last executing test programs: 18m58.163675211s ago: executing program 1 (id=3596): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f0000000040)=0x80) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f0000000080)) syz_usb_connect(0x0, 0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e010000082402010102"], 0x0) 18m56.912022819s ago: executing program 1 (id=3602): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200301400feffb7030000ffffff908500000005000000bf0900000000000055090100000000009500000000000000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18m56.810943577s ago: executing program 1 (id=3603): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f0000000040)={0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r0, 0xc0186445, &(0x7f0000000080)={0x0, 0x1, r1}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000013c0)={0xb4, 0x0, &(0x7f00000012c0)=[@acquire={0x40046305, 0x3}, @acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x2}, @request_death, @clear_death={0x400c630f, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001200)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/254, 0xfe, 0x0, 0x3f}, @flat=@weak_handle={0x77682a85, 0x0, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/4096, 0x1000, 0x0, 0x19}}, &(0x7f0000001280)={0x0, 0x28, 0x40}}}, @acquire_done, @register_looper], 0x13, 0x0, &(0x7f0000001380)="045d0023835a2e342bcbcf80984a6405d2bf9c"}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000001400)={0xffffffff, 0x5, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000001440)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000001480)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001580)={&(0x7f0000001540)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000015c0)={&(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001500)=[0x0, 0x0], 0x4, r5, 0xc0c0c0c0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000001600)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001740)={&(0x7f0000001640)=[0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001700)=[0x0, 0x0, 0x0], 0x3, 0x7, 0x6, 0x3}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000001780)={r6, 0x2b53, 0x16000000, 0x800, 0x3, [], [0x80000000, 0x10, 0x7fffffff, 0x101], [0x1, 0xc, 0xfffffff8, 0x5], [0x9, 0x595, 0xffffffff, 0xe]}) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000001800)={0xffff, 0x0, r2}) sendto(r8, &(0x7f0000001840)="cbc15359a46c2cc44fef740dd888e058f1c59f2acfe4b8d1a522e20acc94efb7ffcd009a53fe312526db3b6a61d289613c21ad78a22e608ee13d0da018b51fd32e52959b7330e35234247ad6ac9ee013bb9ef97846fa98a4198d0134a6aed8b131710ad5149fabc23fde376d8f6e329b722b411c1c638d2c0590e4b6871053580359521df6c6127344e316b151cafd51cc14e48fb84d3619bf8699c0e0d1fb2340d7c9c9fd22c4aea403d9", 0xab, 0x20000044, &(0x7f0000001900)=@hci={0x1f, 0x4, 0x3}, 0x80) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r8, 0xc00464b4, &(0x7f0000001980)={r3}) r9 = dup(r8) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000019c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r9, 0x3ba0, &(0x7f0000001a00)={0x48, 0xb, 0xffffffffffffffff, 0x0, r10}) syz_open_dev$char_usb(0xc, 0xb4, 0x10) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000001a80)={"b6efbeac", 0x3, 0xfa, 0x7, 0xfff, 0x4, "46364ca9231ca39a10915381b04c91", "c86b9e8b", "031cc862", "ca87a809", ["1ec44dc55de9abb456a8b692", "3534a3cd1aa0021c3ff362aa", "87622b54674028a7410943a2", "0dd5362a8be13d8595d8405f"]}) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000001b00)=0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000001b80)={&(0x7f0000001b40)=[r7], 0x1, 0x800, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000001bc0)={r11}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000001c00)={0x1ff, 0xfffffffa}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000001c40)={0x0, 0xfff, 0x200000, 0xaf, 0x8001, 0x0, 0x7, 0x5}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r8, 0x29, 0x45, &(0x7f0000001c80)={'NETMAP\x00'}, &(0x7f0000001cc0)=0x1e) ioctl$FBIOGETCMAP(r9, 0x4604, &(0x7f0000001e00)={0xffff, 0x0, &(0x7f0000001d00), &(0x7f0000001d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001d80)=[0x0], &(0x7f0000001dc0)=[0x0]}) socket$inet(0x2, 0x6, 0x13) openat$panthor(0xffffffffffffff9c, &(0x7f0000001e40), 0x2, 0x0) 18m56.475138209s ago: executing program 1 (id=3606): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010027bd7000000000000a00004000000000000000aa19ef908dc4623daaeb0014000300687372300000000000000000000000001400110076657468315f"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xc0, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x94, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_virt_wifi\x00'}, @TCA_U32_LINK={0x8}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x9, 0x7, 0x3e, 0x800}, {0x7, 0x10, 0x5, 0x7}, {0x40, 0x80000001, 0xfffffffe, 0xffffffff}, {0x1, 0x5, 0x5127, 0x10001}]}}]}}]}, 0xc0}}, 0x20044004) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xc, @private1, 0x14}, 0xfffffffffffffecb, 0x0, 0x0, 0x0, 0x56}, 0x20000800) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x4000) semop(0x0, &(0x7f0000000340)=[{0x2, 0x8001, 0x1000}], 0x1) 18m55.743764938s ago: executing program 1 (id=3610): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$TCSETS(0xffffffffffffffff, 0x545c, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) timer_create(0x4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0x43e}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) 18m55.637901697s ago: executing program 1 (id=3611): socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x2}, {0x44, 0x2, [@TCA_FQ_RATE_ENABLE={0x0, 0x5, 0x1}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x8001}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x10}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x1c}, @TCA_FQ_INITIAL_QUANTUM={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x8}, @TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x70}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x60, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6e76}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xe4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1b03}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x40004) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48044, &(0x7f00000001c0)={0x11, 0x19, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0xeaff, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$XFS_IOC_FSGEOMETRY_V4(r9, 0x8070587c, &(0x7f0000000380)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88e00, 0x0) pselect6(0x40, &(0x7f0000000140)={0x0, 0x0, 0x1fd, 0x7c, 0x0, 0x6, 0x1000004, 0x1}, 0x0, &(0x7f0000000180)={0x3ff, 0x6, 0xf7c4, 0x9, 0x6, 0xf, 0x80000006}, 0x0, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x0, 0x7fffffff}]}) close_range(r11, 0xffffffffffffffff, 0x0) 18m40.581218172s ago: executing program 32 (id=3611): socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x2}, {0x44, 0x2, [@TCA_FQ_RATE_ENABLE={0x0, 0x5, 0x1}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x8001}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x10}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x1c}, @TCA_FQ_INITIAL_QUANTUM={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x8}, @TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x70}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x60, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6e76}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xe4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1b03}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x40004) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48044, &(0x7f00000001c0)={0x11, 0x19, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0xeaff, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$XFS_IOC_FSGEOMETRY_V4(r9, 0x8070587c, &(0x7f0000000380)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88e00, 0x0) pselect6(0x40, &(0x7f0000000140)={0x0, 0x0, 0x1fd, 0x7c, 0x0, 0x6, 0x1000004, 0x1}, 0x0, &(0x7f0000000180)={0x3ff, 0x6, 0xf7c4, 0x9, 0x6, 0xf, 0x80000006}, 0x0, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x0, 0x7fffffff}]}) close_range(r11, 0xffffffffffffffff, 0x0) 6m4.215967992s ago: executing program 3 (id=7499): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000003c0), 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) close(r1) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f00000003c0)=@in6={0xa, 0x4e24, 0x7, @private2, 0x3}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xff4f, 0xffffffffffffff4f, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xeb) syz_usb_connect$uac3(0x3, 0xa0, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000080408205820540000102030109028e000301018005080b0001010130040904000000010130000a2401062a00060000000d240a04030000000002000000132403"], 0x0) pidfd_send_signal(0xffffffffffffffff, 0x40, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x39) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000400)=@keyring={'key_or_keyring:', r4}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x40c53}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x40000005) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000240)=0x4) syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000679078000800000000000000009078120002282500fe230064000000000f9be0000002e0000000929b142f7245adaff57e8b9681c232a9ffee971ff7be09b5a1cad3da38d2a2cab0267eac27f55a8e5875588f30519dd9a603fe733c5b31920a83f5f03ca0464bd39a062e3666d63d67f801fade43387f9e1fd3a64e1c4a18b2bd622caba605c50072f468ab19ba1a150ca86d42f02e60bf7c71eff5175f2d1014a289439ad052b7c0f907f8554bcd86601d8b448647453da28cefc20d6bd0071c66aadcfea09e7e30953459304bbff9959d65"], 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x100000b, 0x9, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x3, 0x6, 0x1, 0x3], 0x0, 0x8340}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r7, 0xffffffffffffffff, 0x4, 0xd) r9 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r9, 