last executing test programs: 54.189279748s ago: executing program 4 (id=273): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000001800010020000000000000000200940000000009000000000600150006000000100016800c00038008000100", @ANYRES32, @ANYBLOB="ff2d0e2908dc93b86447a15b0978a57128f59632031372ac851db30543aee6bd91d043a89dfe83377b12d171b61ac34d32bbec7842"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x8010) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001100050026bd7000ffdbdf25070fef93", @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040854) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x6, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x21, 0xc, 0x0, 0x75, 0x81, 0x10, 0x0, 0x0, 0x82, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xff, 0x0, '\x00', 0x7}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0b0329bd7000fcdbdf251500000008000300", @ANYRES32=r9, @ANYBLOB="7b97423bc91db2fc8b1efd38cce98950a43bd1025400f16bfd4df85a05ea77360b1b327aef00"/53], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="2300000000000000000006750000080503eacb359fdc9ceef8e92da9e73daabf2c8fbdfef217f032d04ee46e42477af795e8008ee12c24990c51b689dd51d1ade8c65c250b7ba211c397e21c5f0b09", @ANYRES32=r12, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9bd5245d62bc160e7468a90f2bc01ceccf9be5eb173a0616c2e4c8c8b8660a13be35947a02c0410bd051fff07e97f585c7d599bf7ab974d1371e7c4c71e6b853bdb560ba1e2365b95bd5dfdee8f270ab3527b6ded24018e760fe363ce884fa81b09b562c60a9c7b6227583d8875203b667e436278220eed4be6754ba4e54c50fd3", @ANYRES16=r11, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r12, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r7, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x0, 0x4b}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x293}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3e2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x804) fanotify_init(0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001340)={0x2, &(0x7f0000000080)=[{0x0, 0x3, 0xfd}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) semget$private(0x0, 0x6, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 53.932809267s ago: executing program 4 (id=274): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x48040) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4000) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018"], 0x0, 0x4}, 0x94) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000097ffffff00000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000100000004000000000000001c000000000000000000000008"], 0x68}, 0x40400c4) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 53.841750977s ago: executing program 4 (id=276): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x13) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) io_uring_setup(0x1f80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) 53.544048277s ago: executing program 4 (id=278): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x503000, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x124, r1, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}]}, 0x124}, 0x1, 0x0, 0x0, 0x800}, 0x8044800) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) process_vm_readv(r3, &(0x7f0000000400)=[{&(0x7f0000000300)=""/55, 0x37}], 0x1, &(0x7f0000000580)=[{&(0x7f0000000440)=""/209, 0xd1}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000b80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000b40)=[{{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/209, 0xd1}, {&(0x7f0000000780)=""/244, 0xf4}, {&(0x7f0000000880)=""/41, 0x29}, {&(0x7f00000008c0)=""/4, 0x4}, {&(0x7f0000000900)=""/93, 0x5d}, {&(0x7f0000000980)=""/142, 0x8e}], 0x6, &(0x7f0000000ac0)=""/107, 0x6b}, 0x4b}], 0x1, 0x20, &(0x7f0000000bc0)={r4, r5+60000000}) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) r6 = open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f00000001c0)={0x3, 0x9}) 53.261102114s ago: executing program 4 (id=280): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000405d86327c0001"], 0x48) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000020c0), &(0x7f0000002080)='./file0\x00', 0x800000, &(0x7f0000002040)=ANY=[], 0x1, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f0000001ec0)={&(0x7f00000021c0)={0x50, 0x0, 0x8, {0x7, 0x29, 0x9f50, 0x1, 0x1000, 0x48e, 0x1, 0x7ffb, 0x0, 0x0, 0x9f7b0001e068234a, 0xfffffffa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f00000000c0)={0xc, r2}) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000100)={0xc}) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002300)="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", 0x2000, &(0x7f0000004440)={&(0x7f0000004300)={0x50, 0xffffffffffffffda, 0x8, {0x7, 0x29, 0x3, 0xb069a97334577756, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x80, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0}, 0xfc00) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0xfffb, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0xfffffffffffffffd, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) unshare(0x20000600) r4 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000000)={0x0, 0x4, 0x7, &(0x7f0000000700)={0x3b, "fd5a44512b7e1b0020ed2abb4301002700"}}) r5 = mq_open(&(0x7f00000019c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_getsetattr(r5, 0x0, &(0x7f0000000180)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3014353fbc00010800000002f8ff1f000b000000", @ANYRES32=0x0, @ANYBLOB="900000000008000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40804}, 0x4000880) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0xd3b, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000004b40)={0x4, @raw_data="01075aa03070fd691c9c153c72f9b9ff3a2c096afa998f1b17310db04015c7b055b84b75a0daccf2020ea84733cc4f8735edb89af18c29f3fee599df1ccd350289365a213020ed716455e4386f9542130bc82535df4e71cb941acca3ff25ccbd5a30ffc1c4747add16738afdafff7f65ebc708621a1bf1284cb36651a748a8a3416c15700800000058b0bc065264cbd10e346c406b6ad71f1054d49d452d54518a282c134c3f96579f020000008c3680516675b09907af7a37e93a86cdc0443ab700"}) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x458483, 0x0) r9 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$6lowpan_control(r9, &(0x7f0000000280)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) unshare(0x2a000000) unshare(0x20000600) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r3, r8}) syz_io_uring_setup(0x1723, &(0x7f00000002c0)={0x0, 0x6b5, 0x8000, 0x0, 0xba}, 0x0, 0x0, &(0x7f0000000000)) 52.725369389s ago: executing program 4 (id=283): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000080), &(0x7f0000000100)=""/9}, 0x20) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r1, 0x0, &(0x7f000070a000/0x5000)=nil, 0x5000, 0x69}) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040), 0xc) r4 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x40002e9, 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) shmget(0x2, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e21, @remote}], 0x10) 52.173918019s ago: executing program 32 (id=283): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000080), &(0x7f0000000100)=""/9}, 0x20) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r1, 0x0, &(0x7f000070a000/0x5000)=nil, 0x5000, 0x69}) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040), 0xc) r4 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x40002e9, 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) shmget(0x2, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e21, @remote}], 0x10) 9.617882205s ago: executing program 2 (id=459): sendto(0xffffffffffffffff, &(0x7f0000000100)="120000001200e7ef007b00000000000000653ce2f7c606ee4baa585c1070396d050c01c1c804cafee2cce195fa54e48b7690b529d7eb35ac8f562e3c5ab53e510ecb3933bdeea4e48e679e201af08b9f1566527f2a4d5fd533f6ca243241496d769e3a046ff7f76dc46e4ae67c558afaec7d9f1082e85f7ccb9b5298376b08b96ed95e4619ff7bcd2701732b36", 0x8d, 0x200048f0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x440, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r2, {0x10}, {0x0, 0xfff1}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x414, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xce9830f747f45940}, @TCA_TBF_PTAB={0x404, 0x3, [0x5d, 0x9, 0x9, 0x9, 0x20008, 0x0, 0x10, 0x9, 0x4, 0x1, 0x101, 0x2487, 0x8000, 0x7ff, 0x4, 0xa5a8, 0x80000000, 0x7, 0x7c, 0x6, 0x1a41, 0xfff, 0x10000, 0x588b, 0x25772bba, 0x2, 0xcc3, 0x9, 0x9, 0x8, 0x200, 0xfffff741, 0x4b7, 0x1000, 0x5, 0x54a1, 0x7, 0x4, 0x10000, 0x5, 0x8, 0x458, 0x3, 0x9, 0x4, 0x4, 0x1, 0x9, 0x4, 0x0, 0x401, 0x3, 0xb, 0xad, 0x9, 0xaf7, 0x0, 0x5, 0x9, 0x9, 0xfff, 0x0, 0xffff75fe, 0x6, 0x101, 0x101, 0x1, 0xd, 0x8000, 0x4, 0x1, 0xffffc5ab, 0x6, 0x7ff, 0x7, 0x4, 0x1, 0x93, 0x3, 0x80000001, 0x6, 0x9, 0xadb8, 0x8, 0x4, 0x87, 0x8001, 0x7, 0x3, 0x3, 0x6, 0x401, 0x0, 0x9, 0xffffbc7a, 0x3, 0x0, 0x6, 0x9, 0x5, 0x1, 0x2, 0xfffff001, 0x1, 0x5, 0x8566, 0x3, 0x5, 0xb, 0x7, 0x773, 0xfffffffb, 0x2, 0x7, 0xfffffffa, 0x0, 0xa, 0x3, 0x6, 0x1, 0x4, 0x4, 0x9, 0xfff, 0x80, 0x7fffffff, 0x3993, 0x7fff, 0x1, 0x400, 0x9, 0x4, 0x1, 0x81, 0xfff, 0x9, 0x400, 0x6, 0xffffffff, 0xfffffffa, 0x1, 0x5, 0xdba, 0x4, 0xa7ae, 0x2, 0x10000, 0xfffff23e, 0x3ff, 0x7, 0x8, 0xf77f, 0x3347, 0x6, 0x8, 0x6, 0x5, 0x7, 0x9eb0, 0x0, 0x0, 0x80000, 0x4, 0x7, 0x1, 0xd, 0x101, 0x81, 0x1000, 0xfffeffff, 0x4, 0xffffff73, 0x8, 0xb9, 0xc, 0xffffffff, 0xb6ad, 0x4, 0x4, 0xb, 0x0, 0x4, 0x4, 0x3, 0x7, 0x6, 0x0, 0xfffffff9, 0x4, 0x3, 0x10000, 0x8001, 0x80000000, 0x5, 0x10000, 0x1ff, 0x274b, 0x3ff, 0x10, 0x8, 0x8, 0x3, 0x0, 0x5, 0x3, 0x2, 0x9be1, 0x7, 0x7fff, 0x7, 0x5, 0x1, 0x6, 0x7, 0xa, 0x9, 0x7, 0x0, 0x80000000, 0x72a, 0x0, 0x3d, 0x9, 0x3, 0xfffffff9, 0x568, 0xf1, 0xa, 0x2, 0x7fffffff, 0x5, 0x6, 0x1, 0xd, 0x8, 0x40, 0x4, 0x2, 0x2, 0x3, 0x8, 0x3, 0x8, 0x1, 0x68a, 0x7, 0x1, 0x1, 0x4, 0x42, 0x7, 0xf, 0x5, 0x2400000, 0x7fff, 0xc]}]}}]}, 0x440}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) r3 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020008402505a1a44000010203010902680002010040000904000001020e0000052406080005240000fa0d370f0100160000000000000006241b0000000c241b"], 0x0) r4 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_ublk_setup_io_uring(0x1f, &(0x7f00000000c0)={0x0, 0xa584, 0x100, 0xfffffffe, 0x1e8}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x1, r5, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) ioctl$MEMGETBADBLOCK(r4, 0x40084d0b, &(0x7f0000000000)=0xfffffffffffffffe) syz_usb_control_io(r3, 0xfffffffffffffffc, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000005c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x80, 0x1c, {0x8000, 0x6, 0x9, 0x6, 0x9, 0x4, 0xffff, 0xdb7, 0x1ff, 0x4, 0x9f7, 0x6}}, 0x0, 0x0, 0x0, 0x0}) 7.725892105s ago: executing program 2 (id=466): sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010328bd"], 0x28}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) 6.424155009s ago: executing program 2 (id=470): syz_open_dev$tty1(0xc, 0x4, 0x1) dup(0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x7, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x6, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r3, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCFLSH(r3, 0x540b, 0x2) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000280)) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r4, &(0x7f0000006340)={0x2020}, 0x2058) read$FUSE(r4, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r4, &(0x7f0000002140)={0x20, 0x0, r5, {0x0, 0x0, 0x80003ff}}, 0x20) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, 0x0) socket(0x1d, 0x2, 0x6) 6.293520946s ago: executing program 1 (id=472): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000"], 0x60}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4000054) 6.060295297s ago: executing program 1 (id=474): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt(r0, 0x0, 0x5, 0x0, &(0x7f0000000a40)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d00010000600009040080020300000009210604000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.795614728s ago: executing program 5 (id=475): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000001c0)=0x7ffffffc, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000000040), 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000013000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x29, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e1d, 0x8000, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x1c) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="0f895e00a664f30f7f9eade581d1b99164660f3a42ac002000660f38814b05f30fc736700026670f73f3036489b7aa00650fc79f0030", 0x36}], 0x1, 0x75, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0xa668f1dcacbd0935, 0xd14212fd05c55e22, 0x0, 0x9, 0x3, 0xffffffff, 0x1, 0x0, 0x7cce8c743ee810df}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f00000000c0)={0x800000, 0x0, 0x0, 0x0, 0x0, 0x55a}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, &(0x7f00000000c0)={0x800000, 0x0, 0x4000, 0x0, 0x0, 0x1000055a}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = socket$netlink(0x10, 0x3, 0x9) r9 = epoll_create1(0x0) epoll_pwait2(r9, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40088a01, &(0x7f0000000000)=0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x80, 0x80}, [@RTA_SPORT={0x6, 0x1c, 0x4e24}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_UID={0x8}]}, 0x34}}, 0x20000050) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000340)={0x4000000d}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x814) 4.302839678s ago: executing program 3 (id=477): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x50}}, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x4, "0000200000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x20004804) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}}, 0xe8) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x80800) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) r7 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r7, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r7, 0x0, 0x0) io_setup(0x7, &(0x7f00000000c0)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x103802) (async) capset(0x0, &(0x7f0000000340)={0x0, 0x0, 0x20000000}) (async) setpriority(0x1, 0x0, 0x7) socket$rds(0x15, 0x5, 0x0) (async) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r8, 0xc038563b, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x1, 0x80000, 0x8}}) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) (async, rerun: 32) r10 = syz_open_dev$tty1(0xc, 0x4, 0x3) (rerun: 32) r11 = dup(r10) ioctl$TCXONC(r10, 0x540a, 0x0) (async) write$6lowpan_control(r11, &(0x7f0000000380)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) 4.263122349s ago: executing program 1 (id=478): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f00000008c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x700, 0x20}}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) unshare(0x20020400) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x4, 0x0, &(0x7f0000fd7ff0), &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, &(0x7f0000000200)={0x10, {{0x29, 0x0, 0x3000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}}, 0x88) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000aaaaaaaaaabb0800450000380000000000019078ac1e0001ac1414aa030190781204183f250000000000000000010000e00000017f00008100186371ae9b1c03"], 0x0) close(0x3) 4.113125321s ago: executing program 5 (id=479): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000003c0)={0x200000, 0x200000, 0x0, 0x0, 0xd33, 0x7}) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r1, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="400c04000000fe906e95c45b94f7cfb216a8cebd459ba7420b9b7cb80e7aa4f3115c75de01a8b40d7bdc6194bb257f2f8a8004a3f02999e06581ae5d6464452718fa1e369036d8fdfe00dbccab9bdc317972ac10d5284993597866a50e8a29eb77b21455c894f4cbcec32ec7e8e6c03d04017c818a40cf272062523a703597e3e51dce8710a06c610b8e4d21eaef4af4b0468f25b603c144f1d9d9fa964309d6ebd1f75eee2256546e64f8c99256be8a4ff281208d2e02af86507a1e67752234ab6f72b909ee91faf1df76313caaf476fbd92da5f4266aa7b0aecbb5e78eeee633f650b856935762"], 0x0, 0x0}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x10b) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) rename(&(0x7f0000000480)='./bus\x00', &(0x7f0000000500)='./file0\x00') ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff], [0x10000, 0x0, 0x0, 0x0, 0x8001], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]], '\x00', [{}, {0xfffffffd}, {}, {0x0, 0xfffffffc, 0x0, 0x1, 0x1}, {0x80000009, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {}, {0x8000000, 0x8f96}], '\x00', 0x1000}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0x20, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x43, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db"}, 0xd8) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000640)={0x20, 0x12, 0x4, "187f8644"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.229503362s ago: executing program 2 (id=482): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x3f, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 3.228670262s ago: executing program 1 (id=483): r0 = socket(0x1, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4, 0x0, 0x4, 0x2}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f40700090100000000000000001f000000000800040001000000", 0x24) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close(0x4) accept4(r1, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a0011600100f5fe009d2fb112ff000000008a151f00000000", 0x27) 3.153499899s ago: executing program 3 (id=484): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000"], 0x60}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4000054) 3.113392145s ago: executing program 2 (id=485): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000540), 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000a40)='^,/\x00', &(0x7f0000000a80)='fuseblk\x00', 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000180), 0x7, 0x200000) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000001c0)) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000020ac0519024000010203010902240001010670000904000e020301010d09210000040122a10a02058103ff03f00500"], 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)) readv(r1, &(0x7f0000000200)=[{0x0}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) r2 = fspick(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000200)='z\xcd,\x99\x9dR\x1e\t', 0x0, r0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, 0xfffffffffffffffe, 0x1c5a82, 0x0) write$UHID_CREATE2(r4, 0x0, 0x194) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000080)={0xff, 0x1, {}, {0xee01}, 0x5, 0x7}) sendmsg$NFT_MSG_GETGEN(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000540)={0xf0f026}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000300)={0x2, @pix_mp={0x2, 