti0\x00', &(0x7f0000001600)={'syztnl0\x00', r5, 0x2f, 0x7, 0x6, 0x3, 0x4, @mcast1, @loopback, 0x700, 0x80, 0x9, 0x3ff}}) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}, @sadb_x_nat_t_port={0x0, 0x15, 0x4e23}, @sadb_lifetime={0x4, 0x4, 0x0, 0x3}]}, 0x34}}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) r8 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)=':\x00.:\x00', 0x0) unshare(0x100000) syz_clone(0x100a8400, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet6(0xa, 0x6, 0x4) sendmsg$inet6(r9, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="77ea0666da530d7adcbb3889283841fa1430e62debd9cca672dac5de52774d09d3949f48ed0c894af17a158b89486b110f857b4d0d3eb1243d24219c6d42cc2af5893565b65e53d617e9ea01ae28310b2ae5978be31ee185977e92b8b8cbda1a4ec2a023e0a3a25157fdb47b2b445b989c366d43ea3d1cb907de3cfac65822950f7b7fc7f86b54e553dd722e8fdbe06df7b7afaf6feaec6f25b8e72604396be8e9597753f6b082442737e16d27ad5610ab6c2a74f0baef16b5b2", 0xba}, {&(0x7f00000001c0)="e3de8b1a9f0a004acbdf70d1e59865b851bb759b068518e9d8ba236f25b92f6eb58c853f3bbe650d07c60527f48b816bc00d119c18ad0dcf9e0430d2a47af3a99ecb50774d1147e44e141d3979a8141f3fcf2461c93c6347f654b908bd3270628cdd08e3ae149a907bf6b3fbdeb5f3a6045a42fc95f23d9a16e1216cd9810b5d5f4542c7ac1681962a9952eab5f94715c765c88e3f03bae9d1e4446d3dcf3c2fb113b91c76315b15ffd4517da46944743aaeef559f1f03e6d817584ef963dd653755f56633bc22a27ce6f4b8eec0347b0f29954222308653ec97eb3c8c0480ee760778b36f", 0xe5}, {&(0x7f0000000400)="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", 0xc00}, {&(0x7f00000002c0)="ec73ce8cdb847626e37b6e91b0a6f1cccaac4af9b033cd7f11497d4a595a9272e4d70000000000000000009465b935a3b2acb41bfd979d281f80c2cb6e1bd21aca03c4", 0x43}, {&(0x7f0000001440)="e804982a1e58d17e4b3318afba5ac1d9e38359c6d4549a1244f1d4", 0x1b}], 0x6}, 0x20000801) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 1.763186458s ago: executing program 1 (id=2910): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfffd, 0xc, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x48, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, @in6={0xa, 0x4e21, 0x6, @empty, 0x3}]}, &(0x7f00000000c0)=0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000019c0)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001a40)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001a80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xb, 0xffff}, {0x0, 0x1f}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x74, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xff, 0x0, 0x800000, 0x2, 0x7, 0x2, 0x8, 0x8, 0x9f2, 0x8000, 0x18, 0x1c, 0x19, 0x7, 0x60ea2f61, 0x2}}, @TCA_GRED_PARMS={0x38, 0x1, {0x7, 0x80000001, 0x10, 0x2, 0x7, 0x0, 0x4, 0x800009, 0x3, 0x9, 0xe, 0xa, 0x10, 0xf, 0x4, 0xfe66}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c00)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x2, 0xa}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000001c40), 0x492492492492627, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000440)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0) syz_ublk_add_dev(r1, r8, r9, r10, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000600)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000640)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1, 0xe, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000001940)='GPL\x00'}, 0x48) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000680)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x97, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000980)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) r14 = syz_open_dev$vbi(&(0x7f0000000c80), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r14, 0xc0205647, &(0x7f0000000cc0)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r13, 0xc2604111, &(0x7f0000000a00)={0xa, [[0x8, 0x3, 0x3c, 0x5, 0x30, 0x2, 0x200000], [0x80000000, 0x1fe9, 0x2, 0x7, 0x800, 0x2, 0x800, 0x2], [0xffffffff, 0x1ff, 0x7, 0x23f, 0x9, 0x1, 0x3, 0x2]], '\x00', [{0x56, 0x6, 0x1, 0x1}, {0x7, 0x8, 0x1, 0x0, 0x1, 0x1}, {0x4, 0xc, 0x1}, {0x1, 0x656c, 0x0, 0x1, 0x0, 0x1}, {0x800, 0x1, 0x0, 0x0, 0x1}, {0x69e, 0xe0, 0x1, 0x1, 0x1}, {0xa5, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x400, 0x8, 0x0, 0x1, 0x1}, {0xb, 0x5, 0x0, 0x1, 0x1, 0x1}, {0x80, 0xb373, 0x1, 0x0, 0x1}, {0x8001, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x8, 0x3, 0x0, 0x0, 0x1, 0x1}], '\x00', 0x2}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000001c40)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) get_robust_list(0x0, &(0x7f0000001c80)=0x0, &(0x7f0000001cc0)) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000180)={'netpci0\x00'}) 1.68902568s ago: executing program 3 (id=2911): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000400)=[{{&(0x7f0000000440)={0xa, 0x4e25, 0x40000, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000004c0)='P', 0x1}], 0x1}}], 0x1, 0x24004001) (async) shutdown(r1, 0x1) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000500)=@sack_info={0x0, 0x6, 0x7190}, &(0x7f0000000540)=0xc) (async) landlock_restrict_self(r0, 0x8) (async) landlock_restrict_self(r0, 0x0) (async) landlock_restrict_self(r0, 0x0) (async) landlock_restrict_self(r0, 0x6) (async) landlock_restrict_self(r0, 0x1) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x2710, @local}, 0x10) (async) r4 = accept4$vsock_stream(r2, 0x0, 0x0, 0x0) (async) sendto(r3, &(0x7f0000000140)='he', 0x2, 0x0, 0x0, 0x0) (async) sendmsg$vsock_stream(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="328dda3c484e5cddb4632b3dcf9f1ca672af89c4a3088669c918409ce5774af09d6c5f26881bb2fc4cfae0a01ba08b705e9c23abb548043ef10746cc6700751ed669cde8f32d1ad1fd2cfa6050c2a5692cff314987d687ad3dcfd257f131fd76740d6f178226db9c38a12d139647353ad64f3da833121796eed3180f89d31bcaf2", 0x81}], 0x1}, 0x4000000) recvfrom(r4, &(0x7f00000003c0)=""/64, 0x40, 0x0, 0x0, 0x0) syz_usb_connect$uac2(0x2, 0x98, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201010200002020392ad43f400001020301090286000301010008080b0001010c2f06090400000001012000092401070004260004112409050603000200f5ffff01000000ff0c2403020104090305", @ANYBLOB="ca7d35e73f4ebdf81fe7a0ec4531b6351e641265e45362e566bcc4c879016665bf57b2d0ac143c7a41495025e402373d75ca9c19e5bff224c36a", @ANYRESDEC=0x0, @ANYRESHEX=r0, @ANYRES8=0x0], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x402}}]}) 1.245733176s ago: executing program 5 (id=2912): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000001640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f00000000c0)={0x1504, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x14, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x14bc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x1270, 0x4, 0x0, 0x1, [{0x124c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xc7, 0x2, "a2c34d500140efae771a2d5d6b4b806e1bf55790b78929f30aa2f504046fbfa1b9630a90661803879a2f0472b2532e9d3be2a55d553ee100ed61e998396a2d8f74dd03a3f098077627e7dab73f70cf7badcb0da28ec968a1c1c31d6c1aad182ba9280812f2b696f0b603c58cafa3157bf42240622137119144c86a92a4b5d2546e3f054615d177f9689ef7dda3bd0e57816e20c9245a24386d0bd09f1ef11b2ef24e713f19b55b6cb537d070ee63b9f617b972f3b19b206de490a686075e37cf4a8c1d"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_PATTERN={0xf, 0x2, "2b79870ae784798d913750"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xc6}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}, @NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}, @NL80211_PKTPAT_PATTERN={0xac, 0x2, "d41a4823608c925ff3f019f866d1cb18794dec5747cb95ec118c221b6092f7ae995a70295728b8b2d0c1930b14b8d0cf1052a43b3fa14365cf2a6c9aa86a6f7b7d0462ac5bc2d966ee6f6fde4bcc49ffc72ef7677f74c63852c620db6412710a5af8d6c811f42dee4dcbb43f6f26ae9767706cb294e3c62939facc3c1cd8e8459a49dcdf4d83853ff479a625d43195cbcbc10686f4fd03d254f59b2cb0b7a299f644e44e3815da12"}, @NL80211_PKTPAT_PATTERN={0xa8, 0x2, "22a1cf695a8b282f1b44bf6e5cccb89ed389051348857a9c4a7e8fe586d2586d03a95f7477690a2e7e9446f5b55468afb6586605259a098bfa50e11e4eb9cbff0d083bcfb18ad0bf0186a06a97856bab63b67f4fb24d767d5150da72aad0c1a629ba43b2f6693a70e86dfb8f6916ae328bbc1859fb6c96a523d9698d9fd6c5b1d8b2e3fb30a81670bbb39a69787010676813eefecd667674ff6bb2a5615d6bef218f3860"}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}, @NL80211_PKTPAT_MASK={0x11, 0x1, "ed4a680191d9b23b423d69b459"}]}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x244, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @broadcast}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x87, 0x8, {0xed, 0x8, "80271018919b82e0f39cf33d1eee31f6b2feaa0ffc6845c7539a7cd93b6e92d09ae668b963a41f243c71d18354b9960f3f2798a7c64dcb7cdc9d9d68092a067785f7d97ba9a006ca90550fe5f9d3992eacdd816dc9db9502e036b81b00599ec12c3ad304142dc2d340ca48ebb65dbc7d04f5f620f4fce8cb7195fb"}}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @local}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x62, 0x8, {0x4, 0x5, "180f9e9eafd65343b455729f8bea72ce300d1f9ab177a5d22fe1fe304ab12ebe5e8f62fc4c0c826b192e8f9ad8b3e9fe391676c41220a3efd797f6aa8084c687b4aa9199cb0e9e7250f8904c1786e3d88336798eb4f4"}}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xc3, 0xa, "4e756455d08fb14bad0a4e14bf5aeed650b21f2f51c317841791bfd4490554e61580886fe74f29f2632234856da5bceb51712fd7cd57395df575af048086fd8934346ea31346d2d4d941ef064e79d6686093730269a4642138e744e87889fdc5eb5221cf7438605b20d0ec80c897317e327708f58c4da57a2dfc004e91b39c3e01a692946b66f5e199b2464185ec9949b4647cc0b5869efb9b0f36966895c9fe55f7e1eb8615c121a51407961ab8d4ac559453043f02fa0cbb77c425f3fec8"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0xff, 0xd25, 0x9}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x56, 0x8, {0x80, 0xd, "1992dba8a1eabe367021a62103e1bdd0fd0c10e947831d88fc5d9f072d8abac4a7ecceff3f72a32b6dc359b8edd56537f8c439abd7b48b33595a89f6137d9b40e5a7bc78f7bbf695a3fd"}}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}]}, 0x1504}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = dup(r0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000001680)) read$qrtrtun(r2, &(0x7f0000001780)=""/146, 0x92) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x24, 0xd, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x8) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001ac0)={0x0, &(0x7f0000001940)=[@nested_amd_invlpga={0x17d, 0x20, {0x58000, 0xd6ca}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xfa, 0x5, 0x4}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0x70000, 0x4af3}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x634, 0x0, 0x80000000000000, 0x10}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control16=0x4, 0x3, 0x4, 0x7}}, @nested_vmresume={0x130, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0x963}}, @wr_crn={0x67, 0x20, {0x3, 0xfffffffffffffff4}}], 0x148}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001c80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b80)={0xc0, r1, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}], @NL80211_ATTR_BSS_BASIC_RATES={0x20, 0x24, [{0x16}, {0x24}, {0x24, 0x1}, {0x9, 0x1}, {0x9}, {0x12}, {0x18}, {0x60, 0x1}, {0x5, 0x1}, {0x9, 0x1}, {0x10}, {0x3}, {0x12, 0x1}, {0x6c}, {0xb, 0x1}, {0x24}, {0x1b}, {0x24, 0x1}, {0x1b}, {0x12, 0x1}, {0x4a}, {0x4, 0x1}, {0x48, 0x1}, {0x18}, {0x30}, {0x4}, {0x24, 0x1}, {0x6e, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xd}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xb}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x2}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x6}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x8}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x17, 0x24, [{0xb}, {0xc, 0x1}, {0x6c}, {0x60, 0x1}, {0x9}, {0x60}, {0xd}, {0x48, 0x1}, {0x9, 0x1}, {0x9}, {0x12, 0x1}, {0x9, 0x1}, {0x1}, {0x30}, {0x60}, {0xb, 0x1}, {0x1}, {0x6c, 0x1}, {0x30}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x20008002) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) ioctl$XFS_IOC_BULKSTAT(r2, 0x8040587f, &(0x7f0000001e40)={{0x3, 0xe, 0xfffffff7, 0x7, 0x7}, &(0x7f0000001cc0)=[{}, {}]}) r5 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000001ec0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1477, 0x1025, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0xc0, 0x9, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0x395}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0xe, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x628, 0xfd, 0x5}}]}}}]}}]}}, &(0x7f0000002200)={0xa, &(0x7f0000001f00)={0xa, 0x6, 0x201, 0x0, 0x6, 0xfa, 0x20, 0xf8}, 0x20, &(0x7f0000001f40)={0x5, 0xf, 0x20, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x8, 0x81, 0x0, 0x4}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x7ffffba, 0xee0f, 0x9, [0x3f00]}]}, 0x4, [{0xb3, &(0x7f0000001f80)=@string={0xb3, 0x3, "f898f90f6241bd63752d17db3587c01447f3f93854ae9d957eba4e5da470ec601214cf801964b02f150bd58d8b16cc749de3a96e9ec071d03efb06e9cf40ca104f65c68e333fa756b84b8d361142a61a01433e7a90ff8b5de8359b6683ff8a122819c4a1f2c056abdb5d8eb2e7b5ded0ecdae710f54202fc8bf6381e91bda892834fdd533843600926edd5eafca20894b927171dd98885af740a701aa4fb60696131abdd2ef9ac2c64b7a2332738ec0a0b"}}, {0x7, &(0x7f0000002040)=@string={0x7, 0x3, "24834e483a"}}, {0x4b, &(0x7f0000002080)=@string={0x4b, 0x3, "4d46cf01a35c1cf51c785a7576f24715222c92d48790a16bda2e71787af3d9bc7f66445b9029f86c185dbaafa870a74f8993c893281a1990c523746188d108cdd2e3597ac72c09ab4c"}}, {0xdf, &(0x7f0000002100)=@string={0xdf, 0x3, "58c4bf9dfadaa4e8233dec1680d36a14eb2d414b7616705fc7802e895b8cb82c20e47439f8b06c27d4fe303a16cfac911e1a7147bde2ce5fd894f006fdfed9cccb3eb5a2c36b1d0dcaa4a8a56d9c7d58b11b18b663215e6695b2f339730723867913bd5661c140a0ee8f959a1391fd8055765ee50e0350f5e74f79a2eeb55c02d862452e98b0edf6a2d39eafdb118946b83abc7db0a600a2177b1cb5626db45aca53fa33aef6c74e78cd8ef9dd1bed7afac2807ae21df23f3603129a49df04584fc21d13801ffc05224c314ce964c3ad508e350920f9af66017bb85955"}}]}) syz_usb_control_io$hid(r5, &(0x7f0000002440)={0x24, &(0x7f0000002280)={0x0, 0xd, 0xd8, {0xd8, 0x22, "7e1531d28274cb4f1ebae947460109a5047422e7ac9881e24f75c8c04918633c5a07e0ed338681cfb6aeeb8938fe110f800ce7f896144148fbf1ffd82ae709309e53879fc6d7bac92bd554e8e4cb8f6ca56ef87bfd176724a9c3f87293d34eb86fe178f9e09a5c652c6f0c610b1b9ab4598d39dc2dfe571a96bb435088b82e56812beaff1d697691c0b95340c4b01f668b0c6c43d282f2acbe94a8c049e1e9bb46d1182d557efd767b29e17af467269fc057fbe0d77ff3e57a321606799d97091adec9de0c5cc7ba6841382339d53aa99f61afa05167"}}, &(0x7f0000002380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}, &(0x7f00000023c0)={0x0, 0x22, 0x15, {[@main=@item_4={0x3, 0x0, 0x7, "73d73aae"}, @main=@item_012={0x1, 0x0, 0x9, "89"}, @local=@item_4={0x3, 0x2, 0x0, "9811f1a6"}, @local=@item_4={0x3, 0x2, 0x8, "a54e1ddc"}, @local=@item_012={0x2, 0x2, 0x9, '0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000002980)=@mmap={0x0, 0x2, 0x4, 0x0, 0xba1a, {r7, r8/1000+10000}, {0x0, 0x2, 0x5, 0x8, 0x6, 0xf3, "0c89b89e"}, 0xbdb, 0x1, {}, 0x2, 0x0, r2}) keyctl$get_keyring_id(0x0, r6, 0x7) write(r3, &(0x7f0000002a00)="aeebbc75edca3def3b553e1c3e4ed6ddfade9c9a1615dd7dab4a42815733d7c95c70ca8392517831bcfe826241b5969ff58db67ea5194024c14bc8ddae37d72aa6d716e51c54a0e96923430295db78427c4a587e6a0b208a1800825fce4d1e73ae648dba16f0f4b2738f8bfe7b3a223b575de9a405d1c464fe05784c", 0x7c) syz_genetlink_get_family_id$wireguard(&(0x7f0000002a80), r0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xf) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) r9 = add_key$user(&(0x7f0000002ac0), &(0x7f0000002b00)={'syz', 0x2}, &(0x7f0000002b40)="115e381572239491b032d67164bd2830e5c5dc0d0ae11e52f58c008b2ac478014da7ea9224865f54c51b0b8b8f2fdf06b70345205b4868f286c8cb43d140b892074e9bc4a546540c18", 0x49, r6) keyctl$read(0xb, r9, &(0x7f0000002bc0)=""/141, 0x8d) syz_emit_vhci(0xffffffffffffffff, 0x0) r10 = accept$alg(r2, 0x0, 0x0) sendto(r10, &(0x7f0000002c80)="22387e3daee01da0a986ebecb9c3bf2426c3ca004b8d9b11ad534b8b5fd43e4ec537978f4e8befaf64591f92fdc36fe69dcf473ee1e0f0ee32a1573a86f5f098ceecf6983492c212dc9e4d04e9c5ce48c428b2c79386154d10ba", 0x5a, 0x90, &(0x7f0000002d00)=@pppoe={0x18, 0x0, {0x1, @remote, 'wlan0\x00'}}, 0x80) 1.059527422s ago: executing program 0 (id=2913): r0 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x6, 0x10040) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000040)={0xf6, 0x0, 0x2, 0x6}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080)={'/dev/syzrnull', 0x0}, 0x40, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={0x1, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={r2, 0x9}, &(0x7f0000000200)=0x8) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000280)={0x0, @dev={0xac, 0x14, 0x14, 0xe}, 0x4e23, 0x2, 'twos\x00', 0x11, 0x10000, 0x3f}, 0x2c) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f00000002c0)=""/169) write$uinput_user_dev(r3, &(0x7f0000000380)={'syz1\x00', {0xa241, 0x81, 0x0, 0x7ed}, 0x39, [0x8, 0x3, 0x0, 0xffff, 0x100, 0x43, 0x7fff, 0x980, 0x4, 0x4, 0x3, 0x7, 0x7, 0x2, 0x40, 0x3b7e, 0xf4b, 0x2, 0xd0a3, 0x7, 0x101, 0x80000001, 0x10001, 0x9, 0x8, 0x8, 0x4, 0x5, 0x3, 0xe05, 0xac, 0x100, 0xfff, 0x5, 0x1, 0xde, 0xffffffff, 0x5, 0x6, 0x101, 0x6, 0x5, 0x1, 0xb, 0xfffffffc, 0x77e4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x8, 0x1, 0x5, 0x817b, 0x5, 0x8, 0x2, 0xf4, 0x3, 0xffffff52, 0x2, 0x4, 0x1], [0x8, 0x40000000, 0x0, 0x0, 0x695, 0x81, 0x3, 0x9, 0x6, 0x46, 0x8, 0x1, 0x9, 0x6, 0x800, 0xcb91, 0x8, 0xfffffffa, 0xfffffff7, 0x5, 0x2, 0x10001, 0x2, 0xfffffffa, 0x3, 0x7, 0x5, 0x1, 0x7, 0x7, 0x9, 0x4, 0x0, 0x80000000, 0xfffffff2, 0x3, 0x2, 0x101, 0x6, 0xffffff00, 0x1, 0xfffffffe, 0x2d, 0x0, 0x7, 0x1, 0xfe000000, 0x1, 0x9, 0x8, 0x4000000, 0x5, 0x0, 0x3, 0xd, 0x7ff, 0x8, 0x2, 0x4, 0x2, 0x94, 0xa56f, 0x1, 0x2], [0xffffe648, 0x4, 0x80000000, 0x7f, 0x9, 0x6, 0x4, 0x4, 0x6, 0xe034, 0xffff, 0xd1, 0x76, 0x0, 0x1, 0x6, 0xf, 0x7, 0x775, 0x3, 0xd, 0x8, 0x9, 0x9, 0x5, 0x101, 0x3, 0x4, 0x80000001, 0x25, 0x0, 0x8, 0x6, 0xf257, 0x23, 0x3, 0x410, 0x7fffffff, 0x10, 0x1, 0xd7, 0x100, 0x6, 0x100, 0x400, 0x99b4, 0x6, 0x800, 0xf54, 0x7fffffff, 0x9, 0x9, 0x9, 0x80, 0x7, 0x3, 0x9, 0x2, 0x3, 0x8000, 0x18, 0x7, 0x8, 0x4], [0x6, 0xfffffe00, 0xebc, 0x9, 0xfffffff7, 0x0, 0xfffffff9, 0x69, 0x6, 0xb0e, 0x9, 0x3, 0x0, 0x2, 0x9, 0x6, 0x6, 0x6, 0x7ea, 0x4, 0x400, 0x7, 0x1ff, 0x3, 0x10001, 0x93, 0x2, 0x9, 0x1, 0x100000, 0x9, 0x4, 0x8001, 0x6, 0x2, 0xa0a0, 0x8, 0x8, 0x2, 0x7, 0xa4, 0xfffffffe, 0x8, 0x5, 0x8, 0x7ff, 0x6, 0x7dd2, 0x0, 0x1, 0x8, 0x7, 0x9, 0x2, 0xb135, 0x3, 0x9, 0x100, 0x9, 0x5, 0x80000001, 0x72, 0x2, 0x3]}, 0x45c) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x0, &(0x7f0000000800)=""/12, &(0x7f0000000840)=0xc) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000880)={{r3}, {@void, @max}}) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x5) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f00000008c0)=0x1) r4 = socket$rxrpc(0x21, 0x2, 0xfba8da1aa049e655) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000980)={0x10, 0xf, {0x0, @struct={0x7ff, 0xa1}, 0x0, 0x0, 0xfd2, 0x62e, 0x6, 0x1, 0x1, @struct={0x1, 0x37}, 0x9, 