last executing test programs: 17m10.691746824s ago: executing program 0 (id=1301): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="0000340bfaa9", 0x0, 0x7, 0x0, 0x8000000, 0x0}) 17m10.613548181s ago: executing program 0 (id=1302): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0xff8d, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730480000ffffff8d00"/77, 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x24044801) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0x1, 0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) writev(r2, &(0x7f0000003140)=[{&(0x7f0000000180)="0500000006c3b78bd03c1e60586ec070b5c8c2e95c1630dfe3af968bb5000000000000f6d0d39c5c5a52d482b2020e8cd69c00265d4fd621f06fe98a86b1d4ce4b75f32cfe0b935d54acddf0fa833e37f7378e", 0x53}, {&(0x7f0000001f40)="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", 0xfae}], 0x2) read(r2, &(0x7f0000000f40)=""/4096, 0x1013) 17m10.463416254s ago: executing program 0 (id=1304): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d080006007c09e8fe", 0x1a}], 0x1}, 0x4080044) (async, rerun: 64) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_vs\x00') (async, rerun: 64) modify_ldt$write(0x1, &(0x7f00000000c0)={0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) fallocate(r2, 0x1, 0x8, 0x7661) (async) r3 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x541b, 0x0) (async, rerun: 64) write$binfmt_script(r2, &(0x7f0000001040)={'#! ', './file0'}, 0xb) (async, rerun: 64) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f00000013c0)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000000)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0xc0000, 0x0) ppoll(&(0x7f0000010140)=[{r5, 0x2046}], 0x1, 0x0, 0x0, 0x0) ptrace$getenv(0x4201, r1, 0x7ff, &(0x7f0000000040)) (async, rerun: 64) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000200)=ANY=[]) (async, rerun: 64) ptrace$setregs(0xd, r1, 0x20000000002, &(0x7f0000000040)) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000010434809e2fe65c192abd70000043312c691981410b3334467c82dcd01be78c4807505ced1192bb8f3575b9798ddd66210e12fd96118bb73725eea2188b951f59eb10db6685bc76a890a1c1cbf75f7d0c3373efe214d74558a2d1d817be9a4e30c9d5889b4a91495c05166f2abb5019e29cdc229241c30e0ffede8ff761dc15ee1d6ecca5dd2c7b80079f5f5e5ad948e5cb4f71482206e911cf2160e0c564c0a6e2813b0312addba3c1fedb99b09389b41e9b3774d75a8a5fe07f4c7ba6e2c00e1e9781dcb9f0e3694c820539e2bb7ad39aac5641363f6b5a1c2c8b8b", @ANYRES32=0x0, @ANYBLOB="9980030015000200280012800b00010065727370616e0000180002800400120006000f0008000000060011004e220000"], 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) (async) ptrace$cont(0x21, r1, 0x80000001, 0x4) (async) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$FIONREAD(r7, 0x7041, 0x0) preadv(r0, &(0x7f0000001600)=[{&(0x7f0000000100)=""/201, 0xc9}], 0x1, 0x9, 0x8) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x38}) r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1044, 0x7a4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x100, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x81}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) (async) syz_usb_control_io$hid(r8, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x74, 0xae, 0xc4, 0x40, 0x4cb, 0x10b, 0x4f5a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x42, 0x10, 0x95, "", [{{0x9, 0x4, 0x6c, 0x0, 0x0, 0x41, 0xc, 0x18, 0xa}}]}}]}}, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0}) 17m10.174433413s ago: executing program 0 (id=1306): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000200)='./file0\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0xfffffffe, 0x81, 0xffffffff}) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) syz_clone(0xdda2b180, 0x0, 0x80, 0x0, 0x0, 0x0) lseek(r0, 0x7e4, 0x4) 17m9.731968802s ago: executing program 0 (id=1310): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @loopback, 0x10001}, 0x80, 0x0}, 0xe07e872420dfefca) clock_gettime(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f00000002c0)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) socket(0x11, 0x3, 0x8) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x358}) pipe2(&(0x7f0000000100), 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x8000000401}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x18c6}, 0x0, 0x0) 17m9.335130252s ago: executing program 0 (id=1311): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x700, 0x25dfdbfc, [@sadb_key={0x6, 0x9, 0x128, 0x0, "53bb467d04f14562c5f463273ef4a720564f485a3b4db08714589faf0a6f7657fe7bdf938b"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x80}, 0x1, 0x7, 0x0, 0x25}, 0x800) 17m8.701167596s ago: executing program 32 (id=1311): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x700, 0x25dfdbfc, [@sadb_key={0x6, 0x9, 0x128, 0x0, "53bb467d04f14562c5f463273ef4a720564f485a3b4db08714589faf0a6f7657fe7bdf938b"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x80}, 0x1, 0x7, 0x0, 0x25}, 0x800) 5m47.211515256s ago: executing program 2 (id=5767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000100001000000fff5000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 5m47.028418455s ago: executing program 2 (id=5770): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x2, 0xffffffff, 0x0, 0xfea}, 0x43e, 0x0, 0x8, 0x7, 0x200, 0x4, 0x2, 0x0, 0x8, 0x51, {0x8, 0x6, 0x3, 0x6, 0x4, 0xe}}}}]}, 0x78}}, 0x20008001) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m46.712167438s ago: executing program 2 (id=5775): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000001840)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x2, 0x0) (async) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5m46.335505299s ago: executing program 2 (id=5778): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x58, &(0x7f0000000600)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r1, 0xedc9, 0x10}, 0xc) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) ppoll(&(0x7f0000000200)=[{r0, 0x4}, {r0, 0x300}, {r0, 0x2}, {r2, 0x20}, {r0, 0x501c}, {r0, 0x8}, {r0, 0x20}], 0x7, &(0x7f00000002c0)={r3, r4+60000000}, &(0x7f0000000340)={[0xfffffffffffffff9]}, 0x8) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0/../file0/../file0/../file0\x00') r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r8, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000480)={0x7, 0x8, 0xfa00, {r8, 0xa}}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000100)={0x2, 'veth0_vlan\x00', {0x69a}, 0x6}) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1e}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r6) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r10, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x159e253b032b28e8}, 0x40000) 5m46.28051639s ago: executing program 2 (id=5779): unshare(0x400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f00000021c0)='net/ip_mr_cache\x00') read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x2020) pread64(r1, &(0x7f00000022c0)=""/220, 0xdc, 0xb5) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xc}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x24040080) socket(0x2d, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000ff020000000000000000000000000001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000a00000000000000000000008040000200000000000008000000000000720000"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x8000000000000001, 0x6, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000004, 0x800000000000002}}}, 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x300, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001200010028bd7000fddbdf2520010000000000000000000000000000000104d60a013c000c0015"], 0x48}, 0x1, 0x0, 0x0, 0x40901}, 0x20048080) r6 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ff1000/0xf000)=nil, 0xf000}, 0x1}) 5m45.935674208s ago: executing program 2 (id=5781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe1c, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r4, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010fd000000000002000000000000000a20000000000a0a000000000000000000070000000900010073797a300000000070000000090a010400000000000000000000000008000a40000000000900020073797a31000000000900010473797a3000000000080005400000002100000b040000000000000001400000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000140003800c000080080003400000000204000080140000001000010000000000000000000084000a"], 0xf8}}, 0x0) 5m45.76517s ago: executing program 33 (id=5781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe1c, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r4, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010fd000000000002000000000000000a20000000000a0a000000000000000000070000000900010073797a300000000070000000090a010400000000000000000000000008000a40000000000900020073797a31000000000900010473797a3000000000080005400000002100000b040000000000000001400000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000140003800c000080080003400000000204000080140000001000010000000000000000000084000a"], 0xf8}}, 0x0) 4m59.095652934s ago: executing program 1 (id=6004): mbind(&(0x7f0000789000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000280)=0x1800000000, 0x56, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000280)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd52a44fec4f6f1a6f65158bb6911c295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2971f29d9364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7d9f455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b80d8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e807df4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48610ee39fb4171103df2e09d7cfdb0c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681a03007e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fb9bbcd92d47098ae27a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee4c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22f3bb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7c5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7f87030000000000008992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cf8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46070039116694765658bae64b312715a8216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a1626dffe49d0c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d5807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c949ca930e7a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4bc700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006) r1 = socket$nl_generic(0x10, 0x3, 0x10) fgetxattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00', &(0x7f0000000740)=""/4096, 0x1000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c0001020301090229000100000000090400000002020100050200000005"], 0x0) inotify_init1(0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x1, 0x1, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x90, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x6000000}, 0x4000880) 4m57.383096284s ago: executing program 1 (id=6012): r0 = socket(0xa, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f0000000500)=[{0x28, 0x5, 0x0, 0xfffff034}, {0x50, 0x8, 0x0, 0x100}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400070007000000ac1414aa000000002000"], 0x38, 0x4855}, 0x24000052) (fail_nth: 9) 4m56.932888543s ago: executing program 1 (id=6014): syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02005800000000000000000000000102000c03"], 0x0) 4m56.631562408s ago: executing program 1 (id=6016): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) pwrite64(r0, &(0x7f0000000600)="e67ab1415f2ce290f4681ef5c755f60473b17b7887d68440dd9005bc69f6c3c5238bebfbce42365029d64c6bdf5fc2251eda45a465e645e685865063ff5f776983521685b3a3206ce46af9d586dd02dda5defa42c86b8c26de340e02c25f5801ca2e4fe456d3c9dc8599f9a3fc2b5152b9d2f123697defb2c35e0800770613c2854f85faae922c09d44a72248fa8", 0x8e, 0x800) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xd, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6020400) mprotect(&(0x7f00001b1000/0x2000)=nil, 0x2000, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r3, 0x1, {0x1, 0x0, 0x1}, 0x1}, 0xfffffffffffffec0) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setpgid(0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x2, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', r4, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r5, &(0x7f0000000100)='./file0\x00', 0x220) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, 0x0, 0x0, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, 0x0) 4m55.768723914s ago: executing program 1 (id=6017): socket$inet6(0xa, 0x3, 0x8000000003c) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sync_file_range(r0, 0xfffffffffffffffc, 0x2, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) inotify_init() openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) epoll_create1(0x0) fsopen(&(0x7f0000000340)='rpc_pipefs\x00', 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d3000000000000008000500fcfcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x6) 4m55.433558594s ago: executing program 1 (id=6018): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@gettaction={0x48, 0x32, 0x0, 0x70bd05, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x4048040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r3, @ANYRES16=r0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)='/', 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/32, 0x8}], 0x1, 0x0, 0x42}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)=0x24) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/oops_count', 0x200800, 0x88) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x40, 0x17, 0x4, 0x4, 0x0, 0x5ff2, 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x2, 0x2001) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e24, 0x7fffffff, @private1, 0x200}, 0x1c) 4m55.031115077s ago: executing program 34 (id=6018): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@gettaction={0x48, 0x32, 0x0, 0x70bd05, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x4048040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r3, @ANYRES16=r0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)='/', 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/32, 0x8}], 0x1, 0x0, 0x42}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)=0x24) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/oops_count', 0x200800, 0x88) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x40, 0x17, 0x4, 0x4, 0x0, 0x5ff2, 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x2, 0x2001) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e24, 0x7fffffff, @private1, 0x200}, 0x1c) 23.290276431s ago: executing program 7 (id=7698): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={0x0, 0xfd1c, 0x4, 0x400, 0xed, 0x1}, 0x14) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="f6", 0x1}], 0x1}}], 0x3ffffffffffffd1, 0x10000000000000) 22.275101586s ago: executing program 7 (id=7706): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) syz_usb_connect(0x2, 0x47, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x47, 0xfe, 0x93, 0x40, 0x2caf, 0x13a3, 0xbddc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x35, 0x2, 0x1, 0x2, 0x0, 0xd, "", [{{0x9, 0x4, 0x3e, 0xe3, 0x1, 0x60, 0x6a, 0xbc, 0x8, [], [{{0x9, 0x5, 0x0, 0x1, 0x10, 0xf4, 0x29, 0x81, [@generic={0x8, 0xb, "af33248a602c"}]}}]}}, {{0x9, 0x4, 0x8b, 0x86, 0x1, 0x2, 0x2, 0xff, 0x97, [], [{{0x9, 0x5, 0x0, 0x3, 0x20, 0x5, 0x81, 0xb0}}]}}]}}]}}, 0x0) 20.693847857s ago: executing program 7 (id=7712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000110000000000000a20000000000a0500000000020000000001f3ffff0800010073797a300000000034004000030a010200000000000000000100fffc0900030073797a32000000000900010073797a300000000008000a40000000042c000000080a01080000000000000000010000000900029f84797a32000004000800010073797a30"], 0xa8}}, 0x0) 20.521191159s ago: executing program 7 (id=7714): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x208000, 0x0, 0x3c, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket(0x10, 0x803, 0x2) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={0x0, 0x50}}, 0x8010) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000440)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004602010076000000bf98000000000000be080000000000008500000007000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 20.306876007s ago: executing program 7 (id=7715): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, 0x0, 0xeeeeeeee}) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde08004500005c0000000000017278ac1e0001ac1414aa05009078e00000e0430000000000000000110000e0001b5900000000442c000300000000000000000000000000000000ac14140000000000ac1414bb00"/106], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4}}}, 0xb8}, 0x1, 0x200000000000000}, 0x0) 20.127212397s ago: executing program 7 (id=7716): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001840)={0x1, @pix={0x7ff, 0xd77, 0x3132564e, 0x8907ceaff6cb3775, 0xf7ff0001, 0x0, 0x9, 0xe, 0x0, 0x0, 0x2, 0x1}}) syz_io_uring_setup(0x24, &(0x7f0000001880)={0x0, 0xd6b6, 0x2000, 0x1, 0x267}, &(0x7f0000001900), &(0x7f0000001940), &(0x7f0000001980)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000002c0)={0x8, r0}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/57, 0x39, 0x1, &(0x7f0000000380)=""/252, 0xfc}, &(0x7f00000004c0)=0x40) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = semget(0x1, 0x4, 0x69c) semop(r3, &(0x7f0000003640)=[{0x1, 0x8004, 0x1000}, {0x1, 0x5b7a}, {0x1, 0xa4c3, 0x1800}], 0x3) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf25000000", @ANYRES32, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002"], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r5, 0x81, 0x1, &(0x7f0000000200)='1') readv(r6, &(0x7f0000000300)=[{&(0x7f0000000040)=""/205, 0xcd}], 0x1) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x1, 0x201, 0x0, 0x0, {0x3}, [@CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x200}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x800}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c011}, 0x8801) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000040000000560000022500000019000a001000000007fd17e5ffff080004000000000000000a", 0x39}], 0x1) 19.624487735s ago: executing program 35 (id=7716): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001840)={0x1, @pix={0x7ff, 0xd77, 0x3132564e, 0x8907ceaff6cb3775, 0xf7ff0001, 0x0, 0x9, 0xe, 0x0, 0x0, 0x2, 0x1}}) syz_io_uring_setup(0x24, &(0x7f0000001880)={0x0, 0xd6b6, 0x2000, 0x1, 0x267}, &(0x7f0000001900), &(0x7f0000001940), &(0x7f0000001980)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000002c0)={0x8, r0}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/57, 0x39, 0x1, &(0x7f0000000380)=""/252, 0xfc}, &(0x7f00000004c0)=0x40) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = semget(0x1, 0x4, 0x69c) semop(r3, &(0x7f0000003640)=[{0x1, 0x8004, 0x1000}, {0x1, 0x5b7a}, {0x1, 0xa4c3, 0x1800}], 0x3) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf25000000", @ANYRES32, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002"], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r5, 0x81, 0x1, &(0x7f0000000200)='1') readv(r6, &(0x7f0000000300)=[{&(0x7f0000000040)=""/205, 0xcd}], 0x1) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x1, 0x201, 0x0, 0x0, {0x3}, [@CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x200}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x800}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c011}, 0x8801) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000040000000560000022500000019000a001000000007fd17e5ffff080004000000000000000a", 0x39}], 0x1) 9.589758861s ago: executing program 3 (id=7754): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040d90455a01800000000010902240001210000000122050009058103005bc5cdf3d727d96c0000000000684f8b9090c7580d4a6dd9a98d42ac011a7688d7bd90336b7946e376ae897a26cb3d18b9eea6"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0x3, 0x0, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="180000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) (rerun: 32) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000000040)={'syz0\x00', {0x8, 0x9, 0x1, 0xecb2}, 0x48, [0x8, 0x10000, 0x8, 0xc69f, 0x5d, 0x5, 0x4, 0x1, 0xa618, 0x7f, 0x1, 0xba, 0x5, 0x4000, 0xd, 0x2, 0x8, 0xd08c, 0x1, 0x4, 0x91, 0x4a, 0xfe000000, 0x7, 0x7, 0x5, 0x3, 0x3, 0x4e, 0x1ff, 0x2d8, 0xe, 0x5, 0x8, 0x9, 0x8, 0x2, 0x8, 0xd, 0xfffffff2, 0x0, 0x7fff, 0x3569, 0xc68, 0x5041, 0x5, 0xffff, 0x3, 0x0, 0x1ff, 0x5, 0x7, 0x5, 0x9, 0x5c8c5db, 0x8f16, 0x7fffffff, 0x101, 0x4, 0x2, 0x8000, 0x1, 0x1, 0x6], [0x9, 0x4d78, 0x6, 0x66c, 0x7, 0x1, 0x2, 0x7ff, 0x1, 0x3, 0x80000001, 0x1, 0x3, 0x36, 0x5, 0x4, 0x10000, 0x8, 0x28, 0xfff, 0x6, 0x6, 0x4, 0x7, 0xffffffff, 0x4, 0x5, 0x0, 0x66c0, 0xffff, 0x401, 0xbfab, 0x10000, 0x5, 0x4, 0x8, 0x7, 0x10001, 0x10000, 0x7, 0x8001, 0x8, 0xd, 0x0, 0x8, 0x5, 0x4, 0xfffffffd, 0x4, 0xfffffff9, 0x2a2, 0xc9, 0x100, 0x7, 0x7fff, 0x401, 0x822, 0x86f8, 0x100, 0x1d3, 0x10000, 0x48b3, 0x0, 0x8], [0x2, 0x6, 0x200, 0x2, 0xfffffffd, 0x4, 0x9, 0x2, 0x401, 0x10000, 0x3ff, 0xc, 0x2, 0x5, 0x4, 0x8, 0xf, 0x4, 0x6, 0xff, 0x2, 0x5, 0x9, 0x2, 0x101, 0x8, 0x5, 0xc3bcf961, 0xffffffff, 0x6, 0x9fdb, 0x4, 0x3, 0x7, 0xffffffff, 0xfffffff7, 0x3, 0x1, 0xffff8dc0, 0x6, 0x2, 0x6, 0xf, 0x0, 0x5, 0x0, 0x6, 0xd, 0x7, 0xf61d, 0x0, 0x4, 0x6, 0x3, 0x8001, 0xb, 0x3, 0xe99, 0x9, 0x8, 0x400, 0xff, 0x80000001, 0x73], [0x7f, 0x4, 0x4989, 0x4, 0x7, 0x7, 0x9, 0x9, 0x401, 0x3, 0xfffffff9, 0x401, 0x401, 0x7f, 0x80, 0x401, 0x7, 0x3, 0x401, 0x10000000, 0x0, 0x6, 0x0, 0x4, 0x6, 0x5, 0x1000, 0x40007f77, 0x3, 0x6, 0x147f, 0x80000000, 0x4770, 0xefe, 0xff, 0x8, 0x3ff, 0x8738, 0x9, 0x800, 0x800, 0x3, 0x0, 0x80000000, 0x9, 0x7, 0xd7, 0x732f, 0x5, 0x1, 0xfffffffd, 0x6a9, 0x5, 0xffff, 0x7, 0x0, 0x1ba38052, 0x8, 0x7, 0x84a, 0x4d0b, 0x8, 0x7, 0x4]}, 0x45c) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYRES16=r5, @ANYRES8=r1], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x480a1) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) (async, rerun: 32) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x40000}, 0x40084) (async) ioctl$EVIOCGMASK(r9, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) (async) ioctl$EVIOCGRAB(r8, 0x40044590, &(0x7f0000000100)=0x80) (async, rerun: 32) close_range(r7, 0xffffffffffffffff, 0x0) (async, rerun: 32) setsockopt$sock_timeval(r7, 0x1, 0x15, 0x0, 0x0) 8.079671099s ago: executing program 3 (id=7766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 7.951228912s ago: executing program 3 (id=7767): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1217f86b2df093578300abbe6740e9174e8b089c010902120001000000006da3d355b0c8cb662e82b61683a9cb6e7e43c76daaf5a53eaf47ad209eeb186cd451e7c6e6c6b4e0d6333e6ede6b00"/91], 0x0) r0 = syz_usb_connect$uac1(0x6, 0xc2, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x582, 0x27, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb0, 0x3, 0x1, 0x6, 0xe0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x16}, [@extension_unit={0xc, 0x24, 0x8, 0x1, 0x0, 0x3, "b80e0c5315"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x459d, 0x9, 0xb0}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x3, 0x3, 0xb4, ':r'}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x4, 0x5, 0x2, {0x7, 0x25, 0x1, 0x4, 0x6, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x41, 0x2, 0x3, 0x3, "2d958b"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xea, 0x6, 0xa, 0x1}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x8, 0x2, 0xff, 0xab, "e192"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x10, 0x3, 0x6}, @as_header={0x7, 0x24, 0x1, 0x4f, 0x5, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x74, 0xff, 0xa, {0x7, 0x25, 0x1, 0xc, 0xef, 0xc}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x80, 0x6, 0x0, 0x40, 0x9}, 0x15, &(0x7f0000000200)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x80, 0x1, 0x5, 0xf, 0x8, [0xff0000]}]}, 0x2, [{0xd, &(0x7f0000000240)=@string={0xd, 0x3, "ddbf9ee0ab581c280cffd5"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x100c}}]}) syz_usb_control_io$uac1(r0, &(0x7f0000000380)={0x14, &(0x7f0000000300)={0x20, 0xb, 0x2d, {0x2d, 0x6, "97cf59d2f8b96a723f0f2ce972d58bc6ba33e8db69c97a285ed150f82fe41b5eeb7303f938057f774f9f45"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x61}}}, &(0x7f0000000680)={0x44, &(0x7f00000003c0)={0x40, 0x10, 0xbc, "ea10dbabc7cb62b23971ded5dbc29a88d29966fd608044534293aa598b8853ed233d503388aa0b9ad206759766479fb18c778da5ebded2d516629a21772a9c094b4c78915b5a406522e46a707432def1b3ccc9212a6f2c3a51b483fccbe597589f4adada7f02e00a1e12760f7ce4cdf1f310eff974703d33134046149a9b457fcf6b8cf368d613bd99f8ab6977749eb2317d708b96fafa5c24fb788d9db1b4a34f1b65bcb5316b1230d4eef3733d8f4f7dd0f2cdb2fa6e8b3ac64866"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000500)={0x0, 0x8, 0x1}, &(0x7f0000000540)={0x20, 0x81, 0x1, 'k'}, &(0x7f0000000580)={0x20, 0x82, 0x3, "bc6f50"}, &(0x7f00000005c0)={0x20, 0x83, 0x3, "9e48e2"}, &(0x7f0000000600)={0x20, 0x84, 0x2, "dbef"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "6fd786"}}) 6.142797437s ago: executing program 4 (id=7776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xefff}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) 6.095517817s ago: executing program 4 (id=7777): setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) keyctl$chown(0x4, 0x0, 0xee01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) cachestat(r2, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x4040000) 5.622536279s ago: executing program 4 (id=7779): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) epoll_create1(0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r5 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r5, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000), 