0x2, 0x39565559, 0x1, 0x0, [{0x7, 0x1}, {0x2, 0x535}, {0x7, 0x1ff}, {0x5, 0x338b}, {0x4, 0x2}, {0x3, 0x3}, {0x9, 0x6}, {0x401000, 0x4a}], 0x2, 0x7, 0xa, 0x0, 0x2}}) 3.06119663s ago: executing program 1 (id=486): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) (async) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x24000010) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000080)=0x3fd, 0x4) ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000340)={0xe939, r6}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r8}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r5, 0x100000000) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r5, 0x100000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 2.821228587s ago: executing program 3 (id=487): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x2d, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x1403, 0x704, 0x70bd2d, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vxcan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20002000) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x27) migrate_pages(0x0, 0x3, &(0x7f00000001c0)=0x7f, &(0x7f0000000300)=0xa) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x301000) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x4}) r4 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000d00)={&(0x7f00000008c0)={{@local, 0x200}, {@any, 0x3}, 0x400, "6402403f2b4f8572093448a823d43946f74902b5c0872db52d49321f35376e1d347245885f2b781277efe9b88e463c572fa2b144f5f95ef3a31245fb423c69cb324863db6a4c0793df74bb53a1740bb98ece9c9ff56bfd2da22b317a4b601507e68bab7e08fe749efecf9c2fecfe99680a5310b81651bee8b11127eba03157fd5c4e925d319ddc958ee55a005101ed400affcc0b57a7dae0f350332eb6ee92878c5eeb9bc568053d95849ba20b465fc8a7610336f224c8f9bd7a49c52efdeee1cb8e58b7b223173f0643919d7eb51f028228443b3db56dc0767d0c6bc71606c4b60e1d0d99a237ac50a7203be73b9a9a4cd23d297b4236661b97821ef3c5216f2521129b8f278793f2a4933ad8b3bf8fa9355470f470507c8746de21f8d8309258dcdc3d4bc608fd991ea4953e675d0b24e34f97d5e4d6bd10cb2f148691e9e5f1ab44f10015944e6a2c2c2311fbe0fa0d3f1efd7783d8b7fdcbcee01f95175dd0d571697342d1469d696119e94a4f042db5af380f57b1a002c268e6fe3a784e07fe9ca0658eb1e01421528cf3b7af4356b789a5c93d804d18a3c55635fff27702699c9d42d8ed8c5937495ae38ee784c741d0b424d722030c71c0ded19172f14d5e41e072f06e730971541546473be5d9d989683f8f0721fccb381e40fef063e2a982c55a64810b95ae58bd3fb14259b34d1abff2580d29b53f1ad480c604ef1ada6558fb1c05462f5e6d67d934392c3b232cf37f090b4b39a2cacdab5729c77904af61fc62cc5431de07f6c168b06ceff2979621dfcd9faac4f9a3bdc81865f4a5be7c0f1fc4d7fb08ff8f23c3166ab35f072890bbefc098996cf440d49345fc4e7e494cfdf5e1eb4673f1b458dc0ea6d28b31f1a0f7ff8fd089965057688377733d0e6387692890eb7bf62d3b92a8f0b8429199c48254f35a1d94c85d83e28cb993f4f1d0d05fc1d3f767cb41b981469e0892083f0590b78bb194baf896cd0f73bfd8b3987521d3a8a1acdc6afa7d455d17583231d81f85305df5469e4498336b37ba061b25960657cb89202e3ffb63afb5da6c3545745cc8dd0fabd138cfb89ee9e027f896a2ad50e2251adf8eac511e10587dc315c2c179239c65c81505ba94dadf179648128fcb3f4883cb59abf0be40ec166a2343d13d4acf0dc82d677a0c003138598b1d47cb00e0de5863643831ce39be4585df6f7e26f35545323c8cc6fb964f174ee2652bd444a800643c7a51be73b99d7a7c27ca676cc9e5eb34ea820fd6f8f99e901d3465c7feae628d67c70a12f23a457af4c00001881621845434aa43a72e12ec811f7e2f90a9579121aab60b77c988ce2a8fb416fde29e8a57b7087cd4da86a3fa18a49bdf0afdc382bfacce2f643978e33b8e9fe755b9017be2fe7ce7e311ed41d7bd50adf6e29a4fbd1000f786693d39ccad018912a541"}, 0x418, 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002100010000000000000000000220007ffe000000c969430408000100ac1414aa080006"], 0x2c}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)=""/141, 0x8d}], 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r4], 0x1) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x406, r6) write$tun(r7, &(0x7f0000000140)={@val={0x0, 0x22f0}, @val={0x2, 0x80, 0x2, 0xc2, 0xffff, 0x1}, @mpls={[{0x3ff}], @ipv6=@icmpv6={0x3, 0x6, "929da6", 0x8, 0x3a, 0xff, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @ndisc_rs}}}}, 0x42) mmap$binder(&(0x7f0000fbe000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x4) r8 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f0000000040)={0x8, r8, 'id0\x00'}) 2.684001431s ago: executing program 5 (id=488): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1fff, 0x0, 0x1, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@private1, @in6=@mcast2, 0x4e22, 0x65df, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x4, r3, r4}, {0x0, 0x5, 0x80000000, 0x4800, 0x1, 0xfffffffffffeffff, 0x9, 0x6}, {0x8, 0x9, 0x100, 0x4}, 0x67f0, 0x6e6bb1, 0x1, 0x1, 0x1, 0x1}, {{@in=@multicast1, 0x4d6, 0x2b}, 0xa, @in=@remote, 0x3502, 0x1, 0x3, 0x0, 0x6b, 0x8000, 0x7}}, 0xe8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) 2.635539455s ago: executing program 1 (id=489): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_BLKSECTGET(0xffffffffffffffff, 0x1267, 0x0) r1 = syz_usb_connect$hid(0x2, 0x90, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000340), 0x0, 0x801c0) ioctl$HIDIOCSUSAGES(r2, 0x501c4814, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000550001002abd7000fbdbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010003007f00000100000000000000000000000008"], 0xb8}, 0x1, 0x0, 0x0, 0x20008e81}, 0x0) 2.484629088s ago: executing program 3 (id=490): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@getnetconf={0x14, 0x52, 0xecc318b12c1a67db, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}}, 0x40) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80080, 0x0) sendmmsg$alg(r3, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da", 0xdc}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a9", 0x96}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0", 0x47}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x4e008, 0x1022}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x403}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x45}, 0x40080) syz_usb_connect(0x2, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010003804e51100d1001cb38420100000109021b00010bb4c00a0904"], &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0}) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.172846643s ago: executing program 3 (id=492): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc", 0xe) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$inet6(r1, &(0x7f000000a440)=[{{0x0, 0x0, &(0x7f00000086c0)=[{&(0x7f0000006240)="c1346f2d260685eb57d897465edd4823", 0x10}, {&(0x7f00000062c0)="2977c9c80000000000", 0x9}, {&(0x7f0000006300)="5c711d9c51a0c1a7", 0x8}], 0x3}}, {{0x0, 0x0, &(0x7f000000a3c0)=[{&(0x7f00000090c0)="9a4037055e1d2207e96d56db2b87dc0f58811431433ec0e2435dab2ea838935a599486af8d13ab2df30ff8d0a89465852ec7abbeffae9462a84e0967d932a92cccb35fdc84", 0x45}, {&(0x7f0000009140)="14b48e5b08fd6c6c9c03031067a0f6194cf12963721ad167aa845aa732510bdfc2795ea40719d18c35e44298992aafa50921ae2de7ce25d85f96044894250e8a684d06c37ca05fddbafd651f2f0ab91dadf0ed44f422cf", 0x57}, {&(0x7f0000000080)="59058e8bf0cc944add2bc5e92c2a324f8f63fd70006d7d", 0x17}], 0x3}}], 0x2, 0x4004051) 2.097508145s ago: executing program 3 (id=493): syz_open_dev$tty1(0xc, 0x4, 0x1) dup(0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x7, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x6, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r3, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCFLSH(r3, 0x540b, 0x2) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000280)) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r4, &(0x7f0000006340)={0x2020}, 0x2058) read$FUSE(r4, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r4, &(0x7f0000002140)={0x20, 0x0, r5, {0x0, 0x0, 0x80003ff}}, 0x20) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, 0x0) socket(0x1d, 0x2, 0x6) 2.093355798s ago: executing program 5 (id=494): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)}]}}], 0x1, 0xc0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000d00)="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", 0x53e}], 0x1}}], 0x1, 0x48841) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0, 0x2c}, 0x8000) r6 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000340)={0xa, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x4, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r7, 0xae80, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff2, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="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", 0x124, 0x20000880, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000440)=0x3) syz_emit_ethernet(0x3ae, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x378, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0xfffffffe, 0x0, [{0x3, 0x9, "a78ce54006598080a80300faffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27de3e347ccea6795ada70e97adac15084dbaf736b41e5af0302"}, {0x2, 0x1, "0000e10b0000000026086700"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x26, 0xb, "17dcae1a89965d72e8a040f011ea46805d4809c20547406b18901b0aeff44c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9acbc1d36946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9"}, {0x21, 0x7, "b8a3e100908f61640000000200000000000000000002000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f9036dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e01000000be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 1.965266812s ago: executing program 0 (id=495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x4, 0x2, 0xa000, 0x1000, &(0x7f0000513000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = syz_open_dev$mtd(&(0x7f0000000000), 0x595, 0x0) ioctl$MEMGETBADBLOCK(r1, 0x40084d0b, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x80000000b49, 0x200000000002, 0x4, 0xa, 0x3}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x3f, 0x1, 0x1fb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) fcntl$lock(r3, 0x5, &(0x7f0000000100)={0x1, 0x1, 0x3, 0xfffffffffffffffe}) r4 = open(&(0x7f0000000140)='./bus\x00', 0x14d27e, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) write(r4, &(0x7f0000000440), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendfile(r4, r4, 0x0, 0x800000a1e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r5 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x2814860, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) 1.692968102s ago: executing program 5 (id=496): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x9, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0xc, 0x2}}]}, @NL80211_ATTR_IE={0x1f, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x45}, 0xf, 0x44, @broadcast, 0x0, 0x3, 0x4}}, @ibss={0x6, 0x2, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1a) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000480)={&(0x7f00000003c0)="90b2d4a72e8918381298f1d78c071c51c5e8635f2aa6b5a40f54a408449d62526f85faac7f24d5bf9a957b425c1a3d98b90a99101a2ba407f98f56468f28ef25b64c21220e9f5666f3910dc553444a68600f22d6de452b0541c23a0c4b5ac6520d98448191d3d947fb4af54e1e8f3b1a9a18ed1b81a1bee396f8826684d93495e2ae0b7a301d23c96b6dec2d0e1d33d3cd6380281521b45697ef5f133f5b1242856a15226d55da", 0xa7, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000680)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[{}, {}, {}], &(0x7f0000000600)=[0x0], &(0x7f0000000640)=[0x0, 0x0], 0x3, 0x1, 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000700)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000007c0)={0x3, 0x0, &(0x7f0000000780)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000840)={0x1, 0x0, &(0x7f0000000800)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000008c0)={&(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000a00)={&(0x7f0000000980)=[0x0], &(0x7f00000009c0)=[0x0], 0x1, 0x0, 0xe0e0e0e0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000ac0)={0x200, 0x6, &(0x7f0000000900)=[r7, r8, r9, r10, r11, r12], &(0x7f0000000940)=[0x5, 0x0, 0x2, 0xf, 0xfffffffc, 0x9, 0x6, 0xfffffffc, 0x8], &(0x7f0000000a40)=[0x0, r13, 0x0], &(0x7f0000000a80)=[0xe3], 0x0, 0xff}) sendmsg$nl_generic(r0, &(0x7f0000000d80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b40)={0x1c4, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x17}, [@typed={0x18, 0x11, 0x0, 0x0, @str='/dev/dri/renderD128\x00'}, @generic="521b88d651cd58b1c55ac5ee9e2d27af1d031525ef0c1351de40e5c01d512c06f2e5b0ad6f28fd8cf87229a0b78ee88b241ccfe5e97bdcdbd41253a92dea62c1a67674cc7c475c86df029edcb3e5923837484ea0a35314d2b606cf1c72a0d60006a032b07be177988d27c92866c1463d435949dfbac72df3f9aa46931966eecc31fca129417d0e3696e59303f74bf9188d864e631f4c35bc20302ddd8fac1c72bc0224b49353aaf03060f7c90e5b5d002b655e75810be3b2065db3b84939fee4d700c80456652d25a06c79a97bcb2dfdc8cf547dd0d5333adbc410ea6fdacd4ae1938eb0a122346cfcec00105ce9", @generic="e9c75737809929ca27d3", @generic="e6c0b702234b827232b9f72a33ee5a4e424f442db746b5f1a7d3a69507a15cbcf2a63d", @generic="1deb944044e882391c1e98218f773d8e7ef45f0d06683072621d5bc03a3801a29d365eb8f752324d80b5843afd2e5a739472cc81086383b77323963683f98ab4439f9a1262abeac8887c2cab2b7a47c459ae01e4f417f41834a212f69e0087484bb032bd4865747f1db949ae883fb74d3fa53dcabc4cb12b64e34875"]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20010001}, 0x10) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r6, 0xc0106441, &(0x7f0000000e00)={0x0, 0x0, 0x5f}) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r6, 0xc0386447, &(0x7f0000000e40)={{0x8, 0x7, &(0x7f0000000dc0)=[{0xad, 0x0, 0x10000}, {0xc0}, {0x7, 0x0, 0x80000000}, {0x8}, {0x5, 0x0, 0x7}, {0x6, 0x0, 0xa}, {0x40, 0x0, 0x7ff}]}, 0x6, 0x10, 0x0, 0x0, 0x0, 0x5, 0xfbaa, 0xffffffffffffffff, r14}) recvmmsg(r0, &(0x7f0000001300)=[{{&(0x7f0000000e80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000f00)=""/108, 0x6c}, {&(0x7f0000000f80)=""/180, 0xb4}, {&(0x7f0000001040)=""/145, 0x91}, {&(0x7f0000001100)=""/182, 0xb6}], 0x4, &(0x7f0000001200)=""/249, 0xf9}, 0x3ff}], 0x1, 0x400021a2, &(0x7f0000001340)={0x0, 0x3938700}) personality(0xf) r15 = syz_open_dev$vbi(&(0x7f0000001380), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r15, 0xc008561c, &(0x7f00000013c0)={0x7, 0xffffffff}) r16 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x280001, 0x1e8) fallocate(r16, 0x18, 0x2, 0x3) syz_open_dev$sndmidi(&(0x7f0000001440), 0x402d, 0x40) lstat(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r5, 0xffffffff80000202, r17, &(0x7f0000001540)='./file0\x00') ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, &(0x7f00000015c0)={{0x7fffffffffffffff, 0x2, 0x4, 0x2, 0x80}, [{0xfff, 0x8, 0x4, 0x6}, {0x15a8, 0x9, 0xff, 0x4}, {0x9fc, 0x4, 0x2, 0x1}, {0x80, 0x9, 0x56}, {0x655, 0x4cec4107, 0xfd}, {0x4, 0x1, 0x8, 0x5b}]}) 1.616699324s ago: executing program 5 (id=497): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904b6"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x410}}, {0xa, &(0x7f0000000100)=@string={0xa, 0x3, "26029a89009609ec"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc01}}]}) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x1b, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0x20, 0x12, 0x1b, 0x10, 0x41e, 0x4041, 0x4025, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x1, 0x7, 0x40, 0x7}}]}}, 0x0) 1.521479765s ago: executing program 0 (id=498): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x16) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x5, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0000000}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x10, @multicast1=0xe0000009}}]}, 0x50}}, 0x0) fstatfs(0xffffffffffffffff, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x13) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 1.464176811s ago: executing program 0 (id=499): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000340)) socket$kcm(0x21, 0x2, 0xa) r1 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)="27c57fe71b28a0af5839fd26c401cccc5e33d6487c7d43cb0cad6baade3c9c8d5321632dac5d9d69c74884ca6508d2f3873581ecc14768763fdbd8b4d3bd94dbdde0a0793459cafb36b106286d14a20ad8d49a43c75c3f59e72a30a72005", 0x5e, r1}, 0x68) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x80ef, 0x20, 0x7, 0x9, {{0x10, 0x4, 0x0, 0x7, 0x40, 0x65, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, {[@timestamp={0x44, 0x24, 0x4d, 0x0, 0x6, [0x40d, 0x10000000, 0x3a3d09d4, 0x6, 0xc294, 0xffff4357, 0x5, 0x200]}, @end, @end, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000000c0)={r2, 0x1, 0x6, @broadcast}, 0x10) 1.371638546s ago: executing program 0 (id=500): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x2d, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x1403, 0x704, 0x70bd2d, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vxcan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20002000) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x27) migrate_pages(0x0, 0x3, &(0x7f00000001c0)=0x7f, &(0x7f0000000300)=0xa) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x301000) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x4}) r4 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000d00)={&(0x7f00000008c0)={{@local, 0x200}, {@any, 0x3}, 0x400, "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"}, 0x418, 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002100010000000000000000000220007ffe000000c969430408000100ac1414aa080006"], 0x2c}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)=""/141, 0x8d}], 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r4], 0x1) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x406, r6) write$tun(r7, &(0x7f0000000140)={@val={0x0, 0x22f0}, @val={0x2, 0x80, 0x2, 0xc2, 0xffff, 0x1}, @mpls={[{0x3ff}], @ipv6=@icmpv6={0x3, 0x6, "929da6", 0x8, 0x3a, 0xff, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @ndisc_rs}}}}, 0x42) mmap$binder(&(0x7f0000fbe000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x4) r8 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f0000000040)={0x8, r8, 'id0\x00'}) 1.106941043s ago: executing program 0 (id=501): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x40003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {}, {0x4, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80000000, 0x7, 0x3, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000200000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) unshare(0x20000400) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 855.646154ms ago: executing program 0 (id=502): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = epoll_create(0x4) r2 = socket(0x28, 0x801, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000280)={0x10000000}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000100)=ANY=[@ANYBLOB="12010102000000403512128240000102030109026900030106407f080b0002010120070904000000010120000924010200000900110904010000ff"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=503): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$inet6(r1, &(0x7f000000a440)=[{{0x0, 