0x10000, [0x4, 0x7, 0x6, 0x101, 0x3, 0xfffffffffffffffd]}, {0x4, @struct={0x3, 0x6}, 0x0, 0x702, 0x6, 0x8001, 0x1000, 0x9, 0x4, @usage=0x3, 0x80, 0x51c, [0xffffffffffff0001, 0x3, 0x80000000, 0x3ff, 0x8, 0x1ff]}, {0x10, @struct={0xfffffffc, 0x7}, 0x0, 0x1, 0x100, 0x1, 0x3, 0xf0f, 0x404, @usage=0x5, 0x1, 0x5, [0x1, 0x2, 0x0, 0x0, 0x3, 0x800]}, {0x10, 0x2, 0x9}}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000d80)={{r4}, 0x0, 0x1c, @inherit={0x50, &(0x7f0000000900)={0x1, 0x1, 0x6, 0xa7c, {0x1, 0x7, 0x7, 0x7, 0xfffffffffffffff8}, [0x5]}}, @devid=r5}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) r7 = openat$ext4_procfs(0xffffffffffffff9c, &(0x7f0000001d80)={'/proc/fs/ext4/loop', 0x0, 0x2f, 'es_shrinker_info\x00'}, 0x0, 0x0) write$P9_RWRITE(r3, &(0x7f0000001dc0)={0xb, 0x77, 0x1, 0x5}, 0xb) r8 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000001e00), 0x80001, 0x0) r9 = ioctl$USERFAULTFD_IOC_NEW(r8, 0xaa00) poll(&(0x7f0000001e40)=[{r1, 0x20}, {r9}, {r6, 0x5084}, {r1}], 0x4, 0xa301) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000021c0)={r7, 0xe0, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000001ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x79, &(0x7f0000001f80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000002000), &(0x7f0000002040), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000002080)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000002200)=@bloom_filter={0x1e, 0x4, 0x3, 0xfff, 0x40000, r3, 0xa, '\x00', r10, r3, 0x4, 0x0, 0x5, 0xc}, 0x50) r11 = semget(0x1, 0x2, 0x80) semop(r11, &(0x7f0000002280)=[{0x1, 0x0, 0x800}, {0x0, 0x4a, 0x1000}, {0x3, 0x4, 0x1800}], 0x3) ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4010641a, &(0x7f0000002300)={0x6, &(0x7f00000022c0)=[0x6, 0x2, 0x9, 0x8, 0x0, 0xf3]}) r12 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r12, 0x40806685, &(0x7f0000002500)={0x1, 0x2, 0x1000, 0xca, &(0x7f0000002380)="02909643f5e15dccda094e38e9fe1318ddf939a5851fd19c3161a190935c6faafb639b3dda053bb7085c50cbcebd197ce21f2491c78c88c6c9fefc645a53fa93566973eba42bdb053927d9de83b2681adaeeccbec9c2d98b60b144d4dfebb00a5de07c293d3732becaa54ced799c6224be1b650ec01cbacfac64d2c3690f0cda90fa14b630713d83ee519ed46c11e24d9c103cfee5dab6ffe4005adb6da635b162b3bc933dcb4cf180f6ba6d678edf1ca7f2f1e0e7a1ef11c1ad4fbb42ada705befb2e211e7b8f6bd620", 0x66, 0x0, &(0x7f0000002480)="6558b6372998b7dc3e92a9515a9ccce2a4c5dfad1effc45a2f2bd1796012e3e0c971ce7d51aaeaefb98de0a8ada62b9909ca9b72b93579eab7a79c97ad603e734ff18e8029576d4a2c434e5cc10ade28090d1c381ee929fe31d3e401d193da3c1a69f7a641aa"}) 949.100533ms ago: executing program 0 (id=2914): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000140)=0xd) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x220200, 0x0) write$sequencer(r2, &(0x7f0000000300)=[@e={0xff, 0x3, 0xc, 0x6, @SEQ_NOTEON=@note=0x3d, 0x1, 0xf4, 0x1}, @echo=0x9, @raw={0xfe, 0xe, "260c1a5d9e55"}, @raw={0xc, 0xe, "d72f2b1120e6"}, @n={0x3, 0x4, @generic=0x4, 0xf9}, @e={0xff, 0x3, 0x1, 0x3b, @SEQ_CONTROLLER=0xff, 0x5, 0x4, 0x14}, @t={0x0, 0x8, 0x3, 0x2}, @n={0x1, 0x5, @generic=0x1, 0xde}, @l={0x92, 0xa, 0xc0, 0x16, 0x2, 0x7, 0x4}, @t={0x81, 0x5, 0x8, 0x2, @generic=0x3}], 0x44) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={0x40000, 0x41, 0x11}, 0x18) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r3, 0x20, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/72, 0x48}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESDEC], &(0x7f00000002c0)='GPL\x00', 0x5, 0xc4, &(0x7f0000000480)=""/196, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x10, r4}, 0x94) 923.595729ms ago: executing program 0 (id=2915): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x31, 0x9, 0x70bd29, 0x0, {0x4}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x4000000, 0x30046051}, 0x4080040) 838.277664ms ago: executing program 0 (id=2916): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x4) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000000)={0x18, 0x1404, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x21}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c054}, 0x20000014) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f00000016c0)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000001700)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000001740)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f0000001780)={&(0x7f00000017c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x1, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48001}, 0x20044095) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x3, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000380)="650f405a00f20f320f20c035000001000f22c0f30f099a7c0000001e010fc79b060000000f01ef673e0f47d7c166bafbf0fe804398bae83fed", 0x39}], 0x1, 0x41, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e21, @empty}], 0x10) getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000280)={0x2, 0x6, 0x7, 0x7, 0x7ff, 0x2, 0x9, 0x80000000, {0x2, @in6={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800}}, 0x2, 0x0, 0x13f52ef6, 0x0, 0x1}}, &(0x7f0000000340)=0xb0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb702000008000000b70300000100000085000000a400000095"], &(0x7f0000000540)='syzkaller\x00', 0x7, 0xff5, &(0x7f0000000580)=""/4085, 0x40f00, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) pwritev(r7, &(0x7f00000015c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x8, 0x20000006) r9 = syz_open_dev$video(&(0x7f00000018c0), 0x3, 0x40) ioctl$VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000001900)={0x1, 0x8, 0x2}) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001600)=[@text64={0x40, &(0x7f0000001640)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r10, 0xaea2, 0x9) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000001800)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) 752.976375ms ago: executing program 1 (id=2917): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x8, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0x1]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x9, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x81, 0xf4240, 0x0, 0x0, 0x1}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000140), 0x318, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) socket(0x2b, 0x800, 0x7) r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) ioctl$XFS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000280)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'lo\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000f1401002abd7000000300000c004500c1ec000000"], 0x1c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000480)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000004c0)={0x7, 0x8, 0xfa00, {r6, 0x2000000a}}, 0x10) syz_80211_inject_frame(&(0x7f0000000500), &(0x7f0000000540)=ANY=[@ANYBLOB], 0x3a) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000080)=0xa9e) 392.211638ms ago: executing program 3 (id=2918): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0xd9, 0xa6, 0x3b, 0x40, 0x923, 0x10f, 0xc57c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x40, 0xe, "", [{{0x9, 0x4, 0x63, 0x9, 0x0, 0xb5, 0x72, 0x6d, 0x3}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x3, 0x80) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f00000001c0)={0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r0, 0xc0386447, &(0x7f0000000200)={{0x8, 0x3, &(0x7f0000000180)=[{0x6, 0x0, 0x7c}, {0x9, 0x0, 0x3}, {0x81, 0x0, 0x53}]}, 0x0, 0x2, 0x7, 0x1, 0x0, 0x3, 0x4, 0xff, r1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x12a, 0x0, &(0x7f00000002c0)="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", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10001}, 0x50) r2 = syz_open_dev$sg(&(0x7f0000000400), 0x6f5e, 0x88a003) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000440)=0x85) getgid() syz_usb_connect$uac3(0x3, 0xed, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x0) 387.105345ms ago: executing program 0 (id=2919): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r1, 0xc7651f6b6af1a930, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x28000060}, 0x880) read$FUSE(r0, &(0x7f00000061c0)={0x2020}, 0x2020) pread64(r0, &(0x7f0000000080)=""/195, 0xc3, 0x591f) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000240)=@req={0xf76e, 0x3}, 0x10) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "15dc9984"}, @global=@item_4={0x3, 0x1, 0x3, "ddf96524"}, @local=@item_4={0x3, 0x2, 0x0, "6b862d96"}]}}, 0x0}, 0x0) close(0x3) syz_open_dev$hiddev(&(0x7f0000000600), 0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, 0x0) syz_usb_connect$lan78xx(0x1, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/90, 0x5a}], 0x1}}], 0x1, 0x40002180, 0x0) sendmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) sendto$packet(r2, &(0x7f00000003c0)="100693597c", 0x5, 0x4000881, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x27) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/173, 0xad}], 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000680)={0x7, {{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}}}, 0x88) 0s ago: executing program 1 (id=2920): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ptrace$ARCH_MAP_VDSO_X32(0x1e, 0x0, 0xb, 0x2001) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, 0x3a, 0x400, 0x70bd29, 0x25dfdbff, {0x4}, [@generic="4026ec61267ed2442aaa907fae095fe7c50948735a2fd75e3c24cf31b74295eeadc3a3e3959ac9e4e2b26d16a386144ccacd111549da75221ea8dae67028beeb9597ebdbfbe6683473888407fa01decf0f35a277023cae13e9d4d2a448f9817cfddc6d6decb226b75b5df77884039c6f1e2cca2981f55b13123d363d348de327f2130e4ce741ec5e0c8f4bc17e380f5c443f1d6e6ee7e8991edd70bab7b954ff5ff91d56470bb2df2802929c05421b382575c129ed8b9366c5e173c070fd8e6154a8e06cd195158ecfaf8c7010c85f2fc663b157eb8512ae3061bf3cdbe866cf413fb70c0c4018a78e09511571deb7d9"]}, 0x104}, 0x1, 0x0, 0x0, 0x24008000}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x38) r3 = openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x420881, 0x1, 0x10}, 0x18) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x1) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, @qipcrtr={0x2a, 0xffffffff, 0x4001}, @qipcrtr={0x2a, 0xffffffff, 0xffff7ffc}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x61ae, 0x0, 0x0, 0x0, 0x58, 0x0, 0x1, 0x7, 0xa}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000440), 0x4208e0, 0x0) r5 = getpgrp(0xffffffffffffffff) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000480)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000004c0)={0x1, 0xfffffffa, {r5}, {r6}, 0x7f, 0x9}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01864c2, &(0x7f0000000500)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01864c2, &(0x7f0000000540)={0x0, 0x1, r3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01864c2, &(0x7f0000000580)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000005c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f0000000700)={&(0x7f0000000680)=[r8, 0x0, 0x0, r9, r10, r11, 0x0, r12, r13], &(0x7f00000006c0)=[0x350], 0x9, 0x1}) getsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000740)=""/204, &(0x7f0000000840)=0xcc) r14 = openat$full(0xffffffffffffff9c, &(0x7f0000000880), 0x101000, 0x0) read$FUSE(r2, &(0x7f00000008c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r14, &(0x7f0000002900)={0x90, 0xfffffffffffffff5, r15, {0x4, 0x0, 0x40, 0xffffffff00000001, 0x2348, 0x1, {0x0, 0xffffffff00000001, 0xe, 0xe, 0x3, 0x0, 0x101, 0x400, 0x9, 0x8000, 0x0, r7, 0xee00, 0x9, 0x2}}}, 0x90) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000002a40)={0x14, &(0x7f00000029c0)={0x20, 0x2, 0x16, {0x16, 0x7, "b277c7c8f0eb9f39975fdfc65934af95d111e6ee"}}, &(0x7f0000002a00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002c80)={0x44, &(0x7f0000002a80)={0x0, 0x1, 0x1b, "5fcfa3d921e8a4f4a76442f2e5e225f28efb5a882033e5b5c64ef2"}, &(0x7f0000002ac0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002b00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000002b40)={0x20, 0x80, 0x1c, {0xe37, 0x3b, 0x27f, 0x1, 0x7, 0x2, 0x9, 0x9, 0x6, 0x3, 0x9bb}}, &(0x7f0000002b80)={0x20, 0x85, 0x4, 0xff6}, &(0x7f0000002bc0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000002c00)={0x20, 0x87, 0x2, 0x401}, &(0x7f0000002c40)={0x20, 0x89, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000002ec0)={'erspan0\x00', &(0x7f0000002e40)={'gre0\x00', 0x0, 0x10, 0x700, 0x80, 0x8, {{0xe, 0x4, 0x0, 0x4, 0x38, 0x68, 0x0, 0x0, 0x29, 0x0, @local, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0xa, 0xffffffffffffffff, [{0x1, 0x4, "4418"}]}, @noop, @timestamp_addr={0x44, 0x14, 0xe2, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@loopback, 0x1}]}]}}}}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002e00)={@ifindex=r16, 0x31, 0x1, 0x6, &(0x7f0000002d00)=[0x0], 0x1, 0x0, &(0x7f0000002d40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002d80)=[0x0, 0x0], &(0x7f0000002dc0)=[0x0]}, 0x40) mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x2, 0xe89e23940df2816, 0xffffffffffffffff, 0x0) r17 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000002f00), 0x2) ioctl$UDMABUF_CREATE_LIST(r17, 0x40087543, &(0x7f0000002f40)={0x0, 0x2, [{r3, 0x0, 0x10000, 0x1000000000000}, {r2, 0x0, 0x4000, 0xfffff000}]}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000002f80)=0x7, 0x12) kernel console output (not intermixed with test programs): 201] pgpgout 0 [ 658.651892][T15201] pgfault 0 [ 658.651896][T15201] pgmajfault 0 [ 658.651899][T15201] inactive_anon 0 [ 658.651903][T15201] active_anon 0 [ 658.651907][T15201] inactive_file 0 [ 658.651911][T15201] active_file 0 [ 658.651915][T15201] unevictable 0 [ 658.651918][T15201] hierarchical_memory_limit 98304 [ 658.651922][T15201] hierarchical_memsw_limit 9223372036854771712 [ 658.651927][T15201] total_cache 0 [ 658.651931][T15201] total_rss 0 [ 658.651934][T15201] total_rss_huge 0 [ 658.651938][T15201] total_shmem 0 [ 658.651942][T15201] total_mapped_file 0 [ 658.651946][T15201] total_dirty 0 [ 658.651949][T15201] total_writeback 0 [ 658.651953][T15201] total_workingset_refault_anon 0 [ 658.651958][T15201] total_workingset_refault_file 0 [ 658.651962][T15201] total_swap 0 [ 658.651966][T15201] total_swapcached 0 [ 658.651969][T15201] total_pgpgin 0 [ 658.651973][T15201] total_pgpgout 0 [ 658.651977][T15201] total_pgfault 0 [ 658.651980][T15201] total_pgmajfault 0 [ 658.651985][T15201] total_inactive_anon 0 [ 658.651988][T15201] total_active_anon 0 [ 658.651992][T15201] total_inactive_file 0 [ 658.651996][T15201] total_active_file 0 [ 658.652000][T15201] total_unevictable 0 [ 658.652004][T15201] anon_cost 0 [ 658.652008][T15201] file_cost 0 [ 658.652012][T15201] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.2505,pid=15200,uid=0 [ 658.652929][T15201] Memory cgroup out of memory: Killed process 15200 (syz.3.2505) total-vm:202648kB, anon-rss:1456kB, file-rss:21908kB, shmem-rss:4kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 658.669172][T14940] az6027: usb out operation failed. (-71) [ 658.669188][T14940] stb0899_attach: Driver disabled by Kconfig [ 658.669270][T14940] az6027: no front-end attached [ 658.669270][T14940] [ 658.707347][T14940] az6027: usb out operation failed. (-71) [ 658.707364][T14940] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 659.010490][T14940] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input119 [ 659.087787][T14940] dvb-usb: schedule remote query interval to 400 msecs. [ 659.087810][T14940] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 659.152373][T14940] usb 5-1: USB disconnect, device number 119 [ 659.580940][T15213] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2508'. [ 659.608987][T14940] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 659.681309][ T45] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 659.833318][ T45] usb 2-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00 [ 659.837691][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 659.838364][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 659.880259][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.880276][ T45] usb 2-1: Product: syz [ 659.880284][ T45] usb 2-1: Manufacturer: syz [ 659.880296][ T45] usb 2-1: SerialNumber: syz [ 660.451865][ T45] usb 2-1: USB disconnect, device number 105 [ 662.221565][ T45] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 662.382575][ T45] usb 1-1: New USB device found: idVendor=0d8c, idProduct=0022, bcdDevice=0.00 [ 662.384653][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.384684][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.384731][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.435482][ T45] usb 1-1: config 0 descriptor?? [ 662.502589][T14946] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 662.613082][T15246] syzkaller0: entered promiscuous mode [ 662.613225][T15246] syzkaller0: entered allmulticast mode [ 662.653054][T14946] usb 4-1: New USB device found: idVendor=0ccd, idProduct=00b1, bcdDevice=0.40 [ 662.657461][T15246] tipc: Enabled bearer , priority 0 [ 662.657836][T14946] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 51, changing to 4 [ 662.690687][T14946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.690709][T14946] usb 4-1: Product: syz [ 662.690743][T14946] usb 4-1: Manufacturer: syz [ 662.690756][T14946] usb 4-1: SerialNumber: syz [ 662.752432][T15246] tipc: Resetting bearer [ 662.802808][T15245] tipc: Resetting bearer [ 662.877505][T15245] tipc: Disabling bearer [ 662.932478][T15244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.933994][T15244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.938328][T15244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.938604][T15244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.980486][T14946] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 663.010027][T14946] usb 4-1: USB disconnect, device number 122 [ 663.038421][T15236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.038700][T15236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.087662][ T5650] udevd[5650]: setting mode of /dev/bus/usb/004/122 to 020664 failed: No such file or directory [ 663.087765][ T5650] udevd[5650]: setting owner of /dev/bus/usb/004/122 to uid=0, gid=0 failed: No such file or directory [ 663.286677][T15249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2519'. [ 663.569039][ T3345] IPVS: starting estimator thread 0... [ 663.672251][T15253] IPVS: using max 52 ests per chain, 124800 per kthread [ 663.816023][T15255] netlink: 'syz.3.2521': attribute type 28 has an invalid length. [ 663.829755][T14946] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 663.894115][T15255] netlink: 'syz.3.2521': attribute type 1 has an invalid length. [ 663.989261][T14946] usb 5-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 664.000946][T14946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.001230][T14946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.034101][T14946] usb 5-1: config 