0x9586730c31f01255) sendmmsg$inet6(r6, &(0x7f0000006b80), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6m3.329082121s ago: executing program 3 (id=7502): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) (async) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000940), &(0x7f0000000700)='\x00', 0x1, 0xfffffffffffffffe) (async) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r4, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384\x00'}}) (async) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0xffffffffffffffb6) (async) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x80000000, 0x7, 0x2, {0xa, @sliced={0x1, [0x5, 0x1, 0x7, 0xc67a, 0x7, 0x3, 0x5, 0x800, 0xfffa, 0x1, 0x9, 0x6, 0x0, 0x101, 0xe7, 0x40, 0x3, 0xfff, 0x4000, 0x7, 0x101, 0x3, 0x1, 0xfffa, 0x9, 0x2, 0x5, 0x6, 0x401, 0xb, 0x1, 0x9, 0x7, 0xd82, 0x5, 0x6, 0x1, 0x3c, 0xb2, 0x1, 0xd, 0x7, 0xf, 0x101, 0x1, 0x200, 0x4]}}}) (async) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@overlay={0x1, 0xa, 0x4, 0x2000, 0x1, {0x0, 0xea60}, {0x2, 0x1, 0x1, 0x4, 0x8, 0x1, "16a683cf"}, 0x7fe, 0x3, {}, 0x4}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x0], 0xb8}}, 0x4004) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000fdfffffffffffffffbffffffff000000002200"/88], 0xb8}}, 0x8000) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000708000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000002c0)="b890000f20d82626f30fc7b0e2a3360fc72f66b9800000c00f326635e000010045000f001ed2c6360f785ef266f30f2c0f0f20e06635000002000f22e00f01361f13", 0x42}], 0x1, 0x5f, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000003c0)="c4c37905d6040f0866bad104ec66660f388043006665660f3a0d9a0050000000b805000000b9050000000f01d926d0eb0f20e035200000000f22e0b9800000c00f3235000100000f306566dad3", 0x4d}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4400ae8f, 0x0) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) 6m1.557220846s ago: executing program 3 (id=7507): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004580)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8000}], 0x1, 0x20000000) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41, 0xfffffdef}]) 6m1.252861389s ago: executing program 3 (id=7510): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x693e, &(0x7f0000000240)={0x0, 0xd58c, 0x10, 0x2, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000003, 0x20010, r1, 0x0) r5 = eventfd2(0x6, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000080)=r5, 0x1) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) io_uring_register$IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f0000000140), 0x0) r6 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) listns(&(0x7f0000000080)={0x20, 0x0, 0x100000000, 0x20000000}, 0x0, 0x0, 0x0) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x120) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = getpgrp(0x0) fcntl$setownex(r9, 0xf, &(0x7f0000000100)={0x2, r10}) fcntl$setown(r6, 0x8, r10) 5m57.359153381s ago: executing program 3 (id=7519): unshare(0x6a040000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0x7, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0xffffffbf, @loopback, 0x9}}, @sadb_x_sa2={0x2, 0x13, 0xb1, 0x0, 0x0, 0x70bd2b, 0x3507}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @multicast2}}]}, 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d61746368000000200002800c000300b07346e358c219250800010023707500080002"], 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000dc0)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x444}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x18, "20854e8c4b94a5715f8227fd4236ff070000000000001c9d"}, 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000008000000911176000000000095"], &(0x7f0000000c40)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, &(0x7f0000000200)=0xd, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$can_raw(r5, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r6}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x84844}, 0x0) r7 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r7, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x120) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, 0x0) r8 = openat$panthor(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$DRM_IOCTL_GET_STATS(r8, 0x80f86406, 0x0) 5m57.070584739s ago: executing program 3 (id=7522): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="400901"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x6, 0x0, 0x8}, {0x6, 0xfd, 0x0, 0x7ffffcbb}]}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000380)={0x0, 0x3, 0x1, "98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000004c0)={0x40, 0x14, 0x1, 'K'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000008) 5m56.535236976s ago: executing program 33 (id=7522): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="400901"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x6, 0x0, 0x8}, {0x6, 0xfd, 0x0, 0x7ffffcbb}]}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000380)={0x0, 0x3, 0x1, "98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000004c0)={0x40, 0x14, 0x1, 'K'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000008) 4m55.752715174s ago: executing program 4 (id=7842): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503010000092140000001220f000905", @ANYRES16], 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x0, 0x68b4, 0x800, 0x0, 0x11f}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe179, 0x4000, 0x2, 0x266}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x175, 0x8000, 0x2, 0x47}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7, 0x200, 0x0, 0x326}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ebb, 0x80, 0x1, 0x207}, 0xffffffffffffffff}], 0x4, &(0x7f0000002580)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x3, 0x1ca, 0x0, &(0x7f0000001580)=@buf_512="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"}}, &(0x7f0000002600)) io_uring_setup(0x71c6, &(0x7f0000002640)={0x0, 0x79a, 0x80, 0x2, 0x311, 0x0, r0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000000)=@generic={0x0, 0x7fffffff, 0x2}) ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x80, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7f7ffffffffffffff0000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 4m54.598348285s ago: executing program 4 (id=7845): r0 = syz_open_dev$vcsu(&(0x7f0000000800), 0xfba5, 0x280000) unshare(0x8040480) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x3ff, r0}, 0x38) 4m54.52387556s ago: executing program 4 (id=7846): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) r2 = socket$can_bcm(0x1d, 0x2, 0x2) fcntl$dupfd(r2, 0x406, r2) r3 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12011801000000405804155000000000000109022d00010000000909040004010300000009210400040122070009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) bind$tipc(0xffffffffffffffff, &(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x1}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xfff2}, {0xffff, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) socket$kcm(0x10, 0x5, 0x10) socket$xdp(0x2c, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, 0x0, 0x8) msgrcv(0x0, 0x0, 0x2000000, 0x0, 0x86b1b18158a7cb82) connect$inet6(r7, 0x0, 0x0) sendmmsg$inet6(r7, 0x0, 0x0, 0x4404c880) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) 4m51.423016305s ago: executing program 4 (id=7865): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x4004040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYRES8=r1, @ANYRES16=r1, @ANYRES32=r0, @ANYRES8, @ANYRES8=r2, @ANYRES8=0x0], 0x38}, 0x1, 0x0, 0x0, 0x4040840}, 0x4810) mmap(&(0x7f0000504000/0x3000)=nil, 0x3000, 0x1a9007d56a85e4f1, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000180), 0x4) r6 = syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ptrace(0x10, r6) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x1d6f4194, 0x8, 0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)={0x2c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080027bd7000ffdbdf256400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000800044e000000"], 0x28}}, 0x4004800) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r11, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) lseek(0xffffffffffffffff, 0x1000000, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRES64=r3], 0x58}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 4m50.404222061s ago: executing program 4 (id=7867): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioprio_set$pid(0x2, 0x0, 0x4000) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x3ff, 0x80}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058000000850000004a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg(0xffffffffffffffff, 0x0, 0x44014) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) write$uinput_user_dev(r3, &(0x7f0000001740)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffff801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffff7], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x40000, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x10001], [0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4m49.443956985s ago: executing program 4 (id=7871): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100ee9c0140591e0200ed98010203010902120001fd040007090482cb004448cf07ddf4e98baf72c5479dca8698d6ba970e19abe252d5885a07134ff0d4a39c2b428051cdf31a2424222aa79df7671d2f01a275d645394fe8157e2c2203c390f948297fa200"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000004c0)={@empty, @remote, 0x0}, &(0x7f0000000500)=0xc) sendmsg$xdp(r1, &(0x7f0000003240)={&(0x7f0000000540)={0x2c, 0xd, r2, 0x2d}, 0x10, &(0x7f00000031c0)=[{&(0x7f0000000580)="1c622b05a3a0c2bcda0b72353ef71373a274", 0x12}, {&(0x7f00000005c0)="f11b550acb2961150f89", 0xa}, {&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000003100)="6bf60fac693d7e015d6ef8a9abe9f0f4ea4a51125acb504ab5018f986535601ac22e0886b4dd0f14d1d331de1672d7c175b2eaa9ac93a86c458e82b850965d0fed6bc4add5127f967298b005c2eb6559575045", 