0x0, &(0x7f00000086c0)=[{&(0x7f0000006240)="c1346f2d260685eb57d897465edd4823", 0x10}, {&(0x7f00000062c0)="2977c9c80000000000", 0x9}, {&(0x7f0000006300)="5c711d9c51a0c1a7", 0x8}], 0x3}}, {{0x0, 0x0, &(0x7f000000a3c0)=[{&(0x7f00000090c0)="9a4037055e1d2207e96d56db2b87dc0f58811431433ec0e2435dab2ea838935a599486af8d13ab2df30ff8d0a89465852ec7abbeffae9462a84e0967d932a92cccb35fdc84", 0x45}, {&(0x7f0000009140)="14b48e5b08fd6c6c9c03031067a0f6194cf12963721ad167aa845aa732510bdfc2795ea40719d18c35e44298992aafa50921ae2de7ce25d85f96044894250e8a684d06c37ca05fddbafd651f2f0ab91dadf0ed44f422cf", 0x57}, {&(0x7f0000000080)="59058e8bf0cc944add2bc5e92c2a324f8f63fd70006d7d", 0x17}], 0x3}}], 0x2, 0x4004051) kernel console output (not intermixed with test programs): _pfx_vfs_write+0x10/0x10 [ 373.890340][ T6287] ? __fget_files+0x2a/0x420 [ 373.890398][ T6287] ksys_write+0x150/0x270 [ 373.890432][ T6287] ? __pfx_ksys_write+0x10/0x10 [ 373.890472][ T6287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.890495][ T6287] do_syscall_64+0x174/0x580 [ 373.890524][ T6287] ? trace_irq_disable+0x3b/0x140 [ 373.890551][ T6287] ? clear_bhb_loop+0x40/0x90 [ 373.890577][ T6287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.890597][ T6287] RIP: 0033:0x7f3811d5e68e [ 373.890618][ T6287] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 373.890635][ T6287] RSP: 002b:00007f3812d25fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 373.890662][ T6287] RAX: ffffffffffffffda RBX: 00007f3812d266c0 RCX: 00007f3811d5e68e [ 373.890676][ T6287] RDX: 000000000000004b RSI: 0000200000000480 RDI: 00000000000000c8 [ 373.890690][ T6287] RBP: 00007f3812d26090 R08: 0000000000000000 R09: 0000000000000000 [ 373.890702][ T6287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.890715][ T6287] R13: 00007f3812026038 R14: 00007f3812025fa0 R15: 00007f381214fa48 [ 373.890747][ T6287] [ 373.962389][ T6291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.233816][ T6291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.247729][ T6277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.287644][ T6277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.307154][ T5666] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 374.308011][ T5790] usb 1-1: USB disconnect, device number 7 [ 374.678610][ T5763] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 374.805784][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 374.847530][ T5763] usb 4-1: Using ep0 maxpacket: 16 [ 374.870014][ T5763] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.904299][ T10] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 374.927169][ T5763] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 374.987087][ T5763] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 375.022236][ T5763] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 375.035151][ T5763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.044636][ T5763] usb 4-1: Product: syz [ 375.054954][ T5763] usb 4-1: Manufacturer: syz [ 375.074418][ T5763] usb 4-1: SerialNumber: syz [ 375.084100][ T6312] xt_connbytes: Forcing CT accounting to be enabled [ 375.095564][ T5763] cdc_ncm 4-1:1.0: skipping garbage [ 375.105926][ T6312] Cannot find set identified by id 0 to match [ 375.129380][ T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 375.151140][ T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.165330][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 375.174766][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.233592][ T10] hub 2-1:4.0: USB hub found [ 375.274686][ T6317] netlink: 32 bytes leftover after parsing attributes in process `syz.4.144'. [ 375.440152][ T10] hub 2-1:4.0: 2 ports detected [ 375.451793][ T10] usb 2-1: selecting invalid altsetting 1 [ 375.478303][ T10] hub 2-1:4.0: Using single TT (err -22) [ 375.668418][ T6298] set match dimension is over the limit! [ 375.747151][ T5790] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 375.852889][ T10] usb 2-1: USB disconnect, device number 12 [ 375.901934][ T5790] usb 5-1: device descriptor read/64, error -71 [ 376.150263][ T6329] TCP: TCP_TX_DELAY enabled [ 376.164436][ T5790] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 376.317297][ T5790] usb 5-1: device descriptor read/64, error -71 [ 376.438487][ T5790] usb usb5-port1: attempt power cycle [ 376.600942][ T6339] syzkaller0: entered promiscuous mode [ 376.607719][ T6339] syzkaller0: entered allmulticast mode [ 376.807234][ T5790] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 376.848441][ T5790] usb 5-1: device descriptor read/8, error -71 [ 377.098480][ T5790] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 377.149909][ T5790] usb 5-1: device descriptor read/8, error -71 [ 377.162900][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 377.162917][ T29] audit: type=1326 audit(1783768023.201:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.1.150" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dad9de59 code=0x7ffc0000 [ 377.317994][ T5790] usb usb5-port1: unable to enumerate USB device [ 377.329221][ T29] audit: type=1326 audit(1783768023.201:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.1.150" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dad9de59 code=0x7ffc0000 [ 377.434874][ T29] audit: type=1326 audit(1783768023.201:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.1.150" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dad9de59 code=0x7ffc0000 [ 377.524243][ T5763] cdc_ncm 4-1:1.0: bind() failure [ 377.533838][ T29] audit: type=1326 audit(1783768023.231:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.1.150" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f17dad9de59 code=0x7ffc0000 [ 377.575017][ T5763] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 377.597352][ T5763] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 377.611892][ T29] audit: type=1326 audit(1783768023.231:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.1.150" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dad9de59 code=0x7ffc0000 [ 377.641113][ T5763] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 377.667681][ T5763] usb 4-1: USB disconnect, device number 12 [ 377.700842][ T29] audit: type=1326 audit(1783768023.241:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.1.150" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dad9de59 code=0x7ffc0000 [ 377.788715][ T29] audit: type=1326 audit(1783768023.241:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.1.150" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dad9de59 code=0x7ffc0000 [ 377.816116][ T29] audit: type=1326 audit(1783768023.241:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.1.150" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dad9de59 code=0x7ffc0000 [ 377.864358][ T29] audit: type=1326 audit(1783768023.241:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.1.150" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f17dad9de59 code=0x7ffc0000 [ 377.908711][ T29] audit: type=1326 audit(1783768023.251:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.1.150" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dad9de59 code=0x7ffc0000 [ 377.951405][ T6353] netlink: 'syz.1.152': attribute type 1 has an invalid length. [ 377.991414][ T6353] 8021q: adding VLAN 0 to HW filter on device bond2 [ 378.199175][ T6353] loop5: detected capacity change from 0 to 7 [ 378.230021][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'. [ 378.287078][ T6353] Dev loop5: unable to read RDB block 7 [ 378.312139][ T6353] loop5: unable to read partition table [ 378.355585][ T6353] loop5: partition table beyond EOD, truncated [ 378.389890][ T6353] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 378.725704][ T6366] netlink: 32 bytes leftover after parsing attributes in process `syz.4.155'. [ 378.758710][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.766356][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.778288][ T6367] vivid-000: disconnect [ 378.966341][ T6373] xt_hashlimit: size too large, truncated to 1048576 [ 379.321532][ T5790] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 379.412848][ T6386] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 379.460041][ T24] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 379.480949][ T24] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 379.491739][ T5790] usb 1-1: device descriptor read/64, error -71 [ 379.504624][ T24] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 379.527833][ T24] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 379.559257][ T24] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 379.576711][ T24] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 379.615482][ T24] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 379.655358][ T24] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 379.682584][ T24] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 379.704333][ T24] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 379.718240][ T810] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 379.747420][ T5790] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 379.788042][ T24] hid-generic 00A0:0006:0003.0002: hidraw0: HID v0.05 Device [syz0] on syz0 [ 379.897537][ T5790] usb 1-1: device descriptor read/64, error -71 [ 379.911944][ T810] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.936973][ T810] usb 5-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 379.972559][ T810] usb 5-1: config 1 interface 0 has no altsetting 0 [ 379.994613][ T810] usb 5-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 380.012560][ T810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.027707][ T5790] usb usb1-port1: attempt power cycle [ 380.045116][ T810] usb 5-1: Product: syz [ 380.058403][ T810] usb 5-1: Manufacturer: syz [ 380.073853][ T810] usb 5-1: SerialNumber: syz [ 380.314971][ T6408] netlink: 28 bytes leftover after parsing attributes in process `syz.1.164'. [ 380.328243][ T6384] netlink: 20 bytes leftover after parsing attributes in process `syz.4.160'. [ 380.389652][ T5790] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 380.401605][ T810] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input13 [ 380.439953][ T5790] usb 1-1: device descriptor read/8, error -71 [ 380.446609][ T4977] bcm5974 5-1:1.0: could not read from device [ 380.469432][ T4977] bcm5974 5-1:1.0: could not read from device [ 380.495737][ T810] usb 5-1: USB disconnect, device number 10 [ 380.513101][ T4977] bcm5974 5-1:1.0: could not read from device [ 380.697625][ T5790] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 380.728118][ T5790] usb 1-1: device descriptor read/8, error -71 [ 380.847536][ T5790] usb usb1-port1: unable to enumerate USB device [ 381.097243][ T5763] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 381.196367][ T6370] vivid-000: reconnect [ 381.304970][ T5763] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 381.324371][ T5763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.342795][ T5763] usb 3-1: Product: syz [ 381.348774][ T5763] usb 3-1: Manufacturer: syz [ 381.359334][ T5763] usb 3-1: SerialNumber: syz [ 381.373474][ T5763] usb 3-1: config 0 descriptor?? [ 381.391061][ T5763] hub 3-1:0.0: bad descriptor, ignoring hub [ 381.412760][ T5763] hub 3-1:0.0: probe with driver hub failed with error -5 [ 381.421021][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 381.578111][ T10] usb 5-1: device descriptor read/64, error -71 [ 381.603378][ T5763] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 381.630211][ T5763] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 381.660471][ T5763] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 381.677642][ T5763] usb 3-1: media controller created [ 381.705146][ T5763] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 381.809861][ T5763] DVB: Unable to find symbol dib7000p_attach() [ 381.816209][ T5763] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 381.826099][ T6401] dib0700: tx buffer length is larger than 4. Not supported. [ 381.848976][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 381.917085][ T5763] rc_core: IR keymap rc-dib0700-rc5 not found [ 381.930307][ T5763] Registered IR keymap rc-empty [ 381.937355][ T5763] dvb-usb: could not initialize remote control. [ 381.943861][ T5763] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 381.985930][ T5763] usb 3-1: USB disconnect, device number 9 [ 382.007282][ T10] usb 5-1: device descriptor read/64, error -71 [ 382.027961][ T5738] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 382.074065][ T5763] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 382.128735][ T10] usb usb5-port1: attempt power cycle [ 382.222203][ T5738] usb 4-1: unable to get BOS descriptor or descriptor too short [ 382.236428][ T5738] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 382.260220][ T5738] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 382.270790][ T5738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.281180][ T5738] usb 4-1: Product: syz [ 382.285490][ T5738] usb 4-1: Manufacturer: syz [ 382.291207][ T5738] usb 4-1: SerialNumber: syz [ 382.392260][ T6431] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 382.499798][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 382.516373][ T5738] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 382.539396][ T10] usb 5-1: device descriptor read/8, error -71 [ 382.715866][ T5738] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 382.734013][ T5738] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 382.797128][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 382.861456][ T10] usb 5-1: device descriptor read/8, error -71 [ 382.961780][ T6434] loop4: detected capacity change from 0 to 7 [ 383.005997][ T10] usb usb5-port1: unable to enumerate USB device [ 383.021047][ T6434] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 383.040822][ T6434] loop4: partition table partially beyond EOD, truncated [ 383.065180][ T6434] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 383.124534][ T5738] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 383.142015][ T5738] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 383.272870][ T5681] udevd[5681]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 383.357776][ T6424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.393473][ T6424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.415073][ T6436] xt_hashlimit: size too large, truncated to 1048576 [ 383.416149][ T5738] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 383.567616][ T5738] usb 4-1: USB disconnect, device number 13 [ 383.741946][ T5671] udevd[5671]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 384.193546][ T6444] netlink: 28 bytes leftover after parsing attributes in process `syz.1.175'. [ 384.288715][ T5738] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 384.380528][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 384.380547][ T29] audit: type=1326 audit(1783768030.421:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3811d9de59 code=0x7ffc0000 [ 384.478792][ T29] audit: type=1326 audit(1783768030.421:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3811d9de59 code=0x7ffc0000 [ 384.541730][ T5738] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 384.561889][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.590084][ T5738] usb 3-1: Product: syz [ 384.593980][ T6448] kvm: pic: single mode not supported [ 384.594379][ T6448] kvm: pic: level sensitive irq not supported [ 384.596234][ T29] audit: type=1326 audit(1783768030.421:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f3811d9de59 code=0x7ffc0000 [ 384.641689][ T5738] usb 3-1: Manufacturer: syz [ 384.651993][ T5738] usb 3-1: SerialNumber: syz [ 384.661718][ T29] audit: type=1326 audit(1783768030.421:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3811d9de59 code=0x7ffc0000 [ 384.689227][ T5738] usb 3-1: config 0 descriptor?? [ 384.704452][ T29] audit: type=1326 audit(1783768030.421:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3811d9de59 code=0x7ffc0000 [ 384.753768][ T29] audit: type=1326 audit(1783768030.421:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3811d9de59 code=0x7ffc0000 [ 384.827151][ T29] audit: type=1326 audit(1783768030.421:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3811d9de59 code=0x7ffc0000 [ 384.935315][ T29] audit: type=1326 audit(1783768030.431:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3811d5e68e code=0x7ffc0000 [ 384.976298][ T29] audit: type=1326 audit(1783768030.431:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3811d9de59 code=0x7ffc0000 [ 385.013815][ T6467] loop4: detected capacity change from 0 to 7 [ 385.019979][ T29] audit: type=1326 audit(1783768030.431:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3811d9de59 code=0x7ffc0000 [ 385.062982][ T6467] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 385.080504][ T6467] loop4: partition table partially beyond EOD, truncated [ 385.100937][ T6469] batadv_slave_1: entered promiscuous mode [ 385.107417][ T6467] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 385.119065][ T5738] usb 3-1: Firmware version (0.0) predates our first public release. [ 385.128018][ T5738] usb 3-1: Please update to version 0.2 or newer [ 385.256209][ T5681] udevd[5681]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 385.630350][ T6483] xt_hashlimit: size too large, truncated to 1048576 [ 385.792830][ T5738] usb 3-1: USB disconnect, device number 10 [ 385.898145][ T6469] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5683] was attempted by "    $  P    T  ! ( \x0b  ip6tnl    T  \x0a g . u \x09 @ 2qyBUW~5|zgt6ٓ\x0b.4a⚮ Ƚ8n FM0cji7S}Կ1R\x0a:kK䛛oIח55}c~h1,#F\x1b2l>$\x07 | <^   *   ]&_`s}(UpC!y5\x5cR\x22n:{\x1b}Zvȷ+b^7Li HID v0.05 Device [syz0] on syz0 [ 390.179565][ T5790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.213465][ T5790] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 390.245673][ T5790] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 390.275996][ T5790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.321816][ T6565] fido_id[6565]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 390.373783][ T5790] usb 1-1: config 0 descriptor?? [ 390.497147][ T810] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 390.600746][ T6571] netlink: 40 bytes leftover after parsing attributes in process `syz.3.207'. [ 390.603777][ T6573] xt_hashlimit: size too large, truncated to 1048576 [ 390.668408][ T810] usb 5-1: Using ep0 maxpacket: 16 [ 390.692905][ T810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.730483][ T810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.762440][ T810] usb 5-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 390.792126][ T810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.832698][ T810] usb 5-1: config 0 descriptor?? [ 391.102704][ T6584] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.210'. [ 391.146717][ T810] usbhid 5-1:0.0: can't add hid device: -71 [ 391.169963][ T810] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 391.222195][ T810] usb 5-1: USB disconnect, device number 15 [ 391.437890][ T6588] 8021q: adding VLAN 0 to HW filter on device bond3 [ 391.445745][ T6588] bridge0: port 4(bond3) entered blocking state [ 391.452954][ T6588] bridge0: port 4(bond3) entered disabled state [ 391.460086][ T6588] bond3: entered allmulticast mode [ 391.468496][ T6588] bond3: entered promiscuous mode [ 391.474671][ T6588] bridge0: port 4(bond3) entered blocking state [ 391.481180][ T6588] bridge0: port 4(bond3) entered forwarding state [ 391.510466][ T12] bridge0: port 4(bond3) entered disabled state [ 391.526781][ T5790] usbhid 1-1:0.0: can't add hid device: -71 [ 391.544367][ T5790] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 391.566324][ T5790] usb 1-1: USB disconnect, device number 12 [ 391.667160][ T810] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 391.817191][ T810] usb 5-1: Using ep0 maxpacket: 16 [ 391.830750][ T810] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 391.859685][ T810] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.870715][ T810] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 391.883988][ T810] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 391.895422][ T810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.903959][ T810] usb 5-1: Product: syz [ 391.908507][ T810] usb 5-1: Manufacturer: syz [ 391.914592][ T810] usb 5-1: SerialNumber: syz [ 391.956525][ T810] usb 5-1: 0:2 : does not exist [ 392.610784][ T6481] batadv_slave_1: left promiscuous mode [ 392.930443][ T6619] netlink: 'syz.0.217': attribute type 11 has an invalid length. [ 393.052841][ T810] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 393.197475][ T810] usb 5-1: USB disconnect, device number 16 [ 393.930317][ T6627] binder: 6624:6627 ioctl c0306201 200000000080 returned -14 [ 394.962427][ T6643] sg_write: data in/out 401408/1 bytes for SCSI command 0x0-- guessing data in; [ 394.962427][ T6643] program syz.0.223 not setting count and/or reply_len properly [ 395.017882][ T6638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.222'. [ 395.781873][ T6657] xt_hashlimit: size too large, truncated to 1048576 [ 395.908790][ T5762] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 395.994656][ T6660] No such timeout policy "syz0" [ 396.107830][ T5762] usb 3-1: Using ep0 maxpacket: 32 [ 396.122735][ T5762] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 396.137059][ T5762] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 396.137119][ T42] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 396.167481][ T5762] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 396.190631][ T5762] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 396.239782][ T5762] usb 3-1: config 0 interface 0 has no altsetting 0 [ 396.265093][ T5762] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 396.274543][ T5762] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 396.284228][ T5762] usb 3-1: Product: syz [ 396.288806][ T5762] usb 3-1: Manufacturer: syz [ 396.293464][ T5762] usb 3-1: SerialNumber: syz [ 396.317972][ T5762] usb 3-1: config 0 descriptor?? [ 396.320685][ T5762] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 396.321848][ T5762] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 396.367271][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 396.369259][ T42] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.369288][ T42] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 396.370507][ T42] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 396.370538][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 396.370602][ T42] usb 4-1: SerialNumber: syz [ 396.389584][ T42] usb 4-1: 0:2 : does not exist [ 396.426292][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.232'. [ 396.426322][ T6671] netlink: 28 bytes leftover after parsing attributes in process `syz.4.232'. [ 396.586003][ T6674] loop4: detected capacity change from 0 to 7 [ 396.610836][ T6658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.612059][ T6658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.629626][ T6674] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 396.629661][ T6674] loop4: partition table partially beyond EOD, truncated [ 396.629934][ T6674] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 396.664362][ T42] usb 4-1: USB disconnect, device number 18 [ 396.956088][ T5681] udevd[5681]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 398.925385][ T42] usb 3-1: USB disconnect, device number 12 [ 398.961812][ T42] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 399.201936][ T6713] FAULT_INJECTION: forcing a failure. [ 399.201936][ T6713] name failslab, interval 1, probability 0, space 0, times 0 [ 399.286386][ T6713] CPU: 0 UID: 0 PID: 6713 Comm: syz.0.240 Not tainted syzkaller #0 PREEMPT(full) [ 399.286407][ T6713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 399.286414][ T6713] Call Trace: [ 399.286419][ T6713] [ 399.286424][ T6713] dump_stack_lvl+0xe8/0x150 [ 399.286452][ T6713] should_fail_ex+0x40c/0x560 [ 399.286472][ T6713] should_failslab+0xa8/0x100 [ 399.286492][ T6713] __kmalloc_noprof+0xfe/0x720 [ 399.286507][ T6713] ? rcu_is_watching+0x15/0xb0 [ 399.286527][ T6713] ? tomoyo_realpath_from_path+0xef/0x640 [ 399.286588][ T6713] ? tomoyo_realpath_from_path+0xef/0x640 [ 399.286605][ T6713] tomoyo_realpath_from_path+0xef/0x640 [ 399.286623][ T6713] ? tomoyo_path_number_perm+0x219/0x5f0 [ 399.286662][ T6713] tomoyo_path_number_perm+0x246/0x5f0 [ 399.286692][ T6713] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 399.286728][ T6713] ? sb_end_write+0xe5/0x190 [ 399.286752][ T6713] ? vfs_write+0x9ce/0xba0 [ 399.286789][ T6713] ? hook_file_ioctl+0x1f0/0x5f0 [ 399.286895][ T6713] ? ksys_write+0x1fc/0x270 [ 399.286933][ T6713] security_file_ioctl+0xc3/0x2a0 [ 399.286982][ T6713] __se_sys_ioctl+0x47/0x170 [ 399.287003][ T6713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.287026][ T6713] do_syscall_64+0x174/0x580 [ 399.287058][ T6713] ? clear_bhb_loop+0x40/0x90 [ 399.287084][ T6713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.287103][ T6713] RIP: 0033:0x7f9f5419de59 [ 399.287123][ T6713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.287139][ T6713] RSP: 002b:00007f9f55093028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 399.287162][ T6713] RAX: ffffffffffffffda RBX: 00007f9f54425fa0 RCX: 00007f9f5419de59 [ 399.287176][ T6713] RDX: 0000000000000137 RSI: 000000004008700c RDI: 0000000000000003 [ 399.287188][ T6713] RBP: 00007f9f55093090 R08: 0000000000000000 R09: 0000000000000000 [ 399.287201][ T6713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.287212][ T6713] R13: 00007f9f54426038 R14: 00007f9f54425fa0 R15: 00007f9f5454fa48 [ 399.287245][ T6713] [ 399.547458][ T6713] ERROR: Out of memory at tomoyo_realpath_from_path. [ 399.674737][ T6718] xt_hashlimit: size too large, truncated to 1048576 [ 399.719005][ T5762] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 399.867331][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'. [ 399.902838][ T6722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.243'. [ 399.914770][ T5762] usb 3-1: Using ep0 maxpacket: 16 [ 399.938751][ T5762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.959507][ T5762] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 399.992306][ T5762] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 400.046361][ T6724] syzkaller0: entered promiscuous mode [ 400.059037][ T6724] syzkaller0: entered allmulticast mode [ 400.066638][ T5762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.080168][ T6724] tipc: Enabled bearer , priority 10 [ 400.150444][ T5762] usb 3-1: config 0 descriptor?? [ 400.151682][ T6727] tipc: Resetting bearer [ 400.252158][ T6727] tipc: Disabling bearer [ 400.387184][ T6714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.409843][ T6714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.467765][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 400.601594][ T5738] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 400.627116][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 400.635797][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 400.651624][ T10] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 400.655908][ T6714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.680400][ T6714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.689960][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.729369][ T10] usb 4-1: config 0 descriptor?? [ 400.736779][ T6714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.767220][ T5738] usb 1-1: Using ep0 maxpacket: 32 [ 400.783043][ T6714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.809151][ T5738] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 400.833710][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.855769][ T5738] usb 1-1: Product: syz [ 400.863048][ T5738] usb 1-1: Manufacturer: syz [ 400.868151][ T5738] usb 1-1: SerialNumber: syz [ 400.888007][ T5738] usb 1-1: config 0 descriptor?? [ 400.913237][ T5738] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 400.923222][ T5738] dvb-usb: bulk message failed: -22 (2/0) [ 400.966459][ T5738] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 400.986327][ T5738] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 400.995631][ T5738] usb 1-1: media controller created [ 401.040307][ T5762] usbhid 3-1:0.0: can't add hid device: -71 [ 401.047980][ T5738] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 401.059854][ T5762] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 401.079853][ T5762] usb 3-1: USB disconnect, device number 13 [ 401.088456][ T5738] usb 1-1: selecting invalid altsetting 7 [ 401.116888][ T5738] cxusb: set interface failed [ 401.130271][ T5738] dvb-usb: bulk message failed: -22 (1/0) [ 401.215001][ T10] hid-led 0003:0FC5:B080.0004: reserved main item tag 0xd [ 401.241220][ T10] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 401.279462][ T10] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 401.300177][ T5738] DVB: Unable to find symbol lgdt330x_attach() [ 401.319407][ T10] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 401.332369][ T5738] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 401.349890][ T10] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 401.369170][ T10] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 401.392230][ T10] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 401.427457][ T10] hid-led 0003:0FC5:B080.0004: probe with driver hid-led failed with error -71 [ 401.486927][ T10] usb 4-1: USB disconnect, device number 19 [ 401.577579][ T5738] rc_core: IR keymap rc-dvico-portable not found [ 401.600579][ T5738] Registered IR keymap rc-empty [ 401.652657][ T5738] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 401.711174][ T5738] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input16 [ 401.756378][ T5738] dvb-usb: schedule remote query interval to 100 msecs. [ 401.793819][ T5738] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 401.900815][ T5738] dvb-usb: bulk message failed: -22 (1/0) [ 402.059822][ T5738] dvb-usb: bulk message failed: -22 (1/0) [ 402.197189][ T5738] dvb-usb: bulk message failed: -22 (1/0) [ 402.327266][ T5761] dvb-usb: bulk message failed: -22 (1/0) [ 402.439640][ T5761] dvb-usb: bulk message failed: -22 (1/0) [ 402.518642][ T5738] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 402.564786][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 402.687508][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 402.720467][ T5738] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.750179][ T5738] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.771505][ T6769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.255'. [ 402.782181][ T5738] usb 3-1: config 0 interface 0 has no altsetting 0 [ 402.797162][ T5738] usb 3-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 402.817553][ T5761] dvb-usb: bulk message failed: -22 (1/0) [ 402.827111][ T5738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.858823][ T5738] usb 3-1: config 0 descriptor?? [ 402.937211][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 403.069275][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 403.197510][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 403.339164][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 403.366144][ T5738] chicony 0003:04F2:1236.0005: unknown main item tag 0x4 [ 403.379703][ T5738] chicony 0003:04F2:1236.0005: unknown main item tag 0x7 [ 403.405232][ T5738] chicony 0003:04F2:1236.0005: item 0 2 0 9 parsing failed [ 403.408542][ T6781] binder: BINDER_SET_CONTEXT_MGR already set [ 403.429532][ T5738] chicony 0003:04F2:1236.0005: Chicony hid parse failed: -22 [ 403.457444][ T6781] binder: 6780:6781 ioctl 4018620d 200000004a80 returned -16 [ 403.458475][ T5738] chicony 0003:04F2:1236.0005: probe with driver chicony failed with error -22 [ 403.477289][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 403.480030][ T5790] usb 1-1: USB disconnect, device number 13 [ 403.512286][ T6779] netlink: 16 bytes leftover after parsing attributes in process `syz.3.258'. [ 403.636248][ T6779] kvm: pic: non byte write [ 403.688006][ T42] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 403.715311][ T5790] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 403.887133][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 403.917304][ T42] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 403.943625][ T6794] netlink: 'syz.3.263': attribute type 5 has an invalid length. [ 403.947710][ T6792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.262'. [ 403.953540][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 404.001661][ T42] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 404.033001][ T42] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 404.059372][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.067679][ T5790] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 404.112446][ T42] usb 5-1: config 0 descriptor?? [ 404.227188][ T5790] usb 1-1: Using ep0 maxpacket: 32 [ 404.263407][ T5790] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 404.284723][ T5790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.306500][ T810] usb 3-1: USB disconnect, device number 14 [ 404.314555][ T5790] usb 1-1: Product: syz [ 404.319036][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 404.330164][ T42] hdpvr 5-1:0.0: firmware version 0x8 dated [ 404.341682][ T5790] usb 1-1: Manufacturer: syz [ 404.358067][ T5790] usb 1-1: SerialNumber: syz [ 404.380862][ T5790] usb 1-1: config 0 descriptor?? [ 404.405828][ T5790] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 404.417232][ T5790] dvb-usb: bulk message failed: -22 (2/0) [ 404.431897][ T5790] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 404.443374][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.444480][ T5790] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 404.461838][ T5790] usb 1-1: media controller created [ 404.465612][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.477135][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 404.486112][ T24] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 404.486820][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.495158][ T24] usb 4-1: config 179 has no interface number 0 [ 404.495212][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 404.495270][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 404.495299][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 404.495326][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 404.495353][ T24] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 404.495428][ T24] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 404.495453][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.609220][ T6794] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 404.616760][ T42] hdpvr 5-1:0.0: device init failed [ 404.627359][ T42] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 404.652200][ T5790] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 404.705210][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.735287][ T42] usb 5-1: USB disconnect, device number 17 [ 404.835663][ T5790] usb 1-1: selecting invalid altsetting 7 [ 404.842459][ T5790] cxusb: set interface failed [ 404.864964][ T5790] dvb-usb: bulk message failed: -22 (1/0) [ 404.920885][ T6806] loop4: detected capacity change from 0 to 7 [ 404.979076][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input17 [ 405.024679][ T6806] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 405.054054][ T5790] DVB: Unable to find symbol lgdt330x_attach() [ 405.063190][ T5790] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 405.065107][ T6806] loop4: partition table partially beyond EOD, truncated [ 405.164466][ T6806] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 405.197312][ T5790] rc_core: IR keymap rc-dvico-portable not found [ 405.197779][ T5761] usb 4-1: USB disconnect, device number 20 [ 405.203796][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 405.218157][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 405.232658][ T5790] Registered IR keymap rc-empty [ 405.261639][ T5790] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 405.305593][ T5790] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input18 [ 405.348414][ T5790] dvb-usb: schedule remote query interval to 100 msecs. [ 405.386391][ T5790] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 405.422110][ T5671] udevd[5671]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 405.487109][ T5790] dvb-usb: bulk message failed: -22 (1/0) [ 405.607167][ T5790] dvb-usb: bulk message failed: -22 (1/0) [ 405.747748][ T5790] dvb-usb: bulk message failed: -22 (1/0) [ 405.878629][ T5790] dvb-usb: bulk message failed: -22 (1/0) [ 405.997291][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 406.094378][ T6826] netlink: 16 bytes leftover after parsing attributes in process `syz.4.273'. [ 406.110522][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 406.122957][ T6826] kvm: pic: non byte write [ 406.187336][ T5761] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 406.227270][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 406.338871][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 406.367159][ T5761] usb 3-1: Using ep0 maxpacket: 32 [ 406.375367][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 406.375386][ T29] audit: type=1326 