0 descriptor?? [ 664.060269][T15255] bond3: option mode: invalid value (9) [ 664.122247][T15255] bond3 (unregistering): Released all slaves [ 664.256480][T14946] usbhid 5-1:0.0: can't add hid device: -71 [ 664.256592][T14946] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 664.287571][T14946] usb 5-1: USB disconnect, device number 120 [ 664.754616][T14946] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 664.771274][T14944] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 664.911542][T15263] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2523'. [ 664.930375][T14944] usb 2-1: Using ep0 maxpacket: 16 [ 664.937064][T14946] usb 5-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 664.940489][T14946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.940556][T14946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.962280][T14944] usb 2-1: unable to get BOS descriptor or descriptor too short [ 664.962311][T14944] usb 2-1: New USB device found: idVendor=103d, idProduct=0100, bcdDevice=0.40 [ 664.990747][T14944] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 664.990773][T14944] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 665.015532][T14946] usb 5-1: config 0 descriptor?? [ 665.028256][T14944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.028281][T14944] usb 2-1: Product: syz [ 665.028295][T14944] usb 2-1: Manufacturer: syz [ 665.028309][T14944] usb 2-1: SerialNumber: syz [ 665.184971][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 665.185058][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 665.212439][ T45] usb 1-1: USB disconnect, device number 24 [ 665.532438][T14944] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 665.532924][T14944] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 665.576439][T14944] usb 2-1: 1:2 : does not exist [ 665.691920][T14944] usb 2-1: USB disconnect, device number 106 [ 665.751138][ T5657] udevd[5657]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 666.115516][T15278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.142253][T14946] usbhid 5-1:0.0: can't add hid device: -71 [ 667.142316][T14946] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 667.165139][T14946] usb 5-1: USB disconnect, device number 121 [ 667.842362][T14940] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 667.911130][T14946] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 668.010716][T14940] usb 1-1: unable to get BOS descriptor or descriptor too short [ 668.022501][T14940] usb 1-1: not running at top speed; connect to a high speed hub [ 668.022537][T14940] usb 1-1: New USB device found: idVendor=0499, idProduct=105c, bcdDevice=0.40 [ 668.047851][T14940] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 668.062649][T14946] usb 2-1: New USB device found: idVendor=07b5, idProduct=0312, bcdDevice=4c.14 [ 668.062675][T14946] usb 2-1: too many configurations: 125, using maximum allowed: 8 [ 668.064201][T14946] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 668.064234][T14946] usb 2-1: can't read configurations, error -61 [ 668.113727][T14940] usb 1-1: string descriptor 0 read error: -22 [ 668.113856][T14940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.144103][T15301] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 668.191440][T14940] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 668.210245][T14946] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 668.383940][T14946] usb 2-1: New USB device found: idVendor=07b5, idProduct=0312, bcdDevice=4c.14 [ 668.383968][T14946] usb 2-1: too many configurations: 125, using maximum allowed: 8 [ 668.387990][T14946] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 668.388012][T14946] usb 2-1: can't read configurations, error -61 [ 668.388224][T14946] usb usb2-port1: attempt power cycle [ 668.526636][T15301] ip6gretap1: entered allmulticast mode [ 668.559717][T15301] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 668.560162][T15301] batman_adv: batadv0: Adding interface: ip6gretap1 [ 668.560176][T15301] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.560199][T15301] batman_adv: batadv0: Interface activated: ip6gretap1 [ 668.560214][T15301] batadv0: mtu less than device minimum [ 668.561287][T15301] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 668.562649][T15301] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 668.563997][T15301] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 668.565370][T15301] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 668.566736][T15301] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 668.568092][T15301] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 668.569485][T15301] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 668.570828][T15301] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 668.572285][T15301] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 668.781262][T14946] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 668.806278][T14946] usb 2-1: New USB device found: idVendor=07b5, idProduct=0312, bcdDevice=4c.14 [ 668.806318][T14946] usb 2-1: too many configurations: 125, using maximum allowed: 8 [ 668.829825][T14946] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 668.829894][T14946] usb 2-1: can't read configurations, error -61 [ 668.931263][T14939] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 668.954628][T14946] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 668.978485][T14946] usb 2-1: New USB device found: idVendor=07b5, idProduct=0312, bcdDevice=4c.14 [ 668.978515][T14946] usb 2-1: too many configurations: 125, using maximum allowed: 8 [ 668.980348][T14946] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 668.980380][T14946] usb 2-1: can't read configurations, error -61 [ 668.980582][T14946] usb usb2-port1: unable to enumerate USB device [ 669.088806][T14939] usb 4-1: Using ep0 maxpacket: 32 [ 669.093484][T14939] usb 4-1: unable to get BOS descriptor or descriptor too short [ 669.093533][T14939] usb 4-1: New USB device found: idVendor=0b05, idProduct=1739, bcdDevice=0.40 [ 669.124751][T14939] usb 4-1: language id specifier not provided by device, defaulting to English [ 669.142339][T14939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.142366][T14939] usb 4-1: Product: syz [ 669.142381][T14939] usb 4-1: SerialNumber: syz [ 669.299892][T15313] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2537'. [ 669.300103][T15313] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2537'. [ 669.388489][T15309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.403498][T15309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.541554][T15309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.544222][T15309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.592764][T15313] netlink: 'syz.4.2537': attribute type 1 has an invalid length. [ 669.612851][T14940] usb 1-1: USB disconnect, device number 25 [ 669.723249][T15314] 8021q: adding VLAN 0 to HW filter on device bond5 [ 669.726274][T15314] bond0: (slave bond5): making interface the new active one [ 669.727710][T15314] bond0: (slave bond5): Enslaving as an active interface with an up link [ 669.779265][T14939] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 669.780212][T14939] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 669.966230][T14939] usb 4-1: USB disconnect, device number 123 [ 670.042649][ T5650] udevd[5650]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 670.373293][T15320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.817176][T15335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 672.426718][T15377] netlink: 'syz.0.2548': attribute type 10 has an invalid length. [ 672.450743][T15380] netlink: 'syz.0.2548': attribute type 10 has an invalid length. [ 672.761620][T14940] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 672.783044][T15384] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2550'. [ 672.911715][T14940] usb 2-1: New USB device found: idVendor=27b8, idProduct=01ed, bcdDevice=0.00 [ 672.912767][T14940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.912797][T14940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.912833][T14940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.915635][T14940] usb 2-1: config 0 descriptor?? [ 673.018733][T15389] fuse: Bad value for 'user_id' [ 673.018746][T15389] fuse: Bad value for 'user_id' [ 673.114338][T14944] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 673.241116][T14944] usb 4-1: device descriptor read/64, error -71 [ 673.271077][T14946] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 673.432281][T14946] usb 1-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 673.434778][T14946] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 673.434804][T14946] usb 1-1: Product: syz [ 673.434818][T14946] usb 1-1: SerialNumber: syz [ 673.437426][T14946] usb 1-1: config 0 descriptor?? [ 673.439619][T14946] hso 1-1:0.0: Not our interface [ 673.501325][T14944] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 673.631116][T14944] usb 4-1: device descriptor read/64, error -71 [ 673.654792][ T45] usb 1-1: USB disconnect, device number 26 [ 673.729528][T14940] hid-led 0003:27B8:01ED.0038: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 673.743192][T14944] usb usb4-port1: attempt power cycle [ 673.794043][T14940] hid-led 0003:27B8:01ED.0038: ThingM blink(1) initialized [ 673.927873][T15374] net_ratelimit: 10 callbacks suppressed [ 673.927894][T15374] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 673.948266][T14940] usb 2-1: USB disconnect, device number 111 [ 674.083062][T14944] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 674.102413][T14944] usb 4-1: device descriptor read/8, error -71 [ 674.209644][T15394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.341281][T14944] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 674.361617][T14944] usb 4-1: device descriptor read/8, error -71 [ 674.471356][T14944] usb usb4-port1: unable to enumerate USB device [ 674.620457][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 674.620475][ T30] audit: type=1326 audit(1794529433.528:6790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15405 comm="syz.4.2557" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c181a94d9 code=0x7ffc0000 [ 674.620506][ T30] audit: type=1326 audit(1794529433.528:6791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15405 comm="syz.4.2557" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c181a94d9 code=0x7ffc0000 [ 674.620822][ T30] audit: type=1326 audit(1794529433.528:6792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15405 comm="syz.4.2557" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1c181a94d9 code=0x7ffc0000 [ 674.626670][ T30] audit: type=1326 audit(1794529433.538:6793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15405 comm="syz.4.2557" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c181a94d9 code=0x7ffc0000 [ 674.626718][ T30] audit: type=1326 audit(1794529433.538:6794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15405 comm="syz.4.2557" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c181a94d9 code=0x7ffc0000 [ 674.655287][ T30] audit: type=1326 audit(1794529433.568:6795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15405 comm="syz.4.2557" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1c181a94d9 code=0x7ffc0000 [ 674.699042][ T30] audit: type=1326 audit(1794529433.598:6796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15405 comm="syz.4.2557" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c181a94d9 code=0x7ffc0000 [ 674.699098][ T30] audit: type=1326 audit(1794529433.608:6797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15405 comm="syz.4.2557" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c181a94d9 code=0x7ffc0000 [ 674.841464][ T30] audit: type=1326 audit(1794529433.758:6798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15405 comm="syz.4.2557" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1c181a94d9 code=0x7ffc0000 [ 674.841592][ T30] audit: type=1326 audit(1794529433.758:6799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15405 comm="syz.4.2557" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c181a94d9 code=0x7ffc0000 [ 674.930473][T15409] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 675.076129][T15412] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2558'. [ 675.136294][T15415] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2560'. [ 675.721080][T14940] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 675.872538][T14940] usb 5-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 675.877009][T14940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 675.877030][T14940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.877051][T14940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.884937][T14940] usb 5-1: config 0 descriptor?? [ 675.929317][T14940] hub 5-1:0.0: USB hub found [ 676.066656][T15429] xt_hashlimit: size too large, truncated to 1048576 [ 676.097729][T15418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.102652][T15418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.165955][T15430] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 677.064358][T15453] xt_hashlimit: size too large, truncated to 1048576 [ 677.082178][ T8552] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96 [ 677.110633][T15455] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 677.235999][T14940] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 677.257385][T14940] usbhid 5-1:0.0: can't add hid device: -71 [ 677.257485][T14940] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 677.297403][T14940] usb 5-1: USB disconnect, device number 122 [ 677.424589][T15457] sg_write: data in/out 483340/136 bytes for SCSI command 0x0-- guessing data in; [ 677.424589][T15457] program syz.1.2573 not setting count and/or reply_len properly [ 677.795803][T15462] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2575'. [ 678.077526][T15473] netlink: 22 bytes leftover after parsing attributes in process `syz.0.2577'. [ 678.401419][T14940] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 678.428189][T15474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.428583][T15474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.551355][T14940] usb 3-1: Using ep0 maxpacket: 8 [ 678.552306][T14940] usb 3-1: New USB device found: idVendor=2b73, idProduct=0034, bcdDevice=0.40 [ 678.555436][T14940] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.555643][T14940] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 678.613972][T15461] tipc: Enabled bearer , priority 0 [ 678.671343][T14940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.671369][T14940] usb 3-1: Product: syz [ 678.671377][T14940] usb 3-1: Manufacturer: syz [ 678.671386][T14940] usb 3-1: SerialNumber: syz [ 678.760164][T15459] tipc: Disabling bearer [ 678.808153][T15486] netlink: 'syz.0.2581': attribute type 1 has an invalid length. [ 678.841130][ T5715] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 678.892171][T15486] 8021q: adding VLAN 0 to HW filter on device bond6 [ 678.950500][T15488] 8021q: adding VLAN 0 to HW filter on device bond6 [ 678.950933][T15488] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 678.961795][T15488] bond6: (slave wireguard0): Error -95 calling set_mac_address [ 678.978709][ T5715] usb 2-1: device descriptor read/64, error -71 [ 679.005983][T15492] xt_hashlimit: size too large, truncated to 1048576 [ 679.049422][T15493] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 679.049501][T15493] FAULT_INJECTION: forcing a failure. [ 679.049501][T15493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 679.049525][T15493] CPU: 1 UID: 0 PID: 15493 Comm: syz.3.2582 Tainted: G L syzkaller #0 PREEMPT(full) [ 679.049550][T15493] Tainted: [L]=SOFTLOCKUP [ 679.049557][T15493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 679.049568][T15493] Call Trace: [ 679.049576][T15493] [ 679.049585][T15493] dump_stack_lvl+0xe8/0x150 [ 679.049620][T15493] should_fail_ex+0x3eb/0x540 [ 679.049648][T15493] _copy_to_user+0x31/0xb0 [ 679.049674][T15493] simple_read_from_buffer+0xe1/0x170 [ 679.049704][T15493] proc_fail_nth_read+0x1bb/0x230 [ 679.049727][T15493] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 679.049750][T15493] ? rw_verify_area+0x24a/0x4c0 [ 679.049777][T15493] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 679.049795][T15493] vfs_read+0x213/0xa80 [ 679.049826][T15493] ? __pfx___mutex_lock+0x10/0x10 [ 679.049855][T15493] ? __pfx_vfs_read+0x10/0x10 [ 679.049882][T15493] ? __fget_files+0x2a/0x420 [ 679.049903][T15493] ? __fget_files+0x3a2/0x420 [ 679.049923][T15493] ? __fget_files+0x2a/0x420 [ 679.049947][T15493] ? fdget+0x1ac/0x250 [ 679.049975][T15493] ksys_read+0x150/0x270 [ 679.050002][T15493] ? __pfx_ksys_read+0x10/0x10 [ 679.050047][T15493] do_syscall_64+0x16a/0x530 [ 679.050070][T15493] ? trace_irq_disable+0x3b/0x140 [ 679.050096][T15493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.050116][T15493] ? clear_bhb_loop+0x70/0xc0 [ 679.050139][T15493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.050158][T15493] RIP: 0033:0x7fbf40969d0e [ 679.050177][T15493] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 679.050193][T15493] RSP: 002b:00007fbf3ebd4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 679.050213][T15493] RAX: ffffffffffffffda RBX: 00007fbf3ebd56c0 RCX: 00007fbf40969d0e [ 679.050227][T15493] RDX: 000000000000000f RSI: 00007fbf3ebd50a0 RDI: 0000000000000005 [ 679.050240][T15493] RBP: 00007fbf3ebd5090 R08: 0000000000000000 R09: 0000000000000000 [ 679.050252][T15493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 679.050263][T15493] R13: 00007fbf40c26128 R14: 00007fbf40c26090 R15: 00007fbf40d4fa48 [ 679.050296][T15493] [ 679.251180][T14946] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 679.306342][ T5715] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 679.401070][T14946] usb 1-1: Using ep0 maxpacket: 32 [ 679.401721][T14946] usb 1-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 679.402713][T14946] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 679.402735][T14946] usb 1-1: config 0 has no interface number 0 [ 679.404498][T14946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.404513][T14946] usb 1-1: Product: syz [ 679.404521][T14946] usb 1-1: Manufacturer: syz [ 679.404529][T14946] usb 1-1: SerialNumber: syz [ 679.433615][ T5715] usb 2-1: device descriptor read/64, error -71 [ 679.541431][ T5715] usb usb2-port1: attempt power cycle [ 679.576825][T15497] fuse: Unknown parameter '0x0000000000000003' [ 679.623793][T15497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 679.627394][T15496] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 679.638750][T14946] usb 1-1: config 0 descriptor?? [ 679.652415][T14940] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 679.659957][T14940] usb 3-1: USB disconnect, device number 127 [ 