0x80000) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x181603, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x17b, 0x4c801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x937}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000000}, 0x20040844) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005801800"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.844503509s ago: executing program 3 (id=7787): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x235, 0x0, &(0x7f0000000680), &(0x7f0000000280), 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) syz_clone3(&(0x7f0000000600)={0x44000080, 0x0, 0x0, 0x0, {0x34}, &(0x7f00000004c0)=""/54, 0x36, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x0, 0x0, 0x2f, 0x3}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f8050006002000ff800a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_io_uring_setup(0x200045, &(0x7f0000000400)={0x0, 0xf211, 0x400, 0x5, 0x365, 0x0, r5}, 0x0, &(0x7f00000003c0), &(0x7f0000000200)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) 4.723070941s ago: executing program 5 (id=7789): syz_open_dev$video4linux(0x0, 0x0, 0x41) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x100) sendto$inet(r2, 0x0, 0x0, 0x200007fd, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc0405602, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) keyctl$clear(0x7, 0xfffffffffffffffc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40080) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x60a102, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'tunl0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x38}}, 0x20044050) 3.122041656s ago: executing program 8 (id=7796): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f000075d000/0x3000)=nil, 0x3000, 0x0, 0x7, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (fail_nth: 45) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.90312241s ago: executing program 6 (id=7797): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x2100, 0x0, 0x40000}, 0x0) 2.02809422s ago: executing program 8 (id=7798): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0x3, 0x56, 0xa3, 0x4, 0xb, 0x7, 0xf5, 0x5, 0x7, 0xc7, 0x40, 0x5, 0x1, 0xd, 0x6, 0x1}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000001, 0x17d, 0x400000004, 0xffffffffffffffff, 0xf1, 0x8, 0x0, 0x42, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000009c0)={0x0, 0x0, @pic={0x6, 0xe4, 0x62, 0x4, 0x78, 0x7, 0x5, 0x1, 0x2, 0xfe, 0x64, 0x2, 0xb6, 0x6, 0x0, 0x1}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.988522408s ago: executing program 3 (id=7799): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 1.948464899s ago: executing program 4 (id=7800): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f10000000bfc00000002000000000002"], 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x6a0}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 1.793595949s ago: executing program 3 (id=7801): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rt_sigprocmask(0x2, &(0x7f0000000300)={[0x144fd4fd]}, 0x0, 0x8) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x737c03, 0x82) read$dsp(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_usb_connect$lan78xx(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file1\x00', 0x7f7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="6800000054557983396785a4d9a5c395a1af81a6dccc05d0e92f28f42ec24b023f41e5445c49aeb7156fe1c582d72f3a3135fadf286ff323b0e1af3478fcfd992e604d8945a97a979694a94f28ba21368bad07ac", @ANYRES16=0x0, @ANYBLOB="200026bd7000fddbdf25010000000000000009410000004c00180000008165746800"/98], 0x68}, 0x1, 0x0, 0x0, 0x40000000}, 0x4800) mmap(&(0x7f0000320000/0x2000)=nil, 0x2000, 0x27ffff7, 0x10, r2, 0x2000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) gettid() 1.752837755s ago: executing program 5 (id=7802): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41200000000000000290005003b000000", 0xfe60) 1.618918728s ago: executing program 6 (id=7803): unshare(0x6020400) r0 = socket$tipc(0x1e, 0x5, 0x0) syz_open_dev$mouse(&(0x7f0000001680), 0x0, 0x80041) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) waitid(0x0, 0x0, &(0x7f0000000380), 0x8, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x0, 0x20000003}, 0xffffffff}}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000140)=ANY=[], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101100, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1191, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x1, 0xce}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000", 0xb, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) io_uring_enter(r1, 0x5ed9, 0xcf74, 0x6, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) 1.550663401s ago: executing program 8 (id=7804): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)={0x87}, 0x8) sendto$inet6(r0, &(0x7f0000000800)="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", 0x5a5, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000080)=0x80, 0x81800) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001000000000034000f80", @ANYRESDEC=r2], 0x168}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f00000001c0)={0xe7, 0x42474752, 0x500, 0x2d0, 0x3, @discrete={0x1, 0x8}}) r4 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) fcntl$addseals(r4, 0x409, 0x12) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f0000007100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r5, &(0x7f0000002900)={0x2020}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000009140)="ce7cdb95c80b46a788545a9ff24e1ee5d7ed5ef7a9422c29a3a017ad449df8cbcc12be83e58909d1623c031a66c022b5f6927a9aa0fd35876366bccd029e8a597d3960e24a4c8c3be27bbdd0ecaadee5d4da27c4aaf4ac92a0a3d8dc2261d0d3a1ab3b346a3cc9611d344f864ca4c02d2493c0793e04cbe94d7dda526a75b015207626a88681cb824c3cc363007b64941c7882f6581bc23a6668484cdf3f78187d802a9407d0e393a3e94106efec7b4ca12e8f25c20c467f2d9c5da21c787fed42ba8b3eae9d668802a1bf44c1b6ebc3ba158bb915bf63abcb195283e73ac67e179c46326e50a713f980f138b1813bce12fa559a54755ad08eada4ff9c1a51bbc55b00402c7001b9f5a1ca515c6b94fe7b3ebf489678e8c54de894b4187cb414cb3e4e4ea7b89d04a128ca6b2de1eb0df0c305f224aece9b60547835788bf3365bcd28a6503e4b329abe416d0ff3beb88519303a770f6426fa66f87e4874c87b6ae239a3147903a4e39616d1eff2511fcd8a6408c66319ed1ef10bff712a30bdb39e3b7aefeca3466b33f12450dac5095883de5a698c6492a190654f85210e3a707aa6b4dc3a2e6d0de909bfef419b7b4dfc88dc009ce7f04c2f585e36aa97c33ee6051f53b14c08ebbd04afb3ca1f81c687abd1cfae16d6d13c093debab06f4587f5060d6858440211d0a4ec8d70e0410497e9a347c00da5091f5d53c1b12d81c59b37196d5dbc96cf25994c4bebb46eb2fb565d0f1b72a912f1a54ef2eb4fb1252556ce618129cd3b9ddaa144b13984e980e9802e4676d5c05141cf245fe84924213b7f4b386a63cfec21f1c275520cf843e1b08c6fcb98c1cf7b3e529808d3461aef845beb7ec7a5406eacc67599f69c8dae3e640a3a645fa435a6ee7be1d328c0d4992d0347c29210c71c093e026502e39db77257307ac2800f3c3da344243b96628a6f5c8460d5f6051fa6306e315973f51a889cdce10e6c52b21c0143d268931f318cafd05259cb6a502f7d7bc56fe5f44241e9b9986c5106f2563df40f8ec3032539a306313949f0ab84f3f226cdb76a97b98bfeaa96a69e98e41f08c853add866b170fa3c39197e5c1b868b307ab7e767edc540866ca95760c43abfe01766d6403367abacc5073dc0bdbf16f119e0b6b2b4ac4deb5253dc4e4daca2a3494cb7de9aaf760ee4e3ec59d2d13117fe8dc682c4e831454e1fd5e396de31a7bd0c56b8b0a80f25b566e541e7928fcccf3aa44712e8405d50e081e67817c25deb717819b844445cf0f65713c5af4aee1387e31f8606b94d0a15684fcb3ca3bf478d58919c3570ec5ee9610e78292b95b73f3dd380a1bc2ad06dda9c5c2df70c54f3b53cbac2eb06427b7b41e72dfe2c78a92f75632b71bf7309b27d033b48b5b91794f30c76407cc78e96149ea6d38c4d74699bfb72dd2f378e4242bc789af9d139052e3aa06cdd4b32a582b29bc3e880d16de2252085cd31cefcd8f597ba6990ccbd128cae53fc66a7948402bc57286ac483d131a0d4cf6d68d5f8711cf4aef61ffe2f1af8be5fbc074059cf3dfda73b32ffff9ea8448f1e3237be0b005306a335a733e0818f007ad75c11cf5b4cf4a3136955d4334112176ab5e83d3753a4e225f915d84ca57beb3b91d697a19cabeed50196502f1a04ae32b57b63bdf87f0f5ef72e57e07a89393c173ac52d499bf3393dd50167de32bbda17b3a680fc71a0a6c399cf0f79516b3f1aa111e6249399f3222936e5373aaa781269cdd90116ed5d325c88bafe03c03a25bbbb05a05b9946df174a4ce1130cd6cac3b7d2db0f12a00ed8e87fe3b3253c9de8832aa9e47dc6438dcb17816b499df4b184067e3c7ba002fa920582df98ac1f2c46615d1a5f951eff0c4636c05d6d99fab1f6cbd5eb6df9bd8447d20e095e046aec6333b26650a7a7bb19a344f65a903478c7f6415513a9a17098e48d989c8e53348630cdbe8a9d84f93107eba9d248105c8f3b545b7953accd8fd01629552b639744386d85a8e8adb2163807dfb789ef834a44e5f896a3ac35d63e0ef89a8c985ca4c5e6fcd5d1bc168935b8990f1fae08f6d4f6a859e1fe7d009d83a9912bff46264dcbac54ede6720f6cca41fd1582c8d4440005020cda6d8b322821018be81918c714aed07cc853320808293879e0f85eb4e7d8f1e87b4ccb394ffc6dd532ece378823e50739f8aa4aab4110fd8ea068a370ed82302fe40a61dc3e6c4efdbef8232f6d5ab15762603b4f5e94b2922679f270631f4881b754cb30e5ee38238a18583095a5509e5305167098c4ba0c0e3876d14fb6b8ee25817e6ee77abdd42d04ca08722b2f5ded1f666165c956573eaeeffd19a7bad2a335d3d7e934e664adcb3b79628df4a954da24f4d7f0f4dac809bf32e7d73c7f3a66075f40f2011491d80e18028f89642448a555c3130489798afab791c9409c23d9589b09fe520ef0945eb781a01bfc631ce22a4fe5f895936a9cb2ff1a56ac623278b47f5e3d3bd24558022e516986d09878fd05ae68cff960187c663960ec4a8ddbb413430634f1e31fab81116c6e9e31b0de52a04117bc3e955292901ea429ef40605e33bb0ead03b1dd0f20a4c49d377d0c84bf92ebda4e0a9205417f79e31141785200f06d42807eac05d111bc268665fbfd519a73a0b7c9495a9593df26514148c461a3423eb8d7beaeb3ee949f9d983308c7c5d61494e792c2735bd97d464d5fec27bc1bbe548095f66a96aa9607a1d8aec2d392841a889a304129ccedd1fa048ab736a3a0fc45e598f252b830d59a57c4e9f548a0113c23693c29a06eb2917fde8cf837d2dd97d59f3ba2902f345713382d8058d7e34aa46f16dae8d4601d44c0a19b310ad6f0750d8da531cdc6b3f6b0f7fc356f7793b78b988b2de334786887ae78ed9946bf884ac4552155dee86544053ee7c35e3389302030533fa70aea7864603679201b5017e16e86c520bce480308be79cf143b12d30ee4b9c505aff1c9d7e137c66c0547f0d0e05ad0491c40cda9ffff32dcffc3b2358c589d91a65c1dba5c942d740ec2e62ce8c8970fc8258c2f044aae228c540dee3d39f007ad69f56c483cf38c455ec74cbbd3ab895abf49eb9e295b0c5e4b53eec4eff613786c6e6e65eabdc4a1e4081e07cd2034292c944c345db17cd949b50e07739af4382d182be224d6b1aaf4f999917bfd513f64835e337e6c1dab07c590d45c5020c41471f922e23125dac3264c02fc2f855f434b47c643ac908d84d4a0ce097d525f3e8b10c8d0d7e8f964715fdaf7589893b7b8b37f27893fd50528b6179faae79f26397132e7c2216b42a4c1d936f22d259cf70faf3a016d31a6b6d8dd0b93ed43c42bd6b5e2cf4f3710397b6bee3154e60ae856c777495e3278de0f9589289b8a408120e90e312d9510da792f6f739b76c0503f26107d82ad27c4d06f87bc9d15bb613d19d475bbf38e5e5a3800b1c0dff9631419fd2d9cac9976ceeaecf7b31e8ace40cfb63145dcbb5c6fb12d4655d35d8615a86157426a4b3d36007cd134c07f46c8702fdb3d57b488ae58015d1e24b499758d3b735fedd22aa72165d0c34001d0550a28c6657d11a1304a34d67daba031bb11648acac8eee5b30ad00bcfddfab6b581d6080afa1cba0023db5322ce9dddefaad9f4aa1f9d270b56c61070867c874c30acf0f699c8bf41c90ae52c1b220e4f0eb12c6c785cb0534f1f48c6692fb6ba205ca918ce0a7119e5b966c3484333ef2dbd6c0ac7f0a8ec59af35b7ed50e267306be331e2eece2014f367beefda946fad2ef169c09723efbd29d022430d166396c82222941b4ebd4cc1838ae528c42fb6d8e8b0ded68d33140d1651c299c1445be06932e4ad6a5729bb361403dc34ce4ff29321098ef0d8c85ecefca1e107e2a9c5e56605506815fea78ca96a5c9e4b032e52679165a2b5d84808fa882a20e1b270b7b8beb51ed68accff3b8289ed6e7e653524a0c100661030585eea1a1e9795cf292caec0fcfd703b1434fc6246fb034342d144af1ab183bedf9b5fe6b9c004718b9faf1926b88744175fd519cacaca9ccaabfe6f6993ae292ba9309d1b21213fd7073f9e98b34f6e94a819b4777cfddced26ad92ab3f13630bc601c363fcc00596556f494083e3a237c97f9604618eb9abb8470ba4d5bfcfdb06e5295bd7576f505cbc7568fd16bf46f5cf4a0cb5ada83553c95ae41bc8e0aed74f10ff8a0286281fc11841f9214551fc5caaf098bb954eababb2ad0fe05256b054850d2dcc81202831e3f820483bea35bd02203df32758828dda20d7adbb449264cb99a82f78ea45f5efcfdab69a18d8e3eb3e3aeed01d64422573f9c382801dc650dabd24afab01dffd20c19366962bac602fb708fd018377dc070d6a516fd4a4433ac72aee70aa85cd4d72b2d0dd044fe95c470b77d16961c9c0582e68176751a56ed4e380f237cdafafb3c87496d75972482c85abfaafe62541a3835b3e6292c079f94305d7e73357a2cf1a6685da63efa30ec6b4bfb5e296549759f422ce45f6e2350e8fa04581064d6de094fbf628e3685a8883dbd8a96cc8a80c6f85b02585f43d1246c0f35e4a64d9d53fa3e72a82f02d377e80f01079f49b98670d3f5d4f1221049ed7219a79e2b1f35811368af8f4aa5cbdeaf0cf55c3b54a286e2d42d375b7062559fc9ddc877d99213629bb28eb40810829c91c8322d3d7ccfbeb72b52f9a2b4812f201bc8cadb4f99683e9fb1f1abfb7d0b480d0d5e9105253481cb442d98cfe5316d3dff205a4e70ada31328e4de57d560200387325cacbcb552e70db0eb7c320801e80a04b152d93a9e14f13ed3a18a5a308ce15cff410d370e16819edfbbed8a970d312c1dea7802ad4e9cb7d3c95d71c865e19268dea01d5b11dafb78052545ecf195edbeb6153f7d810b1acd1c93baea4ea99fb870c4e3c833404898a6f8b0b6742101806a1079f649cf2f209ff7d7e960989784ce0f5b5ba8e8fc022ddc3f039510de84dd0207cd561b0a0eaa0571e2d3f4fa281de5ef66fd6d04c19bd1a97662852ea64812e2d775f99136f4b79234781f8405e3808753abab2fdc6a927fad16e7c542939c95896735deb3f69f3beb4aebc6cf00ba9fb18e728eb9bdfe0129888f11e24fa98104a3ce24600e570e0f104b79fb0e9896f95caeaadc6dfb34bf1d00339cfe3a4bf406cabb9ded52772a5927a73cda53b6a0acbfc489ce52a85a0298fa9268a4c8fe1111f22db0d42407587d08d134e7c246e0fa0e66bad306ce9d3d0dbf76afe41cf0d64ab3f51cbb6288f617d3402c8b5ad46e5a52dc400f94e54ae62602de397aecb609a35851f6120b8e5a3633513aa6fee9645f7d1d6a0c638c893eed2bb59956d9d5684e283b6968df857ec609e7673b7a6bf209ae5d8147aad20477dc477d9c82168dfe585b4042ed05f49ea3143a36b8cab5a203ed76dac6bcd80022f23083ad7fa6c57a93874d60a14cb26691697a894528a068b8e389760bfb5014234e40d9175a986d0af786c3e3b469327dae3bff3f86b5ad21ebd887240c0f7134498811b6bb5f098dfdf24b3eb06bbcf27746006d701e1c7292f32303f6d6439156529e6abf06da9ab567612900b79c2593433eaac113e241620778d85642e28bd66fc4d9653c1bf40956cf9aba7c2c01cc29a0c2c6e5fe1ea36c8da86aad7bcb9f4c1342fcdd37709b764149273439ec4ffc8a96c490e2e9034438ac44ae36fe8942b6bc2dbdefe6d0eef5f568de0a87c7745151da8d93142dfe569e3b930687687355478885c399ac2be66243c85aa47bbee51bbd85ae0ecf62446e7005179a5e0a66d86aac79ed4d0e724a8ae75b7d9b187fb0ac83057e29982be47f4eba34e7858498f02d124b8cd8849e28e03f7a21bc459ab22b42e36d7cb46a2cc64c09f3a7cd35333e48e19a0a5d8d088d97c4dff5b8ed214ddfb6a4e4b88dd14d01455aac24b3630f5a07bd7eb9f304b175f420c8e05828be07042344794479a938a1c862689fb81921f252ad8173e7efd8dce7841aa1476171da110a896b98f4c8200897e53eaf195d2878cb13ca83bd631b775f109c114e8591733370d3b1cbfc38fe61eeb84798b5ea41814c0ae12c717cdf84511c7701c3bd830efcb56b17c327789dbf0547f748f59d241629de681f605cd6cda824c894587ef6110d652202d59032c888730e7bc11a5ebc7aa2c140bd98476fc55688178651d998b037b69cf4d474ede8fed5bf6ee7081da9ab8935217061f077a19f8a939236ab88160428bd17a4d2d2980b8782265a82a909d0da8740ab7282d8372bbfbb60c7358d2b80c7488c745eb39be166030486044038de6bc0e3f24c53cbc83e913389b44319d5c335fae03bf095c9fe8ae7282dadac27e7dcc7a1ef55653a0dcadad28d8258232264f93ad50050ee6ecd5d483ad755e73f660804555dcb8bef1c9ccf0aa0c64fb96d15c9d0a2ebe93bf9d45d708b4ef18f7b3d0bb0cb29da17f1b95aa34cc3b847eca45db65892f5cd1353a8b63197198f51185f86eb4515ec622acc80d75933beac6f19ca855b3930cebf3f38419e0f52d21bc98d1956f87f05520a0129d8c0c9004e039d82456ee87547ce018f423d646926c6c87592eaec6d3da6593cb1119e95c5a979fc643837be7899ef5170a9a47cfcbf8f58471a57e46ac8f2af206b3891a784dc2f512478ce2eab511de8a81bdfc83d20e2b8190afe2fe90553fa6cc6f0447ce27a6616541615d2b1958393f6807b9593663378367a3e5154f4f9b61a8faafdd52d9d46d4182867db1b1a1d02171de65b23df07925385ea1a87d89a41ec8bbb6765b8d3486dd58fd3bc15bb6f814e6df18ea9ef0d807219d61ac4efb9f1e4dcc4c9ed1b2cc5722d419225a0a0cb0645a517ca6d07d79dbf41abfab7212636570f9f486e8db876f44f3d3a75ab1dbd0b2b190becac643f93f1043dd70db4c1d31026cf403901525dec2e9a559f4d516b7b9e4602f2f671fc3a18526ab501282b0dbfbe888710836785c25c126d75636ecd4191bdb72dd085fe1154463ad64585339ed30834b5a1e56bb3efde0380016cda6447d8765266dee308b9dd7d90cdb03bf6a12700131cd8948e891bdc28e0bb1d8105faa98bc19ee8b6be41ab9a524e2d9eeeb69f91fce85a25ce80f6c5012cd50c585d0235df5ef4069be1658f8b7c9af704450b97d98a2a5266435a25dfd80f332ef6647cf78ad2ec91d9f06a62895e8757a87af4a8a0c68241abcc8193d3312903fae6079700b09ab547059906dc45f506383b6420d79696923a1d292b8cb5db2b388a29878194168cf3e3c0e78dae160247e581c1b01e3ff5cd524ac0719f3900e731f35bf5a9b0e7e24144ab08c40e941416459f272ed131e2bbce61ae1653d5aaeab2dd033edff51abfdd8e2df3287bc28b766d09c79d20a61855a0d29e8a96520e87c0a30e4373b9df52839eef1fd32f4dbd21676e26461e46a3569625cee08d943eba7615469f27b1a2d15ab881ba3cb82125b0f0585f62bda75ae2a675b8459b095aee977b9007129d4add5c2631d12b30e0317bddaeb6c12eccac5e53100f443a80dfdd24bf2d349fa1c1527549830d794ea81f568087596cfff5f091008e22b946fc94c0395c3a767e6900cf70d8120e6e721bcab8b85f228061ff24fc998bc14f3a5f6f31d426a9e592f16eae74a65fb95a3daad1fc75312ed91b570610c7589a98cae22eafbf3726843b8c552daca3209d87ce5087ad488950208e7c9cebb304e0d229895309f226714d5ec1636361a62d417854a1387ce9b946ff152726cb0a5e0d05742d5bd929b0f86ecad05360e4add2a999130731beff3d3622c526beba5b80c190fb206ece6455e456679e18a5403871590d9c14109e9b4a3e716a89a723c1449f9938022c8e807a7decfb3cefc5a2865a9487130a2442a3ffa723920fc43935bb2b468ede08a2ff7a11236112146e66409c55155bbe43586ff20ece18365fdd972b22abba2c93df479f201fa1a12263402f223ca25375592c730df26c6378b6ab1e48eb9e1a58046a0830654b7a8dc5b38bf90581f4c51f6512f09dea8b47ce83c266d7bb8c6173ff81046ff8601b0c8efa30520a58ae3e873b3544a3d0373d165520b424cf4626c6b7010c8a9b776563a67d347edc4c78974c8deae23b43ce6c3861200997d04946faa8e77b289e03d2c7781b4ac8eaf955fcc3af558d5db98bdb57b239820dd24a380ac6e5e92db2a34bca811de4b72b8e41197b1be31f2d8c18ea2b4104c7170ccae8d8926ec0e2ebb7efd9d5cb1817cc8b74bbe0fd0916403ae60bb2fa4415d34c6544f97dea7f5301cf9d2403d7838d0f50ddd7285b0d8ef13f276f1440fe942814337f088fbe4055d37d8d61a24b24e3a97a0e391db26a53cd6c1aff7aa72a57a4ee23e841276c6d4c1497fc6d6914af42b044289f4df2e72b9bc7d46a0fa2728c3f460ae2c856dc2e66cdac1e6101223a4a6c8d205469c970afbc0a281f179a4aa3b7bf9bf0f67577a01524f443c052785147ea0ba839895062c7704afaec3dab46451fe514cae26a90fa25efd7590e534380460bccb291fe9f9f85553f2701a0e34cdd5cae403923e1035911896f36ec0fa7b812b605ad3ef1f36a43798ef1a2c0a85d5c74cec595d4e58804dc3e3295f2379f73350f46901889cd3ae3e720ec5868b3a6a22a476ba50af03167dafa0b20a07a3e7a7b73709d017ae72dea2b27f51e0f99b41b2a0550c60b5e7f6fffb1bc57414c2e587958000c0edb1f381f209840b0c07746f267d8915ca3794f4de9b3b25d1dfc53b3fb2a1d3afce87b371055c5b28fdfe948fc865a0b2cda02b141a475a5e879f47988e993608b66002141dceb8ef061848b05130231645492258cb7073075470e3e6016bb6e295f4bf0b7c4cbd4afbe34338fd1568d90af0ddddb96d28cee69d631ba251d5b99ef585e7d4ca39b5399c7e3e408f74dc4dc7b5c4643b4841b720361ed48b14a80d740714376aa1e1d755d82e2bccd3fe3dac51bdc85fcec2bc9ac30e59f6bb6d24bd6e71a111bd5a346fd8761dbe173c78fdfaad042e6c66c327d81faa42717c37c9fe5c1f109cd2ce2c646f58e82b9a5766f04a743d93d3d26cd065647558d226b4a58d7432b182338e647522dcc2525a8abacdb009649c700b22dfe1ad3d67277c6b592e3319ddd70fe2251202ef4bd89f7cb15e87e21c01dd129706b9a9b09c10217e5c1ac056428cec7f7164b35acb049aa9c501509405bb452f81f127dd98eac3614b09f4957e2b45a53f81228d73d0f8ea1fcec6a21a2a65fcf57a6c19d3321991c21a0b4554546059787d23bbc9a1193a9ead9c4f0bc623892a013206cdc77c600fd024f7412e87b01036da58d402ab9c28a61b5c757ffade4aa2d173ad018716121a5e100f6ab16c1dfc45a8d2c592a2a9b5726a255d7fb26016137b3ee917f8e1c204374ad6ba163fefe38a032b28bf468a91c8332900437e8f9c533346811c550a035b20beb62da3bd0596a609edf4b0ee39f4d337e7760dbfa06080cc9970544b33cecf1471dd2080a043d4d71d1d5325e701759e36fc0539b1622a8b51fc033f718d5dc48d7793677f91a79c0b4d33c02f934bda126c803252654e4d06942dc00d580874e1c2a8a7cb6f728dc96eac70ebc45ab95b08471330e1153741fe467ae7c4a0beba3e62962d29ba0e4633e92c7882e49becfee2ae85ea2bdbc536f9578ca267448684b95d27874ff01037d082d789782504991bc719605d931e17d8d5e1074fb8b8f7f3b38bdc747adf30734ae934bd727663cde3b5d49e68ad776ce36aac06939bc041e4f26142e4ad7c343a13bb6780e59ea14487e10e1a4f6029f86c791e0b572c10527dca0f8504597c13cccfe5e3cd00145f1a2a54147b9f066e387e54abae053424fc296e8b799d9ec0a206f6a7241c2f920ce80dc3232c2df008a53dda0d9fd420c418d91ad5c629a71343ea3e29e1fcec4996464d297f8fe5425311a04f35495294acf0091ac6ad826c7d533b44c36fd60ef2dbddd6f7a1c64eb2d44cee7d0b365f198081e8a0862886f991c355b0f81c46c939eb7c924ea972cb0fc11b5e5395f940eec6759a3859eb926dbc641875e12ab07213616b41d51855a4bdda442a4e548d31468d3dd6af880b31b5b5ae625fdd5f0e9e0c915a7e803d891dcbfee0f1af7f85b7a33c15093276722a1cb5c183ebc038bf44bd5c693154e9ef30f5c57bad6bf3a9b668063544e1f918e9a1dee1d61acb969b2663ca33cc2aa75fdb0c6a07fceff6b7254488d86dcbd46e1e1b57902b0276845b6fa307fcdda0bd63fc032c1013368279b6cfb83bde3e2d7c1f6083f75f5a372ac03cf23402905bddaef282ef903441da6dc9da258b09265cf4f9b3256989797f01e1512b81d50865540029d3c9f8eb2a2d88d7b4511b38e3a6cc988994d28dfbdff7a5e4be2f3ae92867adfe654528b0626e3cce95123d9b90a60b479df55aa36a45a1f4075f7f1cb041409d3e4b821ddc2d99630f0fb621575b3f69b48344c3a8ce6428c9ebe418349f89876d54c1e5cdc2f164c9760cae9d66dbcb4b5aeeac83a1ab99bb08aed602f90b3bb058f7253023e2a989ee885cccdedbfaff01c18f4df74c949aa200dd555abe4a85aac71e614cfee13ea11b2dcec24e96659d6e1408af34ef016794aff31db8d31fbff2b885735e6f7db33f5ea883f42a2a5296bc622338c647256a3dde8d3a938c63b3a33e8cfce827dfa0603cb91ce6f41bc35848a6383ec1390e5a71e11321a0d327184fb3e847d2b5e1380750e827a6fd15191a263e059e5eab0d147ad561947a98a792e34b8012d80137d561fdf44b8ec4b8a5a4c15e7ed45786ee2552fb40b8bc0835c6c3052f5c12dee2bf342c6b153323d41ae07dbffd7cc157b674bffbad23cafc2fb805ec1facdc248b68b362e9f7109f308e0135e4d4604496b7ca81c0e526f66f3419462f1124c72da97d5f21b438fa488997575422a29b116c1d318c4fa83ed6027e4a5040633d22b9ccd8924c118ce18a87fefa9ffc2f6e31d45e08c9831d3b25b7191e1d6623eeddf182646d5f21b6c8385eaeb904da55efe7d3d0ca9cf1b70521ef20c7391fa4a8062a278a176d6259279f87babcda34a60cddab4107d1210404032f4729a2021c15a8253e86cb47a0b5f88029ed4b3360fb5e3976cbd8d2620c33bbdaba7d987234cbcb9568e495274e206ea5a02a68519e288d5922728fca5c5795214c70a14acc84ca27cde996f254da37c166ef1c930e15564f50acbbcf3188e8d1138df03009827998f3b2921466352708c543d289ce089b9a597edc0f1313738065164fde45bfec744f6ca8634b68c53bd17607cae7b8d13f805693bb98970d758a0dca8b2090764fe86692fecc6a2e788502b6ba1711aa8809e48e5653fe0ba93d62fb298d2f3ca55d24c8d4d0bfb7f4205f3f2a8e4a8989ad8314605226d6fb75d3b640eef9956018943e4bafc3e00e2c93ddef2da0e135fb646c5387c8aaa5797f18db1b9a3bcf49b71600056b97df4a376ae52bd59aedc3fa19a72e7937eed2613f6d8b5df4e5d8ff019", 0x2000, &(0x7f0000001040)={&(0x7f0000000380)={0x50, 0x0, 0x2, {0x7, 0x2b, 0x0, 0x20000, 0x0, 0x3, 0x4, 0x7, 0x0, 0x0, 0x1, 0x9}}, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x18, 0x0, 0xcd, {0x3}}, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x11, 0x0, 0xd77, {'\x00'}}, 0x0, &(0x7f0000000640)={0x78, 0x0, 0x6, {0xfffffffffffffffc, 0x2, 0x0, {0x5, 0x0, 0x0, 0x5, 0x3, 0x5, 0x4, 0x40, 0x9cb7, 0x0, 0x9, r6, r7, 0x9e}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x26, &(0x7f0000001540)=[{&(0x7f0000000200)={0x0, 0x22, 0x4, 0x70bd2d, 0x25dfdbfe, "", [@nested={0x0, 0x148, 0x0, 0x1, [@nested={0x0, 0x37}]}, @typed={0x0, 0x66, 0x0, 0x0, @uid=r6}]}}, {&(0x7f0000001580)={0x0, 0x16, 0x200, 0x70bd28, 0x25dfdbfb, "", [@generic="33a7312fd0cd4b3bc879a2a4184e5b6c0c3698b4540196ac8104bc0c1b97076fb79becca850a1f7d178a2628cebe36d43f1cafb08cecadd63b2ea2f7503bdba38f3c22cf2d9449b460b40f800ac6a8f4f87283123c5f3a53db00890016164fb746a5bba38f36e9dcdd885c9bf1aa6b67f01d7000719a49fa71c872eb91eca049a5fb83d7a4136243a52562aac0902182998d9598915381b98b99f8caf43fa4695d3c4f6de51d305e96fb2352e5e5b9251808f6be8a74f9886310a00fbbe9fbc68afb5b97e42426bcaa466024", @typed={0x0, 0x85, 0x0, 0x0, @binary="af910d5d72bc6a7eab7e843da553da23ff9257096f92adb776613cc3074499222e3eed3447c0561d362ed2f9bbde8582b76e1bcc232515b393501f291e526645c5f0d91f14647a08c3157c12b41a4f38e7225f28bef5cc50a15c422ffe385c0eb30b5a7815353d97a5b3aaff2dc1dd990de42264f1fc92f682547160c69ed35d60b5ac7c45bd6341f82d35588f1736b738c13500813e90db969ef8d1d577bdbbbe410e0b5cf3fbd6a4660b93"}, @nested={0x0, 0x5, 0x0, 0x1, [@generic="dacbfec9382b5fa4f04900c0de3d31ccfcc1c94f266484d9940aa552bee25d4aef6b7c665eb7a4c63f31f6b22e0b", @typed={0x0, 0x8, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="6620c40684ff61fcd95622f73390622b8325e986569792c38a00e1dfcc3d13f69cf2b1d05a74678be689c49735bf6b1aa685bd144da99d938c54a09be5562be9e7266e6911a53abe1e67b1c955abab36fc39beb3f2abbb7e25762caa50f703ac18ac07d510107caac7a04a95c35c2a647217fefac50d3845b73c83b80b3ed8419f615586a3c3262b50a979c9c59eb484412e11d99bd6035ac5caa02a707891e28a5a26c4b7bcf4cd519788ae487782687ddbf5f4d545e46addca93c73bf3531698805ea9b37fc43841fca5add0aab7fb87cc751304a5e9d3caa5e626c56e44db8c859fd8b49493a568d531"]}, @typed={0x0, 0x1d, 0x0, 0x0, @u32=0x80000000}, @generic="191c259da9986e00efb4065ab8a1907a8208acaa610cbd6978a590c125fabdd7a6a211ef8f5cb7c9a44b3d098c81dbb9220f665598ba71cc42e9b03eb62aa41b7f46785d49ac4f764f6726e1b2c2ce0c4d2a1358065ed048d5919cb514f87800fb6a6283b919f0e2e1aa55cf7b41526c862ad4a268861a5a4e020b2498ed6cb6b0202803fb6d8d7792a1ef3a11d2fc7ee7d83e12def24f76be2c5d15bddda39494"]}}, {&(0x7f0000001480)={0x0, 0x3a, 0x200, 0x70bd26, 0x25dfdbfb, "", [@generic="e0a05d7f12072b6cee9e5244595ef8b797a2292a3e8e9b30251c18c126a0d374ba5266188808281ff3a49d6ba4bc561076ca9327a7660dab2f8cf8f56d535b3fe6d699ee97d44e25e6153a8684196b3e678f6a6278415e4931b4f0ccef1e73e3fe6a404aee3574665a104b5e41b03aadb6424e3e151494b7b970eb38808062415d08c6c58b5c2e20847ebcfac5cf547d263a5dfcbad6ae9befcd18e29313d12a7454dfb5f23f0822"]}}], 0x0, 0x0, 0x0, 0x4008}, 0x44880) 1.49682345s ago: executing program 5 (id=7805): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 1.353270496s ago: executing program 4 (id=7806): syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000140)={&(0x7f0000000000)=""/120, 0x78}) io_setup(0xc, &(0x7f0000000180)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r5 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) ftruncate(r5, 0x20000000003) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f0000000780)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x4, 0xfffffffffffffffd, 0x40000000000, 0xffffffffffffffff, 0xffffffeffffffffe, 0x0, 0x6, 0x0, 0x0, 0x7, 0x379f, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x2000000000000003, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x8000000000000000, 0x0, 0x0, 0xfffffffffffffffc, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdfffffffff, 