0x53}, {&(0x7f0000003180)="12f83555505d61f8fd49b557833f1d805eb956eb50cdd4d5c046a9", 0x1b}], 0x5, 0x0, 0x0, 0x40}, 0x4000800) r3 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, 0x0, 0x800) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x9, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x2, 0x7, 0x2, 0x0, 0x6d, 0x8}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)={0x2, 0x10, 0x8, 0x8, 0x42, 0x0, 0x70bd2b, 0x25dfdbfe, [@sadb_sa={0x2, 0x1, 0x4d5, 0x9, 0xf, 0x69, 0x3, 0x80000000}, @sadb_x_sa2={0x2, 0x13, 0xf, 0x0, 0x0, 0x70bd26, 0x34ff}, @sadb_key={0x1e, 0x9, 0x730, 0x0, "481ea6b770c87f86185ef045e2c2071cf9d0c17fa7eaa81560ab32a82a93e32c512e2feed6b681d658b0b333a8766a25f6588af619fdb50826de857f0573662a84766dcea41f2991b032164138cb588a351017b877969eb3fd3349c4e766e8fa82be10fec34397d86d10c45b286e2ec8767f9434d2c9895128a1fe9c0ade53a55e2ef34a9c402b9cb9f52d05f8dd802a7f3dae0f41473b3cb0e57ba0d20e8fd66e68440bbfb2cfff080b08a85a6cfb506bf49aab88cca928284e1229a4a12da04ddea07c425725887b91018dc3451a02ce245c575b4b1e5fcbbf31e6132c1103800e5a51e43a"}, @sadb_x_nat_t_type={0x1, 0x14, 0x2}, @sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in=@multicast2, 0x29, 0x4, 0x10}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d5}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0x3, @mcast1, 0x7}, @in6={0xa, 0x4e21, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fff}}, @sadb_x_sa2={0x2, 0x13, 0x1c, 0x0, 0x0, 0x70bd29, 0x3502}, @sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x6e6bb8, 0xfffffffe, {0x6, 0x50, 0x2, 0x4, 0x0, 0x7ff, 0x0, @in6=@private1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}}, @sadb_lifetime={0x4, 0x2, 0x9, 0x8c9, 0xfff, 0xffffffffffffff94}]}, 0x210}}, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x89ff, &(0x7f0000001440)={'bridge0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40842}, 0x40) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r8, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r9 = syz_open_pts(r8, 0x80) dup3(r9, r8, 0x80000) 4m34.395552438s ago: executing program 34 (id=7871): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100ee9c0140591e0200ed98010203010902120001fd040007090482cb004448cf07ddf4e98baf72c5479dca8698d6ba970e19abe252d5885a07134ff0d4a39c2b428051cdf31a2424222aa79df7671d2f01a275d645394fe8157e2c2203c390f948297fa200"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000004c0)={@empty, @remote, 0x0}, &(0x7f0000000500)=0xc) sendmsg$xdp(r1, &(0x7f0000003240)={&(0x7f0000000540)={0x2c, 0xd, r2, 0x2d}, 0x10, &(0x7f00000031c0)=[{&(0x7f0000000580)="1c622b05a3a0c2bcda0b72353ef71373a274", 0x12}, {&(0x7f00000005c0)="f11b550acb2961150f89", 0xa}, {&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000003100)="6bf60fac693d7e015d6ef8a9abe9f0f4ea4a51125acb504ab5018f986535601ac22e0886b4dd0f14d1d331de1672d7c175b2eaa9ac93a86c458e82b850965d0fed6bc4add5127f967298b005c2eb6559575045", 0x53}, {&(0x7f0000003180)="12f83555505d61f8fd49b557833f1d805eb956eb50cdd4d5c046a9", 0x1b}], 0x5, 0x0, 0x0, 0x40}, 0x4000800) r3 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, 0x0, 0x800) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x9, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x2, 0x7, 0x2, 0x0, 0x6d, 0x8}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)={0x2, 0x10, 0x8, 0x8, 0x42, 0x0, 0x70bd2b, 0x25dfdbfe, [@sadb_sa={0x2, 0x1, 0x4d5, 0x9, 0xf, 0x69, 0x3, 0x80000000}, @sadb_x_sa2={0x2, 0x13, 0xf, 0x0, 0x0, 0x70bd26, 0x34ff}, @sadb_key={0x1e, 0x9, 0x730, 0x0, "481ea6b770c87f86185ef045e2c2071cf9d0c17fa7eaa81560ab32a82a93e32c512e2feed6b681d658b0b333a8766a25f6588af619fdb50826de857f0573662a84766dcea41f2991b032164138cb588a351017b877969eb3fd3349c4e766e8fa82be10fec34397d86d10c45b286e2ec8767f9434d2c9895128a1fe9c0ade53a55e2ef34a9c402b9cb9f52d05f8dd802a7f3dae0f41473b3cb0e57ba0d20e8fd66e68440bbfb2cfff080b08a85a6cfb506bf49aab88cca928284e1229a4a12da04ddea07c425725887b91018dc3451a02ce245c575b4b1e5fcbbf31e6132c1103800e5a51e43a"}, @sadb_x_nat_t_type={0x1, 0x14, 0x2}, @sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in=@multicast2, 0x29, 0x4, 0x10}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d5}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0x3, @mcast1, 0x7}, @in6={0xa, 0x4e21, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fff}}, @sadb_x_sa2={0x2, 0x13, 0x1c, 0x0, 0x0, 0x70bd29, 0x3502}, @sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x6e6bb8, 0xfffffffe, {0x6, 0x50, 0x2, 0x4, 0x0, 0x7ff, 0x0, @in6=@private1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}}, @sadb_lifetime={0x4, 0x2, 0x9, 0x8c9, 0xfff, 0xffffffffffffff94}]}, 0x210}}, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x89ff, &(0x7f0000001440)={'bridge0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40842}, 0x40) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r8, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r9 = syz_open_pts(r8, 0x80) dup3(r9, r8, 0x80000) 3m26.091910842s ago: executing program 2 (id=8330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r1, 0x6a98047402e98331, 0x600, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x0) 3m26.02236581s ago: executing program 2 (id=8331): timer_create(0x0, 0x0, &(0x7f0000000000)=0x0) timer_getoverrun(r0) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x77359400}}, &(0x7f0000000400)) syz_open_dev$evdev(&(0x7f0000000040), 0x4ee97ffd, 0x8c00) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x8, 0x0, &(0x7f0000000040)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x404780, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00004b5000/0x2000)=nil, 0x2000, 0x1000000, 0x4010, r2, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_create(0x6, &(0x7f00000001c0)={0x0, 0x1d, 0x1, @tid=r4}, &(0x7f0000000200)) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1207c, 0x1}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) syz_emit_ethernet(0x2f, &(0x7f0000000300)={@local, @multicast, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x4}}, {@generic={0x2, "214150880b0ce30014eee5b3b6de9721cf26d941693b8a1b17"}}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x0, 0x3a, 0x81, 0x7286, 0x4}, &(0x7f0000000180)=0x14) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x3554000) fadvise64(r8, 0x85f5, 0x4000000005, 0x4) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r9, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xd8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000014) 3m25.735731553s ago: executing program 2 (id=8333): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={r0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305fcfffffffedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="11110200719400001c0012800b0001006d616373656300000c000280050003000f00000008000c"], 0x44}}, 0x0) syz_usb_connect(0x3, 0x4a, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0x37, 0xe5, 0xb5, 0x8, 0xb62, 0x59, 0x389c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x2, 0x7, 0xb, 0x20, 0x2, "", [{{0x9, 0x4, 0xa2, 0x3, 0x0, 0x46, 0xa1, 0x9f, 0x7}}, {{0x9, 0x4, 0x17, 0x30, 0x3, 0xde, 0x9d, 0xcc, 0x1, [], [{{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x7, 0x58, 0x3, [@generic={0x2, 0x4}]}}, {{0x9, 0x5, 0x1, 0x12, 0x200, 0x2, 0x1, 0xaf}}, {{0x9, 0x5, 0xe, 0x4, 0x8, 0x96, 0x9, 0x8c}}]}}]}}]}}, 0x0) 3m25.081183457s ago: executing program 2 (id=8335): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) (async) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r2) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032757c38d085641a7260000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x24048055}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x700, 0x700, 0x411, 0x1, {{0x13, 0x4, 0x1, 0x16, 0x4c, 0x64, 0x0, 0x60, 0x2f, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1d}, {[@noop, @timestamp_prespec={0x44, 0x34, 0xa, 0x3, 0x7, [{@private=0xa010100, 0x9}, {@broadcast, 0xbea}, {@private=0xa010102, 0x7}, {@multicast2, 0xfff}, {@private=0xa010100, 0x7}, {@private=0xa010101, 0x1}]}]}}}}}) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc080) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004c80), r8) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000004e00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r8, &(0x7f0000005500)={0x0, 0x0, &(0x7f00000054c0)={&(0x7f0000005480)={0x1c, r9, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x40, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x1b6}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x40}, 0x1, 0x0, 0x0, 0x48084}, 0x44800) 3m24.927720442s ago: executing program 2 (id=8336): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400feffb7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf98000000000000b5080000000000008500000007000000b70000020000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m24.644902368s ago: executing program 2 (id=8337): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpgrp(r2) kcmp(r3, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2000000800, 0x2) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x2, {0x14, 0x1000, 0x2e04, 0x6}}) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e6400000000040002800a0001000180c2000045b2003e3b597b910b892cffdda309374938cfba3e2e9014a578e6056cf899b7071e691ec828ebe2c34b887654e86dafde7169fb866c435da7b33643dc199aae2120c19d6f0012d50a5107e62592b5ef69d66500a9fa37d189b5f3"], 0x40}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex=r1, @empty}, 0x10) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60, 0x0) bind$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 3m24.373451409s ago: executing program 35 (id=8337): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpgrp(r2) kcmp(r3, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2000000800, 0x2) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x2, {0x14, 0x1000, 0x2e04, 0x6}}) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e6400000000040002800a0001000180c2000045b2003e3b597b910b892cffdda309374938cfba3e2e9014a578e6056cf899b7071e691ec828ebe2c34b887654e86dafde7169fb866c435da7b33643dc199aae2120c19d6f0012d50a5107e62592b5ef69d66500a9fa37d189b5f3"], 