audit(1783768052.411:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.3.275" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3811d9de59 code=0x0 [ 406.433069][ T6838] netlink: 'syz.4.276': attribute type 1 has an invalid length. [ 406.441279][ T5761] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 406.460279][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 406.466874][ T5761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.490229][ T5761] usb 3-1: Product: syz [ 406.506762][ T5761] usb 3-1: Manufacturer: syz [ 406.520627][ T6838] 8021q: adding VLAN 0 to HW filter on device bond2 [ 406.529671][ T5761] usb 3-1: SerialNumber: syz [ 406.552890][ T5761] usb 3-1: config 0 descriptor?? [ 406.580428][ T5761] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 406.597139][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 406.610104][ T5761] dvb-usb: bulk message failed: -22 (2/0) [ 406.656785][ T5761] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 406.702789][ T5761] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 406.717241][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 406.724479][ T5761] usb 3-1: media controller created [ 406.731865][ T10] usb 1-1: USB disconnect, device number 14 [ 406.822247][ T5761] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 406.883298][ T6853] loop4: detected capacity change from 0 to 7 [ 406.936263][ T6853] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 406.962610][ T6853] loop4: partition table partially beyond EOD, truncated [ 406.963216][ T5761] usb 3-1: selecting invalid altsetting 7 [ 406.996852][ T5761] cxusb: set interface failed [ 407.002460][ T5761] dvb-usb: bulk message failed: -22 (1/0) [ 407.004123][ T6853] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 407.109059][ T5761] DVB: Unable to find symbol lgdt330x_attach() [ 407.122705][ T5761] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 407.145549][ T5681] udevd[5681]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 407.317200][ T5761] rc_core: IR keymap rc-dvico-portable not found [ 407.328047][ T5761] Registered IR keymap rc-empty [ 407.344182][ T5761] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 407.373499][ T5761] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input19 [ 407.417658][ T5761] dvb-usb: schedule remote query interval to 100 msecs. [ 407.431957][ T5761] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 407.540441][ T5762] dvb-usb: bulk message failed: -22 (1/0) [ 407.575374][ T113] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.648033][ T5762] dvb-usb: bulk message failed: -22 (1/0) [ 407.707151][ T5761] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 407.764447][ T113] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.767207][ T5762] dvb-usb: bulk message failed: -22 (1/0) [ 407.867217][ T5761] usb 4-1: Using ep0 maxpacket: 32 [ 407.878332][ T5761] usb 4-1: unable to get BOS descriptor or descriptor too short [ 407.895918][ T5761] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 407.897654][ T113] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.910443][ T5761] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 407.925260][ T5762] dvb-usb: bulk message failed: -22 (1/0) [ 407.954726][ T5761] usb 4-1: config 14 has no interface number 0 [ 407.963171][ T5761] usb 4-1: config 14 has no interface number 1 [ 407.982817][ T5761] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 408.009137][ T5761] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 408.028313][ T5761] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 408.040922][ T5666] dvb-usb: bulk message failed: -22 (1/0) [ 408.048562][ T5761] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 408.064664][ T5761] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 408.078195][ T5761] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.097528][ T5761] usb 4-1: config 14 interface 57 has no altsetting 0 [ 408.104766][ T5761] usb 4-1: config 14 interface 228 has no altsetting 0 [ 408.120407][ T5761] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 408.124498][ T113] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.132740][ T5761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.157143][ T5666] dvb-usb: bulk message failed: -22 (1/0) [ 408.181248][ T5761] usb 4-1: Product: syz [ 408.196743][ T5761] usb 4-1: Manufacturer: syz [ 408.203496][ T5761] usb 4-1: SerialNumber: syz [ 408.267856][ T5762] dvb-usb: bulk message failed: -22 (1/0) [ 408.337295][ T5674] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 408.349727][ T5674] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 408.362058][ T5674] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 408.372318][ T5674] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 408.378970][ T5762] dvb-usb: bulk message failed: -22 (1/0) [ 408.379692][ T5790] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 408.397162][ T5674] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 408.487403][ T5762] dvb-usb: bulk message failed: -22 (1/0) [ 408.586237][ T5790] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.597158][ T5762] dvb-usb: bulk message failed: -22 (1/0) [ 408.622941][ T5790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 408.668077][ T5790] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 408.702531][ T5790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 408.707440][ T5762] dvb-usb: bulk message failed: -22 (1/0) [ 408.753183][ T5790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 408.778750][ T5790] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 408.828799][ T5790] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 408.837355][ T5762] dvb-usb: bulk message failed: -22 (1/0) [ 408.863251][ T5790] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 408.869032][ T5761] legousbtower 4-1:14.57: interrupt endpoints not found [ 408.891323][ T5790] usb 2-1: Manufacturer: syz [ 408.931034][ T5790] usb 2-1: config 0 descriptor?? [ 408.977464][ T5762] dvb-usb: bulk message failed: -22 (1/0) [ 409.023752][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 409.038518][ T5746] usb 3-1: USB disconnect, device number 15 [ 409.081014][ T5761] legousbtower 4-1:14.228: get version request failed: -71 [ 409.114238][ T5761] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 409.189713][ T5761] usb 4-1: USB disconnect, device number 21 [ 409.213371][ T5790] usb 2-1: USB disconnect, device number 13 [ 409.435720][ T5746] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 409.437934][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 409.617174][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 409.642235][ T10] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 409.666131][ T10] usb 1-1: config 0 has no interface number 0 [ 409.692207][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 409.720507][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.736387][ T113] bond0 (unregistering): Released all slaves [ 409.761943][ T10] usb 1-1: Product: syz [ 409.778286][ T10] usb 1-1: Manufacturer: syz [ 409.795679][ T10] usb 1-1: SerialNumber: syz [ 409.824047][ T113] bond1 (unregistering): Released all slaves [ 409.831744][ T10] usb 1-1: config 0 descriptor?? [ 409.895235][ T113] bond2 (unregistering): Released all slaves [ 410.053752][ T10] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 410.059861][ T6895] netlink: 'syz.1.288': attribute type 1 has an invalid length. [ 410.079687][ T10] uvcvideo 1-1:0.31: Entity type for entity Output 32774 was not initialized! [ 410.140986][ T10] usb 1-1: USB disconnect, device number 15 [ 410.172013][ T6895] 8021q: adding VLAN 0 to HW filter on device bond3 [ 410.287368][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 410.310310][ T113] tipc: Left network mode [ 410.497653][ T5672] Bluetooth: hci2: command tx timeout [ 410.592928][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 411.224359][ T113] hsr_slave_0: left promiscuous mode [ 411.245420][ T113] hsr_slave_1: left promiscuous mode [ 411.257288][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 411.331252][ T113] veth1_macvtap: left promiscuous mode [ 411.344589][ T113] veth0_macvtap: left promiscuous mode [ 411.353135][ T113] veth1_vlan: left promiscuous mode [ 411.365929][ T113] veth0_vlan: left promiscuous mode [ 411.388208][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 411.427098][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 411.459336][ T10] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 411.488920][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.514225][ T10] usb 1-1: Product: syz [ 411.528257][ T10] usb 1-1: Manufacturer: syz [ 411.536635][ T10] usb 1-1: SerialNumber: syz [ 411.562280][ T10] usb 1-1: config 0 descriptor?? [ 411.578097][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 411.584401][ T10] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 411.592377][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 411.611237][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.617820][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 411.650436][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 411.666084][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 411.696730][ T10] usb 1-1: media controller created [ 411.717247][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 411.745838][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.771138][ T24] usb 4-1: Product: syz [ 411.800339][ T24] usb 4-1: Manufacturer: syz [ 411.800767][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 411.814025][ T24] usb 4-1: SerialNumber: syz [ 411.843999][ T24] usb 4-1: 0:2 : does not exist [ 411.966892][ T10] usb 1-1: selecting invalid altsetting 7 [ 411.985270][ T10] cxusb: set interface failed [ 412.001362][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 412.087122][ T5762] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 412.098467][ T24] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 412.159479][ T10] DVB: Unable to find symbol lgdt330x_attach() [ 412.178216][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 412.280373][ T5762] usb 3-1: config 3 has an invalid interface number: 153 but max is 0 [ 412.285224][ T24] usb 4-1: USB disconnect, device number 22 [ 412.324270][ T5762] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 412.351373][ T5762] usb 3-1: config 3 has no interface number 0 [ 412.368682][ T10] rc_core: IR keymap rc-dvico-portable not found [ 412.375909][ T10] Registered IR keymap rc-empty [ 412.381099][ T5762] usb 3-1: config 3 interface 153 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 412.406952][ T10] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 412.423442][ T5762] usb 3-1: config 3 interface 153 has no altsetting 0 [ 412.444109][ T5762] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=90.80 [ 412.461888][ T5762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.470775][ T10] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input20 [ 412.490752][ T5762] usb 3-1: Product: syz [ 412.495815][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 412.508725][ T5762] usb 3-1: Manufacturer: syz [ 412.515175][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 412.529058][ T5762] usb 3-1: SerialNumber: syz [ 412.576685][ T5681] udevd[5681]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 412.577376][ T5672] Bluetooth: hci2: command tx timeout [ 412.618104][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 412.747183][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 412.858158][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 412.977147][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 413.097250][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 413.217279][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 413.271388][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 413.337199][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 413.467991][ T5666] dvb-usb: bulk message failed: -22 (1/0) [ 413.587212][ T5666] dvb-usb: bulk message failed: -22 (1/0) [ 413.697481][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 413.818449][ T5666] dvb-usb: bulk message failed: -22 (1/0) [ 413.927269][ T5666] dvb-usb: bulk message failed: -22 (1/0) [ 414.037464][ T5666] dvb-usb: bulk message failed: -22 (1/0) [ 414.047909][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 414.075936][ T6870] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.083863][ T6870] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.096309][ T6870] bridge_slave_0: entered allmulticast mode [ 414.121155][ T6870] bridge_slave_0: entered promiscuous mode [ 414.132812][ T5738] usb 1-1: USB disconnect, device number 16 [ 414.199035][ T6870] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.221053][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 414.239887][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 414.248504][ T6870] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.271643][ T10] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 414.287294][ T6870] bridge_slave_1: entered allmulticast mode [ 414.308677][ T6870] bridge_slave_1: entered promiscuous mode [ 414.318556][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.357675][ T10] usb 2-1: config 0 descriptor?? [ 414.368569][ T6975] netlink: 'syz.0.299': attribute type 1 has an invalid length. [ 414.378912][ T5738] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 414.502187][ T6975] 8021q: adding VLAN 0 to HW filter on device bond1 [ 414.561674][ T6870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.603907][ T6870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.637182][ T5761] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 414.660035][ T5672] Bluetooth: hci2: command tx timeout [ 414.673811][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 414.693964][ T6870] team0: Port device team_slave_0 added [ 414.694472][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 414.706700][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 414.710925][ T10] usb 2-1: USB disconnect, device number 14 [ 414.751461][ T6870] team0: Port device team_slave_1 added [ 414.788920][ T5761] usb 4-1: device descriptor read/64, error -71 [ 414.883284][ T6870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.891027][ T6870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.919145][ T6870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.936708][ T6870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.946226][ T6870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.974699][ T6870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.993131][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'. [ 415.009872][ T6993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.304'. [ 415.027284][ T5761] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 415.125756][ T6870] hsr_slave_0: entered promiscuous mode [ 415.133499][ T6870] hsr_slave_1: entered promiscuous mode [ 415.140893][ T6870] debugfs: 'hsr0' already exists in 'hsr' [ 415.146911][ T6870] Cannot create hsr debugfs directory [ 415.167211][ T5761] usb 4-1: device descriptor read/64, error -71 [ 415.277722][ T5761] usb usb4-port1: attempt power cycle [ 415.307664][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 415.467220][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 415.481079][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 415.499771][ T10] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 415.525818][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.554912][ T10] usb 1-1: config 0 descriptor?? [ 415.627382][ T5761] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 415.658643][ T5761] usb 4-1: device descriptor read/8, error -71 [ 415.697999][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 415.705473][ T6870] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 415.722381][ T6870] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 415.731295][ T6870] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 415.748044][ T6870] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 415.759855][ T6870] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 415.791989][ T6870] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 415.804863][ T6870] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 415.821232][ T6870] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 415.898228][ T5761] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 415.929595][ T5761] usb 4-1: device descriptor read/8, error -71 [ 416.002582][ T6870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.032240][ T6993] trusted_key: syz.0.304 sent an empty control message without MSG_MORE. [ 416.058327][ T5761] usb usb4-port1: unable to enumerate USB device [ 416.076540][ T6870] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.085639][ T10] hid-retrode 0003:0403:97C1.0006: unknown main item tag 0x0 [ 416.103965][ T10] hid-retrode 0003:0403:97C1.0006: unknown main item tag 0x0 [ 416.116659][ T10] hid-retrode 0003:0403:97C1.0006: unknown main item tag 0x0 [ 416.129415][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.136736][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.144982][ T10] hid-retrode 0003:0403:97C1.0006: unknown main item tag 0x0 [ 416.161886][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.169259][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.179267][ T10] hid-retrode 0003:0403:97C1.0006: unknown main item tag 0x0 [ 416.196037][ T10] hid-retrode 0003:0403:97C1.0006: unknown main item tag 0x0 [ 416.212653][ T5762] qmi_wwan 3-1:3.153: skipping garbage [ 416.218643][ T10] hid-retrode 0003:0403:97C1.0006: unknown main item tag 0x0 [ 416.226906][ T5762] qmi_wwan 3-1:3.153: probe with driver qmi_wwan failed with error -22 [ 416.235466][ T10] hid-retrode 0003:0403:97C1.0006: unknown main item tag 0x0 [ 416.252083][ T10] hid-retrode 0003:0403:97C1.0006: unknown main item tag 0x0 [ 416.261380][ T5762] usb 3-1: USB disconnect, device number 16 [ 416.302442][ T10] hid-retrode 0003:0403:97C1.0006: unknown main item tag 0x0 [ 416.329972][ T10] hid-retrode 0003:0403:97C1.0006: item fetching failed at offset 46/47 [ 416.341874][ T10] hid-retrode 0003:0403:97C1.0006: probe with driver hid-retrode failed with error -22 [ 416.366782][ T10] usb 1-1: USB disconnect, device number 17 [ 416.448172][ T6870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.514648][ T6870] veth0_vlan: entered promiscuous mode [ 416.543405][ T6870] veth1_vlan: entered promiscuous mode [ 416.600429][ T6870] veth0_macvtap: entered promiscuous mode [ 416.618413][ T6870] veth1_macvtap: entered promiscuous mode [ 416.662658][ T6870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.671242][ T7030] netlink: 20 bytes leftover after parsing attributes in process `syz.2.307'. [ 416.677781][ T6870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.716840][ T7030] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 416.731640][ T7030] bond4 (unregistering): Released all slaves [ 416.737678][ T5672] Bluetooth: hci2: command tx timeout [ 416.768262][ T35] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.777638][ T35] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.791190][ T35] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.808928][ T35] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.011074][ T5754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.033914][ T5754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.080277][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.090232][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.114037][ T7038] netlink: 'syz.0.310': attribute type 1 has an invalid length. [ 417.160896][ T7038] 8021q: adding VLAN 0 to HW filter on device bond2 [ 417.238412][ T5762] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 417.299895][ T7043] syzkaller0: entered promiscuous mode [ 417.305613][ T7043] syzkaller0: entered allmulticast mode [ 417.850412][ T7043] netlink: 28 bytes leftover after parsing attributes in process `syz.5.284'. [ 418.268617][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 418.407253][ T10] usb 2-1: device descriptor read/64, error -71 [ 418.667602][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 418.828191][ T10] usb 2-1: device descriptor read/64, error -71 [ 418.969179][ T10] usb usb2-port1: attempt power cycle [ 419.014124][ T7078] netlink: 32 bytes leftover after parsing attributes in process `syz.5.318'. [ 419.337297][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 419.368082][ T10] usb 2-1: device descriptor read/8, error -71 [ 419.459792][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 419.619034][ T24] usb 6-1: device descriptor read/64, error -71 [ 419.637111][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 419.688929][ T10] usb 2-1: device descriptor read/8, error -71 [ 419.817445][ T10] usb usb2-port1: unable to enumerate USB device [ 419.868284][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 420.023699][ T24] usb 6-1: device descriptor read/64, error -71 [ 420.137499][ T24] usb usb6-port1: attempt power cycle [ 420.162758][ T7085] netlink: 'syz.0.321': attribute type 1 has an invalid length. [ 420.222003][ T7085] 8021q: adding VLAN 0 to HW filter on device bond3 [ 420.509144][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 420.537910][ T24] usb 6-1: device descriptor read/8, error -71 [ 420.797488][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 420.828183][ T24] usb 6-1: device descriptor read/8, error -71 [ 420.947602][ T24] usb usb6-port1: unable to enumerate USB device [ 421.300041][ T7136] netlink: 'syz.0.335': attribute type 1 has an invalid length. [ 421.401775][ T7136] 8021q: adding VLAN 0 to HW filter on device bond4 [ 421.407296][ T5762] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 421.511971][ T7139] bond4: (slave syz_tun): Enslaving as an active interface with an up link [ 423.287279][ T5666] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 423.424897][ T7189] netlink: 'syz.5.348': attribute type 1 has an invalid length. [ 423.452040][ T5666] usb 1-1: not running at top speed; connect to a high speed hub [ 423.471824][ T5666] usb 1-1: language id specifier not provided by device, defaulting to English [ 423.502923][ T5666] usb 1-1: New USB device found, idVendor=04b4, idProduct=9320, bcdDevice= 0.40 [ 423.523738][ T5666] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.549305][ T5666] usb 1-1: Product: syz [ 423.556946][ T5666] usb 1-1: Manufacturer: syz [ 423.563592][ T5666] usb 1-1: SerialNumber: syz [ 423.737942][ T5746] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 423.907400][ T5746] usb 4-1: Using ep0 maxpacket: 32 [ 423.920314][ T5746] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 423.942046][ T5746] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 423.959341][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 423.975357][ T5746] usb 4-1: Product: syz [ 423.984909][ T5746] usb 4-1: Manufacturer: syz [ 423.990309][ T42] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 424.006383][ T5746] usb 4-1: SerialNumber: syz [ 424.029543][ T5746] usb 4-1: config 0 descriptor?? [ 424.035880][ T7191] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 424.053513][ T5746] hub 4-1:0.0: bad descriptor, ignoring hub [ 424.065826][ T5746] hub 4-1:0.0: probe with driver hub failed with error -5 [ 424.137175][ T42] usb 6-1: device descriptor read/64, error -71 [ 424.377414][ T5790] usb 4-1: USB disconnect, device number 27 [ 424.397227][ T42] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 424.549663][ T42] usb 6-1: device descriptor read/64, error -71 [ 424.667481][ T42] usb usb6-port1: attempt power cycle [ 424.757216][ T5762] usb 3-1: device descriptor read/64, error -71 [ 425.007696][ T5762] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 425.018705][ T42] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 425.059237][ T42] usb 6-1: device descriptor read/8, error -71 [ 425.127714][ T7211] binder: 7209:7211 ioctl c0306201 2000000004c0 returned -14 [ 425.168392][ T5746] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 425.177161][ T5762] usb 3-1: Using ep0 maxpacket: 16 [ 425.196012][ T5762] usb 3-1: config 1 has an invalid interface number: 19 but max is 0 [ 425.204353][ T5762] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.215353][ T5762] usb 3-1: config 1 has no interface number 0 [ 425.225315][ T5762] usb 3-1: config 1 interface 19 altsetting 2 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 425.237547][ T5762] usb 3-1: config 1 interface 19 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 425.254278][ T5762] usb 3-1: config 1 interface 19 has no altsetting 0 [ 425.268844][ T5762] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 425.278568][ T5762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.287367][ T5762] usb 3-1: Product: syz [ 425.291961][ T5762] usb 3-1: Manufacturer: syz [ 425.296688][ T5762] usb 3-1: SerialNumber: syz [ 425.317273][ T42] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 425.344067][ T5762] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 425.359517][ T5746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.372024][ T5746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.396627][ T42] usb 6-1: device descriptor read/8, error -71 [ 425.409023][ T5746] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 425.420441][ T5746] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.449692][ T5746] usb 4-1: config 0 descriptor?? [ 425.516672][ T5762] usb 3-1: USB disconnect, device number 19 [ 425.524580][ T5701] usb 3-1: Failed to submit usb control message: -71 [ 425.534496][ T42] usb usb6-port1: unable to enumerate USB device [ 425.555151][ T5701] usb 3-1: unable to send the bmi data to the device: -71 [ 425.564268][ T5701] usb 3-1: unable to get target info from device [ 425.570953][ T5701] usb 3-1: could not get target info (-71) [ 425.577340][ T5701] usb 3-1: could not probe fw (-71) [ 425.869673][ T5746] hid_parser_main: 28 callbacks suppressed [ 425.869699][ T5746] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 425.886463][ T5746] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 425.898614][ T5746] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 425.923833][ T5746] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 425.946264][ T5746] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 425.958204][ T5746] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 425.965157][ T5746] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 425.965253][ T5666] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 425.993195][ T5666] usb 1-1: MIDIStreaming interface descriptor not found [ 426.043690][ T5746] pyra 0003:1E7D:2CF6.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 426.266491][ T5666] usb 1-1: USB disconnect, device number 18 [ 426.292280][ T5746] pyra 0003:1E7D:2CF6.0007: couldn't init struct pyra_device [ 426.322024][ T5746] pyra 0003:1E7D:2CF6.0007: couldn't install mouse [ 426.443846][ T5746] pyra 0003:1E7D:2CF6.0007: probe with driver pyra failed with error -71 [ 426.448795][ T7227] udevd[7227]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 426.510351][ T5746] usb 4-1: USB disconnect, device number 28 [ 426.643491][ T7234] netlink: 'syz.1.360': attribute type 1 has an invalid length. [ 426.743718][ T7234] 8021q: adding VLAN 0 to HW filter on device bond4 [ 426.776362][ T7237] bond4: (slave syz_tun): Enslaving as a backup interface with an up link [ 427.147100][ T5762] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 427.688794][ T7262] FAULT_INJECTION: forcing a failure. [ 427.688794][ T7262] name failslab, interval 1, probability 0, space 0, times 0 [ 427.769726][ T7262] CPU: 0 UID: 0 PID: 7262 Comm: syz.1.364 Not tainted syzkaller #0 PREEMPT(full) [ 427.769756][ T7262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 427.769767][ T7262] Call Trace: [ 427.769775][ T7262] [ 427.769783][ T7262] dump_stack_lvl+0xe8/0x150 [ 427.769820][ T7262] should_fail_ex+0x40c/0x560 [ 427.769852][ T7262] should_failslab+0xa8/0x100 [ 427.769882][ T7262] __kmalloc_noprof+0xfe/0x720 [ 427.769904][ T7262] ? rcu_is_watching+0x15/0xb0 [ 427.769931][ T7262] ? tomoyo_realpath_from_path+0xef/0x640 [ 427.769959][ T7262] ? tomoyo_realpath_from_path+0xef/0x640 [ 427.769987][ T7262] tomoyo_realpath_from_path+0xef/0x640 [ 427.770019][ T7262] ? tomoyo_path_number_perm+0x219/0x5f0 [ 427.770049][ T7262] tomoyo_path_number_perm+0x246/0x5f0 [ 427.770080][ T7262] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 427.770106][ T7262] ? __lock_acquire+0x683/0x2cf0 [ 427.770148][ T7262] ? hook_file_ioctl+0x1f0/0x5f0 [ 427.770199][ T7262] ? __fget_files+0x2a/0x420 [ 427.770229][ T7262] ? __fget_files+0x2a/0x420 [ 427.770252][ T7262] ? __fget_files+0x3a2/0x420 [ 427.770274][ T7262] ? __fget_files+0x2a/0x420 [ 427.770304][ T7262] security_file_ioctl+0xc3/0x2a0 [ 427.770336][ T7262] __se_sys_ioctl+0x47/0x170 [ 427.770355][ T7262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.770375][ T7262] do_syscall_64+0x174/0x580 [ 427.770406][ T7262] ? trace_irq_disable+0x3b/0x140 [ 427.770431][ T7262] ? clear_bhb_loop+0x40/0x90 [ 427.770453][ T7262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.770473][ T7262] RIP: 0033:0x7f17dad9de59 [ 427.770492][ T7262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.770509][ T7262] RSP: 002b:00007f17dbd03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 427.770531][ T7262] RAX: ffffffffffffffda RBX: 00007f17db026090 RCX: 00007f17dad9de59 [ 427.770545][ T7262] RDX: 00002000000004c0 RSI: 000000004008744b RDI: 0000000000000003 [ 427.770558][ T7262] RBP: 00007f17dbd03090 R08: 0000000000000000 R09: 0000000000000000 [ 427.770571][ T7262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.770582][ T7262] R13: 00007f17db026128 R14: 00007f17db026090 R15: 00007f17db14fa48 [ 427.770616][ T7262] [ 427.777389][ T7262] ERROR: Out of memory at tomoyo_realpath_from_path. [ 428.786547][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.365'. [ 428.936358][ T7277] netlink: 16 bytes leftover after parsing attributes in process `syz.3.366'. [ 429.001657][ T7275] kvm: pic: non byte write [ 429.758522][ T7297] vlan2: entered promiscuous mode [ 429.765734][ T7297] bridge0: entered promiscuous mode [ 429.888469][ T7292] kvm: pic: non byte write [ 429.924742][ T7297] loop5: detected capacity change from 0 to 7 [ 429.931248][ T7305] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 429.938103][ T7305] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 429.997738][ T7297] Dev loop5: unable to read RDB block 7 [ 430.031480][ T7305] vhci_hcd vhci_hcd.0: Device attached [ 430.049896][ T7297] loop5: unable to read partition table [ 430.089833][ T7297] loop5: partition table beyond EOD, truncated [ 430.159237][ T7306] vhci_hcd: connection closed [ 430.164265][ T6294] vhci_hcd vhci_hcd.2: stop threads [ 430.193707][ T7297] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 430.203279][ T5746] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 430.234396][ T6294] vhci_hcd vhci_hcd.2: release socket [ 430.268409][ T6294] vhci_hcd vhci_hcd.2: disconnect device [ 430.277223][ T42] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 430.302520][ T42] usb 37-1: enqueue for inactive port 0 [ 430.363233][ T7316] mmap: syz.5.371 (7316) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 430.399573][ T42] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 430.475659][ T7317] sctp: [Deprecated]: syz.5.371 (pid 7317) Use of int in maxseg socket option. [ 430.475659][ T7317] Use struct sctp_assoc_value instead [ 430.867442][ T5746] usb 3-1: device descriptor read/64, error -71 [ 430.949236][ T7328] netlink: 'syz.0.373': attribute type 1 has an invalid length. [ 431.128409][ T5746] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 431.153941][ T7328] 8021q: adding VLAN 0 to HW filter on device bond5 [ 431.221895][ T7332] bond4: (slave syz_tun): Removing an active aggregator [ 431.262551][ T7332] bond4: (slave syz_tun): Releasing backup interface [ 431.299012][ T5746] usb 3-1: Using ep0 maxpacket: 16 [ 431.319402][ T5746] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.350910][ T7332] bond5: (slave syz_tun): Enslaving as a backup interface with an up link [ 431.364322][ T5746] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.402557][ T5746] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 431.445001][ T5746] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 431.500014][ T5746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.541244][ T5746] usb 3-1: config 0 descriptor?? [ 431.763467][ T7343] FAULT_INJECTION: forcing a failure. [ 431.763467][ T7343] name failslab, interval 1, probability 0, space 0, times 0 [ 431.798637][ T7343] CPU: 1 UID: 0 PID: 7343 Comm: syz.0.375 Not tainted syzkaller #0 PREEMPT(full) [ 431.798667][ T7343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 431.798679][ T7343] Call Trace: [ 431.798687][ T7343] [ 431.798695][ T7343] dump_stack_lvl+0xe8/0x150 [ 431.798736][ T7343] should_fail_ex+0x40c/0x560 [ 431.798763][ T7343] should_failslab+0xa8/0x100 [ 431.798793][ T7343] __kmalloc_noprof+0xfe/0x720 [ 431.798819][ T7343] ? tomoyo_encode+0x2ad/0x570 [ 431.798840][ T7343] ? tomoyo_encode+0x2ad/0x570 [ 431.798867][ T7343] tomoyo_encode+0x2ad/0x570 [ 431.798896][ T7343] tomoyo_realpath_from_path+0x5fa/0x640 [ 431.798929][ T7343] ? tomoyo_path_number_perm+0x219/0x5f0 [ 431.798955][ T7343] tomoyo_path_number_perm+0x246/0x5f0 [ 431.798985][ T7343] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 431.799015][ T7343] ? sb_end_write+0xe5/0x190 [ 431.799038][ T7343] ? vfs_write+0x9ce/0xba0 [ 431.799074][ T7343] ? hook_file_ioctl+0x1f0/0x5f0 [ 431.799131][ T7343] ? ksys_write+0x1fc/0x270 [ 431.799164][ T7343] security_file_ioctl+0xc3/0x2a0 [ 431.799193][ T7343] __se_sys_ioctl+0x47/0x170 [ 431.799212][ T7343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.799233][ T7343] do_syscall_64+0x174/0x580 [ 431.799260][ T7343] ? trace_irq_disable+0x3b/0x140 [ 431.799284][ T7343] ? clear_bhb_loop+0x40/0x90 [ 431.799309][ T7343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.799329][ T7343] RIP: 0033:0x7f9f5419de59 [ 431.799348][ T7343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.799364][ T7343] RSP: 002b:00007f9f55093028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.799386][ T7343] RAX: ffffffffffffffda RBX: 00007f9f54425fa0 RCX: 00007f9f5419de59 [ 431.799400][ T7343] RDX: 00002000000004c0 RSI: 000000004008744b RDI: 0000000000000003 [ 431.799413][ T7343] RBP: 00007f9f55093090 R08: 0000000000000000 R09: 0000000000000000 [ 431.799424][ T7343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.799436][ T7343] R13: 00007f9f54426038 R14: 00007f9f54425fa0 R15: 00007f9f5454fa48 [ 431.799468][ T7343] [ 431.799526][ T7343] ERROR: Out of memory at tomoyo_realpath_from_path. [ 432.090970][ T7321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.139026][ T10] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 432.171264][ T7321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.213630][ T7321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.222944][ T7321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.255281][ T5746] usbhid 3-1:0.0: can't add hid device: -71 [ 432.261775][ T5746] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 432.296159][ T5746] usb 3-1: USB disconnect, device number 21 [ 432.357621][ T10] usb 4-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 432.377848][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.393469][ T10] usb 4-1: Product: syz [ 432.399051][ T10] usb 4-1: Manufacturer: syz [ 432.403803][ T10] usb 4-1: SerialNumber: syz [ 432.420515][ T10] usb 4-1: config 0 descriptor?? [ 432.524598][ T7351] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 432.524598][ T7351] program syz.5.377 not setting count and/or reply_len properly [ 432.647423][ T810] usb 4-1: USB disconnect, device number 29 [ 432.773211][ T7364] bridge0: entered promiscuous mode [ 432.812730][ T7364] bridge0: port 3(macvlan2) entered blocking state [ 432.839788][ T7364] bridge0: port 3(macvlan2) entered disabled state [ 432.868098][ T7364] macvlan2: entered allmulticast mode [ 432.889678][ T7364] bridge0: entered allmulticast mode [ 432.931960][ T7364] macvlan2: left allmulticast mode [ 432.944282][ T7364] bridge0: left allmulticast mode [ 432.964356][ T7364] bridge0: left promiscuous mode [ 433.130364][ T810] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 433.308004][ T810] usb 3-1: Using ep0 maxpacket: 32 [ 433.320664][ T810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.353832][ T810] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.405501][ T810] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.427186][ T810] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 433.447223][ T810] usb 3-1: config 0 interface 0 has no altsetting 0 [ 433.447439][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 433.462643][ T810] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 433.487738][ T810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.519386][ T7381] ======================================================= [ 433.519386][ T7381] WARNING: The mand mount option has been deprecated and [ 433.519386][ T7381] and is ignored by this kernel. Remove the mand [ 433.519386][ T7381] option from the mount to silence this warning. [ 433.519386][ T7381] ======================================================= [ 433.561794][ T810] usb 3-1: config 0 descriptor?? [ 433.784860][ T810] hid (null): invalid report_size 55607 [ 433.812726][ T810] corsair-cpro 