0xfffffffffffffffc, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x5, 0x0, 0x7ff, 0x0, 0x8001, 0x9, 0x1008000000, 0x0, 0x80000000000000, 0x8, 0xfffffffffffffffe, 0x200000000, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2c5, 0x0, 0x4, 0x81, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000000000, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x83]}) write$FUSE_NOTIFY_RESEND(r2, &(0x7f0000000080)={0x14}, 0x14) 1.226827377s ago: executing program 5 (id=7807): syz_emit_ethernet(0x7a, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd606ed6c400442ffffc0200fffffff5000000000000000000ff020000000000000000000000000001242088a80000fffc00"], 0x0) 1.156062659s ago: executing program 8 (id=7808): read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000140)={0x2, 0x0, [{0x10, 0x0, 0xffffffffffffffff}, {0x10, 0x0, 0x3fb}]}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) file_setattr(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0xd800, 0xfff, 0x245b1f2a, 0x8000, 0x10000}, 0x18, 0x1000) 1.085680483s ago: executing program 5 (id=7809): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc01, 0x8) open_tree(r0, 0x0, 0x9800) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000850000000800000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x3e, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000240)=r1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r3, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) write$FUSE_INIT(r0, &(0x7f000000c3c0)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2d, 0x7fffffff, 0x14034502, 0x10, 0xf, 0x4, 0x5, 0x0, 0x0, 0x100, 0x7a5d}}, 0x50) writev(r0, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) r5 = dup2(r4, r4) write$vhost_msg_v2(r5, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r8, 0x0) r9 = dup(r8) preadv(r9, &(0x7f0000004240)=[{&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000002800)=""/67, 0x43}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000002880)=""/4111, 0x100f}, {&(0x7f0000003ac0)=""/206, 0xce}, {&(0x7f0000003d80)=""/68, 0x44}], 0x6, 0x0, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000000) socket$kcm(0x2, 0xa, 0x2) 663.425005ms ago: executing program 6 (id=7810): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x31, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000}, 0x0) 660.520674ms ago: executing program 6 (id=7811): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 619.648659ms ago: executing program 5 (id=7812): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sync_file_range(r0, 0xfffffffffffffffc, 0x2, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x2) ioctl$BLKOPENZONE(r3, 0x40101286, &(0x7f0000000300)={0x8, 0x3}) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) inotify_init() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x8001) r6 = getpgid(0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000140)={0x2, r6}) sendmmsg$unix(r4, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) syz_emit_ethernet(0x3a, &(0x7f00000010c0)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @generic={0x1, 0x6, "a491ae", 0x0, 0x0, 0x0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) epoll_create1(0x0) fsopen(&(0x7f0000000340)='rpc_pipefs\x00', 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000355208364a19e187", @ANYRES16=r8, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r7], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000730133000000000e9500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 596.958571ms ago: executing program 6 (id=7813): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='lo\x00'}) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f80500060020fb00000a00"], 0x80}}, 0x0) 515.282722ms ago: executing program 6 (id=7814): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\"\x00'], 0x48) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001980)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="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", 0x180}], 0x1, 0x0, 0x0, 0x40088c0}], 0x1, 0x40810) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$TCSETS(r1, 0x545c, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) r4 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) 271.161719ms ago: executing program 4 (id=7815): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000900)=ANY=[@ANYBLOB="24010000160011092cbd7000fedbdf25ac1414aa000000000000000000000000fc0200000000000000000000000000004e2400004e2400060a0020a03c000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000001900ffffac1414bb000004d46c0000000000000000000000000000000000000109000000000000000000000000000000ffffffffffffff7f00000000003000000902008000800000000000000000000001800000000000004ed2000000000000ccacffffffffffff0500000000000000030000000000000039640000000000000600000009000000060000002bbd7000073500000a00014148000000000000000400000004000000200017000100000025bd700027bd70002abd700026bd700000000080c60000000a0020"], 0x124}, 0x1, 0x0, 0x0, 0xc804}, 0x24040000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x4000010) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33) syz_usb_connect$cdc_ncm(0x3, 0xa0, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002020000202505a1a44000010203fb08028e0002010200020904000001020d00000a24060001a4c3ba1694052400170c0d240f01000700e0f9ff0a000806241a00100208241c060008000007240a0506ff0408241c0001f900300524150900072414070005000a2407fb0700c30609000905810350000709b1bc060904010000020d00000904010102020d0000090582020050b9bdfc0915030210000b"], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x10, 0x1, 0x2, 0xff, 0x2}, 0x129, &(0x7f0000000140)={0x5, 0xf, 0x129, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "e4e845605a2073be6ae624ac973722d1"}, @generic={0x45, 0x10, 0x1, "29dcc8b0f139b748b7134bda4e14d6b9921d63ed0efced54da1caeebaf84c67ee74af54d4b61c60ac9eee0f0ee89070521c13687a892e4fc0c29d51051c775c3750c"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xf, 0x2, 0x2}, @generic={0xae, 0x10, 0x1, "94c44eaa033822437f4096a262db0e078138ddcbd0bdbd7e54bc96b125e068e2ef81294009184906c9973ff843bf7eb5f24ffab9dadc8c8c37231117f790b3a626c431e7b0dcd5f91f08ccc1a92c3957ce773e594b6e7cb70a71fe9331772e488a2adf5b198dd33310bcba9dd2c5eff2a87990d5b2d641b2fa84eeaad8e7486c80b9dbf7a6a2e27470beb08d588eb2550f8ff64af1f11439e1e34c60fc8d57d34f1b682f9405ee17cd0e67"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x0, 0x5, 0xa4, 0xb}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x1, 0x3b, 0x8a, 0x35}]}}) 120.809973ms ago: executing program 8 (id=7816): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0xf5ff) 0s ago: executing program 8 (id=7817): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$pid(0x2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e2ff000000000000000900"/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100}, 0x94) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r0], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000940)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x1, 0x1, 0x3}, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) kernel console output (not intermixed with test programs): T5721] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 1276.219213][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.227324][ T5721] usb 4-1: Product: syz [ 1276.231574][ T5721] usb 4-1: Manufacturer: syz [ 1276.236366][ T5721] usb 4-1: SerialNumber: syz [ 1276.294358][ T24] m920x_read = error: -19 [ 1276.298858][ T24] dvb-usb: error while querying for an remote control event. [ 1276.425859][ T24] m920x_read = error: -19 [ 1276.430917][ T24] dvb-usb: error while querying for an remote control event. [ 1276.503575][T29185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7524'. [ 1276.544617][ T24] m920x_read = error: -19 [ 1276.549954][ T24] dvb-usb: error while querying for an remote control event. [ 1276.664244][ T24] m920x_read = error: -19 [ 1276.668723][ T993] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1276.672381][ T24] dvb-usb: error while querying for an remote control event. [ 1276.784420][ T5691] m920x_read = error: -19 [ 1276.796816][ T5691] dvb-usb: error while querying for an remote control event. [ 1276.836170][ T993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 135, changing to 11 [ 1276.849433][ T993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24844, setting to 1024 [ 1276.862043][ T993] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1276.873347][ T993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.888219][ T993] usb 5-1: config 0 descriptor?? [ 1276.925547][ T5691] m920x_read = error: -19 [ 1276.930316][ T5691] dvb-usb: error while querying for an remote control event. [ 1276.963973][T29210] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7532'. [ 1276.973140][T29210] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7532'. [ 1277.045047][ T5691] m920x_read = error: -19 [ 1277.056496][ T5691] dvb-usb: error while querying for an remote control event. [ 1277.132497][ T5721] usb 4-1: selecting invalid altsetting 0 [ 1277.166966][T29218] ALSA: seq fatal error: cannot create timer (-22) [ 1277.194318][ T5725] m920x_read = error: -19 [ 1277.199857][ T5725] dvb-usb: error while querying for an remote control event. [ 1277.250471][ T5721] usb 4-1: USB disconnect, device number 80 [ 1277.318157][ T993] cm6533_jd 0003:0D8C:0022.00C9: unknown main item tag 0x0 [ 1277.331729][ T5725] m920x_read = error: -19 [ 1277.339191][ T993] cm6533_jd 0003:0D8C:0022.00C9: item fetching failed at offset 4/5 [ 1277.346174][ T5725] dvb-usb: error while querying for an remote control event. [ 1277.349233][ T993] cm6533_jd 0003:0D8C:0022.00C9: parse failed [ 1277.366433][ T993] cm6533_jd 0003:0D8C:0022.00C9: probe with driver cm6533_jd failed with error -22 [ 1277.415108][ T5691] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1277.478414][T29222] netlink: 8752 bytes leftover after parsing attributes in process `syz.3.7537'. [ 1277.484259][ T5725] m920x_read = error: -19 [ 1277.491901][ T5725] dvb-usb: error while querying for an remote control event. [ 1277.511635][ T5725] usb 5-1: USB disconnect, device number 90 [ 1277.577583][ T5691] usb 8-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 1277.586795][ T5691] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.595459][ T5691] usb 8-1: Product: syz [ 1277.599671][ T5691] usb 8-1: Manufacturer: syz [ 1277.604463][ T24] m920x_read = error: -19 [ 1277.608829][ T24] dvb-usb: error while querying for an remote control event. [ 1277.616653][ T5691] usb 8-1: SerialNumber: syz [ 1277.724374][ T24] m920x_read = error: -19 [ 1277.728935][ T24] dvb-usb: error while querying for an remote control event. [ 1277.819767][T29224] syzkaller0: entered promiscuous mode [ 1277.831272][ T5691] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1277.833072][T29224] syzkaller0: entered allmulticast mode [ 1277.846497][ T5725] m920x_read = error: -19 [ 1277.847066][ T5721] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1277.858508][ T5725] dvb-usb: error while querying for an remote control event. [ 1277.876611][ T5691] usb 8-1: USB disconnect, device number 59 [ 1277.883539][T29224] tipc: Enabled bearer , priority 0 [ 1277.891979][T29223] tipc: Resetting bearer [ 1277.924016][T29223] tipc: Disabling bearer [ 1277.964378][ T5725] m920x_read = error: -19 [ 1277.968777][ T5725] dvb-usb: error while querying for an remote control event. [ 1277.994203][ T5721] usb 4-1: device descriptor read/64, error -71 [ 1278.085641][ T5725] m920x_read = error: -19 [ 1278.092193][ T5725] dvb-usb: error while querying for an remote control event. [ 1278.204351][ T5725] m920x_read = error: -19 [ 1278.208750][ T5725] dvb-usb: error while querying for an remote control event. [ 1278.255130][ T5721] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1278.314236][ T5691] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1278.324231][ T5725] m920x_read = error: -19 [ 1278.328620][ T5725] dvb-usb: error while querying for an remote control event. [ 1278.390967][ T5721] usb 4-1: device descriptor read/64, error -71 [ 1278.446395][ T5725] m920x_read = error: -19 [ 1278.451766][ T5725] dvb-usb: error while querying for an remote control event. [ 1278.465747][ T5691] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1278.476978][ T5691] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1278.487096][ T5691] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1278.496761][ T5691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.508251][T29231] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1278.524620][ T5721] usb usb4-port1: attempt power cycle [ 1278.529374][ T5691] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1278.565426][ T5725] m920x_read = error: -19 [ 1278.574857][ T5725] dvb-usb: error while querying for an remote control event. [ 1278.725573][ T5691] m920x_read = error: -19 [ 1278.730588][ T5691] dvb-usb: error while querying for an remote control event. [ 1278.748172][ T993] usb 5-1: USB disconnect, device number 91 [ 1278.855990][ T5725] m920x_read = error: -19 [ 1278.863583][ T5725] dvb-usb: error while querying for an remote control event. [ 1278.887741][ T5721] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1278.924964][ T5721] usb 4-1: device descriptor read/8, error -71 [ 1278.965370][T29255] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7551'. [ 1278.975055][ T5725] m920x_read = error: -19 [ 1278.983616][ T5725] dvb-usb: error while querying for an remote control event. [ 1279.014448][ T5359] usb 8-1: new full-speed USB device number 60 using dummy_hcd [ 1279.076495][T29258] loop5: detected capacity change from 0 to 7 [ 1279.094393][T29258] Dev loop5: unable to read RDB block 7 [ 1279.104670][ T5725] m920x_read = error: -19 [ 1279.111919][T29258] loop5: unable to read partition table [ 1279.119537][ T5725] dvb-usb: error while querying for an remote control event. [ 1279.129689][T29258] loop5: partition table beyond EOD, truncated [ 1279.142456][T29258] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1279.175723][ T5721] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1279.215013][ T5721] usb 4-1: device descriptor read/8, error -71 [ 1279.223033][ T5359] usb 8-1: config 1 has an invalid interface number: 62 but max is 0 [ 1279.238926][ T5359] usb 8-1: config 1 has no interface number 0 [ 1279.247582][ T5359] usb 8-1: config 1 interface 62 altsetting 227 has an invalid descriptor for endpoint zero, skipping [ 1279.254234][ T5725] m920x_read = error: -19 [ 1279.284000][ T5359] usb 8-1: config 1 interface 62 has no altsetting 0 [ 1279.297390][ T5725] dvb-usb: error while querying for an remote control event. [ 1279.318435][ T5359] usb 8-1: New USB device found, idVendor=2caf, idProduct=13a3, bcdDevice=bd.dc [ 1279.330986][T29253] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7550'. [ 1279.344884][ T5721] usb usb4-port1: unable to enumerate USB device [ 1279.369098][ T5359] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.386196][ T5359] usb 8-1: Product: syz [ 1279.394507][ T5359] usb 8-1: Manufacturer: syz [ 1279.399144][ T5359] usb 8-1: SerialNumber: syz [ 1279.413837][T29265] tipc: Started in network mode [ 1279.422224][T29265] tipc: Node identity baa56cca97c1, cluster identity 4711 [ 1279.436418][T29265] tipc: Enabled bearer , priority 0 [ 1279.444381][ T5725] m920x_read = error: -19 [ 1279.449748][T29265] syzkaller0: entered promiscuous mode [ 1279.457563][T29265] syzkaller0: entered allmulticast mode [ 1279.462039][ T5725] dvb-usb: error while querying for an remote control event. [ 1279.488117][T29265] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7554'. [ 1279.547693][T29265] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.7554'. [ 1279.581174][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1279.581189][ T30] audit: type=1326 audit(1778805841.667:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29268 comm="syz.6.7556" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7119ce59 code=0x7ffc0000 [ 1279.614566][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1279.615521][ T5725] m920x_read = error: -19 [ 1279.630118][ T5725] dvb-usb: error while querying for an remote control event. [ 1279.632516][ T5359] ftdi_sio 8-1:1.62: FTDI USB Serial Device converter detected [ 1279.638090][ T30] audit: type=1326 audit(1778805841.667:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29268 comm="syz.6.7556" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7119ce59 code=0x7ffc0000 [ 1279.671137][ T30] audit: type=1326 audit(1778805841.707:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29268 comm="syz.6.7556" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f4b7119ce59 code=0x7ffc0000 [ 1279.678804][ T5359] ftdi_sio ttyUSB0: unknown device type: 0xbddc [ 1279.696076][ T30] audit: type=1326 audit(1778805841.707:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29268 comm="syz.6.7556" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7119ce59 code=0x7ffc0000 [ 1279.742956][ T5359] usb 8-1: USB disconnect, device number 60 [ 1279.745744][ T5725] m920x_read = error: -19 [ 1279.753535][ T5725] dvb-usb: error while querying for an remote control event. [ 1279.761911][ T30] audit: type=1326 audit(1778805841.707:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29268 comm="syz.6.7556" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7119ce59 code=0x7ffc0000 [ 1279.762599][ T5359] ftdi_sio 8-1:1.62: device disconnected [ 1279.787949][ T30] audit: type=1326 audit(1778805841.707:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29268 comm="syz.6.7556" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b7119ce59 code=0x7ffc0000 [ 1279.864293][ T5725] m920x_read = error: -19 [ 1279.869080][ T5725] dvb-usb: error while querying for an remote control event. [ 1279.884837][ T5721] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1279.894327][ T30] audit: type=1326 audit(1778805841.707:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29268 comm="syz.6.7556" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7119ce59 code=0x7ffc0000 [ 1279.952477][ T30] audit: type=1326 audit(1778805841.707:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29268 comm="syz.6.7556" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7119ce59 code=0x7ffc0000 [ 1279.994272][ T5725] m920x_read = error: -19 [ 1280.001446][ T5725] dvb-usb: error while querying for an remote control event. [ 1280.014611][ T30] audit: type=1326 audit(1778805841.707:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29268 comm="syz.6.7556" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4b7119ce59 code=0x7ffc0000 [ 1280.058256][ T30] audit: type=1326 audit(1778805841.707:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29268 comm="syz.6.7556" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7119ce59 code=0x7ffc0000 [ 1280.100119][ T5721] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1280.109005][ T5721] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1280.123034][ T5721] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1280.124264][ T5725] m920x_read = error: -19 [ 1280.139696][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.169897][ T5725] dvb-usb: error while querying for an remote control event. [ 1280.170033][ T5721] usb 5-1: Product: syz [ 1280.232723][ T5721] usb 5-1: Manufacturer: syz [ 1280.245692][ T5721] usb 5-1: SerialNumber: syz [ 1280.283529][ T5721] usb 5-1: selecting invalid altsetting 1 [ 1280.298693][ T5721] usb 5-1: unit 6 not found! [ 1280.314248][ T5725] m920x_read = error: -19 [ 1280.318711][ T5725] dvb-usb: error while querying for an remote control event. [ 1280.455508][ T5725] m920x_read = error: -19 [ 1280.460063][ T5725] dvb-usb: error while querying for an remote control event. [ 1280.474249][ T5359] tipc: Node number set to 761556170 [ 1280.574230][ T5691] m920x_read = error: -19 [ 1280.578672][ T5691] dvb-usb: error while querying for an remote control event. [ 1280.708042][ T5691] m920x_read = error: -19 [ 1280.713118][ T5691] dvb-usb: error while querying for an remote control event. [ 1280.824455][ T5691] m920x_read = error: -19 [ 1280.829283][ T5691] dvb-usb: error while querying for an remote control event. [ 1280.944434][ T5691] m920x_read = error: -19 [ 1280.950822][ T5691] dvb-usb: error while querying for an remote control event. [ 1281.064267][ T5691] m920x_read = error: -19 [ 1281.069000][ T5691] dvb-usb: error while querying for an remote control event. [ 1281.086478][ T5721] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1281.101486][T29264] tipc: Resetting bearer [ 1281.117061][ T5721] usb 5-1: selecting invalid altsetting 1 [ 1281.145804][ T5721] usb 5-1: unit 6 not found! [ 1281.153177][ T5721] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1281.164584][T29264] tipc: Disabling bearer [ 1281.172766][ T5721] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1281.184535][ T5691] m920x_read = error: -19 [ 1281.189049][ T5721] usb 5-1: selecting invalid altsetting 1 [ 1281.196640][ T5721] usb 5-1: unit 6 not found! [ 1281.201429][ T5691] dvb-usb: error while querying for an remote control event. [ 1281.201928][ T5721] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1281.317681][ T5721] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1281.334402][ T5691] m920x_read = error: -19 [ 1281.339817][ T5721] usb 5-1: USB disconnect, device number 92 [ 1281.343704][ T5691] dvb-usb: error while querying for an remote control event. [ 1281.388123][ T5634] udevd[5634]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1281.474270][ T5691] m920x_read = error: -19 [ 1281.485998][ T5691] dvb-usb: error while querying for an remote control event. [ 1281.604320][ T5691] m920x_read = error: -19 [ 1281.610955][ T5691] dvb-usb: error while querying for an remote control event. [ 1281.724436][ T5691] m920x_read = error: -19 [ 1281.733334][ T5691] dvb-usb: error while querying for an remote control event. [ 1281.734230][ T5359] usb 8-1: new full-speed USB device number 61 using dummy_hcd [ 1281.793907][T29310] netlink: 8752 bytes leftover after parsing attributes in process `syz.5.7569'. [ 1281.831124][T29312] netlink: 'syz.3.7570': attribute type 1 has an invalid length. [ 1281.847256][T29315] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7571'. [ 1281.861525][T29312] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1281.874678][ T5725] m920x_read = error: -19 [ 1281.879432][T29312] vlan3: entered allmulticast mode [ 1281.882315][ T5725] dvb-usb: error while querying for an remote control event. [ 1281.884654][T29312] bond4: entered allmulticast mode [ 1281.913617][T29312] bond4: (slave geneve3): making interface the new active one [ 1281.921472][T29312] geneve3: entered allmulticast mode [ 1281.930061][T29312] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 1281.945937][ T5359] usb 8-1: config 1 has an invalid interface number: 62 but max is 0 [ 1281.962381][ T5359] usb 8-1: config 1 has no interface number 0 [ 1281.975064][ T5359] usb 8-1: config 1 interface 62 altsetting 227 has an invalid descriptor for endpoint zero, skipping [ 1281.987262][ T5359] usb 8-1: config 1 interface 62 has no altsetting 0 [ 1281.996956][ T5359] usb 8-1: New USB device found, idVendor=2caf, idProduct=13a3, bcdDevice=bd.dc [ 1282.008366][ T5359] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.016608][ T5359] usb 8-1: Product: syz [ 1282.020870][ T5359] usb 8-1: Manufacturer: syz [ 1282.024338][ T24] m920x_read = error: -19 [ 1282.030105][ T5359] usb 8-1: SerialNumber: syz [ 1282.034625][ T24] dvb-usb: error while querying for an remote control event. [ 1282.058268][ T5691] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1282.082622][T29317] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7572'. [ 1282.170315][T29326] vlan4: entered promiscuous mode [ 1282.177524][ T808] m920x_read = error: -19 [ 1282.182457][ T808] dvb-usb: error while querying for an remote control event. [ 1282.204474][ T5691] usb 6-1: device descriptor read/64, error -71 [ 1282.218857][T29328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7576'. [ 1282.266875][ T5359] ftdi_sio 8-1:1.62: FTDI USB Serial Device converter detected [ 1282.293243][ T5359] ftdi_sio ttyUSB0: unknown device type: 0xbddc [ 1282.304283][ T24] m920x_read = error: -19 [ 1282.308815][ T24] dvb-usb: error while querying for an remote control event. [ 1282.319009][ T5359] usb 8-1: USB disconnect, device number 61 [ 1282.341658][ T5359] ftdi_sio 8-1:1.62: device disconnected [ 1282.424515][ T24] m920x_read = error: -19 [ 1282.428911][ T24] dvb-usb: error while querying for an remote control event. [ 1282.444314][ T5691] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1282.554355][ T24] m920x_read = error: -19 [ 1282.558956][ T24] dvb-usb: error while querying for an remote control event. [ 1282.584198][ T5691] usb 6-1: device descriptor read/64, error -71 [ 1282.642993][T29339] pim6reg0: tun_chr_ioctl cmd 1074025676 [ 1282.649263][T29339] pim6reg0: owner set to 0 [ 1282.684365][ T24] m920x_read = error: -19 [ 1282.688907][ T24] dvb-usb: error while querying for an remote control event. [ 1282.715139][ T5691] usb usb6-port1: attempt power cycle [ 1282.805464][ T24] m920x_read = error: -19 [ 1282.824867][ T24] dvb-usb: error while querying for an remote control event. [ 1282.944273][ T24] m920x_read = error: -19 [ 1282.948776][ T24] dvb-usb: error while querying for an remote control event. [ 1283.064384][ T5691] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1283.076076][ T24] m920x_read = error: -19 [ 1283.080642][ T24] dvb-usb: error while querying for an remote control event. [ 1283.096575][ T5691] usb 6-1: device descriptor read/8, error -71 [ 1283.194343][ T24] m920x_read = error: -19 [ 1283.203521][ T24] dvb-usb: error while querying for an remote control event. [ 1283.324283][ T24] m920x_read = error: -19 [ 1283.332691][ T24] dvb-usb: error while querying for an remote control event. [ 1283.346688][ T5691] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1283.375194][ T5691] usb 6-1: device descriptor read/8, error -71 [ 1283.386994][T29353] No such timeout policy "syz1" [ 1283.396817][T29357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7586'. [ 1283.464680][ T24] m920x_read = error: -19 [ 1283.469623][ T24] dvb-usb: error while querying for an remote control event. [ 1283.495829][ T5691] usb usb6-port1: unable to enumerate USB device [ 1283.626239][ T5691] m920x_read = error: -19 [ 1283.649379][ T5691] dvb-usb: error while querying for an remote control event. [ 1283.691555][T29364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1283.753247][T29359] syzkaller0: entered promiscuous mode [ 1283.781770][T29359] syzkaller0: entered allmulticast mode [ 1283.804997][ T24] m920x_read = error: -19 [ 1283.815158][ T24] dvb-usb: error while querying for an remote control event. [ 1283.833190][T29361] tipc: Enabled bearer , priority 0 [ 1283.869899][T29358] tipc: Resetting bearer [ 1283.930410][T29358] tipc: Disabling bearer [ 1283.945129][ T24] m920x_read = error: -19 [ 1283.951230][ T24] dvb-usb: error while querying for an remote control event. [ 1284.100399][ T24] m920x_read = error: -19 [ 1284.122803][ T24] dvb-usb: error while querying for an remote control event. [ 1284.269448][ T24] m920x_read = error: -19 [ 1284.281906][ T24] dvb-usb: error while querying for an remote control event. [ 1284.433259][ T24] m920x_read = error: -19 [ 1284.448173][ T24] dvb-usb: error while querying for an remote control event. [ 1284.564681][ T5359] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1284.578353][ T24] m920x_read = error: -19 [ 1284.582804][ T24] dvb-usb: error while querying for an remote control event. [ 1284.725469][ T24] m920x_read = error: -19 [ 1284.745052][ T24] dvb-usb: error while querying for an remote control event. [ 1284.784263][ T5359] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1284.839564][ T5359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.865521][ T5691] m920x_read = error: -19 [ 1284.870481][ T5691] dvb-usb: error while querying for an remote control event. [ 1284.895755][ T5359] usb 5-1: Product: syz [ 1284.917840][ T5359] usb 5-1: Manufacturer: syz [ 1284.932335][ T5359] usb 5-1: SerialNumber: syz [ 1285.004677][ T24] m920x_read = error: -19 [ 1285.009112][ T24] dvb-usb: error while querying for an remote control event. [ 1285.136869][ T5691] m920x_read = error: -19 [ 1285.141374][ T5691] dvb-usb: error while querying for an remote control event. [ 1285.171554][T29381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7593'. [ 1285.190533][ T5359] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1285.211713][ T5359] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1285.222652][ T5359] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1285.255586][ T5359] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1285.264841][ T5691] m920x_read = error: -19 [ 1285.270420][ T5691] dvb-usb: error while querying for an remote control event. [ 1285.272011][ T5359] usb 5-1: USB disconnect, device number 93 [ 1285.398773][T29397] vcan1: entered promiscuous mode [ 1285.403868][T29397] vcan1: entered allmulticast mode [ 1285.415172][ T5691] m920x_read = error: -19 [ 1285.419714][ T5691] dvb-usb: error while querying for an remote control event. [ 1285.534328][ T24] m920x_read = error: -19 [ 1285.534347][ T24] dvb-usb: error while querying for an remote control event. [ 1285.643903][T29403] ip6tnl2: entered allmulticast mode [ 1285.644248][ T5691] m920x_read = error: -19 [ 1285.652822][T29403] syzkaller0: entered promiscuous mode [ 1285.654722][ T5691] dvb-usb: error while querying for an remote control event. [ 1285.659195][T29403] syzkaller0: entered allmulticast mode [ 1285.779682][ T5691] m920x_read = error: -19 [ 1285.788327][ T5691] dvb-usb: error while querying for an remote control event. [ 1285.834728][T29409] netlink: 8752 bytes leftover after parsing attributes in process `syz.4.7604'. [ 1285.904571][ T5691] m920x_read = error: -19 [ 1285.909044][ T5691] dvb-usb: error while querying for an remote control event. [ 1286.024474][ T5691] m920x_read = error: -19 [ 1286.028894][ T5691] dvb-usb: error while querying for an remote control event. [ 1286.104459][ T5359] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1286.144264][ T5691] m920x_read = error: -19 [ 1286.148679][ T5691] dvb-usb: error while querying for an remote control event. [ 1286.244200][ T5359] usb 5-1: device descriptor read/64, error -71 [ 1286.264232][ T5691] m920x_read = error: -19 [ 1286.271324][ T5691] dvb-usb: error while querying for an remote control event. [ 1286.384532][ T5691] m920x_read = error: -19 [ 1286.389081][ T5691] dvb-usb: error while querying for an remote control event. [ 1286.484192][ T5359] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1286.505368][ T5691] m920x_read = error: -19 [ 1286.509807][ T5691] dvb-usb: error while querying for an remote control event. [ 1286.624169][ T5359] usb 5-1: device descriptor read/64, error -71 [ 1286.624822][ T5691] m920x_read = error: -19 [ 1286.635971][ T5691] dvb-usb: error while querying for an remote control event. [ 1286.744340][ T5691] m920x_read = error: -19 [ 1286.745602][ T5359] usb usb5-port1: attempt power cycle [ 1286.754482][ T5691] dvb-usb: error while querying for an remote control event. [ 1286.841270][T29421] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7608'. [ 1286.864233][ T5691] m920x_read = error: -19 [ 1286.873308][ T5691] dvb-usb: error while querying for an remote control event. [ 1286.994246][ T5691] m920x_read = error: -19 [ 1287.002774][ T5691] dvb-usb: error while querying for an remote control event. [ 1287.094453][ T5359] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1287.125011][ T5691] m920x_read = error: -19 [ 1287.134297][ T5691] dvb-usb: error while querying for an remote control event. [ 1287.149666][ T5359] usb 5-1: device descriptor read/8, error -71 [ 1287.238677][T29429] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7611'. [ 1287.264775][ T24] m920x_read = error: -19 [ 1287.283592][ T24] dvb-usb: error while querying for an remote control event. [ 1287.404171][ T5359] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1287.414239][ T24] m920x_read = error: -19 [ 1287.424302][ T24] dvb-usb: error while querying for an remote control event. [ 1287.441022][ T5359] usb 5-1: device descriptor read/8, error -71 [ 1287.544230][ T24] m920x_read = error: -19 [ 1287.549798][ T24] dvb-usb: error while querying for an remote control event. [ 1287.566879][ T5359] usb usb5-port1: unable to enumerate USB device [ 1287.664231][ T24] m920x_read = error: -19 [ 1287.669343][ T24] dvb-usb: error while querying for an remote control event. [ 1287.784215][ T24] m920x_read = error: -19 [ 1287.788733][ T24] dvb-usb: error while querying for an remote control event. [ 1287.904281][ T24] m920x_read = error: -19 [ 1287.916928][ T24] dvb-usb: error while querying for an remote control event. [ 1288.047506][ T24] m920x_read = error: -19 [ 1288.061880][ T24] dvb-usb: error while querying for an remote control event. [ 1288.069678][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1288.069693][ T30] audit: type=1326 audit(1778805850.147:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29446 comm="syz.6.7618" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7119ce59 code=0x7ffc0000 [ 1288.102940][ T30] audit: type=1326 audit(1778805850.147:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29446 comm="syz.6.7618" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7119ce59 code=0x7ffc0000 [ 1288.131516][ T30] audit: type=1326 audit(1778805850.147:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29446 comm="syz.6.7618" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f4b7119ce59 code=0x7ffc0000 [ 1288.182769][ T30] audit: type=1326 audit(1778805850.157:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29446 comm="syz.6.7618" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7119ce59 code=0x7ffc0000 [ 1288.208173][ T24] m920x_read = error: -19 [ 1288.213473][ T24] dvb-usb: error while querying for an remote control event. [ 1288.218051][ T30] audit: type=1326 audit(1778805850.157:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29446 comm="syz.6.7618" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7119ce59 code=0x7ffc0000 [ 1288.252406][ T30] audit: type=1326 audit(1778805850.157:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29446 comm="syz.6.7618" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b7119ce59 code=0x7ffc0000 [ 1288.281945][ T30] audit: type=1326 audit(1778805850.157:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29446 comm="syz.6.7618" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7119ce59 code=0x7ffc0000 [ 1288.307426][ T30] audit: type=1326 audit(1778805850.157:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29446 comm="syz.6.7618" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7119ce59 code=0x7ffc0000 [ 1288.333931][ T30] audit: type=1326 audit(1778805850.157:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29446 comm="syz.6.7618" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4b7119ce59 code=0x7ffc0000 [ 1288.358761][ T24] m920x_read = error: -19 [ 1288.369157][ T24] dvb-usb: error while querying for an remote control event. [ 1288.473787][ T30] audit: type=1326 audit(1778805850.157:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29446 comm="syz.6.7618" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7119ce59 code=0x7ffc0000 [ 1288.501276][ T24] m920x_read = error: -19 [ 1288.505176][ T993] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 1288.505838][ T24] dvb-usb: error while querying for an remote control event. [ 1288.654334][ T24] m920x_read = error: -19 [ 1288.658814][ T24] dvb-usb: error while querying for an remote control event. [ 1288.698518][ T993] usb 4-1: config 1 has an invalid interface number: 62 but max is 1 [ 1288.706833][ T993] usb 4-1: config 1 has an invalid interface number: 139 but max is 1 [ 1288.718366][ T993] usb 4-1: config 1 has no interface number 0 [ 1288.734811][ T993] usb 4-1: config 1 has no interface number 1 [ 1288.764582][ T993] usb 4-1: config 1 interface 62 altsetting 227 has an invalid descriptor for endpoint zero, skipping [ 1288.776880][ T24] m920x_read = error: -19 [ 1288.792942][ T24] dvb-usb: error while querying for an remote control event. [ 1288.807301][ T993] usb 4-1: config 1 interface 62 has no altsetting 0 [ 1288.836075][ T993] usb 4-1: config 1 interface 139 has no altsetting 0 [ 1288.884576][ T993] usb 4-1: New USB device found, idVendor=2caf, idProduct=13a3, bcdDevice=bd.dc [ 1288.893766][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.934729][ T5691] m920x_read = error: -19 [ 1288.969992][ T5691] dvb-usb: error while querying for an remote control event. [ 1288.971965][ T993] usb 4-1: Product: syz [ 1289.023672][ T993] usb 4-1: Manufacturer: syz [ 1289.049349][ T993] usb 4-1: SerialNumber: syz [ 1289.135585][ T5691] m920x_read = error: -19 [ 1289.140491][ T5691] dvb-usb: error while querying for an remote control event. [ 1289.279362][ T993] ftdi_sio 4-1:1.62: FTDI USB Serial Device converter detected [ 1289.288887][ T5359] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1289.308578][ T24] m920x_read = error: -19 [ 1289.315945][ T993] ftdi_sio ttyUSB0: unknown device type: 0xbddc [ 1289.328287][ T24] dvb-usb: error while querying for an remote control event. [ 1289.358651][ T993] rndis_host 4-1:1.139: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1289.380189][ T993] ftdi_sio 4-1:1.139: FTDI USB Serial Device converter detected [ 1289.399487][ T993] ftdi_sio ttyUSB1: unknown device type: 0xbddc [ 1289.426983][ T993] usb 4-1: USB disconnect, device number 85 [ 1289.444306][ T24] m920x_read = error: -19 [ 1289.454576][ T24] dvb-usb: error while querying for an remote control event. [ 1289.464614][ T5721] usb 6-1: new full-speed USB device number 105 using dummy_hcd [ 1289.474245][ T5359] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.488528][ T993] ftdi_sio 4-1:1.62: device disconnected [ 1289.512749][ T5359] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1289.524942][ T993] ftdi_sio 4-1:1.139: device disconnected [ 1289.534787][ T5359] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1289.563270][ T5359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1289.585073][ T5359] usb 5-1: SerialNumber: syz [ 1289.614321][ T24] m920x_read = error: -19 [ 1289.627905][ T24] dvb-usb: error while querying for an remote control event. [ 1289.650662][ T5721] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1289.660058][ T5721] usb 6-1: not running at top speed; connect to a high speed hub [ 1289.676271][ T5721] usb 6-1: config 17 has an invalid interface number: 8 but max is 1 [ 1289.685086][ T5721] usb 6-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 1289.694515][ T5721] usb 6-1: config 17 has no interface number 0 [ 1289.701005][ T5721] usb 6-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1289.712223][ T5721] usb 6-1: config 17 interface 8 has no altsetting 0 [ 1289.722828][ T5721] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 1289.733624][ T5721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.742258][ T5721] usb 6-1: Product: syz [ 1289.747824][ T5721] usb 6-1: Manufacturer: syz [ 1289.752659][ T5721] usb 6-1: SerialNumber: syz [ 1289.765280][ T24] m920x_read = error: -19 [ 1289.775798][ T24] dvb-usb: error while querying for an remote control event. [ 1289.867078][ T5359] usb 5-1: 0:2 : does not exist [ 1289.897899][ T24] m920x_read = error: -19 [ 1289.908188][ T24] dvb-usb: error while querying for an remote control event. [ 1289.940129][ T5359] usb 5-1: USB disconnect, device number 98 [ 1290.008577][ T5634] udevd[5634]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1290.025589][ T24] m920x_read = error: -19 [ 1290.030386][ T24] dvb-usb: error while querying for an remote control event. [ 1290.058181][T29488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7628'. [ 1290.144414][ T5691] m920x_read = error: -19 [ 1290.152366][ T5691] dvb-usb: error while querying for an remote control event. [ 1290.264355][ T5691] m920x_read = error: -19 [ 1290.276175][ T5691] dvb-usb: error while querying for an remote control event. [ 1290.294450][ T5359] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1290.394314][ T5691] m920x_read = error: -19 [ 1290.404559][ T5691] dvb-usb: error while querying for an remote control event. [ 1290.474694][ T5359] usb 5-1: Using ep0 maxpacket: 16 [ 1290.490664][ T5359] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1290.513122][ T5359] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1290.524227][ T5691] m920x_read = error: -19 [ 1290.527130][ T5359] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1290.535633][ T5359] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1290.540381][ T5691] dvb-usb: error while querying for an remote control event. [ 1290.553801][ T5359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.576468][ T5359] usb 5-1: config 0 descriptor?? [ 1290.583794][T29493] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[25133] was attempted by "\x09   Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ ./binderfs/binder0 syzkaller0 *  \x0c  X  À   [ 1290.661364][ T5721] usb 6-1: selecting invalid altsetting 0 [ 1290.674232][ T24] m920x_read = error: -19 [ 1290.839730][T29498] netlink: 8752 bytes leftover after parsing attributes in process `syz.5.7635'. [ 1290.877934][ T24] dvb-usb: error while querying for an remote control event. [ 1290.953808][T29506] netlink: 'syz.3.7638': attribute type 10 has an invalid length. [ 1290.990231][ T5721] usb 6-1: USB disconnect, device number 105 [ 1290.994311][ T24] m920x_read = error: -19 [ 1291.000981][ T24] dvb-usb: error while querying for an remote control event. [ 1291.056773][ T5634] udevd[5634]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1291.142879][ T24] m920x_read = error: -19 [ 1291.188030][ T24] dvb-usb: error while querying for an remote control event. [ 1291.324232][ T24] m920x_read = error: -19 [ 1291.342428][ T24] dvb-usb: error while querying for an remote control event. [ 1291.384514][ T5721] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1291.474232][ T24] m920x_read = error: -19 [ 1291.482367][ T24] dvb-usb: error while querying for an remote control event. [ 1291.524532][ T5721] usb 6-1: device descriptor read/64, error -71 [ 1291.605524][ T24] m920x_read = error: -19 [ 1291.622377][ T24] dvb-usb: error while querying for an remote control event. [ 1291.661351][T29509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7639'. [ 1291.745391][ T24] m920x_read = error: -19 [ 1291.753050][ T24] dvb-usb: error while querying for an remote control event. [ 1291.790976][ T5721] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1291.846795][T29515] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7631'. [ 1291.875143][ T24] m920x_read = error: -19 [ 1291.895739][ T24] dvb-usb: error while querying for an remote control event. [ 1291.944626][ T5721] usb 6-1: device descriptor read/64, error -71 [ 1292.024490][ T24] m920x_read = error: -19 [ 1292.049008][ T24] dvb-usb: error while querying for an remote control event. [ 1292.084603][ T5721] usb usb6-port1: attempt power cycle [ 1292.185615][ T24] m920x_read = error: -19 [ 1292.197802][ T24] dvb-usb: error while querying for an remote control event. [ 1292.224838][T29527] syzkaller0: entered promiscuous mode [ 1292.235764][T29527] syzkaller0: entered allmulticast mode [ 1292.335760][ T5691] m920x_read = error: -19 [ 1292.344860][ T5691] dvb-usb: error while querying for an remote control event. [ 1292.381385][T29527] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7645'. [ 1292.444289][ T5721] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1292.484442][ T5691] m920x_read = error: -19 [ 1292.490148][ T5721] usb 6-1: device descriptor read/8, error -71 [ 1292.503089][ T5691] dvb-usb: error while querying for an remote control event. [ 1292.635503][ T5691] m920x_read = error: -19 [ 1292.645490][ T5691] dvb-usb: error while querying for an remote control event. [ 1292.667615][T29534] netlink: 'syz.3.7649': attribute type 1 has an invalid length. [ 1292.744181][ T5721] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1292.772388][T29534] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1292.784221][ T5691] m920x_read = error: -19 [ 1292.790288][ T5691] dvb-usb: error while querying for an remote control event. [ 1292.815102][ T5721] usb 6-1: device descriptor read/8, error -71 [ 1292.838369][T29537] vlan4: entered allmulticast mode [ 1292.850838][T29537] bond6: entered allmulticast mode [ 1292.904823][ T5691] m920x_read = error: -19 [ 1292.909728][ T5691] dvb-usb: error while querying for an remote control event. [ 1292.944410][ T5721] usb usb6-port1: unable to enumerate USB device [ 1293.036021][ T5691] m920x_read = error: -19 [ 1293.048596][ T5691] dvb-usb: error while querying for an remote control event. [ 1293.201124][ T5691] m920x_read = error: -19 [ 1293.218588][ T5691] dvb-usb: error while querying for an remote control event. [ 1293.374273][ T5691] m920x_read = error: -19 [ 1293.395923][ T5691] dvb-usb: error while querying for an remote control event. [ 1293.473962][ T5359] usbhid 5-1:0.0: can't add hid device: -71 [ 1293.514850][ T5359] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1293.524465][ T5691] m920x_read = error: -19 [ 1293.543913][ T5691] dvb-usb: error while querying for an remote control event. [ 1293.572693][ T5359] usb 5-1: USB disconnect, device number 99 [ 1293.704628][ T5691] m920x_read = error: -19 [ 1293.713655][ T5691] dvb-usb: error while querying for an remote control event. [ 1293.834270][ T5691] m920x_read = error: -19 [ 1293.838913][ T5691] dvb-usb: error while querying for an remote control event. [ 1293.967325][ T5691] m920x_read = error: -19 [ 1293.978867][ T5691] dvb-usb: error while querying for an remote control event. [ 1294.104254][ T5691] m920x_read = error: -19 [ 1294.115899][ T5691] dvb-usb: error while querying for an remote control event. [ 1294.244417][ T5691] m920x_read = error: -19 [ 1294.248938][ T5691] dvb-usb: error while querying for an remote control event. [ 1294.394235][ T5691] m920x_read = error: -19 [ 1294.406633][ T5691] dvb-usb: error while querying for an remote control event. [ 1294.550165][ T24] m920x_read = error: -19 [ 1294.573091][ T24] dvb-usb: error while querying for an remote control event. [ 1294.724313][ T24] m920x_read = error: -19 [ 1294.753553][ T24] dvb-usb: error while querying for an remote control event. [ 1294.894619][ T24] m920x_read = error: -19 [ 1294.914901][ T24] dvb-usb: error while querying for an remote control event. [ 1294.933401][T29575] syzkaller0: entered promiscuous mode [ 1294.947195][T29575] syzkaller0: entered allmulticast mode [ 1295.054341][ T24] m920x_read = error: -19 [ 1295.058941][ T24] dvb-usb: error while querying for an remote control event. [ 1295.142964][T29579] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1295.179329][ T24] m920x_read = error: -19 [ 1295.200098][ T24] dvb-usb: error while querying for an remote control event. [ 1295.292063][T29591] netlink: 8752 bytes leftover after parsing attributes in process `syz.4.7664'. [ 1295.334944][ T24] m920x_read = error: -19 [ 1295.345070][ T24] dvb-usb: error while querying for an remote control event. [ 1295.457425][ T24] m920x_read = error: -19 [ 1295.463398][ T24] dvb-usb: error while querying for an remote control event. [ 1295.564964][ T5721] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1295.594462][ T24] m920x_read = error: -19 [ 1295.603197][ T24] dvb-usb: error while querying for an remote control event. [ 1295.688404][T29593] FAULT_INJECTION: forcing a failure. [ 1295.688404][T29593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1295.703210][T29593] CPU: 1 UID: 0 PID: 29593 Comm: syz.3.7665 Tainted: G L syzkaller #0 PREEMPT(full) [ 1295.703235][T29593] Tainted: [L]=SOFTLOCKUP [ 1295.703241][T29593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1295.703251][T29593] Call Trace: [ 1295.703258][T29593] [ 1295.703265][T29593] dump_stack_lvl+0xe8/0x150 [ 1295.703288][T29593] should_fail_ex+0x412/0x560 [ 1295.703311][T29593] _copy_to_user+0x31/0xb0 [ 1295.703341][T29593] generic_map_lookup_batch+0xa39/0xeb0 [ 1295.703372][T29593] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1295.703391][T29593] ? __fget_files+0x2a/0x420 [ 1295.703412][T29593] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1295.703431][T29593] bpf_map_do_batch+0x285/0x630 [ 1295.703446][T29593] ? security_bpf+0x7e/0x2d0 [ 1295.703466][T29593] __sys_bpf+0x6b4/0x950 [ 1295.703489][T29593] ? __pfx___sys_bpf+0x10/0x10 [ 1295.703521][T29593] ? ksys_write+0x242/0x270 [ 1295.703543][T29593] ? __pfx_ksys_write+0x10/0x10 [ 1295.703565][T29593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.703581][T29593] __x64_sys_bpf+0x7c/0x90 [ 1295.703601][T29593] do_syscall_64+0x15f/0xf80 [ 1295.703620][T29593] ? trace_irq_disable+0x3b/0x140 [ 1295.703641][T29593] ? clear_bhb_loop+0x40/0x90 [ 1295.703660][T29593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.703674][T29593] RIP: 0033:0x7f639959ce59 [ 1295.703690][T29593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1295.703702][T29593] RSP: 002b:00007f63977ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1295.703718][T29593] RAX: ffffffffffffffda RBX: 00007f6399815fa0 RCX: 00007f639959ce59 [ 1295.703729][T29593] RDX: 0000000000000038 RSI: 0000200000000340 RDI: 0000000000000018 [ 1295.703739][T29593] RBP: 00007f63977ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1295.703748][T29593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1295.703757][T29593] R13: 00007f6399816038 R14: 00007f6399815fa0 R15: 00007f639993fa48 [ 1295.703782][T29593] [ 1295.706927][ T5721] usb 5-1: device descriptor read/64, error -71 [ 1295.754269][ T24] m920x_read = error: -19 [ 1295.922008][ T24] dvb-usb: error while querying for an remote control event. [ 1296.034318][ T24] m920x_read = error: -19 [ 1296.038745][ T24] dvb-usb: error while querying for an remote control event. [ 1296.064261][ T5721] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1296.116594][T29597] kvm: user requested TSC rate below hardware speed [ 1296.128541][T29597] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7667'. [ 1296.154208][ T24] m920x_read = error: -19 [ 1296.160294][ T24] dvb-usb: error while querying for an remote control event. [ 1296.174176][ T5690] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 1296.224211][ T5721] usb 5-1: device descriptor read/64, error -71 [ 1296.274245][ T24] m920x_read = error: -19 [ 1296.291017][ T24] dvb-usb: error while querying for an remote control event. [ 1296.347110][ T5690] usb 4-1: config 1 has an invalid interface number: 62 but max is 1 [ 1296.354467][ T5721] usb usb5-port1: attempt power cycle [ 1296.357866][ T5690] usb 4-1: config 1 has an invalid interface number: 139 but max is 1 [ 1296.395217][ T5690] usb 4-1: config 1 has no interface number 0 [ 1296.401933][ T5690] usb 4-1: config 1 has no interface number 1 [ 1296.409053][ T5690] usb 4-1: config 1 interface 62 altsetting 227 has an invalid descriptor for endpoint zero, skipping [ 1296.422172][ T5690] usb 4-1: config 1 interface 62 has no altsetting 0 [ 1296.430305][ T24] m920x_read = error: -19 [ 1296.434953][ T24] dvb-usb: error while querying for an remote control event. [ 1296.442502][ T5690] usb 4-1: config 1 interface 139 has no altsetting 0 [ 1296.453275][ T5690] usb 4-1: New USB device found, idVendor=2caf, idProduct=13a3, bcdDevice=bd.dc [ 1296.465227][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.473425][ T5690] usb 4-1: Product: syz [ 1296.478326][ T5690] usb 4-1: Manufacturer: syz [ 1296.484008][ T5690] usb 4-1: SerialNumber: syz [ 1296.538394][T29608] netlink: 'syz.6.7672': attribute type 32 has an invalid length. [ 1296.547874][T29608] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.7672'. [ 1296.556810][ T24] m920x_read = error: -19 [ 1296.563978][ T24] dvb-usb: error while querying for an remote control event. [ 1296.715581][ T5721] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1296.717443][ T5690] ftdi_sio 4-1:1.62: FTDI USB Serial Device converter detected [ 1296.733337][ T24] m920x_read = error: -19 [ 1296.741340][ T24] dvb-usb: error while querying for an remote control event. [ 1296.766890][ T5721] usb 5-1: device descriptor read/8, error -71 [ 1296.773955][ T5690] ftdi_sio ttyUSB0: unknown device type: 0xbddc [ 1296.813980][ T5690] rndis_host 4-1:1.139: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1296.845572][ T5690] ftdi_sio 4-1:1.139: FTDI USB Serial Device converter detected [ 1296.854753][T29614] syzkaller0: entered promiscuous mode [ 1296.861084][T29614] syzkaller0: entered allmulticast mode [ 1296.875714][ T24] m920x_read = error: -19 [ 1296.880497][ T24] dvb-usb: error while querying for an remote control event. [ 1296.889533][ T5690] ftdi_sio ttyUSB1: unknown device type: 0xbddc [ 1296.907146][ T5690] usb 4-1: USB disconnect, device number 86 [ 1296.976539][ T5690] ftdi_sio 4-1:1.62: device disconnected [ 1297.007945][ T5690] ftdi_sio 4-1:1.139: device disconnected [ 1297.026942][ T24] m920x_read = error: -19 [ 1297.034576][ T5721] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1297.052009][ T24] dvb-usb: error while querying for an remote control event. [ 1297.086430][ T5721] usb 5-1: device descriptor read/8, error -71 [ 1297.129696][T29616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7674'. [ 1297.194429][ T24] m920x_read = error: -19 [ 1297.198921][ T24] dvb-usb: error while querying for an remote control event. [ 1297.215825][ T5721] usb usb5-port1: unable to enumerate USB device [ 1297.319679][ T5690] m920x_read = error: -19 [ 1297.336020][ T5690] dvb-usb: error while querying for an remote control event. [ 1297.373315][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1297.373331][ T30] audit: type=1326 audit(1778805859.457:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29618 comm="syz.5.7677" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dbf9ce59 code=0x7ffc0000 [ 1297.454296][ T30] audit: type=1326 audit(1778805859.497:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29618 comm="syz.5.7677" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dbf9ce59 code=0x7ffc0000 [ 1297.484909][ T5690] m920x_read = error: -19 [ 1297.489465][ T5690] dvb-usb: error while querying for an remote control event. [ 1297.509623][ T30] audit: type=1326 audit(1778805859.497:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29618 comm="syz.5.7677" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f04dbf9ce59 code=0x7ffc0000 [ 1297.615038][ T5690] m920x_read = error: -19 [ 1297.619698][ T5690] dvb-usb: error while querying for an remote control event. [ 1297.692834][ T30] audit: type=1326 audit(1778805859.497:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29618 comm="syz.5.7677" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dbf9ce59 code=0x7ffc0000 [ 1297.764251][ T5690] m920x_read = error: -19 [ 1297.780073][ T5690] dvb-usb: error while querying for an remote control event. [ 1297.853297][ T30] audit: type=1326 audit(1778805859.497:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29618 comm="syz.5.7677" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dbf9ce59 code=0x7ffc0000 [ 1297.925072][T29634] netlink: 31 bytes leftover after parsing attributes in process `syz.3.7681'. [ 1297.939202][ T5690] m920x_read = error: -19 [ 1297.950519][ T5690] dvb-usb: error while querying for an remote control event. [ 1297.992490][ T30] audit: type=1326 audit(1778805859.497:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29618 comm="syz.5.7677" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f04dbf9ce59 code=0x7ffc0000 [ 1298.097026][ T5690] m920x_read = error: -19 [ 1298.103604][ T5690] dvb-usb: error while querying for an remote control event. [ 1298.126317][ T30] audit: type=1326 audit(1778805859.497:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29618 comm="syz.5.7677" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dbf9ce59 code=0x7ffc0000 [ 1298.213272][T29640] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7684'. [ 1298.226768][ T30] audit: type=1326 audit(1778805859.497:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29618 comm="syz.5.7677" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dbf9ce59 code=0x7ffc0000 [ 1298.304235][ T24] m920x_read = error: -19 [ 1298.308817][ T24] dvb-usb: error while querying for an remote control event. [ 1298.337800][ T30] audit: type=1326 audit(1778805859.497:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29618 comm="syz.5.7677" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f04dbf9ce59 code=0x7ffc0000 [ 1298.434215][ T5690] m920x_read = error: -19 [ 1298.438713][ T30] audit: type=1326 audit(1778805859.497:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29618 comm="syz.5.7677" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dbf9ce59 code=0x7ffc0000 [ 1298.438795][ T5690] dvb-usb: error while querying for an remote control event. [ 1298.558228][T29648] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1298.564755][T29648] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1298.588916][T29648] vhci_hcd vhci_hcd.0: Device attached [ 1298.603467][T29651] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 1298.610092][T29651] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1298.635590][T29651] vhci_hcd vhci_hcd.0: Device attached [ 1298.652985][T29648] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(5) [ 1298.659512][T29648] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1298.676173][ T5690] m920x_read = error: -19 [ 1298.683960][ T5690] dvb-usb: error while querying for an remote control event. [ 1298.691901][T29648] vhci_hcd vhci_hcd.0: Device attached [ 1298.706627][T29651] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(10) [ 1298.713249][T29651] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1298.742249][T29651] vhci_hcd vhci_hcd.0: Device attached [ 1298.750158][T29648] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(12) [ 1298.756844][T29648] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1298.765072][T29648] vhci_hcd vhci_hcd.0: Device attached [ 1298.771754][T29648] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1298.782064][T29648] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1298.795527][ T5721] usb 8-1: new full-speed USB device number 62 using dummy_hcd [ 1298.804235][ T5690] m920x_read = error: -19 [ 1298.804322][T29648] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(19) [ 1298.815157][T29648] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1298.823478][T29648] vhci_hcd vhci_hcd.0: Device attached [ 1298.829229][T23545] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 1298.837254][ T5690] dvb-usb: error while querying for an remote control event. [ 1298.946624][ T5721] usb 8-1: config 1 has an invalid interface number: 62 but max is 1 [ 1298.963509][ T5721] usb 8-1: config 1 has an invalid interface number: 139 but max is 1 [ 1298.972485][T29663] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7688'. [ 1298.973225][ T5721] usb 8-1: config 1 has no interface number 0 [ 1298.988972][ T5690] m920x_read = error: -19 [ 1298.989127][ T5721] usb 8-1: config 1 has no interface number 1 [ 1299.003666][ T5721] usb 8-1: config 1 interface 62 altsetting 227 has an invalid descriptor for endpoint zero, skipping [ 1299.003764][ T5690] dvb-usb: error while querying for an remote control event. [ 1299.022595][T29664] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7688'. [ 1299.029616][ T5721] usb 8-1: config 1 interface 139 altsetting 134 has an invalid descriptor for endpoint zero, skipping [ 1299.052842][ T5721] usb 8-1: config 1 interface 62 has no altsetting 0 [ 1299.071865][ T5721] usb 8-1: config 1 interface 139 has no altsetting 0 [ 1299.081554][T29667] FAULT_INJECTION: forcing a failure. [ 1299.081554][T29667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1299.081709][ T5721] usb 8-1: New USB device found, idVendor=2caf, idProduct=13a3, bcdDevice=bd.dc [ 1299.096612][T29667] CPU: 1 UID: 0 PID: 29667 Comm: syz.3.7689 Tainted: G L syzkaller #0 PREEMPT(full) [ 1299.096637][T29667] Tainted: [L]=SOFTLOCKUP [ 1299.096643][T29667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1299.096652][T29667] Call Trace: [ 1299.096659][T29667] [ 1299.096666][T29667] dump_stack_lvl+0xe8/0x150 [ 1299.096688][T29667] should_fail_ex+0x412/0x560 [ 1299.096711][T29667] _copy_from_user+0x2d/0xb0 [ 1299.096732][T29667] ___sys_sendmsg+0x1c6/0x360 [ 1299.096753][T29667] ? __lock_acquire+0x6b5/0x2cf0 [ 1299.096773][T29667] ? __pfx____sys_sendmsg+0x10/0x10 [ 1299.096820][T29667] ? __fget_files+0x2a/0x420 [ 1299.096844][T29667] ? __fget_files+0x3a0/0x420 [ 1299.096868][T29667] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1299.096890][T29667] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1299.096917][T29667] ? __pfx_ksys_write+0x10/0x10 [ 1299.096947][T29667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.096963][T29667] do_syscall_64+0x15f/0xf80 [ 1299.096982][T29667] ? trace_irq_disable+0x3b/0x140 [ 1299.097003][T29667] ? clear_bhb_loop+0x40/0x90 [ 1299.097021][T29667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.097035][T29667] RIP: 0033:0x7f639959ce59 [ 1299.097050][T29667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1299.097062][T29667] RSP: 002b:00007f63977ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1299.097077][T29667] RAX: ffffffffffffffda RBX: 00007f6399815fa0 RCX: 00007f639959ce59 [ 1299.097088][T29667] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1299.097097][T29667] RBP: 00007f63977ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1299.097106][T29667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1299.097115][T29667] R13: 00007f6399816038 R14: 00007f6399815fa0 R15: 00007f639993fa48 [ 1299.097139][T29667] [ 1299.144689][ T5690] m920x_read = error: -19 [ 1299.150926][ T5721] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.162004][ T5690] dvb-usb: error while querying for an remote control event. [ 1299.314317][ T5721] usb 8-1: Product: syz [ 1299.318589][ T5721] usb 8-1: Manufacturer: syz [ 1299.323272][ T5721] usb 8-1: SerialNumber: syz [ 1299.338205][ T5690] m920x_read = error: -19 [ 1299.346959][ T5690] dvb-usb: error while querying for an remote control event. [ 1299.371937][T29669] syzkaller0: entered promiscuous mode [ 1299.377569][T29669] syzkaller0: entered allmulticast mode [ 1299.464550][ T5690] m920x_read = error: -19 [ 1299.469162][ T5690] dvb-usb: error while querying for an remote control event. [ 1299.478589][T29660] vhci_hcd: connection closed [ 1299.482352][T29658] vhci_hcd: connection closed [ 1299.482356][T29656] vhci_hcd: connection closed [ 1299.491870][T21155] vhci_hcd vhci_hcd.4: stop threads [ 1299.502417][T29654] vhci_hcd: connection closed [ 1299.502616][T29649] vhci_hcd: connection reset by peer [ 1299.513771][T29652] vhci_hcd: connection closed [ 1299.514604][T21155] vhci_hcd vhci_hcd.4: release socket [ 1299.527470][T21155] vhci_hcd vhci_hcd.4: disconnect device [ 1299.533451][T21155] vhci_hcd vhci_hcd.4: stop threads [ 1299.539909][ T5721] ftdi_sio 8-1:1.62: FTDI USB Serial Device converter detected [ 1299.549095][T21155] vhci_hcd vhci_hcd.4: release socket [ 1299.555650][T21155] vhci_hcd vhci_hcd.4: disconnect device [ 1299.563274][T21155] vhci_hcd vhci_hcd.4: stop threads [ 1299.563996][ T5721] ftdi_sio ttyUSB0: unknown device type: 0xbddc [ 1299.585706][ T5690] m920x_read = error: -19 [ 1299.592990][ T5690] dvb-usb: error while querying for an remote control event. [ 1299.598589][ T5721] rndis_host 8-1:1.139: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1299.604145][T21155] vhci_hcd vhci_hcd.4: release socket [ 1299.618825][T21155] vhci_hcd vhci_hcd.4: disconnect device [ 1299.625422][T21155] vhci_hcd vhci_hcd.4: stop threads [ 1299.629482][ T5721] ftdi_sio 8-1:1.139: FTDI USB Serial Device converter detected [ 1299.640366][T21155] vhci_hcd vhci_hcd.4: release socket [ 1299.646725][T21155] vhci_hcd vhci_hcd.4: disconnect device [ 1299.652668][T21155] vhci_hcd vhci_hcd.4: stop threads [ 1299.660254][T21155] vhci_hcd vhci_hcd.4: release socket [ 1299.663406][ T5721] ftdi_sio ttyUSB1: unknown device type: 0xbddc [ 1299.694019][T21155] vhci_hcd vhci_hcd.4: disconnect device [ 1299.703773][ T5721] usb 8-1: USB disconnect, device number 62 [ 1299.713783][T21155] vhci_hcd vhci_hcd.4: stop threads [ 1299.724197][ T5690] m920x_read = error: -19 [ 1299.730078][ T5690] dvb-usb: error while querying for an remote control event. [ 1299.741026][T21155] vhci_hcd vhci_hcd.4: release socket [ 1299.751468][T21155] vhci_hcd vhci_hcd.4: disconnect device [ 1299.754502][ T5721] ftdi_sio 8-1:1.62: device disconnected [ 1299.777433][ T5721] ftdi_sio 8-1:1.139: device disconnected [ 1299.854496][ T5690] m920x_read = error: -19 [ 1299.862349][ T5690] dvb-usb: error while querying for an remote control event. [ 1299.994702][ T5690] m920x_read = error: -19 [ 1300.008746][ T5690] dvb-usb: error while querying for an remote control event. [ 1300.096493][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.105205][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.134567][ T5690] m920x_read = error: -19 [ 1300.143113][ T5690] dvb-usb: error while querying for an remote control event. [ 1300.264261][ T5690] m920x_read = error: -19 [ 1300.270533][ T5690] dvb-usb: error while querying for an remote control event. [ 1300.384362][ T5690] m920x_read = error: -19 [ 1300.395746][ T5690] dvb-usb: error while querying for an remote control event. [ 1300.526227][ T5690] m920x_read = error: -19 [ 1300.542159][ T5690] dvb-usb: error while querying for an remote control event. [ 1300.664290][ T24] m920x_read = error: -19 [ 1300.673930][T29693] netlink: 'syz.3.7699': attribute type 8 has an invalid length. [ 1300.673939][ T24] dvb-usb: error while querying for an remote control event. [ 1300.816470][ T5690] m920x_read = error: -19 [ 1300.822528][ T5690] dvb-usb: error while querying for an remote control event. [ 1300.883941][T29701] FAULT_INJECTION: forcing a failure. [ 1300.883941][T29701] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1300.899093][T29702] netlink: 'syz.5.7700': attribute type 61 has an invalid length. [ 1300.930748][T29701] CPU: 0 UID: 0 PID: 29701 Comm: syz.4.7702 Tainted: G L syzkaller #0 PREEMPT(full) [ 1300.930766][T29701] Tainted: [L]=SOFTLOCKUP [ 1300.930770][T29701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1300.930775][T29701] Call Trace: [ 1300.930779][T29701] [ 1300.930784][T29701] dump_stack_lvl+0xe8/0x150 [ 1300.930800][T29701] should_fail_ex+0x412/0x560 [ 1300.930815][T29701] prepare_alloc_pages+0x22a/0x650 [ 1300.930832][T29701] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1300.930847][T29701] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1300.930865][T29701] ? __pfx_policy_nodemask+0x10/0x10 [ 1300.930882][T29701] ? try_to_migrate+0x317/0x3f0 [ 1300.930901][T29701] ? unwind_next_frame+0xa6/0x2550 [ 1300.930919][T29701] ? __pfx_try_to_migrate+0x10/0x10 [ 1300.930934][T29701] alloc_pages_mpol+0x235/0x490 [ 1300.930949][T29701] folio_alloc_mpol_noprof+0x39/0x160 [ 1300.930963][T29701] migrate_pages_batch+0xa55/0x4ca0 [ 1300.930981][T29701] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1300.930995][T29701] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1300.931006][T29701] ? __mpol_dup+0x79/0x330 [ 1300.931014][T29701] ? stack_trace_save+0xa9/0x100 [ 1300.931027][T29701] ? __pfx_stack_trace_save+0x10/0x10 [ 1300.931040][T29701] ? __mpol_dup+0x79/0x330 [ 1300.931047][T29701] ? stack_depot_save_flags+0x33/0x810 [ 1300.931060][T29701] ? __mpol_dup+0x79/0x330 [ 1300.931068][T29701] ? kasan_save_track+0x4f/0x80 [ 1300.931079][T29701] ? kasan_save_track+0x3e/0x80 [ 1300.931089][T29701] ? __kasan_slab_alloc+0x6c/0x80 [ 1300.931100][T29701] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 1300.931111][T29701] ? __mpol_dup+0x79/0x330 [ 1300.931117][T29701] ? mpol_set_shared_policy+0xbd/0xc00 [ 1300.931126][T29701] ? mbind_range+0x5e1/0x810 [ 1300.931134][T29701] ? __se_sys_mbind+0xad4/0x10f0 [ 1300.931144][T29701] ? do_syscall_64+0x15f/0xf80 [ 1300.931156][T29701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.931175][T29701] migrate_pages+0x1c74/0x2a10 [ 1300.931185][T29701] ? __lock_acquire+0x6b5/0x2cf0 [ 1300.931199][T29701] ? current_cpuset_is_being_rebound+0x1d/0x300 [ 1300.931215][T29701] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1300.931228][T29701] ? __pfx_migrate_pages+0x10/0x10 [ 1300.931237][T29701] ? do_raw_write_lock+0x11d/0x260 [ 1300.931253][T29701] ? mpol_set_shared_policy+0xa75/0xc00 [ 1300.931274][T29701] __se_sys_mbind+0xe89/0x10f0 [ 1300.931291][T29701] ? __pfx___se_sys_mbind+0x10/0x10 [ 1300.931307][T29701] ? fput+0xa0/0xd0 [ 1300.931318][T29701] ? ksys_write+0x242/0x270 [ 1300.931331][T29701] ? __pfx_ksys_write+0x10/0x10 [ 1300.931345][T29701] ? __x64_sys_mbind+0x21/0xf0 [ 1300.931357][T29701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.931366][T29701] do_syscall_64+0x15f/0xf80 [ 1300.931378][T29701] ? trace_irq_disable+0x3b/0x140 [ 1300.931390][T29701] ? clear_bhb_loop+0x40/0x90 [ 1300.931400][T29701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.931409][T29701] RIP: 0033:0x7f1ed679ce59 [ 1300.931419][T29701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1300.931426][T29701] RSP: 002b:00007f1ed76a3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1300.931437][T29701] RAX: ffffffffffffffda RBX: 00007f1ed6a15fa0 RCX: 00007f1ed679ce59 [ 1300.931444][T29701] RDX: 0000000000000004 RSI: 0000000000800000 RDI: 0000200000001000 [ 1300.931450][T29701] RBP: 00007f1ed76a3090 R08: 0000000000000000 R09: 0000000000000002 [ 1300.931455][T29701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1300.931461][T29701] R13: 00007f1ed6a16038 R14: 00007f1ed6a15fa0 R15: 00007f1ed6b3fa48 [ 1300.931475][T29701] [ 1301.286559][ T5690] m920x_read = error: -19 [ 1301.295718][ T5690] dvb-usb: error while querying for an remote control event. [ 1301.304462][ T24] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1301.361333][T29709] vcan1: entered promiscuous mode [ 1301.366534][T29709] vcan1: entered allmulticast mode [ 1301.425153][ T5690] m920x_read = error: -19 [ 1301.430664][ T5690] dvb-usb: error while querying for an remote control event. [ 1301.464197][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1301.489230][ T24] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.500604][ T24] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1301.544581][ T5690] m920x_read = error: -19 [ 1301.549615][ T5690] dvb-usb: error while querying for an remote control event. [ 1301.612560][ T24] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1301.673930][ T24] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1301.687675][ T5690] m920x_read = error: -19 [ 1301.692878][ T5690] dvb-usb: error while querying for an remote control event. [ 1301.742003][ T24] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1301.751933][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.786911][ T24] usb 4-1: Product: syz [ 1301.791464][T29716] syzkaller0: entered promiscuous mode [ 1301.812134][ T24] usb 4-1: Manufacturer: syz [ 1301.821949][T29716] syzkaller0: entered allmulticast mode [ 1301.831295][ T24] usb 4-1: SerialNumber: syz [ 1301.841032][ T5690] m920x_read = error: -19 [ 1301.851185][ T5690] dvb-usb: error while querying for an remote control event. [ 1301.871417][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1301.903060][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input135 [ 1301.944410][ T5721] usb 8-1: new full-speed USB device number 63 using dummy_hcd [ 1302.005079][ T5690] m920x_read = error: -19 [ 1302.014118][ T5690] dvb-usb: error while querying for an remote control event. [ 1302.107253][ T5721] usb 8-1: config 1 has an invalid interface number: 62 but max is 1 [ 1302.121460][ T5721] usb 8-1: config 1 has an invalid interface number: 139 but max is 1 [ 1302.130472][ T5721] usb 8-1: config 1 has no interface number 0 [ 1302.144364][ T5690] m920x_read = error: -19 [ 1302.145876][ T5721] usb 8-1: config 1 has no interface number 1 [ 1302.150678][ T5690] dvb-usb: error while querying for an remote control event. [ 1302.165860][ T5721] usb 8-1: config 1 interface 62 altsetting 227 has an invalid descriptor for endpoint zero, skipping [ 1302.194193][ T5721] usb 8-1: config 1 interface 139 altsetting 134 has an invalid descriptor for endpoint zero, skipping [ 1302.214158][ T5721] usb 8-1: config 1 interface 62 has no altsetting 0 [ 1302.214263][ T24] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1302.229845][ T5721] usb 8-1: config 1 interface 139 has no altsetting 0 [ 1302.231357][ T24] (id 0x00) [ 1302.245570][ T5721] usb 8-1: New USB device found, idVendor=2caf, idProduct=13a3, bcdDevice=bd.dc [ 1302.257612][ T5721] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.274201][ T5690] m920x_read = error: -19 [ 1302.285847][ T5690] dvb-usb: error while querying for an remote control event. [ 1302.301321][ T5721] usb 8-1: Product: syz [ 1302.313722][ T5721] usb 8-1: Manufacturer: syz [ 1302.320931][ T5721] usb 8-1: SerialNumber: syz [ 1302.337991][ T24] rc_core: IR keymap rc-imon-pad not found [ 1302.347784][ T24] Registered IR keymap rc-empty [ 1302.358461][ T24] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1302.393685][ T24] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1302.404724][ T5690] m920x_read = error: -19 [ 1302.413344][ T5690] dvb-usb: error while querying for an remote control event. [ 1302.457018][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 1302.480410][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input136 [ 1302.497730][ T24] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:87> initialized [ 1302.512737][T29724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7709'. [ 1302.534640][ T24] m920x_read = error: -19 [ 1302.539895][ T24] dvb-usb: error while querying for an remote control event. [ 1302.561112][ T5721] ftdi_sio 8-1:1.62: FTDI USB Serial Device converter detected [ 1302.599255][ T5721] ftdi_sio ttyUSB0: unknown device type: 0xbddc [ 1302.615040][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1302.615050][ T30] audit: type=1326 audit(1778805864.707:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29728 comm="syz.4.7710" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed679ce59 code=0x7ffc0000 [ 1302.664219][ T24] m920x_read = error: -19 [ 1302.672915][ T24] dvb-usb: error while querying for an remote control event. [ 1302.687121][ T30] audit: type=1326 audit(1778805864.737:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29728 comm="syz.4.7710" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed679ce59 code=0x7ffc0000 [ 1302.711869][ T30] audit: type=1326 audit(1778805864.757:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29728 comm="syz.4.7710" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1ed679ce59 code=0x7ffc0000 [ 1302.743272][ T5721] rndis_host 8-1:1.139: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1302.762279][T29697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.778731][ T30] audit: type=1326 audit(1778805864.757:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29728 comm="syz.4.7710" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed679ce59 code=0x7ffc0000 [ 1302.779499][ T5721] ftdi_sio 8-1:1.139: FTDI USB Serial Device converter detected [ 1302.814230][ T30] audit: type=1326 audit(1778805864.757:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29728 comm="syz.4.7710" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed679ce59 code=0x7ffc0000 [ 1302.839169][ T5690] m920x_read = error: -19 [ 1302.845490][ T30] audit: type=1326 audit(1778805864.757:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29728 comm="syz.4.7710" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1ed679ce59 code=0x7ffc0000 [ 1302.854013][T29697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.872775][ T30] audit: type=1326 audit(1778805864.757:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29728 comm="syz.4.7710" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed679ce59 code=0x7ffc0000 [ 1302.917951][ T5690] dvb-usb: error while querying for an remote control event. [ 1302.954034][ T5721] ftdi_sio ttyUSB1: unknown device type: 0xbddc [ 1302.962220][T29732] syzkaller0: entered promiscuous mode [ 1302.973193][T29732] syzkaller0: entered allmulticast mode [ 1303.022818][ T5721] usb 8-1: USB disconnect, device number 63 [ 1303.061597][ T5721] ftdi_sio 8-1:1.62: device disconnected [ 1303.072630][ T30] audit: type=1326 audit(1778805864.757:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29728 comm="syz.4.7710" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed679ce59 code=0x7ffc0000 [ 1303.074830][ T5690] m920x_read = error: -19 [ 1303.115999][ T5721] ftdi_sio 8-1:1.139: device disconnected [ 1303.136026][ T5690] dvb-usb: error