0x40}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex=r1, @empty}, 0x10) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60, 0x0) bind$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 18.58236722s ago: executing program 0 (id=9234): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0xa, 0x0, 0x9, 0x50, 0x8, 0x2fa11, 0x401}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x20, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) tkill(r3, 0x1) wait4(r3, 0x0, 0x0, 0x0) tkill(r3, 0x27) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x20, 0x1, 0x7ff, 0x6, 0x0, 0x9, 0x0, 0x7fff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) symlink(0x0, &(0x7f0000003400)='./file0\x00') r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x0, 0x3, 0x1b) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYRES32=r8, @ANYBLOB="0b1b0500000000001c0012800b00010062726964676500000c0002800500070040"], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r6, &(0x7f0000000200)="001adefeae804b4d45f3003b3100", 0xe, 0x44, &(0x7f0000000280)={0x11, 0x8100, r8, 0x1, 0x7, 0x6, @remote}, 0x14) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) r9 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r9, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.092289553s ago: executing program 5 (id=9246): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008"], 0xa4}}, 0x40810) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}}, 0x8080) 12.010684783s ago: executing program 0 (id=9247): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x40, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0xa0040, 0x79) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r3 = dup(r2) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000480)=@IORING_OP_RENAMEAT={0x23, 0x24, 0x0, r1, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00', r3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x3, 0x4) bind$inet6(r4, &(0x7f0000000240)={0xa, 0xfffe, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) listen(r0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60000400006406fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="94c22000907800071e100008ac1414aa0001770053f786071312a1cbd12aa50e39de3b5624a87fb75f32080a04000706000000051312e9803cac6913fbfccc18ce5a512eaf731312f2a3c47d2be4dabe21013d40454c15b5"], 0x0) 11.878352117s ago: executing program 0 (id=9248): syz_emit_ethernet(0xa2, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6099d5a6006c0003fe8000000000000000000000000000bbff02000000000000000000000000000189090000000000000743a963cfa4ffac475f637c538f23dae231ddc4de9e674558bc488b00568eaeb0adc6c7f85bb45c987f93024204cdddffaaaa0c191275853ca483962682ebfd8b05020b41000003"], 0x0) (async) syz_emit_ethernet(0xa2, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6099d5a6006c0003fe8000000000000000000000000000bbff02000000000000000000000000000189090000000000000743a963cfa4ffac475f637c538f23dae231ddc4de9e674558bc488b00568eaeb0adc6c7f85bb45c987f93024204cdddffaaaa0c191275853ca483962682ebfd8b05020b41000003"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x18, 0x68, 0x309, 0x0, 0x40001}, 0x18}, 0x1, 0x0, 0x0, 0x840}, 0x2800c0d4) 11.77217119s ago: executing program 0 (id=9249): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xe}, {0x5, 0xe}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x7, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x33fe0}}, 0x40408c0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@newqdisc={0x1a8, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x80}}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x8000, 0xffffff35, 0x3, 0x3ff}}}}, @TCA_STAB={0xb4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6a, 0x3, 0x2, 0x6, 0x0, 0x605, 0x6, 0xa}}, {0x18, 0x2, [0x2, 0x9, 0xd, 0x9, 0x4, 0x4988, 0x9, 0x8, 0x8000, 0x1]}}, {{0x1c, 0x1, {0x7, 0x40, 0x9, 0x0, 0x1, 0x9, 0xee0}}, {0x4}}, {{0x1c, 0x1, {0xb2, 0x5, 0xd, 0x7, 0x1, 0x9, 0x9, 0x7}}, {0x12, 0x2, [0x6, 0x0, 0x4, 0x3, 0x8, 0x2, 0x7]}}, {{0x1c, 0x1, {0xfe, 0x2, 0x15b, 0x6, 0x2, 0x5, 0x3, 0x5}}, {0xe, 0x2, [0x4, 0x9, 0x14, 0x2, 0x101]}}]}, @qdisc_kind_options=@q_htb={{0x8}, {0x84, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x6}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xa}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x9}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x1ab7}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x9f3}}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffff00}]}, 0x1a8}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x1a, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b792821}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_disconnect(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5) sendto$inet(r3, &(0x7f0000000640)="194932187932f40e6b280f8e5f493d3954a6fe3f18127ed5b3a1a0274d1d593292b39eea5dead8c82e1b21e75bc23e921444a6bbc7303248a37dee05e35e6ef209cf4afa8309fb5fb1654665696784f6bc0d33e15c1473185534fe18cd810a2293e3ac67a2e8c62e094010c7084b3daa8ebe7beb50deaaae27e7501923694041785801dda4954d83a361e99cdeacd82671b14f672174bab7c46f3b2499c8c0e90adf14913b929800f4632ecef1b47e05171f1b641ccaf107ace1d3bea1e77c2b1666aa3057f9c3e899256595", 0xcc, 0x4000080, &(0x7f0000000740)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)={0x120, r6, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x9350}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x120}, 0x1, 0x0, 0x0, 0x20048011}, 0x1) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2835195acdae79d91b5241ba781d02254c54c6d8b2ad0ea89e07e3ea6b303aa020f7767b9e4bb11e839e7181eb909410c034fa97da53122a5929a2ade1351e86d62751d777b48164056b04064bb0eb0d977c7deeba404525620f1cc32737df04e642", @ANYRES16=0x0, @ANYBLOB="000328bd7000fcdbdf253d00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900070000008000000008005d000000000008005d000100000008005d000100000008005d000100000008005d000000000008005d000100000008005d0000000000"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x44001) 10.644719916s ago: executing program 7 (id=9250): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303082f93030303030303030303030303031303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303082f93030303030303030303030303031303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2092) syz_fuse_handle_req(r0, &(0x7f0000002580)="5536182daefa2fc6ee10a1b2d4e27cff3c3e628d4656f7b27979e371b15b420c01ae674ddb8fff7b2bc41e7c5927065cd32f2ff7908ef7dd74cdc82f3799ab12edbbfd0b8f6d2194d7f72aec3a136e25c7bf733436bf6cbfc94431ad053a2ec4ccac5aaada8a41ac38c0e1849e599dce84e431ac501db105b4484146b338c0ae9124877ccb8273c7fbb32603251e2d66c71398a7a715bcbe5c9d87e41af55f837e2931c4c1b6b7bbc30dfedfe6e61a39e28f66bbe56496745fbe03f6035183257edac4b0fe3087e7f3e79c2152a07341f3ae9ec68e78875b6e12b5a2a1abbcca4d7963be818a7a31290cad5a025ccd05b609c7ac49ea85d49f354c1e76091a917966665e77471005a46a195b290c01bb7ddf4709e94543471d87a0a5047d3631b00862e1e9a00c60b83371cc16ba087463122a892a1b21786fe3d450c7ba97799d88126f09a698a421242e9c67c981ebc576f57ba3df22e0071db74fa22e97b0fbe589894931a4c4e0eda8bb9533c4ce503fba218d0ae43ab4b4d0c705e04442d093ca5299ae8499c6db904bda6c68105bc2a1cd8e16067215476e573745d1e99daa73400567a9978dd7bffb21429479ace30c95afdfaebd7faf74343cd58e14ce6d2fada5a1c665049eeaa717ee681666c8b63c6d54e66df86144f85d80dcaa3ae7a13b58d5f2b607029efbbf8593afc75e0ce0a875a5fbedecb425a22624a0bb8e2fd06212a1fdafb92430d309f8f68504484fb1246f3d7b0893d3dc9d0b6c8d7476b6aea871eb4f32c283e22435fccb221484409cc28a6609dd869b99547fc81b2e517809a5b77783f9fc11b5fe584b9f64c0fec35d3db21ae30d0b8b88d722dea4a376d2a610f0a9d08b311e2ed3ef5d72d0e040e41d3dc45e5a17d740c67db88d95b18c8610fed3302aef0c3c1871ff8a5ae1908bf9668f0bc8e5867f56cc59cd303bafabde6a4034a96ba66b98a910dfaaff712673dcbf84c5354f066126068de620f08be67e6034138dd9a312f9ff197fca56a77bad46e59edfd79dfa3aee4582bfe01ce2201f6569178be7a4bdd28e495114944e538ee7b8f11e0812d9f822cd9760316809eccb9b0bbc5f0630224a1534f88600bbb2af2882562e76d149b44780380b62241829e5734fdfff1a2b3a052f3504dffe04d4632e9fef82762fe1950fbaceeb961464dfe2699f0a898fc8783cfdde45ecc3a16f052c4777beb1fddb080fc802a8cc760d1a0d4606b669e78ee9ba1ac398914ed5096850dedc513e5c71eca19d51af9075151f4ca3d8a841b7b1d205f5f3d223f7e48685daa0836f93017935ad1d942c7392667145ccc1d4700f5d8fb2fc218fd6d70357667d339a28dba3360761857b19f9f91e56a0e0281af1042a409a4e2839f3d21b73a5c352b22e4ff06e563e92c00b48e7f8bcdbbbd398c65331298f779dafe875854e301394b0faac2126138908fa8598b4f5e58ed1ac451eb0187e20077099d12d745fcff0b7fb5e8b9fa65ac617ea6c953e8786229b67a604c46810876650f919e6bc6792db22ec0be29cff94e9c24eb6e1830f890bb4b6bcd74b39060506095b99b95f2a8addfb8dfe11f47479fd23cc7c0701ae00774c430b3b9f52ab2579d47a2c2095365aa569f55a1431f93e651c01f0d67ff9337708a72e352c0e699f14bf07f9b9c056897c78edcf34ade3dfd17a04446d565fb6e7c701a237fe1a3d932371654a43b56e7f5ccdadc0f506d746c3f0047b69c0c174cbbfe092f139c09c0e2e76d9a777142813cb78174630ea8d73301e3343b94856fe610777468a9fb4518a0cf68243a4bd715e38e3431a811f962edb1306d76d89e0aad9be5800e7bebb82ccaec2382c9c114c91aee013acca2d8ddf99465e760bd185453a9eb4e5a78383094603b749c6242ad227124ef4b7ec7506b8a76f714099c954f0b2f2d427af0451a7ea3d1dbfa8a3e644c3640d397de3ce942311deb73fad3a76cba773f416314e81e70bda715b342113a18a249300b43250cb3b3aa46ecabe42d0e8c1dc4be286e539c71f0d1c0b0e1795ae7428a3887f36b79e9c76401a5dd460f45b9d8277e04c7c1e615fb33d0fbc444421f3fd0bff4e045d790610aaa2b62945e4b398024c75680b5e12235c35f5b23ddd99454fe527acad6d08fb37c35d9ecc0a8b10e2c31fac786666eb2ad499ddb7d06c7526fb1c5412f6a0df003410e69b81fe523057b6b73cdecf0e5bc4d3b87757889fe49dbdb3ec79c7eb3a868480fc87528e80400de837cccd4a6345508386ada1833f57a20c56e973569bc7821088d343e80009b7b35390975323d24e764aa6c90d3dd5fdec08ed363dc9ab57de949282994cd3858f829c7e5e9a745261383db27c9c53e9e98e109fda6cbb88649ba40b5067470d73b7471d406e5ea8041f9fa25f5b6c919aef84f7595511141e9f090ee103b20a13b22c9a88348ed6d284c0d7a58326e0c4c9626d9a5390bae2be199b201ea136a9aac76e6125db9bf58f61e6a46f8145a9df1305415989435f51529da03f09a67e3629e6f6cb6b70407d9d848f554f1a7e63602e678e62d3b41b4bf4ddda713ed2c291536d8cc12a16bde144ef56acc17778b1aa8eeeeeb60c781365b615be4435c7158d926351cdb46b89fa82acb384c7318dcb2e51db8bdb223aff2c8f