679.681644][T14946] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 679.681738][T14946] usb 1-1: selecting invalid altsetting 1 [ 679.681757][T14946] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 679.690128][T14946] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 679.690599][T14946] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 679.690646][T14946] usb 1-1: media controller created [ 679.700526][T15496] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 679.776926][T15496] syzkaller0: entered promiscuous mode [ 679.776941][T15496] syzkaller0: entered allmulticast mode [ 679.793878][T14946] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 679.810223][ T5650] udevd[5650]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 679.881387][ T5715] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 679.902851][ T5715] usb 2-1: device descriptor read/8, error -71 [ 679.982095][T15498] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2581'. [ 680.132624][T14946] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 680.132662][T14946] zl10353_read_register: readreg error (reg=127, ret==-71) [ 680.133023][T14946] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 680.141104][ T5715] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 680.172857][ T5715] usb 2-1: device descriptor read/8, error -71 [ 680.245156][T14946] usb 1-1: USB disconnect, device number 27 [ 680.275189][T15500] hsr_slave_0: left promiscuous mode [ 680.286757][ T5715] usb usb2-port1: unable to enumerate USB device [ 680.298340][T15500] hsr_slave_1: left promiscuous mode [ 680.674540][T15515] xt_hashlimit: size too large, truncated to 1048576 [ 680.721092][ T5715] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 680.871125][ T5715] usb 5-1: Using ep0 maxpacket: 32 [ 680.871759][ T5715] usb 5-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 680.872761][ T5715] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 680.872784][ T5715] usb 5-1: config 0 has no interface number 0 [ 680.872824][ T5715] usb 5-1: config 0 interface 184 has no altsetting 0 [ 680.876590][T15522] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2591'. [ 680.876670][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.876699][ T5715] usb 5-1: Product: syz [ 680.876713][ T5715] usb 5-1: Manufacturer: syz [ 680.876726][ T5715] usb 5-1: SerialNumber: syz [ 680.937061][ T5715] usb 5-1: config 0 descriptor?? [ 681.024329][T15529] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 681.086867][T15529] qrtr: Invalid version 255 [ 681.230181][T15535] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2594'. [ 681.258711][T15535] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2594'. [ 681.364487][ T5715] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -32 [ 681.364518][ T5715] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 681.420648][ T5715] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 681.420669][ T5715] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 681.420680][ T5715] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 681.420689][ T5715] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 681.420854][ T5715] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 681.534858][T15549] input: syz1 as /devices/virtual/input/input120 [ 681.921544][T14940] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 682.075585][T14940] usb 2-1: Using ep0 maxpacket: 16 [ 682.090600][T14940] usb 2-1: New USB device found: idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 682.090627][T14940] usb 2-1: too many configurations: 97, using maximum allowed: 8 [ 682.204692][T14940] usb 2-1: string descriptor 0 read error: -71 [ 682.204775][T14940] usb 2-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 682.210716][T14940] usb 2-1: rejected 8 configurations due to insufficient available bus power [ 682.210739][T14940] usb 2-1: no configuration chosen from 8 choices [ 682.249952][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 682.249969][ T30] audit: type=1326 audit(1794529441.158:6866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.0.2599" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4476ba94d9 code=0x7ffc0000 [ 682.250009][ T30] audit: type=1326 audit(1794529441.158:6867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.0.2599" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4476ba94d9 code=0x7ffc0000 [ 682.272461][ T30] audit: type=1326 audit(1794529441.168:6868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.0.2599" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f4476ba94d9 code=0x7ffc0000 [ 682.272510][ T30] audit: type=1326 audit(1794529441.168:6869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.0.2599" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4476ba94d9 code=0x7ffc0000 [ 682.272547][ T30] audit: type=1326 audit(1794529441.168:6870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.0.2599" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4476ba94d9 code=0x7ffc0000 [ 682.273049][ T30] audit: type=1326 audit(1794529441.168:6871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.0.2599" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f4476ba94d9 code=0x7ffc0000 [ 682.275097][ T30] audit: type=1326 audit(1794529441.168:6872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.0.2599" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4476ba94d9 code=0x7ffc0000 [ 682.275139][ T30] audit: type=1326 audit(1794529441.168:6873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.0.2599" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4476ba94d9 code=0x7ffc0000 [ 682.279168][ T30] audit: type=1326 audit(1794529441.168:6874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.0.2599" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f4476ba94d9 code=0x7ffc0000 [ 682.279213][ T30] audit: type=1326 audit(1794529441.168:6875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.0.2599" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4476ba94d9 code=0x7ffc0000 [ 682.309626][T14940] usb 2-1: USB disconnect, device number 116 [ 682.942724][T15574] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 682.989221][T15576] netlink: 'syz.0.2604': attribute type 10 has an invalid length. [ 682.989236][T15576] netlink: 'syz.0.2604': attribute type 17 has an invalid length. [ 682.989244][T15576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2604'. [ 682.989253][T15576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2604'. [ 683.270734][T15586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 683.351093][T14940] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 683.499410][T14946] usb 5-1: USB disconnect, device number 123 [ 683.507266][T14940] usb 2-1: Using ep0 maxpacket: 16 [ 683.507971][T14940] usb 2-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 683.526291][T14940] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.526341][T14940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 683.526376][T14940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 683.526396][T14940] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 683.526416][T14940] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 683.541982][T14940] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 683.542008][T14940] usb 2-1: Manufacturer: syz [ 683.587822][ T5715] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 683.614339][T14940] usb 2-1: config 0 descriptor?? [ 683.754898][T15597] netlink: 'syz.4.2611': attribute type 15 has an invalid length. [ 683.761848][ T5715] usb 1-1: Using ep0 maxpacket: 16 [ 683.776062][ T5715] usb 1-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 683.782876][T15597] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2611'. [ 683.799880][ T5715] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 683.799936][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 683.828520][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.828547][ T5715] usb 1-1: Product: syz [ 683.828561][ T5715] usb 1-1: Manufacturer: syz [ 683.828574][ T5715] usb 1-1: SerialNumber: syz [ 683.858453][ T5715] usb 1-1: config 0 descriptor?? [ 683.874939][ T5715] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 683.874971][ T5715] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 683.953245][T14940] rc_core: IR keymap rc-hauppauge not found [ 683.953265][T14940] Registered IR keymap rc-empty [ 683.953593][T14940] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 683.982357][T14940] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 684.002779][T14940] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 684.008139][T14940] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input121 [ 684.039091][T14940] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 684.041677][T14946] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 684.056252][T14940] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 684.071416][T14940] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 684.091513][T14940] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 684.111241][T14940] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 684.131268][T14940] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 684.151767][T14940] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 684.171388][T14940] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 684.191147][T14940] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 684.211400][T14940] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 684.214234][T14946] usb 4-1: Using ep0 maxpacket: 16 [ 684.216325][T14946] usb 4-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 684.217626][T14946] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 684.217656][T14946] usb 4-1: config 0 interface 0 has no altsetting 0 [ 684.220602][T14946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.220625][T14946] usb 4-1: Product: syz [ 684.220639][T14946] usb 4-1: Manufacturer: syz [ 684.220652][T14946] usb 4-1: SerialNumber: syz [ 684.225737][T14946] usb 4-1: config 0 descriptor?? [ 684.293645][T14940] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 684.293672][T14940] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 684.476639][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 684.484938][T14946] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input122 [ 684.501679][ T5715] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 684.503920][ T5715] em28xx 1-1:0.0: Config register raw data: 0x41 [ 684.507332][T14946] imon:send_packet: packet tx failed (-71) [ 684.531820][T14946] imon 4-1:0.0: panel buttons/knobs setup failed [ 684.681044][T14946] rc_core: IR keymap rc-imon-pad not found [ 684.681060][T14946] Registered IR keymap rc-empty [ 684.681134][T14946] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 684.681152][T14946] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 684.682236][T14946] imon:send_packet: packet tx failed (-71) [ 684.711126][T14946] imon 4-1:0.0: remote input dev register failed [ 684.711358][T14946] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 684.859341][T14946] imon 4-1:0.0: unable to initialize intf0, err 0 [ 684.892203][T14946] usb 4-1: USB disconnect, device number 2 [ 685.191062][T14946] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 685.221886][ T5715] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 685.342034][T14946] usb 4-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 685.345315][T14946] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 685.345344][T14946] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 685.345368][T14946] usb 4-1: config 0 interface 0 has no altsetting 0 [ 685.348872][T14946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.348896][T14946] usb 4-1: Product: syz [ 685.348910][T14946] usb 4-1: Manufacturer: syz [ 685.348924][T14946] usb 4-1: SerialNumber: syz [ 685.373525][ T5715] usb 3-1: unable to get BOS descriptor or descriptor too short [ 685.373574][ T5715] usb 3-1: New USB device found: idVendor=17cc, idProduct=1020, bcdDevice=0.40 [ 685.374940][ T5715] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 238, changing to 7 [ 685.377288][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.377390][ T5715] usb 3-1: Product: syz [ 685.377405][ T5715] usb 3-1: Manufacturer: syz [ 685.377418][ T5715] usb 3-1: SerialNumber: syz [ 685.473902][T14946] usb 4-1: config 0 descriptor?? [ 685.476088][T15599] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 685.686911][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 685.698679][T14946] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input124 [ 685.723177][T14946] imon:send_packet: packet tx failed (-71) [ 685.741063][T14946] imon 4-1:0.0: panel buttons/knobs setup failed [ 685.781421][T14944] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 685.801019][T14946] rc_core: IR keymap rc-imon-pad not found [ 685.801037][T14946] Registered IR keymap rc-empty [ 685.801113][T14946] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 685.801130][T14946] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 685.801413][T14946] imon:send_packet: packet tx failed (-71) [ 685.813288][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.813344][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.845671][T14946] imon 4-1:0.0: remote input dev register failed [ 685.845869][T14946] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 685.903463][T14946] imon 4-1:0.0: unable to initialize intf0, err 0 [ 685.910020][T14946] usb 4-1: USB disconnect, device number 3 [ 685.952546][T14944] usb 5-1: Using ep0 maxpacket: 32 [ 685.953255][T14944] usb 5-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 685.954526][T14944] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 685.954549][T14944] usb 5-1: config 0 has no interface number 0 [ 685.954599][T14944] usb 5-1: config 0 interface 12 has no altsetting 0 [ 685.960346][T14944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.960370][T14944] usb 5-1: Product: syz [ 685.960383][T14944] usb 5-1: Manufacturer: syz [ 685.960397][T14944] usb 5-1: SerialNumber: syz [ 686.024994][T14944] usb 5-1: config 0 descriptor?? [ 686.046013][ T5715] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 686.053752][ T5715] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 686.057206][ T5715] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 686.061040][ T5715] usb 3-1: USB disconnect, device number 2 [ 686.162551][T14940] usb 2-1: USB disconnect, device number 117 [ 686.237193][T15646] netlink: 'syz.1.2620': attribute type 39 has an invalid length. [ 686.331685][T15649] program syz.1.2621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 686.411562][T14940] usb 1-1: USB disconnect, device number 28 [ 686.413383][T14940] em28xx 1-1:0.0: Disconnecting em28xx [ 686.414816][T14940] em28xx: Freeing device [ 686.676566][T15660] netlink: 'syz.3.2625': attribute type 9 has an invalid length. [ 686.901228][T14940] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 686.924453][T15671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2629'. [ 687.053132][T14940] usb 1-1: Using ep0 maxpacket: 8 [ 687.053903][T14940] usb 1-1: New USB device found: idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 687.066977][T14940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.067010][T14940] usb 1-1: Product: syz [ 687.067024][T14940] usb 1-1: Manufacturer: syz [ 687.067037][T14940] usb 1-1: SerialNumber: syz [ 687.110536][T14940] usb 1-1: config 0 descriptor?? [ 687.126414][T14940] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 687.126469][T14940] pctv452e: pctv452e_power_ctrl: 1 [ 687.126469][T14940] [ 687.126511][T14940] usb 1-1: selecting invalid altsetting 3 [ 687.126523][T14940] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 687.126523][T14940] [ 687.126532][T14940] dvb-usb: bulk message failed: -22 (5/0) [ 687.153397][T14940] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 687.158782][T14940] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 687.158837][T14940] usb 1-1: media controller created [ 687.159341][T14940] dvb-usb: bulk message failed: -22 (8/0) [ 687.159366][T14940] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 687.159417][T14940] dvb-usb: MAC address reading failed. [ 687.247131][T14940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 687.426949][T15658] dvb-usb: bulk message failed: -22 (7/0) [ 687.426963][T15658] pctv452e: I2C error -22; AA 02 1FC 00 00 -> aa 02 31 03 fc 00 00 [ 687.492566][T14940] DVB: Unable to find symbol stb0899_attach() [ 687.492583][T14940] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 687.681827][T14940] rc_core: IR keymap rc-tt-1500 not found [ 687.681848][T14940] Registered IR keymap rc-empty [ 687.686032][T14940] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 687.720210][T14940] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input126 [ 687.740724][T14940] dvb-usb: schedule remote query interval to 100 msecs. [ 687.740739][T14940] pctv452e: pctv452e_power_ctrl: 0 [ 687.740739][T14940] [ 687.740746][T14940] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 687.757862][T14940] usb 1-1: USB disconnect, device number 29 [ 687.936359][T14940] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 688.785557][T15687] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2633'. [ 689.201058][T14946] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 689.331271][T14946] usb 4-1: device descriptor read/64, error -71 [ 689.571541][T14946] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 689.712095][T14946] usb 4-1: device descriptor read/64, error -71 [ 689.821762][T14946] usb usb4-port1: attempt power cycle [ 690.028667][T14944] f81534 5-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 690.028726][T14944] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 690.028744][T14944] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 690.028824][T14944] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 690.075221][T14944] usb 5-1: USB disconnect, device number 124 [ 690.173039][T14946] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 690.202942][T14946] usb 4-1: device descriptor read/8, error -71 [ 690.461304][T14946] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 690.481529][T14946] usb 4-1: device descriptor read/8, error -71 [ 690.601609][T14946] usb usb4-port1: unable to enumerate USB device [ 691.631770][T15727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2646'. [ 691.650057][T14946] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 691.816366][T15737] ip_tables: iptables: counters copy to user failed while replacing table [ 691.830523][T14946] usb 1-1: New USB device found: idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 691.853771][T14946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.853795][T14946] usb 1-1: Product: syz [ 691.853804][T14946] usb 1-1: Manufacturer: syz [ 691.853811][T14946] usb 1-1: SerialNumber: syz [ 691.856080][T14946] usb 1-1: config 0 descriptor?? [ 691.898024][T14946] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 692.285650][T15756] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 692.285677][T15756] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 692.285788][T15756] vhci_hcd vhci_hcd.0: Device attached [ 692.329777][T14946] input: sonixb as /devices/platform/dummy_hcd.0/usb1/1-1/input/input127 [ 692.497667][T15759] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(15) [ 692.497693][T15759] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 692.519457][T15759] vhci_hcd vhci_hcd.0: Device attached [ 692.529723][ T5715] usb 1-1: USB disconnect, device number 30 [ 692.579921][T15762] vhci_hcd: connection closed [ 692.596543][T15757] vhci_hcd: connection closed [ 692.597482][ T43] vhci_hcd vhci_hcd.3: stop threads [ 692.597507][ T43] vhci_hcd vhci_hcd.3: release socket [ 692.619406][T14944] usb 40-1: SetAddress Request (2) to port 0 [ 692.619460][T14944] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 692.640320][T15758] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 692.655879][ T43] vhci_hcd vhci_hcd.3: disconnect device [ 692.655945][ T43] vhci_hcd vhci_hcd.3: stop threads [ 692.655959][ T43] vhci_hcd vhci_hcd.3: release socket [ 692.656287][ T43] vhci_hcd vhci_hcd.3: disconnect device [ 693.277165][T15774] xt_hashlimit: size too large, truncated to 1048576 [ 693.359950][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 693.359969][ T30] audit: type=1326 audit(1794529452.268:6923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.4.2657" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c181a94d9 code=0x7ffc0000 [ 693.360013][ T30] audit: type=1326 audit(1794529452.268:6924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.4.2657" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c181a94d9 code=0x7ffc0000 [ 693.365491][ T30] audit: type=1326 audit(1794529452.278:6925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.4.2657" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c181a94d9 code=0x7ffc0000 [ 693.365882][ T30] audit: type=1326 audit(1794529452.278:6926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.4.2657" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c181a94d9 code=0x7ffc0000 [ 693.367706][ T30] audit: type=1326 audit(1794529452.278:6927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.4.2657" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c181a94d9 code=0x7ffc0000 [ 693.371626][ T30] audit: type=1326 audit(1794529452.278:6928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.4.2657" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1c181a8347 code=0x7ffc0000 [ 693.371673][ T30] audit: type=1326 audit(1794529452.278:6929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.4.2657" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1c181aa77a code=0x7ffc0000 [ 693.399605][ T30] audit: type=1326 audit(1794529452.308:6930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.4.2657" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c18169d0e code=0x7ffc0000 [ 693.452024][ T30] audit: type=1326 audit(1794529452.368:6931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.4.2657" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c181a94d9 code=0x7ffc0000 [ 693.452234][ T30] audit: type=1326 audit(1794529452.368:6932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.4.2657" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c181a94d9 code=0x7ffc0000 [ 693.831125][ T5715] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 693.991822][ T5715] usb 4-1: unable to get BOS descriptor or descriptor too short [ 693.991873][ T5715] usb 4-1: New USB device found: idVendor=1235, idProduct=8201, bcdDevice=0.40 [ 693.996968][ T5715] usb 4-1: config index 0 descriptor too short (expected 2182, got 134) [ 693.996993][ T5715] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 693.997010][ T5715] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.997027][ T5715] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 694.005378][ T5715] usb 4-1: string descriptor 0 read error: -22 [ 694.005509][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.020803][ T5715] usb 4-1: config 0 descriptor?? [ 694.044095][ T5715] usb 4-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 694.044168][ T5715] usb 4-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 694.209068][ T5715] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 694.244783][ T5715] usb 4-1: USB disconnect, device number 8 [ 694.472280][T15810] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 694.571114][T14940] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 694.721298][T14940] usb 2-1: Using ep0 maxpacket: 8 [ 694.722011][T14940] usb 2-1: New USB device found: idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 694.728546][T14940] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.728595][T14940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.738465][T14940] usb 2-1: config 0 descriptor?? [ 694.770808][T14940] uvcvideo 2-1:0.0: probe with driver uvcvideo failed with error -22 [ 695.004535][T14940] usb 2-1: USB disconnect, device number 118 [ 695.478457][T15836] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2669'. [ 695.750923][T15850] fuse: Bad value for 'fd' [ 695.761377][T15850] netlink: 'syz.4.2674': attribute type 12 has an invalid length. [ 695.856150][T15857] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2676'. [ 695.980021][T15862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2677'. [ 696.130134][T15866] openvswitch: netlink: Actions may not be safe on all matching packets [ 696.371155][ T5715] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 696.441762][T14939] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 696.519642][T15876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2683'. [ 696.519665][T15876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2683'. [ 696.521097][ T5715] usb 5-1: Using ep0 maxpacket: 16 [ 696.521957][ T5715] usb 5-1: New USB device found: idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 696.528993][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.529018][ T5715] usb 5-1: Product: syz [ 696.529031][ T5715] usb 5-1: Manufacturer: syz [ 696.529044][ T5715] usb 5-1: SerialNumber: syz [ 696.536468][ T5715] usb 5-1: config 0 descriptor?? [ 696.550255][ T5715] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 696.587625][T15876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2683'. [ 696.591105][T14939] usb 1-1: Using ep0 maxpacket: 32 [ 696.592562][T14939] usb 1-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 696.594983][T14939] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 696.595005][T14939] usb 1-1: config 0 has no interface number 0 [ 696.599332][T14939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.599353][T14939] usb 1-1: Product: syz [ 696.599366][T14939] usb 1-1: Manufacturer: syz [ 696.599379][T14939] usb 1-1: SerialNumber: syz [ 696.605840][T14939] usb 1-1: config 0 descriptor?? [ 696.615584][T14939] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 697.159077][T15866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.159367][T15866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.163904][T15866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.164397][T15866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.169415][T15866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.172461][T15866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.206364][T15892] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2688'. [ 697.251492][ T5715] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 697.274139][T14946] usb 5-1: USB disconnect, device number 125 [ 697.465126][T15908] xt_nfacct: accounting object `syz0' does not exist [ 697.468467][T15908] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 697.654664][T14944] usb 40-1: device descriptor read/8, error -110 [ 697.691676][T15912] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2692'. [ 697.813574][T15914] openvswitch: netlink: Actions may not be safe on all matching packets [ 698.049870][T14944] usb usb40-port1: attempt power cycle [ 698.221463][ T45] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 698.371635][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 698.374151][ T45] usb 4-1: New USB device found: idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 698.378211][ T45] usb 4-1: config 4 has an invalid interface number: 8 but max is 0 [ 698.378226][ T45] usb 4-1: config 4 has no interface number 0 [ 698.378248][ T45] usb 4-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 698.378261][ T45] usb 4-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 698.378282][ T45] usb 4-1: config 4 interface 8 has no altsetting 0 [ 698.437901][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.437921][ T45] usb 4-1: Product: syz [ 698.437929][ T45] usb 4-1: Manufacturer: syz [ 698.437936][ T45] usb 4-1: SerialNumber: syz [ 698.672765][T14944] usb usb40-port1: unable to enumerate USB device [ 698.795595][ T45] opticon 4-1:4.8: opticon converter detected [ 698.821924][ T45] usb 4-1: opticon converter now attached to ttyUSB0 [ 698.842911][ T45] usb 4-1: USB disconnect, device number 9 [ 698.877952][ T45] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 698.893392][ T45] opticon 4-1:4.8: device disconnected [ 699.211309][T15932] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2699'. [ 699.240551][T15930] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2699'. [ 699.463226][T15938] xt_hashlimit: size too large, truncated to 1048576 [ 699.519517][T14939] usb 1-1: qt2_attach - failed to power on unit: -71 [ 699.519667][T14939] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 699.544426][T14939] usb 1-1: USB disconnect, device number 31 [ 699.812237][ T45] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 699.942647][T14939] hid_parser_main: 5 callbacks suppressed [ 699.942665][T14939] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 699.947803][T14939] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz1] on syz0 [ 699.985449][ T45] usb 5-1: not running at top speed; connect to a high speed hub [ 699.985486][ T45] usb 5-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 699.988540][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.988602][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.072135][ T45] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 700.072201][ T45] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 700.237583][T14939] usb 5-1: USB disconnect, device number 126 [ 700.561303][ T5715] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 700.712164][ T5715] usb 2-1: New USB device found: idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 700.713149][ T5715] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.713169][ T5715] usb 2-1: config 0 has no interfaces? [ 700.715402][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.715426][ T5715] usb 2-1: Product: syz [ 700.715439][ T5715] usb 2-1: Manufacturer: syz [ 700.715453][ T5715] usb 2-1: SerialNumber: syz [ 700.769190][ T5715] usb 2-1: config 0 descriptor?? [ 700.792668][T15959] __nla_validate_parse: 1 callbacks suppressed [ 700.792684][T15959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2707'. [ 700.994181][T15952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.994432][T15952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.998588][T15966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.998833][T15966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.282264][T15978] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2712'. [ 701.370834][T15972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2710'. [ 701.798501][T15991] xt_hashlimit: size too large, truncated to 1048576 [ 701.848172][T15993] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 701.851343][ T5715] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 702.011416][ T5715] usb 1-1: Using ep0 maxpacket: 32 [ 702.012865][ T5715] usb 1-1: New USB device found: idVendor=056a, idProduct=0041, bcdDevice=0.00 [ 702.015305][ T5715] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 702.015326][ T5715] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 702.015345][ T5715] usb 1-1: config 0 interface 0 has no altsetting 0 [ 702.015365][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.020859][ T5715] usb 1-1: config 0 descriptor?? [ 702.500548][ T5715] usbhid 1-1:0.0: can't add hid device: -71 [ 702.500647][ T5715] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 702.508063][T16002] FAULT_INJECTION: forcing a failure. [ 702.508063][T16002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.508092][T16002] CPU: 1 UID: 0 PID: 16002 Comm: syz.4.2718 Tainted: G L syzkaller #0 PREEMPT(full) [ 702.508117][T16002] Tainted: [L]=SOFTLOCKUP [ 702.508124][T16002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 702.508134][T16002] Call Trace: [ 702.508141][T16002] [ 702.508149][T16002] dump_stack_lvl+0xe8/0x150 [ 702.508185][T16002] should_fail_ex+0x3eb/0x540 [ 702.508214][T16002] _copy_from_user+0x2d/0xb0 [ 702.508238][T16002] io_sync_cancel+0x1e9/0x970 [ 702.508336][T16002] ? __pfx_io_sync_cancel+0x10/0x10 [ 702.508362][T16002] ? lock_acquire+0x115/0x350 [ 702.508388][T16002] ? __se_sys_io_uring_register+0x22d/0x1b20 [ 702.508418][T16002] ? __fget_files+0x2a/0x420 [ 702.508444][T16002] ? __pfx_autoremove_wake_function+0x10/0x10 [ 702.508472][T16002] ? __fget_files+0x3a2/0x420 [ 702.508493][T16002] ? __fget_files+0x2a/0x420 [ 702.508523][T16002] __se_sys_io_uring_register+0xdf1/0x1b20 [ 702.508555][T16002] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 702.508583][T16002] ? ksys_write+0x242/0x270 [ 702.508611][T16002] ? __pfx_ksys_write+0x10/0x10 [ 702.508647][T16002] do_syscall_64+0x16a/0x530 [ 702.508670][T16002] ? trace_irq_disable+0x3b/0x140 [ 702.508696][T16002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.508715][T16002] ? clear_bhb_loop+0x70/0xc0 [ 702.508737][T16002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.508755][T16002] RIP: 0033:0x7f1c181a94d9 [ 702.508773][T16002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.508788][T16002] RSP: 002b:00007f1c19144028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 702.508807][T16002] RAX: ffffffffffffffda RBX: 00007f1c18425fa0 RCX: 00007f1c181a94d9 [ 702.508821][T16002] RDX: 0000200000000780 RSI: 0000000000000018 RDI: 0000000000000004 [ 702.508832][T16002] RBP: 00007f1c19144090 R08: 0000000000000000 R09: 0000000000000000 [ 702.508847][T16002] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 702.508857][T16002] R13: 00007f1c18426038 R14: 00007f1c18425fa0 R15: 00007f1c1854fa48 [ 702.508887][T16002] [ 702.653537][ T5715] usb 1-1: USB disconnect, device number 32 [ 703.021449][ T45] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 703.182473][ T45] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 703.202276][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.202303][ T45] usb 5-1: Product: syz [ 703.202317][ T45] usb 5-1: Manufacturer: syz [ 703.202332][ T45] usb 5-1: SerialNumber: syz [ 703.519708][ T5715] usb 2-1: USB disconnect, device number 119 [ 703.846241][T16022] netlink: 'syz.1.2725': attribute type 1 has an invalid length. [ 703.924615][T16022] 8021q: adding VLAN 0 to HW filter on device bond6 [ 704.162431][T16025] bond6: (slave veth11): Enslaving as an active interface with a down link [ 704.459990][ T45] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 704.460009][ T45] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 704.586826][T16005] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 704.600680][T14944] team_slave_0: entered promiscuous mode [ 704.600713][T14944] team_slave_1: entered promiscuous mode [ 704.948315][ T45] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 704.949651][T16038] ip6t_rt: unknown flags 61 [ 704.987922][T16040] FAULT_INJECTION: forcing a failure. [ 704.987922][T16040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.987963][T16040] CPU: 0 UID: 0 PID: 16040 Comm: syz.1.2729 Tainted: G L syzkaller #0 PREEMPT(full) [ 704.987987][T16040] Tainted: [L]=SOFTLOCKUP [ 704.987994][T16040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 704.988004][T16040] Call Trace: [ 704.988012][T16040] [ 704.988020][T16040] dump_stack_lvl+0xe8/0x150 [ 704.988055][T16040] should_fail_ex+0x3eb/0x540 [ 704.988081][T16040] _copy_to_user+0x31/0xb0 [ 704.988115][T16040] simple_read_from_buffer+0xe1/0x170 [ 704.988144][T16040] proc_fail_nth_read+0x1bb/0x230 [ 704.988165][T16040] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 704.988187][T16040] ? rw_verify_area+0x24a/0x4c0 [ 704.988214][T16040] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 704.988232][T16040] vfs_read+0x213/0xa80 [ 704.988261][T16040] ? __pfx___mutex_lock+0x10/0x10 [ 704.988288][T16040] ? __pfx_vfs_read+0x10/0x10 [ 704.988329][T16040] ? __fget_files+0x2a/0x420 [ 704.988352][T16040] ? __fget_files+0x3a2/0x420 [ 704.988373][T16040] ? __fget_files+0x2a/0x420 [ 704.988398][T16040] ? fdget+0x1ac/0x250 [ 704.988429][T16040] ksys_read+0x150/0x270 [ 704.988455][T16040] ? __pfx_ksys_read+0x10/0x10 [ 704.988491][T16040] do_syscall_64+0x16a/0x530 [ 704.988516][T16040] ? trace_irq_disable+0x3b/0x140 [ 704.988542][T16040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.988562][T16040] ? clear_bhb_loop+0x70/0xc0 [ 704.988586][T16040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.988605][T16040] RIP: 0033:0x7f4e82969d0e [ 704.988623][T16040] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 704.988639][T16040] RSP: 002b:00007f4e80bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 704.988660][T16040] RAX: ffffffffffffffda RBX: 00007f4e80bf66c0 RCX: 00007f4e82969d0e [ 704.988674][T16040] RDX: 000000000000000f RSI: 00007f4e80bf60a0 RDI: 0000000000000005 [ 704.988686][T16040] RBP: 00007f4e80bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 704.988698][T16040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.988709][T16040] R13: 00007f4e82c26038 R14: 00007f4e82c25fa0 R15: 00007f4e82d4fa48 [ 704.988742][T16040] [ 705.059920][T16038] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 705.403269][T16043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2730'. [ 705.531928][T16005] netlink: 15 bytes leftover after parsing attributes in process `syz.4.2719'. [ 705.587771][ T5715] usb 5-1: USB disconnect, device number 127 [ 705.589460][ T5715] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 705.857981][T16048] input: syz0 as /devices/virtual/input/input128 [ 706.567698][T16071] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2738'. [ 707.061949][T16071] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.340179][T16071] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 707.367250][T16071] .