while querying for an remote control event. [ 1303.192285][T29737] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7712'. [ 1303.208805][ T30] audit: type=1326 audit(1778805864.757:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29728 comm="syz.4.7710" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1ed679ce59 code=0x7ffc0000 [ 1303.209768][ T5690] usb 4-1: USB disconnect, device number 87 [ 1303.294856][ T24] m920x_read = error: -19 [ 1303.304054][ T24] dvb-usb: error while querying for an remote control event. [ 1303.338460][ T30] audit: type=1326 audit(1778805864.757:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29728 comm="syz.4.7710" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed679ce59 code=0x7ffc0000 [ 1303.445211][ T24] m920x_read = error: -19 [ 1303.449780][ T24] dvb-usb: error while querying for an remote control event. [ 1303.574982][ T5359] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1303.585492][ T24] m920x_read = error: -19 [ 1303.593806][ T24] dvb-usb: error while querying for an remote control event. [ 1303.725351][ T5690] m920x_read = error: -19 [ 1303.730389][ T5690] dvb-usb: error while querying for an remote control event. [ 1303.756125][ T5359] usb 6-1: Using ep0 maxpacket: 8 [ 1303.778313][ T5359] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1303.794601][ T5359] usb 6-1: New USB device found, idVendor=086a, idProduct=0001, bcdDevice= 0.40 [ 1303.809334][ T5359] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.835989][ T5359] usb 6-1: Product: syz [ 1303.846425][ T5359] usb 6-1: Manufacturer:  [ 1303.854285][ T5690] m920x_read = error: -19 [ 1303.858963][ T5690] dvb-usb: error while querying for an remote control event. [ 1303.875838][ T5359] usb 6-1: SerialNumber: syz [ 1303.940757][T23545] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1303.961409][T21155] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.975314][ T5690] m920x_read = error: -19 [ 1303.995019][ T5690] dvb-usb: error while querying for an remote control event. [ 1304.112438][T21155] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.125791][ T24] m920x_read = error: -19 [ 1304.142739][ T24] dvb-usb: error while querying for an remote control event. [ 1304.298083][ T5690] m920x_read = error: -19 [ 1304.309431][T21155] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.322668][ T5690] dvb-usb: error while querying for an remote control event. [ 1304.416150][T18477] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1304.427923][T18477] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1304.438516][T18477] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1304.448391][T18477] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1304.457778][T18477] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1304.464197][ T5690] m920x_read = error: -19 [ 1304.472647][ T5690] dvb-usb: error while querying for an remote control event. [ 1304.631974][T21155] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.654191][ T5690] m920x_read = error: -19 [ 1304.658805][ T5690] dvb-usb: error while querying for an remote control event. [ 1304.670779][T29750] FAULT_INJECTION: forcing a failure. [ 1304.670779][T29750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1304.685340][T29750] CPU: 1 UID: 0 PID: 29750 Comm: syz.3.7719 Tainted: G L syzkaller #0 PREEMPT(full) [ 1304.685374][T29750] Tainted: [L]=SOFTLOCKUP [ 1304.685380][T29750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1304.685390][T29750] Call Trace: [ 1304.685397][T29750] [ 1304.685403][T29750] dump_stack_lvl+0xe8/0x150 [ 1304.685421][T29750] should_fail_ex+0x412/0x560 [ 1304.685437][T29750] _copy_from_user+0x2d/0xb0 [ 1304.685450][T29750] kstrtouint_from_user+0xd6/0x180 [ 1304.685463][T29750] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1304.685493][T29750] proc_fail_nth_write+0x8e/0x210 [ 1304.685514][T29750] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1304.685539][T29750] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1304.685558][T29750] vfs_write+0x29a/0xb90 [ 1304.685580][T29750] ? __pfx_vfs_write+0x10/0x10 [ 1304.685593][T29750] ? __fget_files+0x2a/0x420 [ 1304.685608][T29750] ? __fget_files+0x3a0/0x420 [ 1304.685617][T29750] ? __fget_files+0x2a/0x420 [ 1304.685639][T29750] ksys_write+0x150/0x270 [ 1304.685663][T29750] ? __pfx_ksys_write+0x10/0x10 [ 1304.685691][T29750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.685709][T29750] do_syscall_64+0x15f/0xf80 [ 1304.685723][T29750] ? trace_irq_disable+0x3b/0x140 [ 1304.685737][T29750] ? clear_bhb_loop+0x40/0x90 [ 1304.685748][T29750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.685757][T29750] RIP: 0033:0x7f639955d68e [ 1304.685767][T29750] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1304.685777][T29750] RSP: 002b:00007f63977edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1304.685794][T29750] RAX: ffffffffffffffda RBX: 00007f63977ee6c0 RCX: 00007f639955d68e [ 1304.685805][T29750] RDX: 0000000000000001 RSI: 00007f63977ee0a0 RDI: 0000000000000004 [ 1304.685815][T29750] RBP: 00007f63977ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1304.685824][T29750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1304.685833][T29750] R13: 00007f6399816038 R14: 00007f6399815fa0 R15: 00007f639993fa48 [ 1304.685861][T29750] [ 1304.906863][ T5690] m920x_read = error: -19 [ 1304.911917][ T5690] dvb-usb: error while querying for an remote control event. [ 1305.024284][ T5690] m920x_read = error: -19 [ 1305.026054][T29759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1305.028704][ T5690] dvb-usb: error while querying for an remote control event. [ 1305.081085][T29756] syzkaller0: entered promiscuous mode [ 1305.089458][T29756] syzkaller0: entered allmulticast mode [ 1305.134484][ T24] m920x_read = error: -19 [ 1305.138922][ T24] dvb-usb: error while querying for an remote control event. [ 1305.171222][T29748] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.179368][T29748] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.187019][T29748] bridge_slave_0: entered allmulticast mode [ 1305.194696][T29748] bridge_slave_0: entered promiscuous mode [ 1305.202777][T29748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.210557][T29748] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.219088][T29748] bridge_slave_1: entered allmulticast mode [ 1305.228243][T29748] bridge_slave_1: entered promiscuous mode [ 1305.254755][ T5690] m920x_read = error: -19 [ 1305.259233][ T5690] dvb-usb: error while querying for an remote control event. [ 1305.275376][T29748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1305.290320][T29748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1305.369026][T29748] team0: Port device team_slave_0 added [ 1305.392235][T29748] team0: Port device team_slave_1 added [ 1305.394214][ T5690] m920x_read = error: -19 [ 1305.406189][ T5690] dvb-usb: error while querying for an remote control event. [ 1305.514608][ T24] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 1305.543119][T29748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1305.554718][ T808] m920x_read = error: -19 [ 1305.555508][T29748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1305.559631][ T808] dvb-usb: error while querying for an remote control event. [ 1305.617995][T29748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1305.687212][ T24] usb 4-1: config 1 has an invalid interface number: 62 but max is 1 [ 1305.699313][ T24] usb 4-1: config 1 has an invalid interface number: 139 but max is 1 [ 1305.715011][ T24] usb 4-1: config 1 has no interface number 0 [ 1305.727187][ T24] usb 4-1: config 1 has no interface number 1 [ 1305.751108][ T24] usb 4-1: config 1 interface 62 altsetting 227 has an invalid descriptor for endpoint zero, skipping [ 1305.753996][T29748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1305.769305][ T5690] m920x_read = error: -19 [ 1305.769961][T29748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1305.800957][ T5690] dvb-usb: error while querying for an remote control event. [ 1305.814390][ T24] usb 4-1: config 1 interface 139 altsetting 134 has an invalid descriptor for endpoint zero, skipping [ 1305.828609][T29748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1305.862929][ T24] usb 4-1: config 1 interface 62 has no altsetting 0 [ 1305.879972][ T24] usb 4-1: config 1 interface 139 has no altsetting 0 [ 1305.906544][ T24] usb 4-1: New USB device found, idVendor=2caf, idProduct=13a3, bcdDevice=bd.dc [ 1305.919331][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.942739][ T24] usb 4-1: Product: syz [ 1305.952307][ T24] usb 4-1: Manufacturer: syz [ 1305.957376][ T808] m920x_read = error: -19 [ 1305.961909][ T24] usb 4-1: SerialNumber: syz [ 1305.966760][ T808] dvb-usb: error while querying for an remote control event. [ 1306.086195][ T808] m920x_read = error: -19 [ 1306.090712][ T808] dvb-usb: error while querying for an remote control event. [ 1306.192795][ T24] ftdi_sio 4-1:1.62: FTDI USB Serial Device converter detected [ 1306.214570][ T808] m920x_read = error: -19 [ 1306.220227][ T808] dvb-usb: error while querying for an remote control event. [ 1306.263294][ T24] ftdi_sio ttyUSB0: unknown device type: 0xbddc [ 1306.293777][ T24] rndis_host 4-1:1.139: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1306.318432][ T24] ftdi_sio 4-1:1.139: FTDI USB Serial Device converter detected [ 1306.364359][ T808] m920x_read = error: -19 [ 1306.368855][ T808] dvb-usb: error while querying for an remote control event. [ 1306.390802][ T24] ftdi_sio ttyUSB1: unknown device type: 0xbddc [ 1306.481159][ T24] usb 4-1: USB disconnect, device number 88 [ 1306.491949][ T808] m920x_read = error: -19 [ 1306.514851][ T24] ftdi_sio 4-1:1.62: device disconnected [ 1306.528932][ T808] dvb-usb: error while querying for an remote control event. [ 1306.562592][ T24] ftdi_sio 4-1:1.139: device disconnected [ 1306.584201][ T4945] Bluetooth: hci1: command tx timeout [ 1306.664484][ T808] m920x_read = error: -19 [ 1306.675685][ T808] dvb-usb: error while querying for an remote control event. [ 1306.691605][T21155] bond3 (unregistering): (slave geneve2): Releasing active interface [ 1306.816725][ T808] m920x_read = error: -19 [ 1306.822897][ T808] dvb-usb: error while querying for an remote control event. [ 1306.843513][T21155] bond0 (unregistering): (slave team0): Releasing backup interface [ 1306.875599][T21155] bond0 (unregistering): Released all slaves [ 1306.918223][T21155] bond1 (unregistering): Released all slaves [ 1306.945307][ T808] m920x_read = error: -19 [ 1306.951181][ T808] dvb-usb: error while querying for an remote control event. [ 1306.971375][T29801] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[23525] was attempted by "\x09   Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ ./binderfs/binder0 syzkaller0 *  \x0c  X  À   [ 1306.973171][T21155] bond2 (unregistering): Released all slaves [ 1307.083408][ T808] m920x_read = error: -19 [ 1307.088387][ T808] dvb-usb: error while querying for an remote control event. [ 1307.134293][ T24] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1307.163069][T21155] bond3 (unregistering): Released all slaves [ 1307.204224][ T5690] m920x_read = error: -19 [ 1307.208636][ T5690] dvb-usb: error while querying for an remote control event. [ 1307.269324][T21155] bond4 (unregistering): Released all slaves [ 1307.289098][T21155] bond5 (unregistering): Released all slaves [ 1307.297390][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1307.309545][ T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1307.334225][ T5690] m920x_read = error: -19 [ 1307.338639][ T5690] dvb-usb: error while querying for an remote control event. [ 1307.346417][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1307.358151][T21155] bond6 (unregistering): Released all slaves [ 1307.385383][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.454534][ T5690] m920x_read = error: -19 [ 1307.461437][T29795] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1307.492490][ T5690] dvb-usb: error while querying for an remote control event. [ 1307.527957][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1307.617841][T29748] hsr_slave_0: entered promiscuous mode [ 1307.677193][ T5690] m920x_read = error: -19 [ 1307.683951][T29748] hsr_slave_1: entered promiscuous mode [ 1307.697888][ T5690] dvb-usb: error while querying for an remote control event. [ 1307.723061][ T5288] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1307.766194][ T993] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1307.793573][T29814] vcan1: entered promiscuous mode [ 1307.804883][T29814] vcan1: entered allmulticast mode [ 1307.874473][ T24] m920x_read = error: -19 [ 1307.891637][ T24] dvb-usb: error while querying for an remote control event. [ 1307.975537][ T993] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.986087][T21155] tipc: Left network mode [ 1307.994699][ T993] usb 5-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1308.024296][ T24] m920x_read = error: -19 [ 1308.029368][ T993] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1308.044157][ T993] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1308.048178][ T24] dvb-usb: error while querying for an remote control event. [ 1308.075922][ T993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.104188][T29795] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1308.117989][ T993] usb 5-1: config 0 descriptor?? [ 1308.204453][ T24] m920x_read = error: -19 [ 1308.208969][ T24] dvb-usb: error while querying for an remote control event. [ 1308.338215][ T24] m920x_read = error: -19 [ 1308.363401][ T24] dvb-usb: error while querying for an remote control event. [ 1308.524966][ T24] m920x_read = error: -19 [ 1308.529586][ T24] dvb-usb: error while querying for an remote control event. [ 1308.591111][T29828] syzkaller0: entered promiscuous mode [ 1308.607849][T29828] syzkaller0: entered allmulticast mode [ 1308.625584][ T24] m920x_read = error: -19 [ 1308.632213][ T24] dvb-usb: error while querying for an remote control event. [ 1308.654353][ T4945] Bluetooth: hci1: command tx timeout [ 1308.750124][ T24] m920x_read = error: -19 [ 1308.760467][ T24] dvb-usb: error while querying for an remote control event. [ 1308.861873][T23545] usb 4-1: USB disconnect, device number 89 [ 1308.880017][ T24] m920x_read = error: -19 [ 1308.888274][ T24] dvb-usb: error while querying for an remote control event. [ 1309.030082][ T993] usb 5-1: string descriptor 0 read error: -71 [ 1309.034620][ T24] m920x_read = error: -19 [ 1309.064473][ T24] dvb-usb: error while querying for an remote control event. [ 1309.081245][ T993] usb 5-1: USB disconnect, device number 104 [ 1309.196873][ T24] m920x_read = error: -19 [ 1309.218137][ T24] dvb-usb: error while querying for an remote control event. [ 1309.260032][ T5288] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1309.345049][ T24] m920x_read = error: -19 [ 1309.361712][ T24] dvb-usb: error while querying for an remote control event. [ 1309.465159][T29748] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1309.484200][ T24] m920x_read = error: -19 [ 1309.488681][ T24] dvb-usb: error while querying for an remote control event. [ 1309.541580][T29748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1309.614359][ T24] m920x_read = error: -19 [ 1309.631474][ T24] dvb-usb: error while querying for an remote control event. [ 1309.764397][ T24] m920x_read = error: -19 [ 1309.812726][ T24] dvb-usb: error while querying for an remote control event. [ 1309.911738][T29748] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1309.955212][ T24] m920x_read = error: -19 [ 1309.967709][ T24] dvb-usb: error while querying for an remote control event. [ 1309.989463][T29748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1310.028359][T29748] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1310.034510][ T5721] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 1310.086493][T29748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1310.114226][ T24] m920x_read = error: -19 [ 1310.132435][T29748] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1310.143314][ T24] dvb-usb: error while querying for an remote control event. [ 1310.218939][T29748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1310.244589][ T5721] usb 5-1: config 1 has an invalid interface number: 62 but max is 1 [ 1310.302684][ T5721] usb 5-1: config 1 has an invalid interface number: 139 but max is 1 [ 1310.319955][ T24] m920x_read = error: -19 [ 1310.359556][ T24] dvb-usb: error while querying for an remote control event. [ 1310.384601][ T5721] usb 5-1: config 1 has an invalid interface association descriptor of length 2, skipping [ 1310.438162][ T5721] usb 5-1: config 1 has no interface number 0 [ 1310.465827][ T5721] usb 5-1: config 1 has no interface number 1 [ 1310.486857][ T5721] usb 5-1: config 1 interface 62 altsetting 227 has an invalid descriptor for endpoint zero, skipping [ 1310.544222][ T24] m920x_read = error: -19 [ 1310.559896][ T5721] usb 5-1: config 1 interface 139 altsetting 134 has an invalid descriptor for endpoint zero, skipping [ 1310.574227][ T24] dvb-usb: error while querying for an remote control event. [ 1310.633631][ T5721] usb 5-1: config 1 interface 62 has no altsetting 0 [ 1310.704768][ T5721] usb 5-1: config 1 interface 139 has no altsetting 0 [ 1310.714216][ T24] m920x_read = error: -19 [ 1310.734263][ T4945] Bluetooth: hci1: command tx timeout [ 1310.742251][ T24] dvb-usb: error while querying for an remote control event. [ 1310.775843][ T5721] usb 5-1: New USB device found, idVendor=2caf, idProduct=13a3, bcdDevice=bd.dc [ 1310.796442][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.811534][ T5721] usb 5-1: Product: syz [ 1310.817980][ T5721] usb 5-1: Manufacturer: syz [ 1310.831320][ T5721] usb 5-1: SerialNumber: syz [ 1310.886429][ T24] m920x_read = error: -19 [ 1310.913478][ T24] dvb-usb: error while querying for an remote control event. [ 1311.064307][ T24] m920x_read = error: -19 [ 1311.090462][ T5721] ftdi_sio 5-1:1.62: FTDI USB Serial Device converter detected [ 1311.119442][ T24] dvb-usb: error while querying for an remote control event. [ 1311.122954][ T5721] ftdi_sio ttyUSB0: unknown device type: 0xbddc [ 1311.152584][ T5721] rndis_host 5-1:1.139: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1311.153232][ T5721] ftdi_sio 5-1:1.139: FTDI USB Serial Device converter detected [ 1311.168240][ T5721] ftdi_sio ttyUSB1: unknown device type: 0xbddc [ 1311.221036][ T5721] usb 5-1: USB disconnect, device number 105 [ 1311.222835][ T5721] ftdi_sio 5-1:1.62: device disconnected [ 1311.224703][ T24] m920x_read = error: -19 [ 1311.224718][ T24] dvb-usb: error while querying for an remote control event. [ 1311.322426][ T5721] ftdi_sio 5-1:1.139: device disconnected [ 1311.344531][ T808] m920x_read = error: -19 [ 1311.344553][ T808] dvb-usb: error while querying for an remote control event. [ 1311.464977][ T24] m920x_read = error: -19 [ 1311.465003][ T24] dvb-usb: error while querying for an remote control event. [ 1311.574574][ T808] m920x_read = error: -19 [ 1311.574600][ T808] dvb-usb: error while querying for an remote control event. [ 1311.694627][ T24] m920x_read = error: -19 [ 1311.699126][ T24] dvb-usb: error while querying for an remote control event. [ 1311.800079][T29899] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1311.803281][T29902] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1311.834281][ T808] m920x_read = error: -19 [ 1311.836432][T29902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.843340][ T808] dvb-usb: error while querying for an remote control event. [ 1311.867320][T29902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.889701][T29904] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1311.892996][T29902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.940356][T29902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.004193][ T808] m920x_read = error: -19 [ 1312.010864][ T808] dvb-usb: error while querying for an remote control event. [ 1312.144300][ T24] m920x_read = error: -19 [ 1312.149198][ T24] dvb-usb: error while querying for an remote control event. [ 1312.180897][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1312.180914][ T30] audit: type=1326 audit(1778805874.267:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29916 comm="syz.4.7750" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed679ce59 code=0x7ffc0000 [ 1312.268179][ T30] audit: type=1326 audit(1778805874.267:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29916 comm="syz.4.7750" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed679ce59 code=0x7ffc0000 [ 1312.296236][ T24] m920x_read = error: -19 [ 1312.313222][ T24] dvb-usb: error while querying for an remote control event. [ 1312.337718][ T5721] usb 6-1: USB disconnect, device number 110 [ 1312.352937][ T30] audit: type=1326 audit(1778805874.307:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29916 comm="syz.4.7750" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1ed679ce59 code=0x7ffc0000 [ 1312.387192][ T30] audit: type=1326 audit(1778805874.307:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29916 comm="syz.4.7750" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed679ce59 code=0x7ffc0000 [ 1312.420669][ T4945] Bluetooth: hci4: command 0x0406 tx timeout [ 1312.440478][ T5288] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1312.456882][ T808] m920x_read = error: -19 [ 1312.474975][ T30] audit: type=1326 audit(1778805874.307:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29916 comm="syz.4.7750" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed679ce59 code=0x7ffc0000 [ 1312.476344][ T808] dvb-usb: error while querying for an remote control event. [ 1312.499846][ T30] audit: type=1326 audit(1778805874.307:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29916 comm="syz.4.7750" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1ed679ce59 code=0x7ffc0000 [ 1312.499890][ T30] audit: type=1326 audit(1778805874.307:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29916 comm="syz.4.7750" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed679ce59 code=0x7ffc0000 [ 1312.499926][ T30] audit: type=1326 audit(1778805874.307:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29916 comm="syz.4.7750" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed679ce59 code=0x7ffc0000 [ 1312.499967][ T30] audit: type=1326 audit(1778805874.317:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29916 comm="syz.4.7750" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1ed679ce59 code=0x7ffc0000 [ 1312.500009][ T30] audit: type=1326 audit(1778805874.317:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29916 comm="syz.4.7750" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed679ce59 code=0x7ffc0000 [ 1312.672629][T29907] syzkaller0: entered promiscuous mode [ 1312.678415][T29907] syzkaller0: entered allmulticast mode [ 1312.754629][ T808] m920x_read = error: -19 [ 1312.765633][ T808] dvb-usb: error while querying for an remote control event. [ 1312.770439][T29748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1312.828035][T18477] Bluetooth: hci1: command tx timeout [ 1312.850410][T29748] 8021q: adding VLAN 0 to HW filter on device team0 [ 1312.874713][ T808] m920x_read = error: -19 [ 1312.882070][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.886076][ T808] dvb-usb: error while querying for an remote control event. [ 1312.889252][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1312.970076][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.977365][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1313.038664][ T5691] m920x_read = error: -19 [ 1313.043261][ T5691] dvb-usb: error while querying for an remote control event. [ 1313.164235][ T808] m920x_read = error: -19 [ 1313.168921][ T808] dvb-usb: error while querying for an remote control event. [ 1313.211297][T29748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1313.314344][ T808] m920x_read = error: -19 [ 1313.319318][ T808] dvb-usb: error while querying for an remote control event. [ 1313.390862][T29748] veth0_vlan: entered promiscuous mode [ 1313.417620][T29748] veth1_vlan: entered promiscuous mode [ 1313.423956][T29936] netlink: 'syz.6.7752': attribute type 7 has an invalid length. [ 1313.446158][ T24] m920x_read = error: -19 [ 1313.450885][ T24] dvb-usb: error while querying for an remote control event. [ 1313.475180][T29936] : entered promiscuous mode [ 1313.507063][T29748] veth0_macvtap: entered promiscuous mode [ 1313.522993][T29748] veth1_macvtap: entered promiscuous mode [ 1313.555061][T29748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1313.574218][ T24] m920x_read = error: -19 [ 1313.583242][ T24] dvb-usb: error while querying for an remote control event. [ 1313.593669][T29748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1313.617782][T21149] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.629634][T21149] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.648787][ T5288] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1313.656175][ T5721] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1313.666267][T21149] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.678414][T21149] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.716547][ T808] m920x_read = error: -19 [ 1313.727613][ T808] dvb-usb: error while querying for an remote control event. [ 1313.827957][ T5721] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1313.877481][ T5721] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.906180][ T5721] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1313.924410][ T5725] m920x_read = error: -19 [ 1313.938332][ T5725] dvb-usb: error while querying for an remote