36d9e6b1135ad18f7e0b9d91a76972c3140f8e21dc71422de12a4f5d08624bdaeb983619a5ff82cf788c6b8a5fbf0f78e61ae4058d6e03a3d5130646dfc13686e356a1325434caac94ced659529181561fee7ce4f7e1e7945f119ad8474ea6b00257ceb7af2d9b3f9ad5782cd986f1b097d61bf26a6c48c3ab597e4678d609f3050eec9f3bbea1bc67314407521950526e6d71e34e35392067ac84b66badc82a54bb0dc8ed2f1050711ef2d47af5252075c0441aad6900539fcc649c1b1ffc70a1cc39e0c2136c764ba718d50f4800dc29769c4bc9a2fd0f43eb6ffb717a473ccb14ccd58bd506c4e4a0f4ea1158b59b3d6bf1a2d010c456c1f099bff69add46cc60fd2d9779f603ebb943ab8eb02627ac8aebdd52f25b069f64a61e90fa9ac979cb4c6cf0ebcd070099a1a6e6a747e8989e84afe090390953f988f2dcee405086ce51b1d2d8d249f45899b4e862008d28efad8aa5abd0912fa456aa9d3a918a0dd3420d7c4b04b9e3d65c41a1548b7caeef5fbcededf64697786a0bae73d2c5352658b871c806bd150c91bbf8f4735dddee9cfd3e152b5d44cbcce912a2809760e225b9018fa498c86ccb2359cb0834bcefab92c0468522648fbefbe25cf8d82b897371b5369e8f2972502574c0a3235066969c4d5d67fc312d6631702f66a113d22063ba2ac7d9ab387ad1e115e9c98275f3e0dacd2e8f0843f24687b297bf42bca11b89c6db2fc7026d364486ef2d614bc45d5cff0758d69fd48ea06b8a97667e4d7d30bf7f1c30b62287637f50468bf144fd177fdabcbd0d12b50c9cbd052dcd66993c72f48bd6086412ed5f9af3d44dffdf7c012aadd5cf7bd3b314f236660fa1c0e4773a4e9ccc36fd130ffda59a9bf41f7fbf79e5e3333365a3ed2e7714e50805bc70bc6fd20203cacbbeecb8e01a2ce626756cdbd01c53717c2e7b56b47e21f13209c2bf2b1b251e7a93f8a085dcc61d9ae82303a962441372ff7c0b8b8ba75bbf5b861ff7ddbc9781d40c90ae467bdeddfdf949e9a8b8c9fb7db3a9323d05d15bef19ce2e7634b84ac082d50e84b66f99f34b2f852fefe67faa403e848f3de110eb1d9faefa176c3cacd20c7f87d74e858a1a7bfc2c9e895541f691f99a2b8771c8755300ee74e3d6a048b30d02ca16202ecfc207a0b29302aabc1c5b57c7d0d31d43be5cb1f7230dc238fb701e7037aa00c9b57c6fc85baccaa56754d27b975872051566187b0983d93b9ec052edf3b33f7ddab343eac6f7aed97771e708e40a4cc6797f85d91a0debd5c6169895e895f67a10685af5e0b80b0e728731cbffbff8be603469d03bd47dbca4456108c79c029af16482c5c2590c1e0673c7e943699ea107d906a3e667fe7b2afaeb489548b6a11d9862e86a0b549a42b607ffeda6e3ba0f567b63b0be6edb9098cf3a44e6864c5e99fa5f475acb57e2b7343eb7fe3e8c139b515348b188defd2d3021fd27950d822f6df5f9c93584fd95f3f88c85231943ed4d511249f96447f7903779e4d8c4a680661fe5133d415b862e668441e8077bfb827293a9eb733e914f37a19e01ad4b014ef87ed5a5817ab8123af9fd863090b8e9a50ce29cf706b2182fd79660cbdbb53ba71b750e71a21d0ed01db3335cad91d5cb4d4648f46468b6e51f63e4088386913ae6b6cbf103947c32d25a8a825118cd6ce23f53ffe3c087114700e9a5932faf3d844fc6b323b3e722ed3ed75037bd9a7fd9d256b2b9a168e66802e284853a0d6b47d39675900f02f005050425731f9c2cb329f70d7a5ce2ee256212bf8b2ba9ece0df39c58f0fbac06c4da946787abf19dadb536bddbf7e51d89f22413575e064c6482d936a89d48be159aeb5055feb0577ced6c5334411d1d58a7e6d02eca6164d90fda39685fd619269fea7f21db51f6aa6961250e03c9e00788c178dabeb68f13dea29f8cdcf30478dbca15c4519bb342ba8b201019061bf8317022dbc5673fb4ed92ef1a1dea0a1a00cb3cbca291f7ebcbec27ea5e824f04b82f5644d4368cdf8026550bc2f86b83da6a265357eb548a9eec6622204b3dcd22440fec0e12819ade4ba53b53b1e6ab906fe0cacabb9c15e8b657475a0dad62dbcb1037aa8617787abce24a0aa4cf1b5c85c030a14277832a95d8b29a4ea86fb80148ece147ce4bf386995ac28e1ad1e2072f3f4fce5c05d9bdd0af118815d6ee89aabfa3f8173e6fa59dfa4a8c1ba7641291b3c18c6ccc4c3588d56d169d397facb4e67485610cc68197b3a43fe78b9458dc47e5057d5bc6b8e3b65bf414818b65d41ed7cfd7a35fe79c9851ef39c3e059fb3dffe331a791ce75728efcd58dd9b3ed1c93b128469afa648f4f91de6e39d5bef7a0e69bdf5b2202682d857847a64b33432ea0f33bbfd1948ad0b6c66d853fef1e6c0d712b86c40f79ff4d125baebf2a4b32dfc8bed2a697f745cfeb16303b4f8e866ee0bb6a5eb6c6ce513b5cb84e2b44854c72ed0cf2e838245be8d098a6943d845f5a8c07c1036da86cab0d5be4ce29545fade4323acf2085b7645107dd12d5b3af7bb37be1b291cbd6fe297c4b4a2a23280358711be91f21305c035bf1f57467a1853c999b3fb478b11c49cfac66429a76099633a54689047d66fd8bd6eebea94fc8007d9e2765e2969608a78d0b96d6b30360e81fb9df5262c8ff15f2fd7000756d8cda1db3847d6f793bf803b159344c57b480c87702cb3d1260692a19ebdceb2e05a2fe2eb5ac5cfa76551a04795915bfaba9849a623e46ac1832157d0ea5255b5cacd4efa844b0ce5f2f0e1a9dc4fb115fce2640ec6d03c5fe15b4837bd6e6127349f2b6b0fd61c82c96531714f5b623ce4e4978c4a0c86b3c17f50acdd67d283ec934ed36ba7360a10ffeeb7864113eeaa25cccc66613e0757782381614b8da3cd0a85cef7bc384969517c920e8454a5a0f112d1653b2828e895d0614e5bf4dec0ec863432cce9337ce7c29affa7f29fff97bd54a6947cc68df8fed17850209242c1c67d0d7aced2efec4b3c006678bcb8716e8e9e40d78781fd6cc5b5522b8ed2ec8cecb677849b778c0a2a17817a3dd2278080e109906dd4e99b772d5911893fa09ade4296876921d1e009e714df7e4973ab1d2e593d88ecf2151e97ec66176549d3af66652c8377e162454ce7cc8ab34397d31978e84aea92a3c0a8106a2a31e33a8dfe942819fa1f2c1272d0f3cbd7dae820642cbc00202455ab7fb81857ef050a1965a291001874b38397ed9a8e8106dcfcdfd80d0f5d0ef0d5775e53cc5aeb1d6bc13886f8f3491cd6af5dd77ace3689fa2bf56e9b4d1e4964f8fd8f0a4a8b5d7fb678f0f3adcb4a19b5168ac5aeee6f087af15af3bde52a9be0f550b21b10ce98da70445284d9db9416732e63b6efb3ced984c0df50c11aa677f822af7ad39b8b4c0d236e4b36a00ff73587b39f917d7effbb37b95a96e350a430d544d68623c80bf2cd2d689b4dc41e8ef374c393092a2619055f268fbdcb9de494e6582be90a4798bac801bcac8389c823759860e7c9d692f41ee2a6b9624da3c09a2c8e7cdeaa100ba8ca25a737046d8bb237b9546641cfbb2eac9bbee9e125b14dfabac642e634d32151c06ceb3ddbb3d3f038ab2efdd063152270449ed5eca2655cd0016147ebbd00003eb8cd25297350afbffae43cfd9867543b81da4510850b1afaa199d0477837017e9098bf5b3973efe218a88b3d2bb172fe77278088997758fdc1dbb0b1fb6af2ab9db1ddf3e3fbd8e8dd35f918779ccba75b3cdfa317fc6e3cbeaa8b11ce2a30cc53292bcb9dc2a18ca400c674360c041c97ee6aec1448a025c6b04ae9efb3a01d31e3f897cfd5dc94dac95c88b95a26676cc6153e203535891116a5f4ebf54c71cbbe3215a04c57c7ba874a1e203bc66d8161d5b556f661244d9d405a2e6baaedd0d0e4c7e093c2ac0e5ee83b7ddf91669dd59016f7cb53d19896fcc838dc008da4a5fdc0a4fac1a6d7f49b24bcc01467df04d8a3f3181cc4e811942a53daf784b59186a17756a8f3a41ad93035a893a4ff60dd8f54a533e94cf87864169287804df3aa38dc5ce6021a06c58d48985c562a0f51d8b32879f9fb7d4a1d3d442626810f151b161b7e35f9a0b3bec05979e381140f31c03ee6f5549e6e7f116be5e87e0a9ab71ee632f837e9a0f9ad1b4979304c26bad6e84eff0b5b79b667e3d74e354d04f5b2c237102e41a1a4dcac99cbb911d9484aebe6ab2cb539a1db3e3302fb833a44a2d725e858ea9a65d43bb7661842b655c51a1ff25207956e8c6c71667c79975d69f688dfa34c59771488028e3d7500ba0cb71ae5751a51b568e67bdf2abb63838aba5e5cfbbeaf02285f6cbe58428a92a6fc25abb01f8d55ecbd7cc0ea69cdfb188b79048dbea488493681b0e70234463ca3e425d24e2ae4d800ce3adb04ce69428b5f884f8dc83392c22e456a2e195b86d717ac45003a99ae9a59c94167eb04aba3612528f94dad3360b46bc456fbb78072eb7f96418c71bec09831b0a63e83816ffde0d9909c06e765a666c2c41b20c339e0d39107311830ae9ad912f0a85f2ec5ca66a79798a568dae14f76b6d59e6c0bc0f9ebdff29c0fce58367c9705bd4323d3c3e125cdb13da6e58f3fdb2751401014e393e3fc688f04080a90430e531767a7c4f3187ccb7b90880955e766aba6091c4e8fed36482bb5a63372350dd08fe84bf5afd1a30a0f8f4de7a640fa84b9c0447073a0b39bf875d0377c8a572adefec3e033fb3dad91b22bfe22c01f23f27ab0c6a1ce19d2f4f4235281cbca15dafe50f383ba89a8c46a666b106c1ac534955df71f4c560010934fd3eb68eebd55487defa1e024f75ac30139cd190bde1dc8684936bc23a1882ae469fc4af8730d29658f996f71c219526497918e359228b55849d952f4b2996fe5f45a6cfdf87da93bfada579479b18d05c4e964c85b88a7bfc6e4f2b5d6e98e00635e8bd2ebb9eb40b99a9e9db2f688b2d94b8cc8c5fb2a1928624fa5df1c228e6499d992453772084bcd33dda984d97e3857b6fee43c6666b3206ccfe3af52debea4ee060c6edd194b90309213f5c4805f454c7e57bc759377aae9727e484391486be0849c5cdfa99c5a0d0687d6afdce97a32e01d45fef015e7c869ca190219a778b91d881a7b595313fb462e5bf78260c78285d6ccf5e4c50ed56ff28e3f49912773f0a58093f259b5cf4e7f607c51a81576fa95b97bf32d0e2e3511b5d784eba29a15246a97ccf608db456cd70adacc6c31913416f24f38dec3544ac2e88c409b5ff7771d873ea8d7a1868775c8b5502273c784cf945680fb14f143140b56462cd46874ffeacde7bf329fe8369df9c4b95a42535ea56ad6fa260f5c738eb9627f890f4a34f80bf3b8fe568d44c3895029b5f9557f17469a53fe4c0d581eb29029ff162ca906cd0e4bb81138be91a254752bf849232ed7042a82cda1e14dfbfdf74a09c17a9039749c789ab0242ed2d0249231c4ad70c23c805676968bdeb96c2d8886f784ecc3e42e6493e45aa20b6e8ede65c49136c9e9414a4371e3012bf596d55315be17ea9396b1df7f82db27f0d121f8aa66c40365fa686a46f430b4cd336da0d9937d5c26284bdcc6c4e0d5a6acc1be089e1a5d6ec422ad3961fb5c5c9836466c3366e6d3f2686b19b529549cacb6252b0d7a7f5df42ea2961ac59ba0b911311ccc4d83f8611f0c4b071544236037b2863d673303a4e3d428131b07f60eb2cd507dc43503456ce829aed8254bf0b51b38008d42e445acb0effc2ab7e4bc26ad76ffba1220f2e878fe9b5de39bf4f25a9ed468cdb100008ffac6bef401df4817b23463e771a3c834c32993274689c01004eb94b89bc44257b7d2b3936caab6d86937b5bb8f705d00fb6f091711222b6dc25eeaa0e350fe484337396162c86bf7d3a1ab82591ad35d393664617041142c0f8b528e947c092f28c3142493d056bd548910615e7300f041f5d01a2f00138ae5d7849244ef9215f5c9dd874e60ca4ad883f86e71690a510831e35c24de1e0d1261172bf4a8625af958febb7b109c5ca5bfffd4342c43ad02136c6eb117b4a6ea98c07a91279731c1228b01e6be755c1c1d095d3cdfe950ac32eee77327a0e7e342ccfc13c69ab6ab113b18c1abe72d39c03e351986cb3326b8b17ada5884aa7d0a553b0d35e32b8c09f1a4106f5d675a88a1508de4a0e9c598c082ae5b229b75579e39e297b225a852e3f6a7d0990a45fdf68771991acf9b7a5c04bc21a40c57817d500e8ebc6b5919219a4110395817c92bf9eb9c623606d4d98ed68dc0b51a0278b0addce8753f86316158bb4bd6a7a0c4c72b0d17b9545695e54826021a6ac44b4de1b4ea977b20af3c47b8860b0ed29a68c1a883777097d54b162cc58edc0f4de1afbbad7c340a5cd9f2f93133cb2a4babc2a688e2ddd580ef8d9d0846c269c265ce9d978aa233c73aa11eb78d3a67f4e7a3dd035ef5a1f832ada87c7dfa377b77215f8c23b1a78e4a7faa6d0c1a4a28a0ef7b32b36bd566d8c478d0133ab43f9c2a4829624eec535234eb89a177ca8d4e9d2d422f33a24d15044822e4a4c1bca5f470b8c8fde09fb69160297218398da27f4e80dbd480782ee75cecd20ad23fdbcc1d4a0acbc63241c1e2cf1a0b12949e42f707ba06b6fdbd8f336bd72d7f96ddf9ec2b5cfcc4c8da6e1ea573e97eeaea537511ac9fd2ae78eb18cb50c13b595f8b6d65ce8c08e9028fffff6b512080dbbd3fb5e5068538c05f73254969f9727db9bff0c6aeaaf83713812499308792a7fc8318e6b2996bcd1b072641be1eb8e028cbd6b0a5f1fa13bfe35b5cd0d2ca21d9cf8ed97f724ef73ab5a99d65befa38d636f2f827d229479377f25501f3a6ece12cb095549503b2299db7806d32751d4851d62b0c6a91e2e961d475d33a8874c96df52c75bb5a0569e892743937451f75345e0351bfa334d37aa43f01ad1ff984dec164faebc713de31470db5e536a0681a042ced0f9839d9ce89259349075961985171c27c410c99458d4c25614ea1d4252293c4f85b0d2ded9ac560cfd024c199d5f0f4bd47763690ba1bca88b8cc81059bb9fe82c955488523114db8c2caf8a63c0049e90ca524330b57edcf718f6a7aab0efe282079d198cc3c1294f35d1a1bf5f69a8838cfc5d4363f9ca9383f83e4f9576de3fac48866ddcde282e5e4ee3f852a063bd6423ac1fdc6201b1facd6c36609fa2faf96afc1c0b76fff27bce059ad6390fd1e3f735806ce654ed555a78ea8e59fb16ff5ac5ad183aab9de37c3d033b3018d591e7ff1a896de969f561260f797603df5fc232076ccdc2e1fe9fc789253a54af151dd50f89e777c2541591101720c893647bd4b3e6257de85251c9bcd700154e85db2a9e2c4d9d2e531a18bfaa05d16ce75f823e60416b3afebce16555536120d5f554fd13e861d74c4947a62d2d09473d8d75f03d354572b371b02e16f3976b1b0b235582ee38d938fe843b107c77c2acd88f34e1669816eb3867134b1c5fce5afad3c70f9bca972ed494577f2ba6362a6ee6b4720bd86938bb49490982a1b5ce6dd54b79f093ce27051530e1233f03d6641392d4fe7a1f7dcec8ba86d8f32f00f0ad50a29b1e17de07bd0205c0d893532c198f23656f7f5d178c0745b7e0b7e8afdd29c8fa1639a06039980d9a5fba11801db4e7868a9b77925a03a770aae3430b1ccbddb8bd766f51fef71ba25cf9184c9cfa6f9921d69066d09a656080f3c5fe475ccab94cdfccd76f3c7dada9236d1be861eb5fe6247ae9f97b7705bb71c375e8b98203c5bd224202c1aa714da47e0daf98fd3eca617f9a255df5dbe98a7520a1e6db9b88af893521f2ecf7fd2b08a7f3c5aeb77ebe6f52739b473840889c41315407477b82242d9a805f9aa200a129c4701d1c88ccd34871f356caf02da9937a88612a9755315914f4e8e1bf471a46c00650457cc06db168e5457fb3f9662994d901a1f58306156979aa795afacc1a7d6111cbea53e97fb71c7bbe44558fb06f8d78ee08e3678b5d218e13f79cf06f1da9f7e128647884589c487147b3edbdaffa16f9388568d3c8caa34a6b944e4f171842cdbb293474fcd5201b7440e05ddcf9e0b476773119516ef45077705e8bab5f877657205bf9eaaa7c86734b1b6c3661dfd4b9eb8590f962e17ad51b44058d558744e5b44cf9db280bff1062b2431d298064f11e7700ba4c8ece6f4df659d4880c4983db0152f1f903023672f6234620134bd5d1d888022da128a527d82e8fa1a562827a4f1592efe3b0bb78060626e8688ef3d5162afe9f1060123dbb1f93b7bdb6ad4ad6e1772bf8705cca424d9c42e4992eb5bef1ec7961bd4260d1e55e863fa9c8e0cb6d28b495fa37b5f59fd18cfcec6319288dd7363821e47ec46664e1994157319eb0d466b42fd9b5fac5ba979a9baf4f699dc539bf77852e18014074f88108b654219e4f9396696c94eb9fb9b360e59920f187029608bed76d09dd006f4033d384cd109726d51850202ba564599dbff7808591f834cc4084db29111de86a70217defa490e39c6e281650d15b1e44bb55164be0f6da58e838bf5f4d7cc2a23b818557ab1fad0fb2253c4da6af41591940b2608f6fa6bc25939ede95317ff96050bbc1f389235caa78adc0d801a56b2fb4cc41e73d5131552985b5af241722e0637f3b88e46b09ea875e5cf66f534666368ff8e46413e5ab557236134afa63478e18328d33b1a235deb2034955cdbb2bfd0e55fd885f380ae8efca1feea985a946519a712df1384f9e024efec61c30a6989aa3b5bd486366f3fccadc0add175c1cf0d2730ab97370eb47bcda4226ee140edbcd9b38b8ee913587125cb185adb4df18e80df2b0ea6e3e87dc8755fe6823ab5ee1feaebb1e6208cf3dd5ad5581f2388be92", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18, 0x0, 0x0, {0xfffffffe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f00000022c0)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x2321810, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006ec0)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004640)={0x78, 0x0, 0x5, {0xee9b, 0xffff9577, 0x0, {0x5, 0x7, 0x6, 0xd0d, 0x6, 0x70000000000, 0x9, 0x1, 0xe, 0x1000, 0xffff, r2, r3, 0xa, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 10.266031537s ago: executing program 7 (id=9251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 5.72271714s ago: executing program 5 (id=9252): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989", @ANYRES32], 0x1000f) syz_io_uring_setup(0x6713, &(0x7f00000001c0)={0x0, 0x4009838, 0x800, 0x3, 0x21e}, &(0x7f0000000140), 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 5.612079279s ago: executing program 0 (id=9253): ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0xfb, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xb, 0x3}, {0x10, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}]}, 0x34}, 0x1, 0x0, 0x0, 0x400cc00}, 0x20080000) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x80, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) 5.553183826s ago: executing program 7 (id=9254): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000003c0)={0x2, &(0x7f0000000000)=[{0x50, 0x0, 0x0, 0xffe00001}, {0x16, 0x0, 0x0, 0xfffffffc}]}, 0x10) sendto$inet6(r1, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x8050, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800900010062"], 0x4c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c010000190001000000000000000000e0000001000000000200000000000000ac1414bb00000000000000000000000000000000000000000a00000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="feffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000c4000500ac1414aa000000000000000000000000000000043c00000000000000ffffffff000000000000000000000000000000000000970001000000000040001f0d00000a010102000000000000000000000000000000003c00000000000000fe8000000000000000000000000000000000000003000000000100000000000080000000fc02000000000000000000000000000000000000ff0000000a000000fc010000000000000000000000000000000000000500"/308], 0x17c}, 0x1, 0x0, 0x0, 0xc001004}, 0x40800) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x1, 0x7, 0x4, 0x10002, 0x8, "008ef14ba278887cb0baba08431799317e6324"}) r5 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400000, 0x8c) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x6c6b, 0x0, 0x2, 0x7fffffff, 0x10000}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={r6, 0x5}, 0x8) dup(r0) 5.399003077s ago: executing program 5 (id=9255): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x400c8c0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="03500d00b5"], 0xc8) close(0x3) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) syz_usb_connect(0x3, 0x3b, &(0x7f0000000fc0)={{0x12, 0x1, 0x250, 0x3a, 0xc8, 0x78, 0x8, 0x106c, 0xcaa3, 0x49b0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x4, 0x2, 0x10, 0x7, "", [{{0x9, 0x4, 0xa3, 0x2, 0x0, 0xff, 0xf0, 0xff, 0x81, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x7fff}, {0xd, 0x24, 0xf, 0x1, 0x2a, 0x6, 0x78d6, 0x1}}]}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) syz_open_dev$swradio(0x0, 0x0, 0x2) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r7, {0x1}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x13}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c851}, 0x4010) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mprotect(&(0x7f000002c000/0x1000)=nil, 0x1000, 0x2) madvise(&(0x7f000001b000/0x3000)=nil, 0x3000, 0x9) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) socket$nl_generic(0x10, 0x3, 0x10) 5.288199085s ago: executing program 8 (id=9256): syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x40042) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) syz_usb_connect$uac3(0x3, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41f}}, {0x0, 0x0}, {0x86, &(0x7f00000003c0)=@string={0x86, 0x3, "d895ee18cb7295cc2a4e4178b9eb285f8823d52e96cc213aa8a2dedaca6e834cc18710303a7062a6639c52322d03beb0b23ef6d1e137f3dce2025b343f238be6acaf4a962c341cae85cee9a597c866df7d492bde7f7eb243b624633eaeebe4fd6a5688827e7f31597ed9a9332c25db6b1a356c94c40af39d0dfbd8664c91f4556edda1f5"}}, {0x61, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x807}}, {0xfffffd45, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf8ff}}]}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xfffffe1a, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xf, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) close(0x3) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x4) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'wg0\x00', @remote}) close(0x3) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffd, 0x0, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=':\x00\x00\x00$0\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="e8728916454d0734ef69cddbaf978f3deb5754660a3ad649fed4c29aa6c8be75ef27422b48a61a0131661aa31de7f7f18a4756dda0288ce5ba4541e919247f7c265517252fc68afd2ef0207607c9b07cd272a78da8715192428aad72c960eaac0d6577d95249a0407471a98fd7baab7b9796a2415c2188f49e3dca595e452591a62180f4403dcf8354fba40f50bd38fe1e66b3105781ce6c6661ef920a394b8a4b771e5103c248385f2ff6fc3ece306be02b", @ANYRES64=0x0], 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xe, &(0x7f0000000000)={&(0x7f00000005c0)={0x88, 0x25, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@nested={0x8, 0x3f, 0x0, 0x1, [@nested={0x4, 0x922}]}, @nested={0x6b, 0xc2, 0x0, 0x1, [@generic="be81b5374554e9fa8eb8aa27ee05dca01fe2a3bfcc", @typed={0x4, 0x4b}, @generic="bf70e0d9efc392fa716b6f5b3058a44b159684d19951d2c51b4b5315b6e506572233c907527d17a3819a6f38bdea004932e1937c2b36df140b8e9d440edb8d941f849e1bafb1f48c224833418234"]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000006, 0x42031, 0xffffffffffffffff, 0x180000000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRESOCT=r2, @ANYRESHEX=r2, @ANYRES64=r6], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x2d, 0x20040040) recvfrom$unix(r7, 0x0, 0xfffffffffffffdbe, 0x40010020, 0x0, 0x0) 5.283364408s ago: executing program 6 (id=9257): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000640)=@vmx={0x103, 0x0, 0x2080, {0x50000, 0x60000, {}, 0x1, 0x8}, {"d07ee5110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f500000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000057ae000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100008000", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a7f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f00000026c0)=@svm={0x1, 0x1, 0xa44, {0xeeee0000}, {"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"}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0xdfa03400, 0x0, 0x0, 0x0, 0x0, 0x0) 5.160273288s ago: executing program 0 (id=9258): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) r1 = socket$inet6(0x2d, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0x2d, 0x4e20, 0xfd9, @local, 0xb4d0}, 0x1c) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000001580), &(0x7f00000015c0)=0x4) ioctl$BTRFS_IOC_ENCODED_READ(0xffffffffffffffff, 0x80809440, &(0x7f0000001500)={&(0x7f0000001480)=[{&(0x7f0000000140)="d6d64c52e764b9670b37971907e1cdec50226deac82abd63f7a61d33d8c394a6700ae83cd3e46f74fea8a2d2fa9536fe57c5455875785049230b7306fcd35eca30699222beac7781d87828d582e95d53ed8453e95a3d3dab7cf975e3b74a46d8ce7eaedb066081e5c7a69a04f33051bc87182204a97f3d1fdacf64b2e9915d5330c2e2007e23da4d05afa2049bcaea804a38430cd3c8376c4fb5aa45166fa204849bc141ec0c70ab", 