0003:1B1C:0C10.0008: invalid report_size 55607 [ 433.830541][ T810] corsair-cpro 0003:1B1C:0C10.0008: item 0 2 1 7 parsing failed [ 433.846016][ T810] corsair-cpro 0003:1B1C:0C10.0008: probe with driver corsair-cpro failed with error -22 [ 433.986054][ T5666] usb 3-1: USB disconnect, device number 22 [ 435.172574][ T7396] x_tables: duplicate underflow at hook 2 [ 435.488506][ T5761] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 435.627093][ T5761] usb 4-1: device descriptor read/64, error -71 [ 435.854801][ T7273] syz.1.365 (7273): drop_caches: 1 [ 435.867409][ T5761] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 435.955944][ T7405] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 435.955944][ T7405] program syz.2.389 not setting count and/or reply_len properly [ 436.007358][ T5761] usb 4-1: device descriptor read/64, error -71 [ 436.037094][ T5746] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 436.117626][ T5761] usb usb4-port1: attempt power cycle [ 436.210053][ T5746] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 436.234136][ T5746] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 436.261629][ T5746] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 436.289255][ T5746] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 436.316741][ T5746] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.332318][ T5746] usb 1-1: Product: syz [ 436.336801][ T5746] usb 1-1: Manufacturer: syz [ 436.342398][ T5746] usb 1-1: SerialNumber: syz [ 436.363780][ T5746] usb 1-1: config 0 descriptor?? [ 436.403795][ T7422] input: syz1 as /devices/virtual/input/input21 [ 436.477385][ T5761] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 436.508292][ T5761] usb 4-1: device descriptor read/8, error -71 [ 436.627465][ T5746] usb 1-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress ff [ 436.787222][ T5761] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 436.794265][ T5746] usb 1-1: USB disconnect, device number 19 [ 436.830932][ T5761] usb 4-1: device descriptor read/8, error -71 [ 436.948950][ T5761] usb usb4-port1: unable to enumerate USB device [ 437.477104][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 437.647250][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 437.663765][ T10] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 437.684190][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.710443][ T10] usb 1-1: config 0 descriptor?? [ 437.734523][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 437.953765][ T29] audit: type=1326 audit(1783768083.991:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7440 comm="syz.2.400" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24af59de59 code=0x7ffc0000 [ 437.981356][ T29] audit: type=1326 audit(1783768083.991:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7440 comm="syz.2.400" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24af59de59 code=0x7ffc0000 [ 438.031224][ T29] audit: type=1326 audit(1783768084.021:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7440 comm="syz.2.400" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f24af59de59 code=0x7ffc0000 [ 438.058813][ T29] audit: type=1326 audit(1783768084.021:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7440 comm="syz.2.400" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24af59de59 code=0x7ffc0000 [ 438.085442][ T29] audit: type=1326 audit(1783768084.021:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7440 comm="syz.2.400" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24af59de59 code=0x7ffc0000 [ 438.147093][ T29] audit: type=1326 audit(1783768084.051:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7440 comm="syz.2.400" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f24af59de59 code=0x7ffc0000 [ 438.202735][ T29] audit: type=1326 audit(1783768084.051:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7440 comm="syz.2.400" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24af59de59 code=0x7ffc0000 [ 438.254020][ T29] audit: type=1326 audit(1783768084.051:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7440 comm="syz.2.400" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24af59de59 code=0x7ffc0000 [ 438.355564][ T7450] netlink: 20 bytes leftover after parsing attributes in process `syz.2.403'. [ 438.477603][ T7450] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 438.515376][ T7450] bond4 (unregistering): Released all slaves [ 438.560203][ T7437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.571414][ T7437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.596016][ T10] gspca_sonixj: reg_r err -71 [ 438.612255][ T10] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 438.640693][ T10] usb 1-1: USB disconnect, device number 20 [ 438.759901][ T5761] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 438.949174][ T5746] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 439.118521][ T5746] usb 3-1: Using ep0 maxpacket: 32 [ 439.134965][ T5746] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 439.165462][ T5746] usb 3-1: config 0 has no interface number 0 [ 439.189592][ T5746] usb 3-1: config 0 interface 184 has no altsetting 0 [ 439.212761][ T5746] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 439.239278][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.261712][ T5746] usb 3-1: Product: syz [ 439.273690][ T5746] usb 3-1: Manufacturer: syz [ 439.281502][ T5746] usb 3-1: SerialNumber: syz [ 439.300512][ T5746] usb 3-1: config 0 descriptor?? [ 440.189976][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.203508][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.359652][ T7485] loop4: detected capacity change from 0 to 7 [ 440.395531][ T7485] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 440.416525][ T7485] loop4: partition table partially beyond EOD, truncated [ 440.451115][ T7485] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 440.683316][ T5681] udevd[5681]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 441.881032][ T5746] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 441.950527][ T5746] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 442.060197][ T5746] usb 3-1: USB disconnect, device number 23 [ 442.114398][ T29] audit: type=1326 audit(1783768088.151:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7502 comm="syz.5.411" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8719de59 code=0x7ffc0000 [ 442.196248][ T29] audit: type=1326 audit(1783768088.151:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7502 comm="syz.5.411" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8719de59 code=0x7ffc0000 [ 442.260730][ T7516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.415'. [ 442.409114][ T7516] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 442.459348][ T7516] bond4 (unregistering): Released all slaves [ 442.507287][ T5666] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 442.561573][ T7521] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 442.561573][ T7521] program syz.5.416 not setting count and/or reply_len properly [ 442.688866][ T5666] usb 2-1: Using ep0 maxpacket: 16 [ 442.730707][ T5666] usb 2-1: unable to get BOS descriptor or descriptor too short [ 442.763752][ T5666] usb 2-1: config 7 has an invalid interface number: 139 but max is 0 [ 442.789675][ T5666] usb 2-1: config 7 has no interface number 0 [ 442.804571][ T5666] usb 2-1: config 7 interface 139 has no altsetting 0 [ 442.829532][ T5666] usb 2-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=4f.3c [ 442.844866][ T5666] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.865141][ T5666] usb 2-1: Product: syz [ 442.874572][ T5666] usb 2-1: Manufacturer: syz [ 442.890995][ T5666] usb 2-1: SerialNumber: syz [ 443.077340][ T5746] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 443.107683][ T42] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 443.291579][ T42] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 443.301962][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.310446][ T42] usb 4-1: Product: syz [ 443.317430][ T42] usb 4-1: Manufacturer: syz [ 443.322662][ T42] usb 4-1: SerialNumber: syz [ 443.764815][ T7529] syz.5.418 (7529): drop_caches: 2 [ 443.774436][ T42] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 443.826211][ T42] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 444.078329][ T42] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 444.110238][ T42] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 444.123730][ T42] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 444.139276][ T42] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 444.351751][ T7542] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 444.363300][ T7542] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 444.706259][ T7546] pimreg: entered allmulticast mode [ 444.746850][ T7546] pimreg: left allmulticast mode [ 444.823725][ T42] usb 4-1: USB disconnect, device number 34 [ 445.283347][ T7550] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 445.283347][ T7550] program syz.3.424 not setting count and/or reply_len properly [ 445.306171][ T5666] mct_u232 2-1:7.139: MCT U232 converter detected [ 445.347963][ T5666] mct_u232 ttyUSB0: expected endpoint missing [ 445.376876][ T5666] usb 2-1: USB disconnect, device number 19 [ 445.402350][ T5666] mct_u232 2-1:7.139: device disconnected [ 445.483867][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 445.483923][ T29] audit: type=1326 audit(1783768091.521:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7556 comm="syz.1.427" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dad9de59 code=0x7ffc0000 [ 445.549702][ T29] audit: type=1326 audit(1783768091.561:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7556 comm="syz.1.427" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dad9de59 code=0x7ffc0000 [ 445.610294][ T29] audit: type=1326 audit(1783768091.581:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7556 comm="syz.1.427" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f17dad9de59 code=0x7ffc0000 [ 445.652203][ T29] audit: type=1326 audit(1783768091.581:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7556 comm="syz.1.427" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dad9de59 code=0x7ffc0000 [ 445.710817][ T29] audit: type=1326 audit(1783768091.591:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7556 comm="syz.1.427" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f17dad9de59 code=0x7ffc0000 [ 445.771868][ T7565] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 445.771868][ T7565] program syz.0.428 not setting count and/or reply_len properly [ 445.772661][ T29] audit: type=1326 audit(1783768091.591:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7556 comm="syz.1.427" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dad9de59 code=0x7ffc0000 [ 445.823755][ T29] audit: type=1326 audit(1783768091.591:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7556 comm="syz.1.427" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dad9de59 code=0x7ffc0000 [ 445.924111][ T7569] batman_adv: batadv0: Adding interface: dummy0 [ 445.924134][ T7569] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.924169][ T7569] batman_adv: batadv0: Interface activated: dummy0 [ 446.061643][ T7574] netlink: 36 bytes leftover after parsing attributes in process `syz.5.432'. [ 446.213356][ T7580] openvswitch: netlink: Missing key (keys=40, expected=100) [ 446.773923][ T7593] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 447.677380][ T5666] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 447.851164][ T5666] usb 6-1: unable to get BOS descriptor or descriptor too short [ 447.865259][ T5666] usb 6-1: not running at top speed; connect to a high speed hub [ 447.883862][ T5666] usb 6-1: config 5 has an invalid interface number: 246 but max is 0 [ 447.895585][ T5666] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 447.919798][ T5666] usb 6-1: config 5 has no interface number 0 [ 447.931865][ T5666] usb 6-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 25309, setting to 64 [ 447.943675][ T5666] usb 6-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 447.958316][ T5666] usb 6-1: config 5 interface 246 has no altsetting 0 [ 447.969895][ T5666] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 447.979743][ T5666] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.989303][ T5666] usb 6-1: Product: syz [ 447.993677][ T5666] usb 6-1: Manufacturer: syz [ 448.004981][ T5666] usb 6-1: SerialNumber: syz [ 448.016557][ T7613] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 448.024217][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 448.047079][ T5790] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 448.217580][ T5790] usb 3-1: Using ep0 maxpacket: 32 [ 448.225319][ T5790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.237526][ T5790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.249569][ T5790] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 448.265458][ T5790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.285307][ T5790] usb 3-1: config 0 descriptor?? [ 448.296139][ T5790] hub 3-1:0.0: USB hub found [ 448.298319][ T5666] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 448.320111][ T5666] usb 6-1: USB disconnect, device number 13 [ 448.322168][ T7634] usb 6-1: Failed to submit usb control message: -71 [ 448.335740][ T7634] usb 6-1: unable to send the bmi data to the device: -71 [ 448.345090][ T7634] usb 6-1: unable to get target info from device [ 448.352685][ T7634] usb 6-1: could not get target info (-71) [ 448.358863][ T7634] usb 6-1: could not probe fw (-71) [ 448.406494][ T5746] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 448.494304][ T5790] hub 3-1:0.0: 1 port detected [ 448.559481][ T5746] usb 2-1: unable to get BOS descriptor or descriptor too short [ 448.568936][ T5746] usb 2-1: config 114 has an invalid interface number: 20 but max is 0 [ 448.579265][ T5746] usb 2-1: config 114 has no interface number 0 [ 448.586144][ T5746] usb 2-1: config 114 interface 20 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 448.596916][ T5746] usb 2-1: config 114 interface 20 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 448.609135][ T5746] usb 2-1: config 114 interface 20 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 448.619498][ T5746] usb 2-1: config 114 interface 20 has no altsetting 0 [ 448.628939][ T5746] usb 2-1: New USB device found, idVendor=07c0, idProduct=1503, bcdDevice=5c.0f [ 448.638160][ T5746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.646205][ T5746] usb 2-1: Product: syz [ 448.651871][ T5746] usb 2-1: Manufacturer: syz [ 448.656527][ T5746] usb 2-1: SerialNumber: syz [ 448.670598][ T7663] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 448.679932][ T7663] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 448.902200][ T7663] netlink: 'syz.1.450': attribute type 13 has an invalid length. [ 448.904242][ T7670] netlink: 'syz.1.450': attribute type 13 has an invalid length. [ 448.910908][ T29] audit: type=1326 audit(1783768094.941:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7648 comm="syz.2.447" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24af59de59 code=0x7ffc0000 [ 448.930476][ T7670] netlink: 'syz.1.450': attribute type 17 has an invalid length. [ 448.955489][ T7663] netlink: 'syz.1.450': attribute type 17 has an invalid length. [ 448.963928][ T29] audit: type=1326 audit(1783768094.941:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7648 comm="syz.2.447" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24af59de59 code=0x7ffc0000 [ 448.989800][ T29] audit: type=1326 audit(1783768094.961:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7648 comm="syz.2.447" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f24af59de59 code=0x7ffc0000 [ 449.600209][ T5746] iowarrior 2-1:114.20: no interrupt-in endpoint found [ 449.653219][ T5746] usb 2-1: USB disconnect, device number 20 [ 449.729662][ T5790] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 449.748806][ T5790] usb 3-1: USB disconnect, device number 25 [ 449.758475][ T7634] usb 3-1: Failed to suspend device, error -71 [ 450.513374][ T7687] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 450.717138][ T5790] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 450.887462][ T5762] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 450.908507][ T5790] usb 2-1: unable to get BOS descriptor or descriptor too short [ 450.933018][ T5790] usb 2-1: not running at top speed; connect to a high speed hub [ 450.943705][ T5790] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.954440][ T5790] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 450.970720][ T5790] usb 2-1: string descriptor 0 read error: -22 [ 450.978765][ T5790] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 450.988313][ T5790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.021948][ T5790] usb 2-1: 0:2 : does not exist [ 451.064331][ T5762] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.070552][ T7707] xt_hashlimit: size too large, truncated to 1048576 [ 451.078102][ T5762] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 451.091345][ T5762] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 451.109082][ T5762] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 451.118783][ T5762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.127598][ T5762] usb 3-1: Product: syz [ 451.137475][ T5762] usb 3-1: Manufacturer: syz [ 451.147074][ T5762] usb 3-1: SerialNumber: syz [ 451.166019][ T5762] cdc_mbim 3-1:1.0: skipping garbage [ 451.178215][ T5762] usb 3-1: selecting invalid altsetting 1 [ 451.367241][ T10] usb 4-1: device descriptor read/64, error -71 [ 451.607135][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 451.618583][ T7693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.628756][ T7693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.768908][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 451.778009][ T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 451.789514][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 451.800162][ T5762] cdc_mbim 3-1:1.0: SET_CRC_MODE failed [ 451.806042][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 451.817669][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 451.829068][ T5762] cdc_mbim 3-1:1.0: SET_NTB_FORMAT failed [ 451.837326][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 451.847294][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 451.858533][ T5762] usb 3-1: selecting invalid altsetting 1 [ 451.876534][ T10] usb 4-1: Product: syz [ 451.880539][ T5790] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 451.881035][ T5762] cdc_mbim 3-1:1.0: bind() failure [ 451.893776][ T10] usb 4-1: Manufacturer: syz [ 451.913431][ T5762] usb 3-1: USB disconnect, device number 26 [ 451.913875][ T5790] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 451.953451][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 451.963181][ T5790] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 451.970598][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 451.983191][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 452.003368][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 452.085113][ T5790] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 452.134565][ T5790] usb 2-1: USB disconnect, device number 21 [ 452.204388][ T5762] usb 4-1: USB disconnect, device number 36 [ 452.360823][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'. [ 452.591524][ T7725] syz.1.465 (7725): drop_caches: 1 [ 452.664799][ T7725] syz.1.465 (7725): drop_caches: 1 [ 452.747138][ T5762] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 452.917092][ T5762] usb 3-1: Using ep0 maxpacket: 32 [ 452.925258][ T5762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.937800][ T5762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.948386][ T5762] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 452.958582][ T5762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.973379][ T5762] usb 3-1: config 0 descriptor?? [ 452.978228][ T7736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 453.000509][ T5762] hub 3-1:0.0: USB hub found [ 453.027150][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 453.157086][ T10] usb 4-1: device descriptor read/64, error -71 [ 453.193128][ T5762] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 453.206207][ T5762] usbhid 3-1:0.0: can't add hid device: -71 [ 453.212494][ T5762] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 453.238199][ T5762] usb 3-1: USB disconnect, device number 27 [ 453.409424][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 453.557119][ T10] usb 4-1: device descriptor read/64, error -71 [ 453.668951][ T10] usb usb4-port1: attempt power cycle [ 453.910873][ T7743] netlink: 20 bytes leftover after parsing attributes in process `syz.1.472'. [ 453.961521][ T7743] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 453.976434][ T7743] bond5 (unregistering): Released all slaves [ 454.027582][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 454.047868][ T10] usb 4-1: device descriptor read/8, error -71 [ 454.157249][ T5762] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 454.307153][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 454.332520][ T10] usb 4-1: device descriptor read/8, error -71 [ 454.407468][ T5790] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 454.457746][ T10] usb usb4-port1: unable to enumerate USB device [ 454.567059][ T5790] usb 2-1: Using ep0 maxpacket: 32 [ 454.574207][ T5790] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.585041][ T5790] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.597519][ T5790] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.607712][ T5790] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 454.622419][ T5790] usb 2-1: config 0 interface 0 has no altsetting 0 [ 454.631802][ T5790] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 454.641404][ T5790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.652373][ T5790] usb 2-1: config 0 descriptor?? [ 454.657555][ T810] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 454.807059][ T810] usb 6-1: Using ep0 maxpacket: 32 [ 454.814346][ T810] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 454.826072][ T810] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 454.835932][ T810] usb 6-1: config 0 interface 0 has no altsetting 0 [ 454.845417][ T810] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 454.854993][ T810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.863438][ T810] usb 6-1: Product: syz [ 454.869447][ T810] usb 6-1: Manufacturer: syz [ 454.874984][ T810] usb 6-1: SerialNumber: syz [ 454.884217][ T810] usb 6-1: config 0 descriptor?? [ 455.090383][ T5790] corsair-cpro 0003:1B1C:0C10.0009: unknown main item tag 0x0 [ 455.126394][ T5790] corsair-cpro 0003:1B1C:0C10.0009: unknown main item tag 0x0 [ 455.189972][ T5790] corsair-cpro 0003:1B1C:0C10.0009: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 455.323317][ T5790] corsair-cpro 0003:1B1C:0C10.0009: probe with driver corsair-cpro failed with error -38 [ 455.367750][ T5790] usb 2-1: USB disconnect, device number 22 [ 455.390573][ T810] gs_usb 6-1:0.0: Couldn't send data format (err=-71) [ 455.403756][ T810] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 455.431634][ T810] usb 6-1: USB disconnect, device number 14 [ 455.467105][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 455.627366][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 455.638848][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 455.666826][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 455.685699][ T7764] fido_id[7764]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 455.697036][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 455.718571][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 455.747046][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.763091][ T24] usb 1-1: config 0 descriptor?? [ 455.778129][ T7762] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 455.807346][ T24] hub 1-1:0.0: USB hub found [ 456.127237][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 456.127257][ T29] audit: type=1326 audit(1783768102.161:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.5.479" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d8719de59 code=0x0 [ 456.217118][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 456.221387][ T24] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 456.258853][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 456.265870][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 456.290956][ T24] usb 1-1: USB disconnect, device number 21 [ 456.379257][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.391126][ T10] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 456.401330][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.413671][ T10] usb 4-1: config 0 descriptor?? [ 456.832196][ T10] hid-led 0003:27B8:01ED.000A: probe with driver hid-led failed with error -32 [ 456.935067][ T24] usb 4-1: USB disconnect, device number 41 [ 457.069713][ T7791] netlink: 20 bytes leftover after parsing attributes in process `syz.3.484'. [ 457.117096][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 457.179121][ T7791] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 457.192555][ T7791] bond1 (unregistering): Released all slaves [ 457.290665][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 457.306839][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.329088][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 457.356294][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 457.369710][ T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40 [ 457.382491][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.391914][ T10] usb 1-1: Product: syz [ 457.396278][ T10] usb 1-1: Manufacturer: syz [ 457.403596][ T10] usb 1-1: SerialNumber: syz [ 457.535437][ T7803] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 457.535437][ T7803] program syz.3.487 not setting count and/or reply_len properly [ 457.569900][ T7806] netlink: 'syz.5.488': attribute type 12 has an invalid length. [ 457.636116][ T7809] netlink: 'syz.0.481': attribute type 1 has an invalid length. [ 457.754487][ T7809] bond6: entered promiscuous mode [ 457.777919][ T7809] 8021q: adding VLAN 0 to HW filter on device bond6 [ 457.826294][ T7816] 8021q: adding VLAN 0 to HW filter on device bond6 [ 457.837888][ T7816] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 457.849714][ T7816] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 457.866810][ T7816] bond6: (slave ip6gre2): making interface the new active one [ 457.877227][ T7816] ip6gre2: entered promiscuous mode [ 457.887706][ T24] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 457.895755][ T7816] bond6: (slave ip6gre2): Enslaving as an active interface with an up link [ 457.935218][ T10] usb 1-1: 0:2 : does not exist [ 457.963522][ T10] usb 1-1: unit 4 not found! [ 458.116373][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 458.140407][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.142690][ T10] usb 1-1: USB disconnect, device number 22 [ 458.170783][ T24] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 458.205520][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.224512][ T24] usb 2-1: config 0 descriptor?? [ 458.268713][ T29] audit: type=1800 audit(1783768104.311:326): pid=7829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.495" name="bus" dev="tmpfs" ino=518 res=0 errno=0 [ 458.316254][ T5671] udevd[5671]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 458.429247][ T810] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 458.655490][ T24] kye 0003:0458:5016.000B: control desc unexpectedly large [ 458.686514][ T24] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.000B/input/input22 [ 458.807068][ T24] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.000B/input/input23 [ 458.837788][ T10] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 458.931049][ T7844] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 458.931049][ T7844] program syz.0.500 not setting count and/or reply_len properly [ 458.960131][ T24] kye 0003:0458:5016.000B: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 459.010431][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 459.028044][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 459.050232][ T10] usb 6-1: config 140 has an invalid interface number: 182 but max is 1 [ 459.067184][ T10] usb 6-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 459.083754][ T10] usb 6-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 459.098270][ T10] usb 6-1: config 140 has no interface number 0 [ 459.108730][ T10] usb 6-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 459.127227][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.128250][ T7847] syzkaller0: entered promiscuous mode [ 459.145484][ T10] usb 6-1: Product: Ȧ覚阀 [ 459.146162][ T7847] syzkaller0: entered allmulticast mode [ 459.151280][ T10] usb 6-1: Manufacturer: А [ 459.161778][ T10] usb 6-1: SerialNumber: с [ 459.181718][ T7847] tipc: Enabled bearer , priority 0 [ 459.222643][ T7847] tipc: Resetting bearer [ 459.250551][ T7847] tipc: Disabling bearer [ 459.350411][ T7850] set match dimension is over the limit! [ 459.607111][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 459.761229][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 459.770670][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.781615][ T24] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 459.793762][ T24] usb 1-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 459.803363][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.812608][ T24] usb 1-1: Product: syz [ 459.816847][ T24] usb 1-1: Manufacturer: syz [ 459.823867][ C1] kye 0003:0458:5016.000B: usb_submit_urb(ctrl) failed: -1 [ 459.839839][ T24] usb 1-1: SerialNumber: syz [ 460.022324][ T10] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 460.039233][ T5762] usb 6-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 460.048643][ T10] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 460.057698][ T5762] usb 6-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 460.072091][ T10] usb 6-1: USB disconnect, device number 15 [ 460.084090][ T24] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 460.104066][ T24] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 460.109586][ T5762] ------------[ cut here ]------------ [ 460.117504][ T5762] !atomic_read(&kn->count) [ 460.117524][ T5762] WARNING: fs/kernfs/dir.c:560 at kernfs_get+0x72/0x90, CPU#0: kworker/0:6/5762 [ 460.131727][ T5762] Modules linked in: [ 460.137106][ T5762] CPU: 0 UID: 0 PID: 5762 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 460.147995][ T5762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 460.158810][ T5762] Workqueue: events request_firmware_work_func [ 460.167633][ T5762] RIP: 0010:kernfs_get+0x72/0x90 [ 460.174203][ T5762] Code: e8 b3 8b 52 ff 48 89 df be 04 00 00 00 e8 f6 1a c0 ff f0 ff 03 eb 05 e8 9c 8b 52 ff 5b 5d c3 cc cc cc cc cc e8 8f 8b 52 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 f5 [ 460.195126][ T5762] RSP: 0000:ffffc90004ccf6b0 EFLAGS: 00010293 [ 460.201612][ T5762] RAX: ffffffff8273e6b1 RBX: ffff88803574ad20 RCX: ffff88802d199f00 [ 460.209888][ T5762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 460.218016][ T5762] RBP: 0000000000000000 R08: ffff88803574ad23 R09: 1ffff11006ae95a4 [ 460.226124][ T5762] R10: dffffc0000000000 R11: ffffed1006ae95a5 R12: 1ffff1100eafe855 [ 460.235429][ T5762] R13: 1ffff1100eafe856 R14: ffff8880757f42b0 R15: ffff8880757f42a8 [ 460.244127][ T5762] FS: 0000000000000000(0000) GS:ffff888124f58000(0000) knlGS:0000000000000000 [ 460.253348][ T5762] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 460.260807][ T5762] CR2: 00007f9f541eb540 CR3: 000000007e1b8000 CR4: 00000000003526f0 [ 460.269422][ T5762] Call Trace: [ 460.272761][ T5762] [ 460.275732][ T5762] kobject_add_internal+0x6b9/0xcd0 [ 460.281308][ T5762] kobject_add+0x163/0x240 [ 460.285970][ T5762] ? rcu_is_watching+0x15/0xb0 [ 460.291554][ T5762] ? __pfx_kobject_add+0x10/0x10 [ 460.296630][ T5762] ? __kmalloc_cache_noprof+0x150/0x660 [ 460.302634][ T5762] ? kobject_init+0x7f/0x1e0 [ 460.307848][ T5762] get_device_parent+0x316/0x3a0 [ 460.313106][ T5762] device_add+0x2d4/0xb80 [ 460.317657][ T5762] firmware_fallback_sysfs+0x2dd/0xa40 [ 460.323365][ T5762] ? kfree+0x1c5/0x640 [ 460.327529][ T5762] _request_firmware+0x1049/0x1780 [ 460.333012][ T5762] ? __pfx__request_firmware+0x10/0x10 [ 460.338776][ T5762] ? process_scheduled_works+0xa20/0x14e0 [ 460.344741][ T5762] ? process_scheduled_works+0xa20/0x14e0 [ 460.350939][ T5762] request_firmware_work_func+0xac/0x2d0 [ 460.356651][ T5762] ? rcu_is_watching+0x15/0xb0 [ 460.361966][ T5762] ? process_scheduled_works+0xa20/0x14e0 [ 460.367986][ T5762] process_scheduled_works+0xa8e/0x14e0 [ 460.373720][ T5762] ? __pfx_process_scheduled_works+0x10/0x10 [ 460.380825][ T5762] ? assign_work+0x3cf/0x5d0 [ 460.385574][ T5762] worker_thread+0xa47/0xfb0 [ 460.390604][ T5762] ? __kthread_parkme+0x71/0x1f0 [ 460.395612][ T5762] kthread+0x388/0x470 [ 460.399914][ T5762] ? __pfx_worker_thread+0x10/0x10 [ 460.405190][ T5762] ? __pfx_kthread+0x10/0x10 [ 460.410202][ T5762] ret_from_fork+0x514/0xb70 [ 460.414936][ T5762] ? __pfx_ret_from_fork+0x10/0x10 [ 460.420435][ T5762] ? __switch_to+0xc89/0x1420 [ 460.425313][ T5762] ? __pfx_kthread+0x10/0x10 [ 460.430209][ T5762] ret_from_fork_asm+0x1a/0x30 [ 460.435136][ T5762] [ 460.438254][ T5762] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 460.445583][ T5762] CPU: 0 UID: 0 PID: 5762 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 460.455024][ T5762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 460.465207][ T5762] Workqueue: events request_firmware_work_func [ 460.471426][ T5762] Call Trace: [ 460.474727][ T5762] [ 460.477808][ T5762] vpanic+0x56c/0xa60 [ 460.481967][ T5762] ? __pfx__printk+0x10/0x10 [ 460.486786][ T5762] ? __pfx_vpanic+0x10/0x10 [ 460.491324][ T5762] ? is_bpf_text_address+0x292/0x2b0 [ 460.496690][ T5762] ? is_bpf_text_address+0x26/0x2b0 [ 460.502005][ T5762] panic+0xc5/0xd0 [ 460.505851][ T5762] ? __pfx_panic+0x10/0x10 [ 460.510296][ T5762] ? ret_from_fork_asm+0x1a/0x30 [ 460.515253][ T5762] __warn+0x315/0x4c0 [ 460.519264][ T5762] ? kernfs_get+0x72/0x90 [ 460.523997][ T5762] ? kernfs_get+0x72/0x90 [ 460.528570][ T5762] __report_bug+0x331/0x530 [ 460.533250][ T5762] ? kernfs_get+0x72/0x90 [ 460.537598][ T5762] ? __pfx___report_bug+0x10/0x10 [ 460.542637][ T5762] ? kernfs_add_one+0x480/0x5e0 [ 460.547526][ T5762] ? up_write+0x19f/0x4a0 [ 460.551990][ T5762] ? kernfs_add_one+0x480/0x5e0 [ 460.556932][ T5762] ? kernfs_get+0x72/0x90 [ 460.561743][ T5762] report_bug+0x16a/0x220 [ 460.566401][ T5762] ? kernfs_get+0x72/0x90 [ 460.570775][ T5762] ? kernfs_get+0x74/0x90 [ 460.575211][ T5762] handle_bug+0x9c/0x200 [ 460.579510][ T5762] exc_invalid_op+0x1a/0x50 [ 460.584494][ T5762] asm_exc_invalid_op+0x1a/0x20 [ 460.589378][ T5762] RIP: 0010:kernfs_get+0x72/0x90 [ 460.594366][ T5762] Code: e8 b3 8b 52 ff 48 89 df be 04 00 00 00 e8 f6 1a c0 ff f0 ff 03 eb 05 e8 9c 8b 52 ff 5b 5d c3 cc cc cc cc cc e8 8f 8b 52 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 f5 [ 460.615051][ T5762] RSP: 0000:ffffc90004ccf6b0 EFLAGS: 00010293 [ 460.621344][ T5762] RAX: ffffffff8273e6b1 RBX: ffff88803574ad20 RCX: ffff88802d199f00 [ 460.629522][ T5762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 460.637524][ T5762] RBP: 0000000000000000 R08: ffff88803574ad23 R09: 1ffff11006ae95a4 [ 460.645621][ T5762] R10: dffffc0000000000 R11: ffffed1006ae95a5 R12: 1ffff1100eafe855 [ 460.653873][ T5762] R13: 1ffff1100eafe856 R14: ffff8880757f42b0 R15: ffff8880757f42a8 [ 460.661985][ T5762] ? kernfs_get+0x71/0x90 [ 460.666552][ T5762] kobject_add_internal+0x6b9/0xcd0 [ 460.672048][ T5762] kobject_add+0x163/0x240 [ 460.676592][ T5762] ? rcu_is_watching+0x15/0xb0 [ 460.681386][ T5762] ? __pfx_kobject_add+0x10/0x10 [ 460.686481][ T5762] ? __kmalloc_cache_noprof+0x150/0x660 [ 460.692069][ T5762] ? kobject_init+0x7f/0x1e0 [ 460.696763][ T5762] get_device_parent+0x316/0x3a0 [ 460.701860][ T5762] device_add+0x2d4/0xb80 [ 460.706302][ T5762] firmware_fallback_sysfs+0x2dd/0xa40 [ 460.711977][ T5762] ? kfree+0x1c5/0x640 [ 460.716102][ T5762] _request_firmware+0x1049/0x1780 [ 460.721261][ T5762] ? __pfx__request_firmware+0x10/0x10 [ 460.726924][ T5762] ? process_scheduled_works+0xa20/0x14e0 [ 460.732753][ T5762] ? process_scheduled_works+0xa20/0x14e0 [ 460.738498][ T5762] request_firmware_work_func+0xac/0x2d0 [ 460.744249][ T5762] ? rcu_is_watching+0x15/0xb0 [ 460.749041][ T5762] ? process_scheduled_works+0xa20/0x14e0 [ 460.754956][ T5762] process_scheduled_works+0xa8e/0x14e0 [ 460.760554][ T5762] ? __pfx_process_scheduled_works+0x10/0x10 [ 460.766649][ T5762] ? assign_work+0x3cf/0x5d0 [ 460.771322][ T5762] worker_thread+0xa47/0xfb0 [ 460.775951][ T5762] ? __kthread_parkme+0x71/0x1f0 [ 460.780924][ T5762] kthread+0x388/0x470 [ 460.785044][ T5762] ? __pfx_worker_thread+0x10/0x10 [ 460.790184][ T5762] ? __pfx_kthread+0x10/0x10 [ 460.794803][ T5762] ret_from_fork+0x514/0xb70 [ 460.799430][ T5762] ? __pfx_ret_from_fork+0x10/0x10 [ 460.804610][ T5762] ? __switch_to+0xc89/0x1420 [ 460.809415][ T5762] ? __pfx_kthread+0x10/0x10 [ 460.814034][ T5762] ret_from_fork_asm+0x1a/0x30 [ 460.819296][ T5762] [ 460.822487][ T5762] Kernel Offset: disabled [ 460.826871][ T5762] Rebooting in 86400 seconds..