control event. [ 1313.961145][ T5721] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1313.971907][T21149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.997328][ T5721] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.999710][T21149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.072415][ T5721] usb 6-1: config 0 descriptor?? [ 1314.074451][ T24] m920x_read = error: -19 [ 1314.081181][ T5721] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1314.087846][ T24] dvb-usb: error while querying for an remote control event. [ 1314.109691][ T5721] usb-storage 6-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1314.172473][T21155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.200632][T21155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.224897][ T5725] m920x_read = error: -19 [ 1314.269174][ T5725] dvb-usb: error while querying for an remote control event. [ 1314.315905][ T5721] usb 6-1: USB disconnect, device number 111 [ 1314.394234][ T24] m920x_read = error: -19 [ 1314.398710][ T24] dvb-usb: error while querying for an remote control event. [ 1314.481614][T29957] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7756'. [ 1314.535248][ T5725] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1314.545363][ T24] m920x_read = error: -19 [ 1314.549873][ T24] dvb-usb: error while querying for an remote control event. [ 1314.674287][ T808] m920x_read = error: -19 [ 1314.678691][ T808] dvb-usb: error while querying for an remote control event. [ 1314.716285][ T5725] usb 4-1: config 33 has an invalid descriptor of length 1, skipping remainder of the config [ 1314.727065][ T5725] usb 4-1: config 33 has 0 interfaces, different from the descriptor's value: 1 [ 1314.749749][ T5725] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1314.758979][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.795168][ T5725] m920x_read = error: -19 [ 1314.799589][ T5725] dvb-usb: error while querying for an remote control event. [ 1314.925225][ T5725] m920x_read = error: -19 [ 1314.929668][ T5725] dvb-usb: error while querying for an remote control event. [ 1314.982927][T29971] syzkaller0: entered promiscuous mode [ 1314.990889][T29971] syzkaller0: entered allmulticast mode [ 1315.044295][ T5725] m920x_read = error: -19 [ 1315.050035][ T5725] dvb-usb: error while querying for an remote control event. [ 1315.164339][ T5725] m920x_read = error: -19 [ 1315.168908][ T5725] dvb-usb: error while querying for an remote control event. [ 1315.285019][ T5725] m920x_read = error: -19 [ 1315.298749][ T5725] dvb-usb: error while querying for an remote control event. [ 1315.424677][ T5725] m920x_read = error: -19 [ 1315.436375][ T5725] dvb-usb: error while querying for an remote control event. [ 1315.565436][ T5725] m920x_read = error: -19 [ 1315.590540][ T5725] dvb-usb: error while querying for an remote control event. [ 1315.707544][T23545] usb 4-1: USB disconnect, device number 90 [ 1315.745065][ T5725] m920x_read = error: -19 [ 1315.767539][ T5725] dvb-usb: error while querying for an remote control event. [ 1315.848175][T29987] tipc: Enabled bearer , priority 0 [ 1315.894947][ T808] m920x_read = error: -19 [ 1315.908094][ T808] dvb-usb: error while querying for an remote control event. [ 1315.961393][T29987] tipc: Disabling bearer [ 1316.044528][ T5725] m920x_read = error: -19 [ 1316.058365][ T5725] dvb-usb: error while querying for an remote control event. [ 1316.204349][ T24] m920x_read = error: -19 [ 1316.219461][ T24] dvb-usb: error while querying for an remote control event. [ 1316.287360][ T808] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1316.344596][T19284] m920x_read = error: -19 [ 1316.348966][T19284] dvb-usb: error while querying for an remote control event. [ 1316.445820][ T808] usb 4-1: device descriptor read/64, error -71 [ 1316.464601][T19284] m920x_read = error: -19 [ 1316.472503][T19284] dvb-usb: error while querying for an remote control event. [ 1316.694215][ T808] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1316.725094][T19284] m920x_read = error: -19 [ 1316.740624][T19284] dvb-usb: error while querying for an remote control event. [ 1316.844533][ T808] usb 4-1: device descriptor read/64, error -71 [ 1316.874246][T19284] m920x_read = error: -19 [ 1316.882204][T19284] dvb-usb: error while querying for an remote control event. [ 1316.975249][ T808] usb usb4-port1: attempt power cycle [ 1317.025790][T19284] m920x_read = error: -19 [ 1317.040709][T19284] dvb-usb: error while querying for an remote control event. [ 1317.174291][T19284] m920x_read = error: -19 [ 1317.182859][T19284] dvb-usb: error while querying for an remote control event. [ 1317.314234][T19284] m920x_read = error: -19 [ 1317.323151][T19284] dvb-usb: error while querying for an remote control event. [ 1317.334142][ T808] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1317.383255][T30013] FAULT_INJECTION: forcing a failure. [ 1317.383255][T30013] name failslab, interval 1, probability 0, space 0, times 0 [ 1317.396751][T30013] CPU: 1 UID: 0 PID: 30013 Comm: syz.5.7774 Tainted: G L syzkaller #0 PREEMPT(full) [ 1317.396777][T30013] Tainted: [L]=SOFTLOCKUP [ 1317.396784][T30013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1317.396794][T30013] Call Trace: [ 1317.396801][T30013] [ 1317.396807][T30013] dump_stack_lvl+0xe8/0x150 [ 1317.396833][T30013] should_fail_ex+0x412/0x560 [ 1317.396856][T30013] should_failslab+0xa8/0x100 [ 1317.396879][T30013] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1317.396898][T30013] ? __alloc_skb+0x186/0x7d0 [ 1317.396915][T30013] ? __alloc_skb+0x1d0/0x7d0 [ 1317.396931][T30013] ? __local_bh_enable_ip+0xd0/0x130 [ 1317.396951][T30013] __alloc_skb+0x1d0/0x7d0 [ 1317.396972][T30013] netlink_sendmsg+0x5d4/0xb40 [ 1317.397001][T30013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1317.397024][T30013] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1317.397045][T30013] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1317.397066][T30013] ____sys_sendmsg+0x972/0x9f0 [ 1317.397086][T30013] ? __might_fault+0xaf/0x130 [ 1317.397108][T30013] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1317.397133][T30013] ? import_iovec+0x73/0xa0 [ 1317.397155][T30013] ___sys_sendmsg+0x2a5/0x360 [ 1317.397175][T30013] ? __lock_acquire+0x6b5/0x2cf0 [ 1317.397195][T30013] ? __pfx____sys_sendmsg+0x10/0x10 [ 1317.397243][T30013] ? __fget_files+0x2a/0x420 [ 1317.397258][T30013] ? __fget_files+0x3a0/0x420 [ 1317.397282][T30013] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1317.397304][T30013] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1317.397328][T30013] ? __pfx_ksys_write+0x10/0x10 [ 1317.397352][T30013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.397367][T30013] do_syscall_64+0x15f/0xf80 [ 1317.397386][T30013] ? trace_irq_disable+0x3b/0x140 [ 1317.397406][T30013] ? clear_bhb_loop+0x40/0x90 [ 1317.397424][T30013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.397438][T30013] RIP: 0033:0x7f04dbf9ce59 [ 1317.397454][T30013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1317.397466][T30013] RSP: 002b:00007f04dcf12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1317.397483][T30013] RAX: ffffffffffffffda RBX: 00007f04dc215fa0 RCX: 00007f04dbf9ce59 [ 1317.397494][T30013] RDX: 0000000004040140 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1317.397502][T30013] RBP: 00007f04dcf12090 R08: 0000000000000000 R09: 0000000000000000 [ 1317.397508][T30013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1317.397513][T30013] R13: 00007f04dc216038 R14: 00007f04dc215fa0 R15: 00007f04dc33fa48 [ 1317.397528][T30013] [ 1317.397889][ T808] usb 4-1: device descriptor read/8, error -71 [ 1317.665847][T19284] m920x_read = error: -19 [ 1317.670222][T19284] dvb-usb: error while querying for an remote control event. [ 1317.714243][T30015] syzkaller0: entered promiscuous mode [ 1317.719857][T30015] syzkaller0: entered allmulticast mode [ 1317.784301][ T24] m920x_read = error: -19 [ 1317.794149][ T24] dvb-usb: error while querying for an remote control event. [ 1317.929316][ T24] m920x_read = error: -19 [ 1317.940463][ T24] dvb-usb: error while querying for an remote control event. [ 1317.950460][ T808] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1317.985910][ T808] usb 4-1: device descriptor read/8, error -71 [ 1318.085173][ T24] m920x_read = error: -19 [ 1318.099153][ T24] dvb-usb: error while querying for an remote control event. [ 1318.109006][ T808] usb usb4-port1: unable to enumerate USB device [ 1318.171425][T30020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7777'. [ 1318.235507][ T24] m920x_read = error: -19 [ 1318.250057][ T24] dvb-usb: error while querying for an remote control event. [ 1318.365522][ T24] m920x_read = error: -19 [ 1318.375411][ T24] dvb-usb: error while querying for an remote control event. [ 1318.429027][T30030] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7780'. [ 1318.515017][ T24] m920x_read = error: -19 [ 1318.523063][ T24] dvb-usb: error while querying for an remote control event. [ 1318.573957][T30034] loop9: detected capacity change from 0 to 7 [ 1318.603180][T30028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7779'. [ 1318.613628][T30034] Dev loop9: unable to read RDB block 7 [ 1318.619599][T30034] loop9: unable to read partition table [ 1318.633890][T30034] loop9: partition table beyond EOD, truncated [ 1318.641908][T30034] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1318.665064][ T24] m920x_read = error: -19 [ 1318.669515][ T24] dvb-usb: error while querying for an remote control event. [ 1318.673581][T30033] Dev loop9: unable to read RDB block 7 [ 1318.686994][T30033] loop9: unable to read partition table [ 1318.692792][T30033] loop9: partition table beyond EOD, truncated [ 1318.705826][T30033] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1318.794448][ T24] m920x_read = error: -19 [ 1318.802269][ T24] dvb-usb: error while querying for an remote control event. [ 1318.924428][ T24] m920x_read = error: -19 [ 1318.930627][ T24] dvb-usb: error while querying for an remote control event. [ 1319.044193][ T24] m920x_read = error: -19 [ 1319.054456][ T24] dvb-usb: error while querying for an remote control event. [ 1319.164420][ T24] m920x_read = error: -19 [ 1319.173045][ T24] dvb-usb: error while querying for an remote control event. [ 1319.327029][ T24] m920x_read = error: -19 [ 1319.347043][T30055] syzkaller0: entered promiscuous mode [ 1319.359306][ T24] dvb-usb: error while querying for an remote control event. [ 1319.363473][T30055] syzkaller0: entered allmulticast mode [ 1319.500944][ T24] m920x_read = error: -19 [ 1319.536249][ T24] dvb-usb: error while querying for an remote control event. [ 1319.694581][ T24] m920x_read = error: -19 [ 1319.718373][ T24] dvb-usb: error while querying for an remote control event. [ 1319.884200][ T808] m920x_read = error: -19 [ 1319.911093][ T808] dvb-usb: error while querying for an remote control event. [ 1320.110879][ T808] m920x_read = error: -19 [ 1320.127680][ T808] dvb-usb: error while querying for an remote control event. [ 1320.274320][ T808] m920x_read = error: -19 [ 1320.300983][ T808] dvb-usb: error while querying for an remote control event. [ 1320.454777][ T808] m920x_read = error: -19 [ 1320.470790][ T808] dvb-usb: error while querying for an remote control event. [ 1320.625808][ T24] m920x_read = error: -19 [ 1320.638662][ T24] dvb-usb: error while querying for an remote control event. [ 1320.784196][ T5725] m920x_read = error: -19 [ 1320.788596][ T5725] dvb-usb: error while querying for an remote control event. [ 1320.974227][ T24] m920x_read = error: -19 [ 1320.999209][ T24] dvb-usb: error while querying for an remote control event. [ 1321.015812][T30083] FAULT_INJECTION: forcing a failure. [ 1321.015812][T30083] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1321.059767][T30083] CPU: 0 UID: 0 PID: 30083 Comm: syz.8.7796 Tainted: G L syzkaller #0 PREEMPT(full) [ 1321.059792][T30083] Tainted: [L]=SOFTLOCKUP [ 1321.059798][T30083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1321.059806][T30083] Call Trace: [ 1321.059813][T30083] [ 1321.059821][T30083] dump_stack_lvl+0xe8/0x150 [ 1321.059844][T30083] should_fail_ex+0x412/0x560 [ 1321.059869][T30083] prepare_alloc_pages+0x22a/0x650 [ 1321.059897][T30083] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1321.059923][T30083] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1321.059948][T30083] ? __pfx_policy_nodemask+0x10/0x10 [ 1321.059968][T30083] ? try_to_migrate+0x317/0x3f0 [ 1321.059988][T30083] ? unwind_next_frame+0xa6/0x2550 [ 1321.060009][T30083] ? __pfx_try_to_migrate+0x10/0x10 [ 1321.060033][T30083] alloc_pages_mpol+0x235/0x490 [ 1321.060059][T30083] folio_alloc_mpol_noprof+0x39/0x160 [ 1321.060121][T30083] migrate_pages_batch+0xa55/0x4ca0 [ 1321.060155][T30083] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1321.060178][T30083] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1321.060197][T30083] ? __mpol_dup+0x79/0x330 [ 1321.060212][T30083] ? stack_trace_save+0xa9/0x100 [ 1321.060232][T30083] ? __pfx_stack_trace_save+0x10/0x10 [ 1321.060253][T30083] ? __mpol_dup+0x79/0x330 [ 1321.060268][T30083] ? stack_depot_save_flags+0x33/0x810 [ 1321.060289][T30083] ? __mpol_dup+0x79/0x330 [ 1321.060304][T30083] ? kasan_save_track+0x4f/0x80 [ 1321.060322][T30083] ? kasan_save_track+0x3e/0x80 [ 1321.060336][T30083] ? __kasan_slab_alloc+0x6c/0x80 [ 1321.060358][T30083] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 1321.060375][T30083] ? __mpol_dup+0x79/0x330 [ 1321.060388][T30083] ? mpol_set_shared_policy+0xbd/0xc00 [ 1321.060402][T30083] ? mbind_range+0x5e1/0x810 [ 1321.060416][T30083] ? __se_sys_mbind+0xad4/0x10f0 [ 1321.060434][T30083] ? do_syscall_64+0x15f/0xf80 [ 1321.060453][T30083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.060489][T30083] migrate_pages+0x1c74/0x2a10 [ 1321.060506][T30083] ? __lock_acquire+0x6b5/0x2cf0 [ 1321.060531][T30083] ? current_cpuset_is_being_rebound+0x1d/0x300 [ 1321.060556][T30083] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1321.060580][T30083] ? __pfx_migrate_pages+0x10/0x10 [ 1321.060596][T30083] ? do_raw_write_lock+0x11d/0x260 [ 1321.060625][T30083] ? mpol_set_shared_policy+0xa75/0xc00 [ 1321.060664][T30083] __se_sys_mbind+0xe89/0x10f0 [ 1321.060693][T30083] ? __pfx___se_sys_mbind+0x10/0x10 [ 1321.060724][T30083] ? fput+0xa0/0xd0 [ 1321.060742][T30083] ? ksys_write+0x242/0x270 [ 1321.060764][T30083] ? __pfx_ksys_write+0x10/0x10 [ 1321.060789][T30083] ? __x64_sys_mbind+0x21/0xf0 [ 1321.060809][T30083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.060826][T30083] do_syscall_64+0x15f/0xf80 [ 1321.060844][T30083] ? trace_irq_disable+0x3b/0x140 [ 1321.060866][T30083] ? clear_bhb_loop+0x40/0x90 [ 1321.060885][T30083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.060900][T30083] RIP: 0033:0x7f83ecb9ce59 [ 1321.060915][T30083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1321.060928][T30083] RSP: 002b:00007f83ed9ac028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1321.060944][T30083] RAX: ffffffffffffffda RBX: 00007f83ece16090 RCX: 00007f83ecb9ce59 [ 1321.060955][T30083] RDX: 0000000000000004 RSI: 0000000000800000 RDI: 0000200000001000 [ 1321.060966][T30083] RBP: 00007f83ed9ac090 R08: 0000000000000000 R09: 0000000000000002 [ 1321.060975][T30083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1321.060984][T30083] R13: 00007f83ece16128 R14: 00007f83ece16090 R15: 00007f83ecf3fa48 [ 1321.061009][T30083] [ 1321.745844][ T5725] m920x_read = error: -19 [ 1321.758137][T30086] netlink: 'syz.6.7797': attribute type 1 has an invalid length. [ 1321.768920][ T5725] dvb-usb: error while querying for an remote control event. [ 1321.935450][ T5725] m920x_read = error: -19 [ 1321.953574][T30086] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1321.960786][ T5725] dvb-usb: error while querying for an remote control event. [ 1321.982029][T30087] vlan4: entered allmulticast mode [ 1321.987497][T30087] bond5: entered allmulticast mode [ 1322.018750][T30089] bond5: (slave geneve3): making interface the new active one [ 1322.026563][T30089] geneve3: entered allmulticast mode [ 1322.035419][T30089] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 1322.084564][ T24] m920x_read = error: -19 [ 1322.096745][ T24] dvb-usb: error while querying for an remote control event. [ 1322.185162][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1322.185179][ T30] audit: type=1326 audit(1778805884.257:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30097 comm="syz.3.7801" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639959ce59 code=0x7ffc0000 [ 1322.255444][ T5725] m920x_read = error: -19 [ 1322.269291][ T5725] dvb-usb: error while querying for an remote control event. [ 1322.305108][ T30] audit: type=1326 audit(1778805884.267:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30097 comm="syz.3.7801" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639959ce59 code=0x7ffc0000 [ 1322.348861][ T30] audit: type=1326 audit(1778805884.307:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30097 comm="syz.3.7801" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f639959ce59 code=0x7ffc0000 [ 1322.388708][T30103] syzkaller0: entered promiscuous mode [ 1322.409147][ T5725] m920x_read = error: -19 [ 1322.415299][ T5725] dvb-usb: error while querying for an remote control event. [ 1322.424560][T30103] syzkaller0: entered allmulticast mode [ 1322.471508][T30107] netlink: 180 bytes leftover after parsing attributes in process `syz.8.7804'. [ 1322.501054][ T30] audit: type=1326 audit(1778805884.307:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30097 comm="syz.3.7801" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639959ce59 code=0x7ffc0000 [ 1322.524703][T30110] fuse: Bad value for 'fd' [ 1322.532905][T30107] netlink: 48 bytes leftover after parsing attributes in process `syz.8.7804'. [ 1322.568194][ T5725] m920x_read = error: -19 [ 1322.574241][ T5725] dvb-usb: error while querying for an remote control event. [ 1322.620589][ T30] audit: type=1326 audit(1778805884.307:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30097 comm="syz.3.7801" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639959ce59 code=0x7ffc0000 [ 1322.695012][ T24] m920x_read = error: -19 [ 1322.699513][ T24] dvb-usb: error while querying for an remote control event. [ 1322.730312][ T30] audit: type=1326 audit(1778805884.307:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30097 comm="syz.3.7801" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f639959ce59 code=0x7ffc0000 [ 1322.824694][ T24] m920x_read = error: -19 [ 1322.837885][ T24] dvb-usb: error while querying for an remote control event. [ 1322.847011][ T30] audit: type=1326 audit(1778805884.307:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30097 comm="syz.3.7801" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639959ce59 code=0x7ffc0000 [ 1322.940736][ T30] audit: type=1326 audit(1778805884.307:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30097 comm="syz.3.7801" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639959ce59 code=0x7ffc0000 [ 1322.990031][ T30] audit: type=1326 audit(1778805884.307:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30097 comm="syz.3.7801" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f639959ce59 code=0x7ffc0000 [ 1323.014890][ T5725] m920x_read = error: -19 [ 1323.022555][ T5725] dvb-usb: error while querying for an remote control event. [ 1323.033923][ T30] audit: type=1326 audit(1778805884.307:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30097 comm="syz.3.7801" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639959ce59 code=0x7ffc0000 [ 1323.144395][ T5725] m920x_read = error: -19 [ 1323.148822][ T5725] dvb-usb: error while querying for an remote control event. [ 1323.265162][ T5725] m920x_read = error: -19 [ 1323.269687][ T5725] dvb-usb: error while querying for an remote control event. [ 1323.291236][T30131] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1323.303504][T30131] bond0: (slave lo): Error: Device can not be enslaved while up [ 1323.384355][ T5725] m920x_read = error: -19 [ 1323.389175][ T5725] dvb-usb: error while querying for an remote control event. [ 1323.504308][ T5725] m920x_read = error: -19 [ 1323.508729][ T5725] dvb-usb: error while querying for an remote control event. [ 1323.544239][ T5710] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1323.562669][T30138] netlink: 'syz.4.7815': attribute type 32 has an invalid length. [ 1323.578361][T30138] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.7815'. [ 1323.624392][ T5725] m920x_read = error: -19 [ 1323.628874][ T5725] dvb-usb: error while querying for an remote control event. [ 1323.709871][ T5710] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1323.720822][ T5710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.729772][ T5710] usb 6-1: Product: syz [ 1323.734511][ T5710] usb 6-1: Manufacturer: syz [ 1323.739257][ T5710] usb 6-1: SerialNumber: syz [ 1323.754606][ T24] m920x_read = error: -19 [ 1323.763834][ T24] dvb-usb: error while querying for an remote control event. [ 1323.824271][T23545] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1323.894311][ T24] m920x_read = error: -19 [ 1323.901632][ T24] dvb-usb: error while querying for an remote control event. [ 1323.955719][T30132] [ 1323.958068][T30132] ===================================================== [ 1323.965026][T30132] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1323.972489][T30132] syzkaller #0 Tainted: G L [ 1323.978461][T30132] ----------------------------------------------------- [ 1323.984128][T23545] usb 5-1: Using ep0 maxpacket: 32 [ 1323.985423][T30132] syz.5.7812/30132 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1323.985443][T30132] ffffffff8e60a058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 1323.998892][T23545] usb 5-1: too many configurations: 251, using maximum allowed: 8 [ 1324.006979][T30132] [ 1324.006979][T30132] and this task is already holding: [ 1324.006990][T30132] ffff888078763da0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1324.007037][T30132] which would create a new lock dependency: [ 1324.007044][T30132] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1324.007079][T30132] [ 1324.007079][T30132] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1324.007087][T30132] (&client->buffer_lock){..-.}-{3:3} [ 1324.035277][T23545] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 1324.036826][T30132] [ 1324.036826][T30132] ... which became SOFTIRQ-irq-safe at: [ 1324.036836][T30132] lock_acquire+0x106/0x350 [ 1324.036856][T30132] _raw_spin_lock+0x2e/0x40 [ 1324.051454][T23545] usb 5-1: can't read configurations, error -22 [ 1324.053801][T30132] evdev_pass_values+0xb9/0xbd0 [ 1324.053823][T30132] evdev_events+0x1e6/0x340 [ 1324.100081][T30132] input_pass_values+0x288/0x890 [ 1324.105110][T30132] input_event_dispose+0x3e5/0x6b0 [ 1324.110309][T30132] input_event+0x84/0xc0 [ 1324.114642][T30132] hidinput_hid_event+0x143a/0x1ec0 [ 1324.119921][T30132] hid_process_event+0x4be/0x620 [ 1324.124940][T30132] hid_report_raw_event+0xec2/0x1730 [ 1324.130310][T30132] hid_input_report+0x44b/0x580 [ 1324.135251][T30132] hid_irq_in+0x47e/0x6d0 [ 1324.139673][T30132] __usb_hcd_giveback_urb+0x376/0x540 [ 1324.145137][T30132] dummy_timer+0xbc0/0x4650 [ 1324.149731][T30132] __hrtimer_run_queues+0x3c0/0xa20 [ 1324.155015][T30132] hrtimer_run_softirq+0x17a/0x240 [ 1324.160212][T30132] handle_softirqs+0x22a/0x840 [ 1324.165060][T30132] __irq_exit_rcu+0xca/0x220 [ 1324.169733][T30132] irq_exit_rcu+0x9/0x30 [ 1324.174058][T30132] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1324.179777][T30132] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1324.185852][T30132] unwind_next_frame+0x52b/0x2550 [ 1324.190963][T30132] arch_stack_walk+0x11b/0x150 [ 1324.194175][T23545] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1324.195811][T30132] stack_trace_save+0xa9/0x100 [ 1324.195838][T30132] kasan_save_track+0x3e/0x80 [ 1324.213014][T30132] kasan_save_free_info+0x46/0x50 [ 1324.218128][T30132] __kasan_slab_free+0x5c/0x80 [ 1324.222980][T30132] kmem_cache_free+0x182/0x650 [ 1324.227831][T30132] unlink_anon_vmas+0x368/0x730 [ 1324.232768][T30132] free_pgtables+0x836/0xb70 [ 1324.237455][T30132] exit_mmap+0x490/0x9e0 [ 1324.241795][T30132] __mmput+0x118/0x430 [ 1324.245950][T30132] exec_mmap+0x3b4/0x440 [ 1324.250282][T30132] begin_new_exec+0x134a/0x2480 [ 1324.255222][T30132] load_elf_binary+0xa47/0x2980 [ 1324.260157][T30132] bprm_execve+0x94a/0x1510 [ 1324.264751][T30132] do_execveat_common+0x50d/0x690 [ 1324.269965][T30132] __x64_sys_execve+0x97/0xc0 [ 1324.274744][T30132] do_syscall_64+0x15f/0xf80 [ 1324.279438][T30132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.285419][T30132] [ 1324.285419][T30132] to a SOFTIRQ-irq-unsafe lock: [ 1324.292429][T30132] (tasklist_lock){.+.