` (unregistering): Released all slaves [ 707.714382][T16114] nvme_fabrics: missing parameter 'nqn=%s' [ 708.782251][T16142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2747'. [ 709.068898][T16156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2750'. [ 709.152434][T14939] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 709.153525][T16160] kvm: pic: non byte write [ 709.302056][T14939] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 709.303552][T14939] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.310167][T14939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.310191][T14939] usb 1-1: Product: syz [ 709.310204][T14939] usb 1-1: Manufacturer: syz [ 709.310218][T14939] usb 1-1: SerialNumber: syz [ 710.363004][T14939] cdc_ncm 1-1:1.0: failed to get mac address [ 710.401148][T14939] cdc_ncm 1-1:1.0: bind() failure [ 710.427552][T14939] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 710.440352][T14939] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 710.456772][T14939] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 710.479949][T14939] usb 1-1: USB disconnect, device number 33 [ 711.136436][T16193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2756'. [ 711.272028][T16194] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 711.292635][T16201] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 711.491282][T14939] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 711.658988][T14939] usb 1-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 711.661350][T14939] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.661375][T14939] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 711.661407][T14939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.747811][T14939] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 712.104275][T16193] batman_adv: batadv0: Removing interface: vlan3 [ 713.491105][ T45] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 713.655072][ T45] usb 2-1: New USB device found: idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 713.656581][ T45] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 713.656608][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 713.656639][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 713.656653][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 713.719034][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.719061][ T45] usb 2-1: Product: syz [ 713.719075][ T45] usb 2-1: Manufacturer: syz [ 713.719088][ T45] usb 2-1: SerialNumber: syz [ 713.750805][ T45] usb 2-1: config 0 descriptor?? [ 713.781827][ T45] iguanair 2-1:0.0: failed to get version [ 713.782773][ T45] iguanair 2-1:0.0: probe with driver iguanair failed with error -90 [ 713.885336][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 713.885383][ T30] audit: type=1326 audit(1794529472.798:6972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16224 comm="syz.4.2765" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c181a94d9 code=0x7ffc0000 [ 713.885657][ T30] audit: type=1326 audit(1794529472.798:6973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16224 comm="syz.4.2765" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c181a94d9 code=0x7ffc0000 [ 713.948071][ T30] audit: type=1326 audit(1794529472.868:6974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16224 comm="syz.4.2765" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1c181a94d9 code=0x7ffc0000 [ 713.948915][ T30] audit: type=1326 audit(1794529472.868:6975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16224 comm="syz.4.2765" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c181a94d9 code=0x7ffc0000 [ 713.949417][ T30] audit: type=1326 audit(1794529472.868:6976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16224 comm="syz.4.2765" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c181a94d9 code=0x7ffc0000 [ 713.949962][ T30] audit: type=1326 audit(1794529472.868:6977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16224 comm="syz.4.2765" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1c181a94d9 code=0x7ffc0000 [ 713.976121][ T30] audit: type=1326 audit(1794529472.898:6978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16224 comm="syz.4.2765" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c181a94d9 code=0x7ffc0000 [ 714.000926][ T30] audit: type=1326 audit(1794529472.918:6979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16224 comm="syz.4.2765" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c181a94d9 code=0x7ffc0000 [ 714.105197][ T45] usb 1-1: USB disconnect, device number 34 [ 714.109652][ T30] audit: type=1326 audit(1794529473.018:6980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16224 comm="syz.4.2765" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f1c181a94d9 code=0x7ffc0000 [ 714.110041][ T30] audit: type=1326 audit(1794529473.018:6981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16224 comm="syz.4.2765" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c181a94d9 code=0x7ffc0000 [ 714.173853][T14939] usb 2-1: USB disconnect, device number 120 [ 714.246928][ T45] idmouse 1-1:1.0: disconnected [ 714.405594][T16225] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2765'. [ 714.447147][T16225] ip6gre1: entered allmulticast mode [ 714.562577][T14944] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 714.642925][T16232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 714.647053][T16232] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 714.650192][T16232] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 714.665755][T16232] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 714.681442][T16232] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 714.736516][T14944] usb 4-1: New USB device found: idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 714.738025][T14944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.766281][T14944] usb 4-1: config 0 descriptor?? [ 714.952566][T16236] syzkaller0: entered promiscuous mode [ 714.952584][T16236] syzkaller0: entered allmulticast mode [ 714.990894][T16227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.000382][T16227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.643030][ T5646] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 715.661303][ T5646] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 715.684127][ T5646] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 715.686320][ T5646] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 715.689514][ T5646] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 716.045045][T16246] tipc: Enabled bearer , priority 0 [ 716.176529][T14944] usb 4-1: Cannot read MAC address [ 716.176670][T14944] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 716.211900][T14944] usb 4-1: USB disconnect, device number 10 [ 716.435436][T16234] tipc: Resetting bearer [ 716.916184][T16259] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 717.018026][T16234] tipc: Disabling bearer [ 717.332750][T14939] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 717.375766][T14944] tipc: Node number set to 845959140 [ 717.462101][T14939] usb 1-1: device descriptor read/64, error -71 [ 717.674989][T16278] nvme_fabrics: found same hostid 6dc6402f-50a9-4545-94fc-caae6f1cacd6 but different hostnqn n [ 717.701351][T14939] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 717.731335][ T5646] Bluetooth: hci5: command tx timeout [ 717.831286][T14939] usb 1-1: device descriptor read/64, error -71 [ 717.933069][T16285] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2781'. [ 717.950943][T14939] usb usb1-port1: attempt power cycle [ 718.292210][T14939] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 718.313918][T14939] usb 1-1: device descriptor read/8, error -71 [ 718.490551][T16256] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.498198][T16256] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.498358][T16256] bridge_slave_0: entered allmulticast mode [ 718.517320][T16302] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2785'. [ 718.536450][T16256] bridge_slave_0: entered promiscuous mode [ 718.551110][T14939] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 718.552471][T16256] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.552898][T16256] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.553027][T16256] bridge_slave_1: entered allmulticast mode [ 718.560751][T16256] bridge_slave_1: entered promiscuous mode [ 718.584741][T14939] usb 1-1: device descriptor read/8, error -71 [ 718.691431][T14939] usb usb1-port1: unable to enumerate USB device [ 718.736917][T16256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.758701][T16256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.890118][T16256] team0: Port device team_slave_0 added [ 718.916524][T16256] team0: Port device team_slave_1 added [ 719.067949][T16256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.067962][T16256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.067981][T16256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.122559][T16256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.122577][T16256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.122601][T16256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.390816][T16321] xt_bpf: check failed: parse error [ 719.446323][T16256] hsr_slave_0: entered promiscuous mode [ 719.454952][T16256] hsr_slave_1: entered promiscuous mode [ 719.459613][T16256] debugfs: 'hsr0' already exists in 'hsr' [ 719.459631][T16256] Cannot create hsr debugfs directory [ 719.812795][ T5646] Bluetooth: hci5: command tx timeout [ 720.163216][T14939] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 720.212308][T16334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 720.214133][T14944] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 720.301133][T14939] usb 5-1: device descriptor read/64, error -71 [ 720.404832][T14944] usb 4-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 720.426328][T14944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.426354][T14944] usb 4-1: Product: syz [ 720.426368][T14944] usb 4-1: Manufacturer: syz [ 720.426381][T14944] usb 4-1: SerialNumber: syz [ 720.551743][T14939] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 720.681176][T14939] usb 5-1: device descriptor read/64, error -71 [ 720.712031][T16256] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 720.738540][T16256] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 720.749593][T16256] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 720.793206][T14939] usb usb5-port1: attempt power cycle [ 720.813734][T16256] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 720.826981][T16256] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 720.849547][T16256] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 720.863747][T16256] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 720.890378][T16256] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 721.075333][T14944] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 721.075391][T14944] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 721.076406][T14944] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 721.076454][T14944] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 721.077672][T14944] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 721.163092][T14944] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 721.193983][T14939] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 721.196327][T16256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.218090][T14939] usb 5-1: device descriptor read/8, error -71 [ 721.259220][T14944] usb 4-1: USB disconnect, device number 11 [ 721.286707][T16256] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.332340][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.332434][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.385537][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.385598][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.461388][T14939] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 721.481788][T14939] usb 5-1: device descriptor read/8, error -71 [ 721.591751][T14939] usb usb5-port1: unable to enumerate USB device [ 721.620868][T16256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.698162][T16354] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2799'. [ 721.786449][T16256] veth0_vlan: entered promiscuous mode [ 721.805755][T16256] veth1_vlan: entered promiscuous mode [ 721.869867][T16256] veth0_macvtap: entered promiscuous mode [ 721.897903][ T5646] Bluetooth: hci5: command tx timeout [ 721.910590][ T45] input: syz0 as /devices/virtual/misc/uhid/0005:4000B05:0002.003A/input/input130 [ 721.937772][T16256] veth1_macvtap: entered promiscuous mode [ 721.992057][ T45] hid-generic 0005:4000B05:0002.003A: input,hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz1 [ 722.048304][T16256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.129652][T16256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.185721][ T7201] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.186135][ T7201] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.186286][ T7201] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.186320][ T7201] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.202482][T14944] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 722.246668][T16361] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2803'. [ 722.247179][T16361] netlink: get zone limit has 4 unknown bytes [ 722.409184][T14944] usb 1-1: New USB device found: idVendor=1199, idProduct=68a3, bcdDevice=0.00 [ 722.412916][T14944] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 722.412954][T14944] usb 1-1: can't read configurations, error -71 [ 722.797606][ T4127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.797627][ T4127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.952688][T14940] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 722.984972][ T7201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.984994][ T7201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.081167][T14940] usb 2-1: device descriptor read/64, error -71 [ 723.265881][T16392] kvm: emulating exchange as write [ 723.321740][T14940] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 723.322581][ T45] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 723.461252][T14940] usb 2-1: device descriptor read/64, error -71 [ 723.485882][ T45] usb 4-1: New USB device found: idVendor=04e6, idProduct=0005, bcdDevice=1.00 [ 723.493090][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 723.493117][ T45] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 723.500231][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.500255][ T45] usb 4-1: Product: syz [ 723.500269][ T45] usb 4-1: Manufacturer: syz [ 723.500282][ T45] usb 4-1: SerialNumber: syz [ 723.556199][ T45] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 723.571661][T14940] usb usb2-port1: attempt power cycle [ 723.593234][ T45] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 723.593234][ T45] Please send a copy of this message to and [ 723.912656][T14940] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 723.943406][T14940] usb 2-1: device descriptor read/8, error -71 [ 723.971571][ T5646] Bluetooth: hci5: command tx timeout [ 724.080940][T16406] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2810'. [ 724.181071][T14940] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 724.202898][T14940] usb 2-1: device descriptor read/8, error -71 [ 724.311771][T14940] usb usb2-port1: unable to enumerate USB device [ 724.316194][T16415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2814'. [ 724.361443][ T45] scsi host1: usb-storage 4-1:1.0 [ 724.384402][ T45] usb 4-1: USB disconnect, device number 12 [ 724.431938][T16415] 8021q: adding VLAN 0 to HW filter on device bond1 [ 724.479376][T16416] bond1: (slave geneve2): making interface the new active one [ 724.490667][T16416] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 724.643291][T16429] xt_hashlimit: size too large, truncated to 1048576 [ 724.695129][T16430] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.2816'. [ 724.696719][T16430] 0XD: renamed from gretap0 (while UP) [ 724.720856][T16430] 0XD: entered allmulticast mode [ 724.733512][T16430] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.2816'. [ 724.733640][T16430] 1XD: renamed from 00XD (while UP) [ 724.735006][T16434] xt_hashlimit: size too large, truncated to 1048576 [ 725.424690][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 725.424708][ T30] audit: type=1326 audit(1794529484.338:7055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16443 comm="syz.3.2819" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf409a94d9 code=0x7ffc0000 [ 725.457748][ T30] audit: type=1326 audit(1794529484.338:7056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16443 comm="syz.3.2819" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fbf409a94d9 code=0x7ffc0000 [ 725.546839][ T30] audit: type=1326 audit(1794529484.458:7057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16443 comm="syz.3.2819" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf409a94d9 code=0x7ffc0000 [ 725.547947][ T30] audit: type=1326 audit(1794529484.458:7058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16443 comm="syz.3.2819" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf409a94d9 code=0x7ffc0000 [ 725.548266][ T30] audit: type=1326 audit(1794529484.458:7059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16449 comm="syz.3.2819" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf40969d0e code=0x7ffc0000 [ 725.637745][ T30] audit: type=1326 audit(1794529484.548:7060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16443 comm="syz.3.2819" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf409a94d9 code=0x7ffc0000 [ 725.637797][ T30] audit: type=1326 audit(1794529484.548:7061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16443 comm="syz.3.2819" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf409a94d9 code=0x7ffc0000 [ 725.637835][ T30] audit: type=1326 audit(1794529484.548:7062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16443 comm="syz.3.2819" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf409a94d9 code=0x7ffc0000 [ 725.720283][ T30] audit: type=1326 audit(1794529484.638:7063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16443 comm="syz.3.2819" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbf409a94d9 code=0x7ffc0000 [ 725.750741][ T30] audit: type=1326 audit(1794529484.668:7064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16449 comm="syz.3.2819" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fbf409a94d9 code=0x7ffc0000 [ 726.705762][T16476] syzkaller0: entered promiscuous mode [ 726.705786][T16476] syzkaller0: entered allmulticast mode [ 726.747145][T16479] syzkaller1: entered promiscuous mode [ 726.751277][T16479] syzkaller1: entered allmulticast mode [ 726.780171][T16479] ip_tables: iptables: counters copy to user failed while replacing table [ 726.805916][T16479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2834'. [ 726.805951][T16479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2834'. [ 726.867386][T16487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2833'. [ 726.867409][T16487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2833'. [ 727.001177][T16485] sctp: [Deprecated]: syz.0.2829 (pid 16485) Use of struct sctp_assoc_value in delayed_ack socket option. [ 727.001177][T16485] Use struct sctp_sack_info instead [ 727.032270][T16488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2833'. [ 727.032300][T16488] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2833'. [ 727.054148][T14940] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 727.201682][T14940] usb 1-1: device descriptor read/64, error -71 [ 727.219428][T16499] kvm: user requested TSC rate below hardware speed [ 727.448162][T14940] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 727.603384][T14940] usb 1-1: device descriptor read/64, error -71 [ 727.714601][T14940] usb usb1-port1: attempt power cycle [ 727.762227][T16510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2840'. [ 728.052655][T14940] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 728.072466][T14940] usb 1-1: device descriptor read/8, error -71 [ 728.151112][T14939] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 728.281086][T14939] usb 5-1: device descriptor read/64, error -71 [ 728.311813][T14940] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 728.331609][T14940] usb 1-1: device descriptor read/8, error -71 [ 728.441297][T14940] usb usb1-port1: unable to enumerate USB device [ 728.521112][T14939] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 728.654989][T14939] usb 5-1: device descriptor read/64, error -71 [ 728.763851][T14939] usb usb5-port1: attempt power cycle [ 729.101148][T14939] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 729.127000][T14939] usb 5-1: device descriptor read/8, error -71 [ 729.341639][T16559] netlink: 'syz.3.2850': attribute type 1 has an invalid length. [ 729.361072][T14939] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 729.382450][T14939] usb 5-1: device descriptor read/8, error -71 [ 729.491385][T14939] usb usb5-port1: unable to enumerate USB device [ 729.538739][T16562] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2852'. [ 729.559012][T16562] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2852'. [ 729.754001][T16565] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2853'. [ 730.217833][T16562] syzkaller1: entered promiscuous mode [ 730.217854][T16562] syzkaller1: entered allmulticast mode [ 730.360065][T16578] xt_hashlimit: size too large, truncated to 1048576 [ 730.695282][T16584] netlink: 'syz.1.2859': attribute type 9 has an invalid length. [ 731.131292][T14939] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 731.283565][T16608] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 731.296077][T14939] usb 1-1: Using ep0 maxpacket: 16 [ 731.302923][T14939] usb 1-1: New USB device found: idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 731.310273][T14939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.310294][T14939] usb 1-1: Product: syz [ 731.310312][T14939] usb 1-1: Manufacturer: syz [ 731.310326][T14939] usb 1-1: SerialNumber: syz [ 731.351276][T14939] usb 1-1: config 0 descriptor?? [ 731.369175][T14939] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 731.595567][T14939] usb 1-1: clie_3_5_startup: get config number failed: -71 [ 731.595805][T14939] visor 1-1:0.0: probe with driver visor failed with error -71 [ 731.629732][T14939] usb 1-1: USB disconnect, device number 45 [ 731.980382][ T30] kauditd_printk_skb: 160 callbacks suppressed [ 731.980395][ T30] audit: type=1326 audit(1794529490.888:7225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16607 comm="syz.4.2864" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c181a94d9 code=0x7fc00000 [ 731.980423][ T30] audit: type=1326 audit(1794529490.888:7226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16607 comm="syz.4.2864" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c181a94d9 code=0x7fc00000 [ 731.980446][ T30] audit: type=1326 audit(1794529490.888:7227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16607 comm="syz.4.2864" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c181a94d9 code=0x7fc00000 [ 731.980467][ T30] audit: type=1326 audit(1794529490.888:7228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16607 comm="syz.4.2864" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c181a94d9 code=0x7fc00000 [ 731.980489][ T30] audit: type=1326 audit(1794529490.888:7229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16607 comm="syz.4.2864" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c181a94d9 code=0x7fc00000 [ 731.980510][ T30] audit: type=1326 audit(1794529490.888:7230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16607 comm="syz.4.2864" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c181a94d9 code=0x7fc00000 [ 731.980531][ T30] audit: type=1326 audit(1794529490.888:7231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16607 comm="syz.4.2864" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c181a94d9 code=0x7fc00000 [ 731.980551][ T30] audit: type=1326 audit(1794529490.888:7232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16607 comm="syz.4.2864" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c181a94d9 code=0x7fc00000 [ 731.980573][ T30] audit: type=1326 audit(1794529490.888:7233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16607 comm="syz.4.2864" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c181a94d9 code=0x7fc00000 [ 731.980594][ T30] audit: type=1326 audit(1794529490.888:7234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16607 comm="syz.4.2864" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c181a94d9 code=0x7fc00000 [ 732.711323][T14949] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 732.863723][T14949] usb 4-1: Using ep0 maxpacket: 32 [ 732.864518][T14949] usb 4-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 732.869142][T14949] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 732.869159][T14949] usb 4-1: config 0 has no interface number 0 [ 732.869183][T14949] usb 4-1: config 0 interface 12 has no altsetting 0 [ 732.908652][T14949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.908687][T14949] usb 4-1: Product: syz [ 732.908700][T14949] usb 4-1: Manufacturer: syz [ 732.908712][T14949] usb 4-1: SerialNumber: syz [ 732.938258][T14949] usb 4-1: config 0 descriptor?? [ 732.959241][T16629] __nla_validate_parse: 1 callbacks suppressed [ 732.959255][T16629] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2870'. [ 733.166468][T16634] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2872'. [ 733.641139][ T5715] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 733.731355][T14939] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 733.791297][ T5715] usb 2-1: Using ep0 maxpacket: 16 [ 733.792568][ T5715] usb 2-1: New USB device found: idVendor=0eb1, idProduct=7007, bcdDevice=2.00 [ 733.799208][ T5715] usb 2-1: config 253 has an invalid interface number: 184 but max is 0 [ 733.799234][ T5715] usb 2-1: config 253 has no interface number 0 [ 733.799261][ T5715] usb 2-1: config 253 interface 184 has no altsetting 0 [ 733.842355][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.842379][ T5715] usb 2-1: Product: syz [ 733.842393][ T5715] usb 2-1: Manufacturer: syz [ 733.842406][ T5715] usb 2-1: SerialNumber: syz [ 733.886822][ T5715] go7007 2-1:253.184: probe with driver go7007 failed with error -12 [ 733.922961][T14939] usb 6-1: Using ep0 maxpacket: 32 [ 733.923686][T14939] usb 6-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 733.927223][T14939] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 733.927248][T14939] usb 6-1: config 0 has no interface number 0 [ 733.927288][T14939] usb 6-1: config 0 interface 12 has no altsetting 0 [ 733.937376][T14939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.937396][T14939] usb 6-1: Product: syz [ 733.937404][T14939] usb 6-1: Manufacturer: syz [ 733.937412][T14939] usb 6-1: SerialNumber: syz [ 733.999071][T14939] usb 6-1: config 0 descriptor?? [ 734.096903][T16649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.097438][T16649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.100801][ T5715] usb 2-1: USB disconnect, device number 125 [ 734.874800][T16622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.879614][T16622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.304548][T14939] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 735.304601][T14939] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 735.304610][T14939] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 735.304657][T14939] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 735.371380][T14939] usb 6-1: USB disconnect, device number 2 [ 736.350945][T14949] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 0 failed: -71 [ 736.364598][T14949] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 736.364622][T14949] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 736.364702][T14949] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 736.469287][T14949] usb 4-1: USB disconnect, device number 13 [ 737.017614][T14949] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 737.031952][T14939] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 737.053766][T16703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2888'. [ 737.150343][T16232] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 737.162439][T16232] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 737.166715][T16232] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 737.179693][T16232] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 737.182263][T14949] usb 4-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 737.184551][T14939] usb 6-1: Using ep0 maxpacket: 32 [ 737.192508][T16232] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 737.192869][T14939] usb 6-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 737.217194][T14949] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.217242][T14949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.254135][T14939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.254160][T14939] usb 6-1: Product: syz [ 737.254174][T14939] usb 6-1: Manufacturer: syz [ 737.254186][T14939] usb 6-1: SerialNumber: syz [ 737.290399][T14949] usb 4-1: config 0 descriptor?? [ 737.352329][T14949] pwc: Askey VC010 type 2 USB webcam detected. [ 737.368093][T14939] usb 6-1: config 0 descriptor?? [ 737.394054][ T30] kauditd_printk_skb: 182 callbacks suppressed [ 737.394072][ T30] audit: type=1326 audit(1794529496.308:7417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16704 comm="syz.1.2889" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e829a94d9 code=0x7fc00000 [ 737.395180][T16710] netlink: 'syz.1.2889': attribute type 12 has an invalid length. [ 737.427478][T14939] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 737.753528][T14949] pwc: recv_control_msg error -32 req 02 val 2b00 [ 737.755200][T14949] pwc: recv_control_msg error -32 req 02 val 2700 [ 737.756542][T14949] pwc: recv_control_msg error -32 req 02 val 2c00 [ 737.758834][T14949] pwc: recv_control_msg error -32 req 04 val 1000 [ 737.793174][T14949] pwc: recv_control_msg error -32 req 04 val 1300 [ 737.796253][T14949] pwc: recv_control_msg error -32 req 04 val 1400 [ 737.797363][T14949] pwc: recv_control_msg error -32 req 02 val 2000 [ 737.821963][T14949] pwc: recv_control_msg error -32 req 02 val 2100 [ 737.927945][ T30] audit: type=1326 audit(1794529496.838:7418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16704 comm="syz.1.2889" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e829a94d9 code=0x7fc00000 [ 738.032117][T14949] pwc: recv_control_msg error -71 req 02 val 2500 [ 738.041566][T14949] pwc: recv_control_msg error -71 req 02 val 2400 [ 738.044487][T14949] pwc: recv_control_msg error -71 req 02 val 2600 [ 738.044895][T14949] pwc: recv_control_msg error -71 req 02 val 2900 [ 738.071368][T14949] pwc: recv_control_msg error -71 req 02 val 2800 [ 738.081991][T14949] pwc: recv_control_msg error -71 req 04 val 1100 [ 738.085302][T14949] pwc: recv_control_msg error -71 req 04 val 1200 [ 738.141463][T14949] pwc: Registered as video103. [ 738.166624][T14949] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input131 [ 738.221926][T14949] usb 4-1: USB disconnect, device number 14 [ 738.864580][T16721] sch_fq: defrate 16 ignored. [ 738.903404][T14939] gspca_stk1135: reg_w 0xd err -110 [ 738.904580][T14939] gspca_stk1135: serial bus timeout: status=0x00 [ 738.904593][T14939] gspca_stk1135: Sensor write failed [ 738.904617][T14939] gspca_stk1135: serial bus timeout: status=0x00 [ 738.904626][T14939] gspca_stk1135: Sensor write failed [ 738.904678][T14939] gspca_stk1135: serial bus timeout: status=0x00 [ 738.904689][T14939] gspca_stk1135: Sensor read failed [ 738.904715][T14939] gspca_stk1135: serial bus timeout: status=0x00 [ 738.904724][T14939] gspca_stk1135: Sensor read failed [ 738.904731][T14939] gspca_stk1135: Detected sensor type unknown (0x0) [ 738.904760][T14939] gspca_stk1135: serial bus timeout: status=0x00 [ 738.909072][T14939] gspca_stk1135: Sensor read failed [ 738.909116][T14939] gspca_stk1135: serial bus timeout: status=0x00 [ 738.909126][T14939] gspca_stk1135: Sensor read failed [ 738.909150][T14939] gspca_stk1135: serial bus timeout: status=0x00 [ 738.909159][T14939] gspca_stk1135: Sensor write failed [ 738.909183][T14939] gspca_stk1135: serial bus timeout: status=0x00 [ 738.909482][T14939] gspca_stk1135: Sensor write failed [ 738.909996][T14939] stk1135 6-1:0.0: probe with driver stk1135 failed with error -110 [ 739.136585][T16730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 739.276403][T16738] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2894'. [ 739.304624][T16737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2894'. [ 739.331215][ T5646] Bluetooth: hci6: command tx timeout [ 739.599987][T16713] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.605670][T16713] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.605818][T16713] bridge_slave_0: entered allmulticast mode [ 739.639335][T16713] bridge_slave_0: entered promiscuous mode [ 739.672217][T16713] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.672549][T16713] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.672704][T16713] bridge_slave_1: entered allmulticast mode [ 739.704498][T16713] bridge_slave_1: entered promiscuous mode [ 739.933749][T16713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.963157][T16713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.022421][T16754] netlink: 'syz.3.2898': attribute type 10 has an invalid length. [ 740.054683][T16754] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.054990][T16754] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.079387][T16754] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.079459][T16754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.081002][T16754] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.081132][T16754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.122293][T16754] : (slave bridge0): Enslaving as an active interface with an up link [ 740.206549][ T45] usb 6-1: USB disconnect, device number 3 [ 740.356573][T16713] team0: Port device team_slave_0 added [ 740.379531][T16713] team0: Port device team_slave_1 added [ 740.465159][T16713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.465172][T16713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.465186][T16713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.466060][T16759] syzkaller0: entered promiscuous mode [ 740.466073][T16759] syzkaller0: entered allmulticast mode [ 740.468855][T16713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.468865][T16713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.468880][T16713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.529262][T14949] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 740.711310][T14949] usb 5-1: device descriptor read/64, error -71 [ 740.781851][T16713] hsr_slave_0: entered promiscuous mode [ 740.782531][T16713] hsr_slave_1: entered promiscuous mode [ 740.782959][T16713] debugfs: 'hsr0' already exists in 'hsr' [ 740.782974][T16713] Cannot create hsr debugfs directory [ 740.951272][T14949] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 740.971087][T14944] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 741.091385][T14949] usb 5-1: device descriptor read/64, error -71 [ 741.123233][T14944] usb 2-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 741.124670][T14944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 741.124697][T14944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 741.124719][T14944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 741.124752][T14944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 741.127657][T14944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.127680][T14944] usb 2-1: Product: syz [ 741.127693][T14944] usb 2-1: Manufacturer: syz [ 741.127708][T14944] usb 2-1: SerialNumber: syz [ 741.131518][T14944] usb 2-1: config 0 descriptor?? [ 741.213182][T14949] usb usb5-port1: attempt power cycle [ 741.261111][ T45] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 741.384374][T14944] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 741.411358][ T5646] Bluetooth: hci6: command tx timeout [ 741.411457][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 741.412172][ T45] usb 4-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 741.413612][ T45] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 741.413635][ T45] usb 4-1: config 0 has no interface number 0 [ 741.413675][ T45] usb 4-1: config 0 interface 184 has no altsetting 0 [ 741.416178][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.416200][ T45] usb 4-1: Product: syz [ 741.416214][ T45] usb 4-1: Manufacturer: syz [ 741.416226][ T45] usb 4-1: SerialNumber: syz [ 741.418583][ T45] usb 4-1: config 0 descriptor?? [ 741.561326][T14949] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 741.583770][T14949] usb 5-1: device descriptor read/8, error -71 [ 741.761555][ T5715] usb 2-1: USB disconnect, device number 126 [ 741.769107][T16713] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.769135][T16713] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.861862][T14949] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 741.872673][T14939] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 741.887282][T14949] usb 5-1: device descriptor read/8, error -71 [ 741.991616][T14949] usb usb5-port1: unable to enumerate USB device [ 742.001265][T14939] usb 6-1: device descriptor read/64, error -71 [ 742.036751][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -32 [ 742.036771][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 742.037340][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 742.037364][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 742.037381][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 742.037390][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 742.037540][ T45] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 742.201643][T16713] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.207892][T16713] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.241441][T14939] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 742.370547][T16713] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.370571][T16713] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.391268][T14939] usb 6-1: device descriptor read/64, error -71 [ 742.501484][T14939] usb usb6-port1: attempt power cycle [ 742.530282][T16779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 742.695515][T16713] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.695537][T16713] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.837118][T16713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 742.854732][T14939] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 742.855395][T16713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 742.856016][T16713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 742.858304][T16713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 742.859192][T16713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 742.863451][T16713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 742.865080][T16713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 742.874995][T14939] usb 6-1: device descriptor read/8, error -71 [ 742.878882][T16713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 742.963628][T16713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.985590][T16713] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.990281][ T8549] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.990343][ T8549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 743.024950][ T3345] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.025117][ T3345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 743.088157][T16713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.111234][T14939] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 743.131817][T14939] usb 6-1: device descriptor read/8, error -71 [ 743.189393][T16713] veth0_vlan: entered promiscuous mode [ 743.200584][T16713] veth1_vlan: entered promiscuous mode [ 743.230945][T16713] veth0_macvtap: entered promiscuous mode [ 743.236492][T16713] veth1_macvtap: entered promiscuous mode [ 743.242031][T14939] usb usb6-port1: unable to enumerate USB device [ 743.276875][T16713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.299683][T16713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.374140][ T4127] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.374563][ T4127] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.374804][ T4127] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.374835][ T4127] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.436194][ T45] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 743.488983][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.489004][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.492470][ T5646] Bluetooth: hci6: command tx timeout [ 743.545176][ T3345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.545199][ T3345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.623236][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 743.623269][ T45] usb 2-1: New USB device found: idVendor=041e, idProduct=3f19, bcdDevice=0.40 [ 743.626456][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.626471][ T45] usb 2-1: Product: syz [ 743.626479][ T45] usb 2-1: Manufacturer: syz [ 743.626486][ T45] usb 2-1: SerialNumber: syz [ 743.681786][ T45] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 743.721157][T14942] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 743.851175][T14942] usb 5-1: device descriptor read/64, error -71 [ 743.860280][ T30] audit: type=1326 audit(1794529502.768:7419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16794 comm="syz.0.2887" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc74cda94d9 code=0x0 [ 744.018557][ T45] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 744.019358][ T45] usb 2-1: unit 2 not found! [ 744.092443][ T45] usb 2-1: USB disconnect, device number 127 [ 744.092761][T14942] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 744.132889][T14940] usb 4-1: USB disconnect, device number 15 [ 744.223173][T14942] usb 5-1: device descriptor read/64, error -71 [ 744.264120][ T5650] udevd[5650]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 744.332596][T14942] usb usb5-port1: attempt power cycle [ 744.571197][T14940] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 744.672168][T14942] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 744.695128][T14942] usb 5-1: device descriptor read/8, error -71 [ 744.725113][T14940] usb 4-1: unable to get BOS descriptor or descriptor too short [ 744.725590][T14940] usb 4-1: not running at top speed; connect to a high speed hub [ 744.725621][T14940] usb 4-1: New USB device found: idVendor=2a39, idProduct=3fd4, bcdDevice=0.40 [ 744.732342][T14940] usb 4-1: config 1 has an invalid descriptor of length 231, skipping remainder of the config [ 744.732367][T14940] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 744.735822][T14940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.735844][T14940] usb 4-1: Product: syz [ 744.735858][T14940] usb 4-1: Manufacturer: Ђ [ 744.735872][T14940] usb 4-1: SerialNumber: syz [ 744.931492][T14942] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 744.961605][T14942] usb 5-1: device descriptor read/8, error -71 [ 744.966784][T14940] usb 4-1: unit 3 not found! [ 745.021160][ T5722] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 745.059043][T14940] usb 4-1: USB disconnect, device number 16 [ 745.073515][T14942] usb usb5-port1: unable to enumerate USB device [ 745.095441][ T5650] udevd[5650]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 745.179146][ T5722] usb 6-1: not running at top speed; connect to a high speed hub [ 745.179170][ T5722] usb 6-1: New USB device found: idVendor=1477, idProduct=1025, bcdDevice=0.40 [ 745.180245][ T5722] usb 6-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 745.180274][ T5722] usb 6-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 745.180298][ T5722] usb 6-1: config 1 interface 0 has no altsetting 0 [ 745.224538][ T5722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.224564][ T5722] usb 6-1: Product: 䙍Ǐ岣砜畚ᕇⰢ풒邇殡⻚硱볙晿孄⦐泸崘꾺炨侧鎉鏈ᨨ這⏅慴톈초穙ⳇꬉ [ 745.224583][ T5722] usb 6-1: Manufacturer: 茤䡎 [ 745.224597][ T5722] usb 6-1: SerialNumber: 쑘鶿㴣᛬펀ᑪⷫ䭁ᙶ彰胇褮豛Ⲹ㥴냸❬ﻔ㨰켖醬᨞䝱忎铘۰﻽쳙㻋ꊵ毃ഝ꓊ꖨ鱭塽᮱똘Ⅳ晞늕㧳ݳ蘣፹嚽셡ꁀ迮骕鄓能癕̎俧ꉹ뗮ɜ拘⹅나펢꾞ᇛ䚉㪸綼ꚰꈀ笗딜浢媴及㏺仇쵸年ᯝ竭싺窀ᷢ㿲̶騒堄쉏ጝᾀ׼䰢䰱擩귃蹐व鸞暯笁妸 [ 745.248021][T16815] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 745.248154][T16815] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 745.248359][T16824] kvm: user requested TSC rate below hardware speed [ 745.314259][T16828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.571318][ T5646] Bluetooth: hci6: command tx timeout [ 745.663724][ T5722] usbhid 6-1:1.0: can't add hid device: -71 [ 745.663849][ T5722] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 745.667259][ T5722] usb 6-1: USB disconnect, device number 8 [ 745.737978][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.738008][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.781082][ T45] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 745.791578][T14947] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 745.835406][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.835429][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.923416][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.923449][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.962318][T14947] usb 1-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 745.963765][T14947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 ** replaying previous printk message ** [ 745.963765][T14947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.963792][T14947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.963833][T14947] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 745.963897][T14947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.967571][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 745.968574][ T45] usb 4-1: not running at top speed; connect to a high speed hub [ 745.968603][ T45] usb 4-1: New USB device found: idVendor=0923, idProduct=010f, bcdDevice=c5.7c [ 745.969246][T14947] usb 1-1: config 0 descriptor?? [ 745.973746][ T45] usb 4-1: config 2 has an invalid interface number: 99 but max is 0 [ 745.973769][ T45] usb 4-1: config 2 has no interface number 0 [ 745.973796][ T45] usb 4-1: config 2 interface 99 has no altsetting 0 [ 745.982570][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.982594][ T45] usb 4-1: Product: syz [ 745.982607][ T45] usb 4-1: Manufacturer: syz [ 745.982620][ T45] usb 4-1: SerialNumber: syz [ 745.991103][T16836] ------------[ cut here ]------------ [ 745.991115][T16836] !(flags & __GFP_NOWARN) [ 745.991128][T16836] WARNING: mm/slub.c:7144 at __kvmalloc_node_noprof+0x793/0x820, CPU#1: syz.1.2920/16836 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 746.131382][T16836] Modules linked in: [ 746.135361][T16836] CPU: 1 UID: 0 PID: 16836 Comm: syz.1.2920 Tainted: G L syzkaller #0 PREEMPT(full) [ 746.147275][T16836] Tainted: [L]=SOFTLOCKUP [ 746.151709][T16836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 746.162753][T16836] RIP: 0010:__kvmalloc_node_noprof+0x793/0x820 [ 746.169048][T16836] Code: ff 48 c7 c7 b0 b9 29 90 48 89 de e8 87 92 f8 02 e9 1b fc ff ff 48 c7 c7 f0 b9 29 90 48 89 de e8 73 92 f8 02 e9 4c fc ff ff 90 <0f> 0b 90 31 db e9 06 fe ff ff 90 0f 0b 90 e9 55 ff ff ff 49 83 7f [ 746.188891][T16836] RSP: 0018:ffffc90005487ae0 EFLAGS: 00010246 [ 746.195665][T16836] RAX: 0000000000000100 RBX: 0000000000000000 RCX: 8000000000000001 [ 746.204022][T16836] RDX: 00000080007ffff8 RSI: ffffffff8c8e9760 RDI: ffffffff8c8e9720 [ 746.212213][T16836] RBP: 00000000ffffffff R08: 00000000000028c0 R09: 00000000ffffffff [ 746.221734][T16836] R10: 0000000000000008 R11: ffffffff81b3b320 R12: 00000080007ffff8 [ 746.230651][T16836] R13: 00000000000028c0 R14: 0000001000000000 R15: ffffffff866bfb99 [ 746.239155][T16836] FS: 00007f4e80bd56c0(0000) GS:ffff88812350b000(0000) knlGS:0000000000000000 [ 746.248223][T16836] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 746.255261][T16836] CR2: 00007fbf409f0ce0 CR3: 0000000024abc000 CR4: 00000000003526f0 [ 746.263376][T16836] DR0: 0000000000008000 DR1: 0000000000000004 DR2: fffffffffffffffe [ 746.271728][T16836] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 746.279971][T16836] Call Trace: [ 746.283628][T16836] [ 746.286622][T16836] ? __kmalloc_cache_noprof+0x31c/0x600 [ 746.292374][T16836] ? udmabuf_create+0xd1/0xf10 [ 746.297216][ T30] audit: type=1326 audit(1794529505.158:7420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16830 comm="syz.3.2918" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf409a94d9 code=0x7ffc0000 [ 746.297264][ T30] audit: type=1326 audit(1794529505.158:7421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16830 comm="syz.3.2918" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf409a94d9 code=0x7ffc0000 [ 746.297303][ T30] audit: type=1326 audit(1794529505.168:7422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16830 comm="syz.3.2918" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbf409a94d9 code=0x7ffc0000 [ 746.297339][ T30] audit: type=1326 audit(1794529505.168:7423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16830 comm="syz.3.2918" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf409a94d9 code=0x7ffc0000 [ 746.297375][ T30] audit: type=1326 audit(1794529505.178:7424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16830 comm="syz.3.2918" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf40969d0e code=0x7ffc0000 [ 746.297410][ T30] audit: type=1326 audit(1794529505.178:7425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16830 comm="syz.3.2918" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf409a94d9 code=0x7ffc0000 [ 746.297448][ T30] audit: type=1326 audit(1794529505.178:7426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16830 comm="syz.3.2918" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf409a94d9 code=0x7ffc0000 [ 746.297484][ T30] audit: type=1326 audit(1794529505.188:7427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16830 comm="syz.3.2918" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbf409a94d9 code=0x7ffc0000 [ 746.297520][ T30] audit: type=1326 audit(1794529505.188:7428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16830 comm="syz.3.2918" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf409a94d9 code=0x7ffc0000 [ 746.309826][T16831] program syz.3.2918 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 746.405454][T16831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.405895][T16831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.548540][T16836] ? udmabuf_create+0x2d9/0xf10 [ 746.553721][T16836] udmabuf_create+0x2d9/0xf10 [ 746.558478][T16836] ? lock_acquire+0x115/0x350 [ 746.563277][T16836] ? __pfx_udmabuf_create+0x10/0x10 [ 746.568536][T16836] ? __might_fault+0xaf/0x130 [ 746.573285][T16836] ? _copy_from_user+0x94/0xb0 [ 746.578119][T16836] udmabuf_ioctl+0x29a/0x300 [ 746.582925][T16836] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 746.588063][T16836] ? __fget_files+0x2a/0x420 [ 746.592732][T16836] ? __fget_files+0x2a/0x420 [ 746.597406][T16836] ? __fget_files+0x2a/0x420 [ 746.602104][T16836] ? bpf_lsm_file_ioctl+0x9/0x20 [ 746.607116][T16836] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 746.613339][T16836] __se_sys_ioctl+0xfc/0x170 [ 746.618045][T16836] do_syscall_64+0x16a/0x530 [ 746.622737][T16836] ? trace_irq_disable+0x3b/0x140 [ 746.627860][T16836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.634554][T16836] ? clear_bhb_loop+0x70/0xc0 [ 746.639727][T16836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.645941][T16836] RIP: 0033:0x7f4e829a94d9 [ 746.650394][T16836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.670184][T16836] RSP: 002b:00007f4e80bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 746.678862][T16836] RAX: ffffffffffffffda RBX: 00007f4e82c26090 RCX: 00007f4e829a94d9 [ 746.686941][T16836] RDX: 0000200000002f40 RSI: 0000000040087543 RDI: 0000000000000007 [ 746.695082][T16836] RBP: 00007f4e82a3804e R08: 0000000000000000 R09: 0000000000000000 [ 746.703267][T16836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 746.711324][T16836] R13: 00007f4e82c26128 R14: 00007f4e82c26090 R15: 00007f4e82d4fa48 [ 746.719339][T16836] [ 746.722397][T16836] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 746.729670][T16836] CPU: 1 UID: 0 PID: 16836 Comm: syz.1.2920 Tainted: G L syzkaller #0 PREEMPT(full) [ 746.740589][T16836] Tainted: [L]=SOFTLOCKUP [ 746.744924][T16836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 746.754965][T16836] Call Trace: [ 746.758228][T16836] [ 746.761148][T16836] vpanic+0x26f/0x710 [ 746.765117][T16836] panic+0xc5/0xd0 [ 746.768817][T16836] ? __pfx_panic+0x10/0x10 [ 746.773242][T16836] __warn+0x315/0x4c0 [ 746.777237][T16836] ? __kvmalloc_node_noprof+0x793/0x820 [ 746.782801][T16836] ? __kvmalloc_node_noprof+0x793/0x820 [ 746.788343][T16836] __report_bug+0x276/0x570 [ 746.792926][T16836] ? __kvmalloc_node_noprof+0x793/0x820 [ 746.798476][T16836] ? __pfx___report_bug+0x10/0x10 [ 746.803509][T16836] ? __kvmalloc_node_noprof+0x793/0x820 [ 746.809130][T16836] report_bug+0x16b/0x220 [ 746.813454][T16836] ? __kvmalloc_node_noprof+0x793/0x820 [ 746.818986][T16836] ? __kvmalloc_node_noprof+0x795/0x820 [ 746.824516][T16836] handle_bug+0x9c/0x200 [ 746.828750][T16836] exc_invalid_op+0x1a/0x50 [ 746.833271][T16836] asm_exc_invalid_op+0x1a/0x20 [ 746.838124][T16836] RIP: 0010:__kvmalloc_node_noprof+0x793/0x820 [ 746.844277][T16836] Code: ff 48 c7 c7 b0 b9 29 90 48 89 de e8 87 92 f8 02 e9 1b fc ff ff 48 c7 c7 f0 b9 29 90 48 89 de e8 73 92 f8 02 e9 4c fc ff ff 90 <0f> 0b 90 31 db e9 06 fe ff ff 90 0f 0b 90 e9 55 ff ff ff 49 83 7f [ 746.863877][T16836] RSP: 0018:ffffc90005487ae0 EFLAGS: 00010246 [ 746.870020][T16836] RAX: 0000000000000100 RBX: 0000000000000000 RCX: 8000000000000001 [ 746.877984][T16836] RDX: 00000080007ffff8 RSI: ffffffff8c8e9760 RDI: ffffffff8c8e9720 [ 746.885962][T16836] RBP: 00000000ffffffff R08: 00000000000028c0 R09: 00000000ffffffff [ 746.893952][T16836] R10: 0000000000000008 R11: ffffffff81b3b320 R12: 00000080007ffff8 [ 746.901939][T16836] R13: 00000000000028c0 R14: 0000001000000000 R15: ffffffff866bfb99 [ 746.910000][T16836] ? udmabuf_create+0x2d9/0xf10 [ 746.914878][T16836] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 746.921145][T16836] ? __kmalloc_cache_noprof+0x31c/0x600 [ 746.926730][T16836] ? udmabuf_create+0xd1/0xf10 [ 746.931499][T16836] ? udmabuf_create+0x2d9/0xf10 [ 746.936373][T16836] udmabuf_create+0x2d9/0xf10 [ 746.941085][T16836] ? lock_acquire+0x115/0x350 [ 746.945771][T16836] ? __pfx_udmabuf_create+0x10/0x10 [ 746.951402][T16836] ? __might_fault+0xaf/0x130 [ 746.956072][T16836] ? _copy_from_user+0x94/0xb0 [ 746.960830][T16836] udmabuf_ioctl+0x29a/0x300 [ 746.965437][T16836] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 746.970560][T16836] ? __fget_files+0x2a/0x420 [ 746.975161][T16836] ? __fget_files+0x2a/0x420 [ 746.979756][T16836] ? __fget_files+0x2a/0x420 [ 746.984336][T16836] ? bpf_lsm_file_ioctl+0x9/0x20 [ 746.989284][T16836] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 746.994396][T16836] __se_sys_ioctl+0xfc/0x170 [ 746.999006][T16836] do_syscall_64+0x16a/0x530 [ 747.003586][T16836] ? trace_irq_disable+0x3b/0x140 [ 747.008598][T16836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.014646][T16836] ? clear_bhb_loop+0x70/0xc0 [ 747.019423][T16836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.025303][T16836] RIP: 0033:0x7f4e829a94d9 [ 747.029718][T16836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.049311][T16836] RSP: 002b:00007f4e80bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 747.057726][T16836] RAX: ffffffffffffffda RBX: 00007f4e82c26090 RCX: 00007f4e829a94d9 [ 747.065708][T16836] RDX: 0000200000002f40 RSI: 0000000040087543 RDI: 0000000000000007 [ 747.073665][T16836] RBP: 00007f4e82a3804e R08: 0000000000000000 R09: 0000000000000000 [ 747.081619][T16836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.089572][T16836] R13: 00007f4e82c26128 R14: 00007f4e82c26090 R15: 00007f4e82d4fa48 [ 747.097542][T16836] [ 747.100858][T16836] Kernel Offset: disabled [ 747.105176][T16836] Rebooting in 86400 seconds..