0xa8}, {&(0x7f0000000200)="372c5d7d157cdfe3ca7af620f7ed4daa53fb45d4dae05d8ebb7af28881ef42eec1b5cfcf3d0ffa8311148aeee04ff42a2ec5941bfa7cf0facc735c8bba0fe255be4e66d43c2d91b95c169203770ac236056d5e99154a2994898b9380db1f2ba85f9af7b86146f5cee7795d460cc09de455be1ee65e68cdaca12982db4e44791acd96f6406389556fc847ae4fed2824c976c30163797e95ca83", 0x99}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="e544e4b6adda52438371c41ea1149d604bf7b149dd6f55727d546f1f692bff39282f00cb54079baeed672b15f45ef40f64108501bc6c0d026fad3d4b251c9a49cddd1ab2ace9eef3358035c5aa8d2b2ef779b2acc0c6039967cbfeb73b48f760bb37453543cfbca7b9c513", 0x6b}, {&(0x7f0000001340)="c830d0c5b2da4f8fa656a1f7bc39ef0bcf5530fdfe12d4a79731d52e97b54c41d0e1caa78ded493d20d799c0cb1589d2fd89b7244dc32b17bcf4f1fe56d34228264bb3a18b2628d1ae754c4013d133177b522f7692c221434e3c9170c8a47556d9bca2e2ed7fbaddd387584d75778fc2c8de7af45b3c27846e40544345d4b82467ef896a37baa9976175ada10d5bca6a87", 0x91}, {&(0x7f0000001400)="66c8e8c1268d21a5de243484b29f94564368acf89f55e19978843ed6d119eebf166c9b1b796c55b0601341e1881007b750fde3181eba678c4c419e6ba3d17692f83f49cb3c7b16b6438fed2fe3935136db1bd5cbcffe7bdf5e7f9f69954e56d7c907f08b41bfd4d682e1", 0x6a}], 0x6, 0x1ff, 0x0, 0x10, 0x2, 0x6, 0x4, 0x7}) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'stack ', '::\n\xe1\f\xca|+\b\xc9\xdf\xf7\x89w\xf3\x06\xb4W\xca\x93\x03\x1d7\x1d\x06\xd2\xe5\x9e\x86>/\xe5A\x18\xa4\xeeC\x06\x8d\xf6\xba\x88\xe1\xb6\xdc:U,\x91\xae\x1c\x81}k`\x14\'\v\x8b\xc5\x1fs68R\xf4\xf1.\xe9U\xf4dY\x9f\fH]\x00`\x93sh\xedX\xf2\xcb\xb0\x1c\x83\xe4f\xe9\xaao\x13\xf3\x81\xf0>(AKf\x83\x92\xb5\xa0Z\xaa\xa5N\xa9\xf0q.\xd5*&c\x1a\x8e\x02\xe6\xd29\xf1!\a&\xe7k\xda\x93w\xb2\xa2\xefm\xdf$\"\xee\xc7\xe3.\x1f\xe6\xba\xae\x83s\xc8\xaco\x17\x14!N\xfd\xca\xac^L\xd4\xe1N\xc7\xf6\x98\xa7}\xaeH\xed\\Q\xf5\xf4\xcf\xf8\xa3Yv n\xf5\xfc/\xa7\xc6\x93\';\x04\xd6Y=Hf\x82h\xdfe\xb0j\x8a~6\xee>\xbf\xc5\'$\x1f;\f+\xa8[x\xd4\x95N\xb3\x1a\xbb$0\x8c\xb4x\xd5\xbf\x17\xdch#'}, 0xf4) 4.475932763s ago: executing program 7 (id=9259): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x0, 0x0) readv(r1, &(0x7f0000003ac0)=[{&(0x7f0000000ac0)=""/37, 0x25}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x914) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) unshare(0x62040200) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='stat\x00') getdents64(r3, 0xffffffffffffffff, 0x43) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x101a82, 0x30) copy_file_range(r4, &(0x7f0000000000)=0x7, r4, 0x0, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000104fcffffff800000000000ed3e244013953bafdd8970a0c9203d318a6433510a74600b38c285000000000000", @ANYRES32=0x0, @ANYBLOB="31ea0200000000000a000100aaaaaaaaaabb0000"], 0x2c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r9 = dup(r8) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r10, 0xc02464bb, &(0x7f0000000400)={0x2, 0x0, 0x0, 0x3, 0x3ff, 0x7, 0x3f1ea710, 0xd, 0xde9}) flock(r6, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000280)='wg0\x00', 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007001100000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x4c040) 4.130780006s ago: executing program 6 (id=9260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newtfilter={0x24, 0x2c, 0xd2f, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x3, 0x10}, {}, {0x8, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 3.827427433s ago: executing program 6 (id=9261): socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'vcan0\x00', {}, 0x7}) r1 = socket(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) listen(r2, 0x0) (async) listen(r2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syz_tun\x00'}) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r4 = io_uring_setup(0x895, &(0x7f0000000040)={0x0, 0x3cb1, 0x100, 0x80a, 0x20002f7, 0x0, r3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = io_uring_setup(0xd24, &(0x7f0000000040)={0x0, 0x793c, 0x0, 0x0, 0x30002f4}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x402, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}], 0x1c) io_uring_enter(r5, 0xe47, 0x7721, 0x16, 0x0, 0x0) (async) io_uring_enter(r5, 0xe47, 0x7721, 0x16, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x6, 0x0, 0x0) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x6, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x3, 0x2400) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0x3, 0x2400) 3.551726227s ago: executing program 6 (id=9262): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008"], 0xa4}}, 0x40810) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}}, 0x8080) 3.313075545s ago: executing program 6 (id=9263): r0 = syz_usbip_server_init(0x1) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x800) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d01011000000009"], 0x0) write$usbip_server(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000300000001"], 0x35) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000000)={0x10000, 0x3, 0x7, 0x62d, 0x60}) 2.175684414s ago: executing program 8 (id=9264): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 2.015425113s ago: executing program 8 (id=9265): socket$unix(0x1, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100107010340b804f90240000102030109021b000101fbb00c09040000410000011f090501"], 0x0) syz_usb_connect(0x0, 0x894, &(0x7f0000000140)={{0x12, 0x1, 0x1c8, 0xdd, 0x9a, 0x36, 0x40, 0xaf0, 0x7100, 0xc6be, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x882, 0x3, 0x53, 0x8, 0xc0, 0xe2, "", [{{0x9, 0x4, 0xad, 0x7f, 0xc, 0x5a, 0x78, 0xfc, 0x53, [], [{{0x9, 0x5, 0x6, 0xc, 0x10, 0x27, 0x8, 0x7}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x2, 0xcd, 0x5}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x3, 0xaa, 0x17}}, {{0x9, 0x5, 0xe, 0x3, 0x10, 0x63, 0x0, 0xc0}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x87, 0x9d, 0xb}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x4, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x800}, @generic={0x28, 0xe, "b7ea8ef00bf9ee3082abb3343dd7459bec2cd9c1445206f84ed368a2434cec1e26e25804d07f"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x3af, 0x0, 0x1d, 0x6, [@generic={0xe, 0x1, "364492116b6d7dafdb26dfcb"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xf8, 0x5}]}}, {{0x9, 0x5, 0xe, 0xc, 0x200, 0x3, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x40}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x1, 0x8, 0xa}}, {{0x9, 0x5, 0xb, 0x4, 0x8, 0xfa, 0xff, 0xe3, [@generic={0xec, 0x10, "02192823daf3a6232042f0d6f1d4ec5d7751feaf3617db8be8cf50d57b0c33b64841875a9d3168b3428be991bd0904f231c7e2cb08a09f219b4f5b977120e1bfe598034f55ed9b2cd613f2211a46cbb578dd154b064781311812752d10f0e77f451252dcfe62448d0d0a187203a8ed1fc03d0f29fb0cf71497adf08b1b71008ad0f2918d6567d1cf49720fee0c5b3c47356d1a7aa21e6210fa623b55ee5783dc0ff53316a8ef9507c26f423ee78dd05ce34c2876b8a83176be58cf7f3826e65b6b5d6687f839b497f3d8d74ea1bd4efa432062e85b734dab983b436b2b49faa4c521a4c57b7f8cd08b02"}, @generic={0xd1, 0xa, "a4cdb4da27aa9baa2bec0716af7d07c2bc0a6794a186afed70402fe3be305d554b7adfe15427056eb00caad97624087778e4ee439d11a15caed93f1d4e49aba3006bd6935ce5aecb1f847bb7deb7df0513dec64172ce2967f26d64d718374a0960dee26f416704e149f8d5abfbdaaf10593854aa75c59117df4f0e0ca4323bdc137c168a75fb779cfb236cf2d86fca74724c0040a8e341706e34dd226a4e5e3894d4d95186f8b1a276e06df9fb1346644d482d0ca8b3a26234d3692874c44517094e05f92feb550664d07e64014b8b"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x8, 0xfb, 0x7, 0x1, [@generic={0xa1, 0x0, "8bf8717c10e342c8a09536a1a9273db22dbcd749099ef4d7c1bdae3b570412320a7ed6a003dbce255a948c0ca78677a43b35032df52acd04c8e3590541e99856671d33aecf3bd87ee902e10b12d0b839575eaffb230d0c54e2f63cc0cdeb664d28ca38cbc545ec34ea59df8211e33782941a4f81e57deb169cfd866d2d451b50722d3ad2889361a9f4b73acdc208732baebf904f30365e94e2ed5b5c41c2ec"}, @generic={0xbb, 0xa, "87602db82d70e40a37ac3f7bec9f6243339d08e055bee14fe76288eac1757d5c0ba4c3912639ae73f15cb05490af3dc0c5189045c351a7bad797f407b149863cf66d7867786b83c2899ad1e0254e71eb0eeaa8ac3e03acc322c7fdf912ebd9ee952491bf5a6ab3aedb35059b90df20dda404f6838d25863633e64464c7de1060641affa43c0bb4e85f5b80367fd27a9927f4d9cdb2f302f2d40bc32d3ce28c1ea6db178417533b2db8b95078a6fb7bd414c1542e2b05b795da"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x3, 0x2, 0xff}}]}}, {{0x9, 0x4, 0x9a, 0xb3, 0x1, 0x36, 0x29, 0xa9, 0x6, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "1c27b099cf5a"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x7, 0x0, 0x8}}], [{{0x9, 0x5, 0xf99d0ab38ef392, 0x8, 0x8, 0xa, 0xf7, 0xb, [@generic={0x66, 0x8, "5d834a9404ff0674cfd8a4679f516883e396ea130b922645fed8f191e45951db4e36fbe7d221ce32b35c7d1f86cfa8520bfcb79bd64b98e48b910b04ffb8557efa12287e33a73892c240d8d75fac02eacb4e3c35495df6ca6566c8eb7d093d573f914475"}]}}]}}, {{0x9, 0x4, 0xbe, 0x4, 0x9, 0x87, 0x6a, 0x76, 0x9, [], [{{0x9, 0x5, 0x5, 0x10, 0x20, 0x6, 0xa7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x14, 0x9, 0x7}]}}, {{0x9, 0x5, 0xa, 0x1, 0x8, 0x0, 0xa, 0x3, [@generic={0xc7, 0x21, "b17f7cfa6411d8965badf9d289f697d6dd8667ba5344aa582a9b0deb3a4b8428a9ac799afd89469d878213f3ed638676f58f6a5c4594400b43dbe435356408b1c500c3e01355f8a6cc9bc189d1dfcc5e06a9bf553e5b12fb7676d47183126651645d7445b0f8396d85a15d4bc8f5ef2f559d2b3966c86f56c27c0fe2e5f957dad01d9ab053bcc1634244e693e433c0d3df2f64e98c00e0da63249b2705bd415e5f65ffe09c6946005f62c9c911d099c6531933b0a43f9c8cbe4cbbaca967e2486a2d861c5d"}, @generic={0xec, 0x30, "2ee1e55971bb7155507cf544d84869fc87e88b14f79fd70b6e7d3fe95d7fae042c974b0d41f837aa807d6e5b067697582c13f0d70067122c7ad7fe85228216c47a0966e5fae286611e34cb8cd9c0ec43698df8ad3e7c99493d3ee9f7ac7f315668250b05d616a5f8a0f9e28a949f3aa38633e17858a3ae43567fe39ef0afd2770e1f4b6df2796d6b81e56dd5d9e0ccedbe637343af19cc7d026a5d877c3334df0ebd8c5cd116e23bdb5181aef0fb5f284a3344cceeda4c4dc44bbaebc77b1557b4d1fc426f6e02343753ab774dd60dd8e20cb164c489b5c4db36dbc23545695ab819be7de534a832a766"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x0, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7f, 