+}-{3:3} [ 1324.292456][T30132] [ 1324.292456][T30132] ... which became SOFTIRQ-irq-unsafe at: [ 1324.305168][T30132] ... [ 1324.305177][T30132] lock_acquire+0x106/0x350 [ 1324.312322][T30132] _raw_read_lock+0x36/0x50 [ 1324.316902][T30132] __do_wait+0xde/0x740 [ 1324.321137][T30132] do_wait+0x1e7/0x510 [ 1324.325282][T30132] kernel_wait+0xd6/0x1c0 [ 1324.329689][T30132] call_usermodehelper_exec_work+0xbe/0x230 [ 1324.335653][T30132] process_scheduled_works+0xb5d/0x1860 [ 1324.341268][T30132] worker_thread+0xa53/0xfc0 [ 1324.345928][T30132] kthread+0x389/0x470 [ 1324.350071][T30132] ret_from_fork+0x514/0xb70 [ 1324.354734][T30132] ret_from_fork_asm+0x1a/0x30 [ 1324.359578][T30132] [ 1324.359578][T30132] other info that might help us debug this: [ 1324.359578][T30132] [ 1324.369798][T30132] Chain exists of: [ 1324.369798][T30132] &client->buffer_lock --> &f_owner->lock --> tasklist_lock [ 1324.369798][T30132] [ 1324.382995][T30132] Possible interrupt unsafe locking scenario: [ 1324.382995][T30132] [ 1324.391298][T30132] CPU0 CPU1 [ 1324.396646][T30132] ---- ---- [ 1324.401993][T30132] lock(tasklist_lock); [ 1324.406220][T30132] local_irq_disable(); [ 1324.412953][T30132] lock(&client->buffer_lock); [ 1324.420309][T30132] lock(&f_owner->lock); [ 1324.427148][T30132] [ 1324.430584][T30132] lock(&client->buffer_lock); [ 1324.435591][T30132] [ 1324.435591][T30132] *** DEADLOCK *** [ 1324.435591][T30132] [ 1324.443718][T30132] 2 locks held by syz.5.7812/30132: [ 1324.448894][T30132] #0: ffff88807ba03150 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b6/0x4f0 [ 1324.457407][T30132] #1: ffff888078763da0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1324.466525][T30132] [ 1324.466525][T30132] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1324.476996][T30132] -> (&client->buffer_lock){..-.}-{3:3} { [ 1324.482886][T30132] IN-SOFTIRQ-W at: [ 1324.487022][T30132] lock_acquire+0x106/0x350 [ 1324.493512][T30132] _raw_spin_lock+0x2e/0x40 [ 1324.500002][T30132] evdev_pass_values+0xb9/0xbd0 [ 1324.506833][T30132] evdev_events+0x1e6/0x340 [ 1324.513316][T30132] input_pass_values+0x288/0x890 [ 1324.520240][T30132] input_event_dispose+0x3e5/0x6b0 [ 1324.527332][T30132] input_event+0x84/0xc0 [ 1324.533549][T30132] hidinput_hid_event+0x143a/0x1ec0 [ 1324.540727][T30132] hid_process_event+0x4be/0x620 [ 1324.547645][T30132] hid_report_raw_event+0xec2/0x1730 [ 1324.554910][T30132] hid_input_report+0x44b/0x580 [ 1324.561738][T30132] hid_irq_in+0x47e/0x6d0 [ 1324.568050][T30132] __usb_hcd_giveback_urb+0x376/0x540 [ 1324.575404][T30132] dummy_timer+0xbc0/0x4650 [ 1324.581888][T30132] __hrtimer_run_queues+0x3c0/0xa20 [ 1324.589071][T30132] hrtimer_run_softirq+0x17a/0x240 [ 1324.596159][T30132] handle_softirqs+0x22a/0x840 [ 1324.602898][T30132] __irq_exit_rcu+0xca/0x220 [ 1324.609465][T30132] irq_exit_rcu+0x9/0x30 [ 1324.615686][T30132] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1324.623298][T30132] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1324.631256][T30132] unwind_next_frame+0x52b/0x2550 [ 1324.638261][T30132] arch_stack_walk+0x11b/0x150 [ 1324.645005][T30132] stack_trace_save+0xa9/0x100 [ 1324.651749][T30132] kasan_save_track+0x3e/0x80 [ 1324.658409][T30132] kasan_save_free_info+0x46/0x50 [ 1324.665410][T30132] __kasan_slab_free+0x5c/0x80 [ 1324.672158][T30132] kmem_cache_free+0x182/0x650 [ 1324.678904][T30132] unlink_anon_vmas+0x368/0x730 [ 1324.685739][T30132] free_pgtables+0x836/0xb70 [ 1324.692333][T30132] exit_mmap+0x490/0x9e0 [ 1324.698562][T30132] __mmput+0x118/0x430 [ 1324.704628][T30132] exec_mmap+0x3b4/0x440 [ 1324.710864][T30132] begin_new_exec+0x134a/0x2480 [ 1324.717700][T30132] load_elf_binary+0xa47/0x2980 [ 1324.724540][T30132] bprm_execve+0x94a/0x1510 [ 1324.731029][T30132] do_execveat_common+0x50d/0x690 [ 1324.738044][T30132] __x64_sys_execve+0x97/0xc0 [ 1324.744705][T30132] do_syscall_64+0x15f/0xf80 [ 1324.751275][T30132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.759144][T30132] INITIAL USE at: [ 1324.763197][T30132] lock_acquire+0x106/0x350 [ 1324.769590][T30132] _raw_spin_lock+0x2e/0x40 [ 1324.775985][T30132] evdev_pass_values+0xb9/0xbd0 [ 1324.782731][T30132] evdev_events+0x1e6/0x340 [ 1324.789131][T30132] input_pass_values+0x288/0x890 [ 1324.795963][T30132] input_event_dispose+0x330/0x6b0 [ 1324.802975][T30132] input_inject_event+0x1dc/0x330 [ 1324.809893][T30132] evdev_write+0x325/0x4c0 [ 1324.816199][T30132] vfs_write+0x29a/0xb90 [ 1324.822334][T30132] ksys_write+0x150/0x270 [ 1324.828555][T30132] do_syscall_64+0x15f/0xf80 [ 1324.835043][T30132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.842827][T30132] } [ 1324.845478][T30132] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1324.853852][T30132] -> (&new->fa_lock){....}-{3:3} { [ 1324.859048][T30132] INITIAL USE at: [ 1324.863023][T30132] lock_acquire+0x106/0x350 [ 1324.869247][T30132] _raw_write_lock_irq+0x3d/0x50 [ 1324.875924][T30132] fasync_remove_entry+0xf1/0x1c0 [ 1324.882672][T30132] lease_modify+0x4f7/0x6c0 [ 1324.888903][T30132] locks_remove_file+0x5f0/0xf70 [ 1324.895564][T30132] __fput+0x3ae/0xa60 [ 1324.901270][T30132] task_work_run+0x1d9/0x270 [ 1324.907589][T30132] do_exit+0x70f/0x22c0 [ 1324.913467][T30132] do_group_exit+0x21b/0x2d0 [ 1324.919778][T30132] get_signal+0x1284/0x1330 [ 1324.926005][T30132] arch_do_signal_or_restart+0xbc/0x840 [ 1324.933272][T30132] exit_to_user_mode_loop+0x8c/0x4d0 [ 1324.940278][T30132] do_syscall_64+0x33e/0xf80 [ 1324.946594][T30132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.954207][T30132] INITIAL READ USE at: [ 1324.958616][T30132] lock_acquire+0x106/0x350 [ 1324.965271][T30132] _raw_read_lock_irqsave+0x48/0x60 [ 1324.972627][T30132] kill_fasync+0x199/0x4d0 [ 1324.979210][T30132] sock_wake_async+0x137/0x160 [ 1324.986154][T30132] sk_wake_async+0x184/0x280 [ 1324.992954][T30132] unix_release_sock+0x74f/0xc80 [ 1325.000049][T30132] unix_release+0x92/0xd0 [ 1325.006539][T30132] sock_close+0xc3/0x240 [ 1325.012938][T30132] __fput+0x44f/0xa60 [ 1325.019084][T30132] task_work_run+0x1d9/0x270 [ 1325.025834][T30132] do_exit+0x70f/0x22c0 [ 1325.032158][T30132] do_group_exit+0x21b/0x2d0 [ 1325.038916][T30132] get_signal+0x1284/0x1330 [ 1325.045589][T30132] arch_do_signal_or_restart+0xbc/0x840 [ 1325.053317][T30132] exit_to_user_mode_loop+0x8c/0x4d0 [ 1325.060774][T30132] do_syscall_64+0x33e/0xf80 [ 1325.067549][T30132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.075603][T30132] } [ 1325.078182][T30132] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1325.086970][T30132] ... acquired at: [ 1325.090846][T30132] _raw_read_lock_irqsave+0x48/0x60 [ 1325.096200][T30132] kill_fasync+0x199/0x4d0 [ 1325.100774][T30132] evdev_pass_values+0x627/0xbd0 [ 1325.105873][T30132] evdev_events+0x1e6/0x340 [ 1325.110535][T30132] input_pass_values+0x288/0x890 [ 1325.115639][T30132] input_event_dispose+0x330/0x6b0 [ 1325.120904][T30132] input_inject_event+0x1dc/0x330 [ 1325.126082][T30132] evdev_write+0x325/0x4c0 [ 1325.130647][T30132] vfs_write+0x29a/0xb90 [ 1325.135046][T30132] ksys_write+0x150/0x270 [ 1325.139532][T30132] do_syscall_64+0x15f/0xf80 [ 1325.144278][T30132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.150323][T30132] [ 1325.152627][T30132] -> (&f_owner->lock){....}-{3:3} { [ 1325.157830][T30132] INITIAL USE at: [ 1325.161705][T30132] lock_acquire+0x106/0x350 [ 1325.167767][T30132] _raw_write_lock_irq+0x3d/0x50 [ 1325.174272][T30132] __f_setown+0x67/0x370 [ 1325.180060][T30132] generic_setlease+0xacf/0xfd0 [ 1325.186459][T30132] do_fcntl_add_lease+0x35e/0x470 [ 1325.193120][T30132] fcntl_setlease+0x123/0x180 [ 1325.199345][T30132] do_fcntl+0x8b3/0x1a20 [ 1325.205139][T30132] __se_sys_fcntl+0xc8/0x150 [ 1325.211300][T30132] do_syscall_64+0x15f/0xf80 [ 1325.217447][T30132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.224908][T30132] INITIAL READ USE at: [ 1325.229221][T30132] lock_acquire+0x106/0x350 [ 1325.235704][T30132] _raw_read_lock_irqsave+0x48/0x60 [ 1325.242889][T30132] send_sigio+0x38/0x370 [ 1325.249111][T30132] kill_fasync+0x24d/0x4d0 [ 1325.255512][T30132] sock_wake_async+0x137/0x160 [ 1325.262256][T30132] sk_wake_async+0x184/0x280 [ 1325.268832][T30132] unix_release_sock+0x74f/0xc80 [ 1325.275761][T30132] unix_release+0x92/0xd0 [ 1325.282070][T30132] sock_close+0xc3/0x240 [ 1325.288291][T30132] __fput+0x44f/0xa60 [ 1325.294254][T30132] task_work_run+0x1d9/0x270 [ 1325.300828][T30132] do_exit+0x70f/0x22c0 [ 1325.306973][T30132] do_group_exit+0x21b/0x2d0 [ 1325.313551][T30132] get_signal+0x1284/0x1330 [ 1325.320032][T30132] arch_do_signal_or_restart+0xbc/0x840 [ 1325.327573][T30132] exit_to_user_mode_loop+0x8c/0x4d0 [ 1325.334843][T30132] do_syscall_64+0x33e/0xf80 [ 1325.341418][T30132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.349302][T30132] } [ 1325.351781][T30132] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1325.360615][T30132] ... acquired at: [ 1325.364400][T30132] _raw_read_lock_irqsave+0x48/0x60 [ 1325.369757][T30132] send_sigio+0x38/0x370 [ 1325.374161][T30132] kill_fasync+0x24d/0x4d0 [ 1325.378739][T30132] sock_wake_async+0x137/0x160 [ 1325.383661][T30132] sk_wake_async+0x184/0x280 [ 1325.388406][T30132] unix_release_sock+0x74f/0xc80 [ 1325.393502][T30132] unix_release+0x92/0xd0 [ 1325.397989][T30132] sock_close+0xc3/0x240 [ 1325.402417][T30132] __fput+0x44f/0xa60 [ 1325.406565][T30132] task_work_run+0x1d9/0x270 [ 1325.411318][T30132] do_exit+0x70f/0x22c0 [ 1325.415633][T30132] do_group_exit+0x21b/0x2d0 [ 1325.420380][T30132] get_signal+0x1284/0x1330 [ 1325.425037][T30132] arch_do_signal_or_restart+0xbc/0x840 [ 1325.430749][T30132] exit_to_user_mode_loop+0x8c/0x4d0 [ 1325.436191][T30132] do_syscall_64+0x33e/0xf80 [ 1325.440945][T30132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.446994][T30132] [ 1325.449301][T30132] [ 1325.449301][T30132] the dependencies between the lock to be acquired [ 1325.449308][T30132] and SOFTIRQ-irq-unsafe lock: [ 1325.462790][T30132] -> (tasklist_lock){.+.+}-{3:3} { [ 1325.467902][T30132] HARDIRQ-ON-R at: [ 1325.471867][T30132] lock_acquire+0x106/0x350 [ 1325.478014][T30132] _raw_read_lock+0x36/0x50 [ 1325.484151][T30132] __do_wait+0xde/0x740 [ 1325.489944][T30132] do_wait+0x1e7/0x510 [ 1325.495654][T30132] kernel_wait+0xd6/0x1c0 [ 1325.501616][T30132] call_usermodehelper_exec_work+0xbe/0x230 [ 1325.509138][T30132] process_scheduled_works+0xb5d/0x1860 [ 1325.516312][T30132] worker_thread+0xa53/0xfc0 [ 1325.522533][T30132] kthread+0x389/0x470 [ 1325.528246][T30132] ret_from_fork+0x514/0xb70 [ 1325.534468][T30132] ret_from_fork_asm+0x1a/0x30 [ 1325.540953][T30132] SOFTIRQ-ON-R at: [ 1325.544925][T30132] lock_acquire+0x106/0x350 [ 1325.551057][T30132] _raw_read_lock+0x36/0x50 [ 1325.557196][T30132] __do_wait+0xde/0x740 [ 1325.562984][T30132] do_wait+0x1e7/0x510 [ 1325.568684][T30132] kernel_wait+0xd6/0x1c0 [ 1325.574652][T30132] call_usermodehelper_exec_work+0xbe/0x230 [ 1325.582190][T30132] process_scheduled_works+0xb5d/0x1860 [ 1325.589390][T30132] worker_thread+0xa53/0xfc0 [ 1325.595634][T30132] kthread+0x389/0x470 [ 1325.601350][T30132] ret_from_fork+0x514/0xb70 [ 1325.607589][T30132] ret_from_fork_asm+0x1a/0x30 [ 1325.613995][T30132] INITIAL USE at: [ 1325.617880][T30132] lock_acquire+0x106/0x350 [ 1325.623934][T30132] _raw_write_lock_irq+0x3d/0x50 [ 1325.630428][T30132] copy_process+0x2b4c/0x4440 [ 1325.636660][T30132] kernel_clone+0x284/0x8f0 [ 1325.642742][T30132] user_mode_thread+0x110/0x180 [ 1325.649145][T30132] rest_init+0x23/0x300 [ 1325.654937][T30132] start_kernel+0x38a/0x3e0 [ 1325.661076][T30132] x86_64_start_reservations+0x24/0x30 [ 1325.668097][T30132] x86_64_start_kernel+0x143/0x1c0 [ 1325.674764][T30132] common_startup_64+0x13e/0x147 [ 1325.681256][T30132] INITIAL READ USE at: [ 1325.685566][T30132] lock_acquire+0x106/0x350 [ 1325.692051][T30132] _raw_read_lock+0x36/0x50 [ 1325.698543][T30132] __do_wait+0xde/0x740 [ 1325.704711][T30132] do_wait+0x1e7/0x510 [ 1325.710778][T30132] kernel_wait+0xd6/0x1c0 [ 1325.717107][T30132] call_usermodehelper_exec_work+0xbe/0x230 [ 1325.724988][T30132] process_scheduled_works+0xb5d/0x1860 [ 1325.732523][T30132] worker_thread+0xa53/0xfc0 [ 1325.739103][T30132] kthread+0x389/0x470 [ 1325.745161][T30132] ret_from_fork+0x514/0xb70 [ 1325.751882][T30132] ret_from_fork_asm+0x1a/0x30 [ 1325.758628][T30132] } [ 1325.761111][T30132] ... key at: [] tasklist_lock+0x18/0x40 [ 1325.768942][T30132] ... acquired at: [ 1325.772735][T30132] _raw_read_lock+0x36/0x50 [ 1325.777425][T30132] send_sigurg+0x12b/0x420 [ 1325.782009][T30132] sk_send_sigurg+0x6c/0x2e0 [ 1325.786759][T30132] queue_oob+0x42c/0x4f0 [ 1325.791168][T30132] unix_stream_sendmsg+0xcb1/0xe80 [ 1325.796441][T30132] ____sys_sendmsg+0x972/0x9f0 [ 1325.801380][T30132] ___sys_sendmsg+0x2a5/0x360 [ 1325.806226][T30132] __sys_sendmmsg+0x27c/0x4e0 [ 1325.811081][T30132] __x64_sys_sendmmsg+0xa0/0xc0 [ 1325.816108][T30132] do_syscall_64+0x15f/0xf80 [ 1325.820862][T30132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.826931][T30132] [ 1325.829246][T30132] [ 1325.829246][T30132] stack backtrace: [ 1325.835132][T30132] CPU: 1 UID: 0 PID: 30132 Comm: syz.5.7812 Tainted: G L syzkaller #0 PREEMPT(full) [ 1325.835152][T30132] Tainted: [L]=SOFTLOCKUP [ 1325.835157][T30132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1325.835165][T30132] Call Trace: [ 1325.835173][T30132] [ 1325.835180][T30132] dump_stack_lvl+0xe8/0x150 [ 1325.835198][T30132] __lock_acquire+0x2a94/0x2cf0 [ 1325.835219][T30132] ? send_sigurg+0x12b/0x420 [ 1325.835235][T30132] lock_acquire+0x106/0x350 [ 1325.835250][T30132] ? send_sigurg+0x12b/0x420 [ 1325.835270][T30132] _raw_read_lock+0x36/0x50 [ 1325.835285][T30132] ? send_sigurg+0x12b/0x420 [ 1325.835299][T30132] send_sigurg+0x12b/0x420 [ 1325.835315][T30132] sk_send_sigurg+0x6c/0x2e0 [ 1325.835327][T30132] queue_oob+0x42c/0x4f0 [ 1325.835342][T30132] ? __pfx_queue_oob+0x10/0x10 [ 1325.835356][T30132] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1325.835373][T30132] unix_stream_sendmsg+0xcb1/0xe80 [ 1325.835389][T30132] ? finish_task_switch+0x4da/0xbe0 [ 1325.835401][T30132] ? rcu_is_watching+0x15/0xb0 [ 1325.835415][T30132] ? trace_sched_exit_tp+0x3a/0x130 [ 1325.835427][T30132] ? __lock_acquire+0x6b5/0x2cf0 [ 1325.835439][T30132] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1325.835452][T30132] ? plist_check_list+0x2f4/0x310 [ 1325.835465][T30132] ? aa_sock_msg_perm+0xda/0x1b0 [ 1325.835480][T30132] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1325.835495][T30132] ____sys_sendmsg+0x972/0x9f0 [ 1325.835510][T30132] ? __might_fault+0xaf/0x130 [ 1325.835530][T30132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1325.835547][T30132] ? import_iovec+0x73/0xa0 [ 1325.835564][T30132] ___sys_sendmsg+0x2a5/0x360 [ 1325.835579][T30132] ? __lock_acquire+0x6b5/0x2cf0 [ 1325.835592][T30132] ? __pfx____sys_sendmsg+0x10/0x10 [ 1325.835608][T30132] ? __pfx_futex_wake_mark+0x10/0x10 [ 1325.835632][T30132] ? __fget_files+0x2a/0x420 [ 1325.835646][T30132] ? __fget_files+0x3a0/0x420 [ 1325.835665][T30132] __sys_sendmmsg+0x27c/0x4e0 [ 1325.835682][T30132] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1325.835696][T30132] ? do_futex+0x333/0x420 [ 1325.835710][T30132] ? __pfx_do_fcntl+0x10/0x10 [ 1325.835729][T30132] ? __fget_files+0x2a/0x420 [ 1325.835741][T30132] ? __pfx___se_sys_futex+0x10/0x10 [ 1325.835756][T30132] __x64_sys_sendmmsg+0xa0/0xc0 [ 1325.835771][T30132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.835783][T30132] do_syscall_64+0x15f/0xf80 [ 1325.835803][T30132] ? trace_irq_disable+0x3b/0x140 [ 1325.835819][T30132] ? clear_bhb_loop+0x40/0x90 [ 1325.835832][T30132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.835843][T30132] RIP: 0033:0x7f04dbf9ce59 [ 1325.835856][T30132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1325.835867][T30132] RSP: 002b:00007f04dcf12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1325.835882][T30132] RAX: ffffffffffffffda RBX: 00007f04dc215fa0 RCX: 00007f04dbf9ce59 [ 1325.835890][T30132] RDX: 0000000000000001 RSI: 0000200000006c40 RDI: 000000000000000c [ 1325.835899][T30132] RBP: 00007f04dc032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1325.835912][T30132] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000000 [ 1325.835920][T30132] R13: 00007f04dc216038 R14: 00007f04dc215fa0 R15: 00007f04dc33fa48 [ 1325.835937][T30132] [ 1326.159030][ T5725] m920x_read = error: -19 [ 1326.163717][ T5725] dvb-usb: error while querying for an remote control event. [ 1326.164133][T23545] usb 5-1: Using ep0 maxpacket: 32 [ 1326.177218][T23545] usb 5-1: too many configurations: 251, using maximum allowed: 8 [ 1326.186798][T23545] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 1326.199588][T23545] usb 5-1: can't read configurations, error -22 [ 1326.214467][T23545] usb usb5-port1: attempt power cycle [ 1326.246827][ T5710] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1326.259551][ T5710] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1326.272659][ T5710] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1326.285979][ T5690] m920x_read = error: -19 [ 1326.290384][ T5690] dvb-usb: error while querying for an remote control event. [ 1326.306193][ T5710] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1326.324497][ T5710] usb 6-1: USB disconnect, device number 112 [ 1326.345311][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1326.414502][ T5690] m920x_read = error: -19 [ 1326.419894][ T5690] dvb-usb: error while querying for an remote control event. [ 1326.494251][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 1326.501049][ T24] usb 9-1: config 0 has an invalid interface number: 34 but max is 0 [ 1326.509553][ T24] usb 9-1: config 0 has no interface number 0 [ 1326.515828][ T24] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1326.528495][ T24] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1326.538784][ T5690] m920x_read = error: -19 [ 1326.543241][ T5690] dvb-usb: error while querying for an remote control event. [ 1326.553571][ T24] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1326.562843][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.564158][T23545] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1326.571235][ T24] usb 9-1: Product: syz [ 1326.582822][ T24] usb 9-1: Manufacturer: syz [ 1326.587568][ T24] usb 9-1: SerialNumber: syz [ 1326.602630][ T24] usb 9-1: config 0 descriptor?? [ 1326.609870][T30142] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1326.617453][T30142] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1326.654188][ T5690] m920x_read = error: -19 [ 1326.659423][ T5690] dvb-usb: error while querying for an remote control event. [ 1326.785952][ T5690] m920x_read = error: -19 [ 1326.790344][ T5690] dvb-usb: error while querying for an remote control event. [ 1326.804271][T23545] usb 5-1: device not accepting address 108, error -71 [ 1326.829793][T30142] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1326.841743][T30142] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1326.914204][ T5690] m920x_read = error: -19 [ 1326.925618][ T5690] dvb-usb: error while querying for an remote control event. [ 1327.046771][ T5690] m920x_read = error: -19 [ 1327.051258][ T24] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1327.061321][ T5690] dvb-usb: error while querying for an remote control event. [ 1327.069267][ T24] asix 9-1:0.34: probe with driver asix failed with error -61 [ 1327.174292][ T24] m920x_read = error: -19 [ 1327.178653][ T24] dvb-usb: error while querying for an remote control event. [ 1327.304220][ T24] m920x_read = error: -19 [ 1327.308607][ T24] dvb-usb: error while querying for an remote control event. [ 1327.424551][ T24] m920x_read = error: -19 [ 1327.428928][ T24] dvb-usb: error while querying for an remote control event. [ 1327.544635][ T24] m920x_read = error: -19 [ 1327.549032][ T24] dvb-usb: error while querying for an remote control event. [ 1327.664165][ T24] m920x_read = error: -19 [ 1327.668561][ T24] dvb-usb: error while querying for an remote control event. [ 1327.784215][ T24] m920x_read = error: -19 [ 1327.788610][ T24] dvb-usb: error while querying for an remote control event. [ 1327.904475][ T24] m920x_read = error: -19 [ 1327.908849][ T24] dvb-usb: error while querying for an remote control event. [ 1328.024270][ T24] m920x_read = error: -19 [ 1328.028669][ T24] dvb-usb: error while querying for an remote control event. [ 1328.144170][ T24] m920x_read = error: -19 [ 1328.148566][ T24] dvb-usb: error while querying for an remote control event. [ 1328.264190][ T24] m920x_read = error: -19 [ 1328.268617][ T24] dvb-usb: error while querying for an remote control event. [ 1328.312233][T30192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.320806][T30192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.384207][ T24] m920x_read = error: -19 [ 1328.388630][ T24] dvb-usb: error while querying for an remote control event. [ 1328.504472][ T24] m920x_read = error: -19 [ 1328.508862][ T24] dvb-usb: error while querying for an remote control event. [ 1328.624415][ T24] m920x_read = error: -19 [ 1328.628849][ T24] dvb-usb: error while querying for an remote control event. [ 1328.744912][ T24] m920x_read = error: -19 [ 1328.749285][ T24] dvb-usb: error while querying for an remote control event. [ 1328.864718][ T24] m920x_read = error: -19 [ 1328.869162][ T24] dvb-usb: error while querying for an remote control event. [ 1328.928868][ T24] usb 9-1: USB disconnect, device number 2 [ 1328.984372][ T5690] m920x_read = error: -19 [ 1328.988755][ T5690] dvb-usb: error while querying for an remote control event. [ 1329.104219][ T5690] m920x_read = error: -19 [ 1329.108583][ T5690] dvb-usb: error while querying for an remote control event. [ 1329.224724][ T5690] m920x_read = error: -19 [ 1329.229106][ T5690] dvb-usb: error while querying for an remote control event. [ 1329.354491][ T24] m920x_read = error: -19 [ 1329.358887][ T24] dvb-usb: error while querying for an remote control event. [ 1329.475305][ T24] m920x_read = error: -19 [ 1329.479668][ T24] dvb-usb: error while querying for an remote control event. [ 1329.594795][ T24] m920x_read = error: -19 [ 1329.599169][ T24] dvb-usb: error while querying for an remote control event. [ 1329.714417][ T24] m920x_read = error: -19 [ 1329.718789][ T24] dvb-usb: error while querying for an remote control event. [ 1329.834548][ T24] m920x_read = error: -19 [ 1329.838922][ T24] dvb-usb: error while querying for an remote control event. [ 1329.954215][ T24] m920x_read = error: -19 [ 1329.958589][ T24] dvb-usb: error while querying for an remote control event. [ 1330.074879][ T24] m920x_read = error: -19 [ 1330.079241][ T24] dvb-usb: error while querying for an remote control event. [ 1330.194241][ T24] m920x_read = error: -19 [ 1330.198656][ T24] dvb-usb: error while querying for an remote control event. [ 1330.315467][ T24] m920x_read = error: -19 [ 1330.319841][ T24] dvb-usb: error while querying for an remote control event. [ 1330.434935][ T24] m920x_read = error: -19 [ 1330.439310][ T24] dvb-usb: error while querying for an remote control event. [ 1330.554757][ T24] m920x_read = error: -19 [ 1330.559119][ T24] dvb-usb: error while querying for an remote control event. [ 1330.674715][ T24] m920x_read = error: -19 [ 1330.679066][ T24] dvb-usb: error while querying for an remote control event. [ 1330.794288][ T24] m920x_read = error: -19 [ 1330.798702][ T24] dvb-usb: error while querying for an remote control event. [ 1330.915293][ T24] m920x_read = error: -19 [ 1330.919684][ T24] dvb-usb: error while querying for an remote control event. [ 1331.034314][ T24] m920x_read = error: -19 [ 1331.039373][ T24] dvb-usb: error while querying for an remote control event. [ 1331.154888][ T24] m920x_read = error: -19 [ 1331.159281][ T24] dvb-usb: error while querying for an remote control event. [ 1331.274342][ T24] m920x_read = error: -19 [ 1331.278704][ T24] dvb-usb: error while querying for an remote control event. [ 1331.394584][ T24] m920x_read = error: -19 [ 1331.399071][ T24] dvb-usb: error while querying for an remote control event. [ 1331.514462][ T24] m920x_read = error: -19 [ 1331.518836][ T24] dvb-usb: error while querying for an remote control event. [ 1331.634490][ T24] m920x_read = error: -19 [ 1331.639659][ T24] dvb-usb: error while querying for an remote control event. [ 1331.754438][ T24] m920x_read = error: -19 [ 1331.758801][ T24] dvb-usb: error while querying for an remote control event. [ 1331.874555][ T24] m920x_read = error: -19 [ 1331.878931][ T24] dvb-usb: error while querying for an remote control event. [ 1331.994297][ T24] m920x_read = error: -19 [ 1332.003872][ T24] dvb-usb: error while querying for an remote control event. [ 1332.114714][ T24] m920x_read = error: -19 [ 1332.119101][ T24] dvb-usb: error while querying for an remote control event. [ 1332.234267][ T24] m920x_read = error: -19 [ 1332.238627][ T24] dvb-usb: error while querying for an remote control event. [ 1332.355167][ T24] m920x_read = error: -19 [ 1332.359529][ T24] dvb-usb: error while querying for an remote control event. [ 1332.474551][ T24] m920x_read = error: -19 [ 1332.478963][ T24] dvb-usb: error while querying for an remote control event. [ 1332.594945][ T24] m920x_read = error: -19 [ 1332.599386][ T24] dvb-usb: error while querying for an remote control event. [ 1332.724772][ T24] m920x_read = error: -19 [ 1332.729158][ T24] dvb-usb: error while querying for an remote control event. [ 1332.844450][ T24] m920x_read = error: -19 [ 1332.848795][ T24] dvb-usb: error while querying for an remote control event. [ 1332.964313][ T24] m920x_read = error: -19 [ 1332.969497][ T24] dvb-usb: error while querying for an remote control event. [ 1333.094317][ T24] m920x_read = error: -19 [ 1333.098665][ T24] dvb-usb: error while querying for an remote control event. [ 1333.224782][ T24] m920x_read = error: -19 [ 1333.229142][ T24] dvb-usb: error while querying for an remote control event. [ 1333.354607][ T24] m920x_read = error: -19 [ 1333.358995][ T24] dvb-usb: error while querying for an remote control event. [ 1333.474323][ T5690] m920x_read = error: -19 [ 1333.479363][ T5690] dvb-usb: error while querying for an remote control event. [ 1333.595501][ T5690] m920x_read = error: -19 [ 1333.599865][ T5690] dvb-usb: error while querying for an remote control event. [ 1333.714282][ T5690] m920x_read = error: -19 [ 1333.718672][ T5690] dvb-usb: error while querying for an remote control event. [ 1333.844895][ T5690] m920x_read = error: -19 [ 1333.849258][ T5690] dvb-usb: error while querying for an remote control event.