0x16}, @generic={0x6, 0x5, "1c6b1b9c"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0xd, 0x5, 0x80}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x3, 0x6, 0x1}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x9, 0x4, 0x7, [@generic={0xeb, 0x31, "ab87b12570f739d209061d84cd87ab63bfc8372cc190cc0dc8d0caeaecdd7e4418401aceab69c3859540f9aa6a6c10275b94f894686e8064376739d56c146b8279d803c1e4e8c3afc128d3364a20e18dd08e95d0fdb17a5f6697fc055082582cdd1f4739d7a7eda541125b2319c710d7d7ad5296a6c97bc00a7e1cf22ae5a06c14eba0f98176579dccb643f58c38519ef5154119d4d8ee964778d8ba7b2c46c78c1af66ce53ca7ce2c75d934c007f9a86f44e4054470d9ddcf9d054cd182af40442f49be90a7314c6b410a5903d7c9948df77b56d43968b7e40bea6fea3542cbe746683130f97f7474"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x3ff, 0x0, 0x1, 0xfb}}, {{0x9, 0x5, 0x7, 0x3, 0x608, 0x1, 0x1f, 0x3, [@generic={0x51, 0xc, "0fa41adbbbeed3507d427e7544b3aa4f10524078c5bfd6a56f3c3d4f7b65b56464046ca3fc886ff690398077e58e7760716e7f45a274bf99abd4897572bc043d9ab3f82705c566501885c274ef96ca"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x4, 0x4, 0x18, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x1}, @generic={0xa7, 0x5, "84e3308431792a6f9e29f39b4d823af4042a153fe164f7203e4493f23694dbe233761c5997e96f4a13a60f7204d6c3f9f15f1a7e6d98c0a53e52141d4504c49984857bdf5b4319f829c87535b0a995c8629536a7b1145f0c23cda9aa38bf556d17f12316b72e1d289165c50aacafdf3eeb903ff01530f10bd514dfad5af867f71548de89a3c8768a68c8780861d3c56d86300ebc3c156406e88634875b2583b9e51360eb16"}]}}]}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x110, 0xfd, 0x4f, 0x5, 0x40, 0x3}, 0x39, &(0x7f0000000a40)={0x5, 0xf, 0x39, 0x4, [@wireless={0xb, 0x10, 0x1, 0xd16f7ce884c27d05, 0x3, 0x7, 0xe, 0x8000, 0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x4e, 0x3, 0x7, 0xff0f, 0x3, [0x1f80, 0x0, 0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x0, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x4, 0x2}]}, 0x6, [{0x98, &(0x7f0000000a80)=@string={0x98, 0x3, "1b9a1581b77786584760ea8a49890cf6fab45891343905378055cec1fe2c31b7e53b17d446ec5b87e7868bc1a298a0ab3f4473a3cc3067793fe7a6bf831d59033255470014537b1463ddc6e145f635362330c34fa50fc199903d936519c73d0f8774e08b4fcf7751a5b851caf15a4bddd6b821fca44d3e37958149f312e9bd342cb57eb584da3caa34544f2d4236c7e10502f4ce5377"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4}}, {0x45, &(0x7f0000000b80)=@string={0x45, 0x3, "884fa4eaf4769018075d93a7cb23ac9bc1ea1413e0865e02de7a33902f02bda9ef536efb11cf2b4d0f57e1e8d5f83d7870927c0154d92def9c42543d1d008d0ec35965"}}, {0xfb, &(0x7f0000000c00)=@string={0xfb, 0x3, "39eed026b3c5a1e59576f17f428de2bbcbe890e34bd2626f7f9073f6a353041603025817fda0bb4da7b7158b749b36e51f19ec9f3d9e67cf10ba9438de0c14944851787e973734dddb4dad9eac0bee9d70e7f4aa586b4cd16001ad5c64c6e3e7969668780b848dc908e27041d8400569ab066eb2dac0f2502d9d1b450c2e2eb389101ba65bde212911d5f4fa10990c0b8cb5aca0d7ff78b57060909d345c906369152fb7a36b0f977b822a4670ecae83d6eb0ac3d0b5adad865759f4f5ebd22b7756740b4fd6488e16b530a4a81986be0b9a51de92dac432d87e3154fc1a5150879eff4fe9b3b57278e0919263defb1affeac58b74c950cd07"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x810}}, {0xe7, &(0x7f0000000d40)=@string={0xe7, 0x3, "69c3168360a469a188ee59e1bb84e7365925429586f0818fc196b15708bf5c1c989ba1a4a7c80f859fc8c14a91c0eb29050cf9a754445fcfacbf9d1739acbb285e49d5862865d4ccd8f6d0db4a842f4970da566625418771df0e15ee321a91560163232ee408e3e175f499edf9c2555582e5a2f8f2f850c65eb00bf0f9fc64cce94be1f6ac7a46336633dfdedca4880fd90e4decc941fdf593f313416e42709f24f5b5d4336965c309a250bbef3bc1c512c9d1ca2b5bc467c3e7b4b1eb08c7ebe3d0b71ba99904ac6bbcb4eada24161458168a96bbf47790d764c3eb1cd0ec26a20990a02d"}}]}) syz_usb_ep_read(r1, 0x1, 0x1f00, 0x0) 1.806669088s ago: executing program 5 (id=9266): r0 = userfaultfd(0x801) ppoll(&(0x7f0000000100)=[{r0, 0x4c4}], 0x1, 0x0, 0x0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x21}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.563807304s ago: executing program 5 (id=9267): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x3b3, 0x0, r0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000002c0)=[{r3, 0x2}], 0x1, 0xfa) (async) poll(&(0x7f00000002c0)=[{r3, 0x2}], 0x1, 0xfa) r4 = dup2(r2, r3) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x2, 0x0, 0x1, 0x40, 0x4}, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r4) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r4) syz_io_uring_setup(0x315f, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0xfffffffd, 0x1000001}, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000000)) (async) r5 = syz_io_uring_setup(0x315f, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0xfffffffd, 0x1000001}, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000000)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r5, 0x11, &(0x7f0000000080)="c1", 0x1) (async) io_uring_register$IORING_REGISTER_IOWQ_AFF(r5, 0x11, &(0x7f0000000080)="c1", 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@local, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', r6, 0x2f, 0x1, 0x2, 0x2, 0x0, @remote, @loopback, 0x700, 0x20, 0xfffff5e6, 0x9}}) eventfd2(0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r4) 1.273008934s ago: executing program 5 (id=9268): openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 'queue0\x00', 0x55f}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000380)) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000280)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc74424001200000066460fc7b30000c0feff1c24", 0xfffffe2c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000005c0)={[0xfffffffffffffffa, 0x8, 0x2, 0x4000000080000e52, 0xfffffffffffffffe, 0x1, 0x1043, 0x200000000006, 0x4, 0x80, 0x1, 0x100000000, 0x800000000000001, 0x40000000008, 0x8000000000005, 0x4800040066], 0xeeee8000, 0x80180}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)={0x0, 0x7, 0x5}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$unix(r4, &(0x7f00000025c0)=@file={0x0, './file0\x00'}, 0x6e) (async) bind$unix(r4, &(0x7f00000025c0)=@file={0x0, './file0\x00'}, 0x6e) rseq(&(0x7f0000000d00), 0x20, 0x0, 0x0) (async) rseq(&(0x7f0000000d00), 0x20, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r6 = fsopen(&(0x7f00000029c0)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000040)={0x5, @capture={0x0, 0x0, {0x50, 0x2b2f}, 0x100, 0x8}}) (async) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000040)={0x5, @capture={0x0, 0x0, {0x50, 0x2b2f}, 0x100, 0x8}}) fsopen(&(0x7f0000000d40)='reiserfs\x00', 0x1) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) (async) socket$nl_audit(0x10, 0x3, 0x9) socket(0x10, 0x80002, 0x0) (async) r7 = socket(0x10, 0x80002, 0x0) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x4080) (async) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x4080) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001ec0)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001ec0)={'vxcan1\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000000a01080000000000000000070000000900010073797a30000000000c00044000000000000000020c000440000000000000000414000000160a0101000000000000ebc089c06f936d5e00000c0a01010000000000000000070000400900020073797a31000000000900010073797a300000000004000380140000001000010000000000000000000084000a"], 0xa4}}, 0x0) 1.249467809s ago: executing program 7 (id=9269): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', 0x80801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r3 = syz_open_pts(r2, 0x141601) r4 = syz_open_dev$radio(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r4, 0xc0445636, &(0x7f0000000180)={0x39, "a3a1ba8a751f1cb50b3e802127b5bfe3a533165480260000000000007fff00", 0x400, 0x5, 0x5, 0x8, 0x5}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)=@deltfilter={0x190, 0x2d, 0x800, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0x6}, {0x9, 0x8}, {0xb, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x108, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'pim6reg0\x00'}, @TCA_U32_DIVISOR={0x8, 0x4, 0xf6}, @TCA_U32_LINK={0x8, 0x3, 0xa48}, @TCA_U32_HASH={0x8, 0x2, 0x2}, @TCA_U32_POLICE={0xb0, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x2, 0x9, 0x9, 0xffffffff, {0x5, 0x1, 0x8, 0x3, 0x7, 0x4}, {0xc0, 0x0, 0xf96c, 0x6a86, 0x2, 0x6}, 0x7, 0x5, 0xbda2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x100}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0x7, 0x7fff, 0x10001, {0x5, 0x1, 0x0, 0xb, 0x4, 0x6}, {0x2, 0x0, 0x7fff, 0x1, 0x8000, 0x25}, 0x7, 0x7, 0x200}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}]}, @TCA_U32_LINK={0x8, 0x3, 0x8}, @TCA_U32_MARK={0x10, 0xa, {0x800, 0x8}}, @TCA_U32_HASH={0x8, 0x2, 0x3}, @TCA_U32_LINK={0x8, 0x3, 0x7}]}}, @TCA_CHAIN={0x8, 0xb, 0x54}, @TCA_CHAIN={0x8, 0xb, 0x40}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0xb4b}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x3ff}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xff}}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x44001) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000000)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x100000, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="8500000008000000d5000000200004809500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000540)={{@hyper, 0x802}, @hyper, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f0000000000)={{@host}, 0x200000000000, 0x0, 0x0, 0xfffffffc}) 1.119606499s ago: executing program 8 (id=9270): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x7f, r0, 'id1\x00'}) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x7f, r0, 'id1\x00'}) fchdir(r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x3000, 0x1000, &(0x7f0000007000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000002c0)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c744240204000000c7442406000000000f011c2466baf80cb8dc759680fadecedecefc0c66b8134266ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x76}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="b91a0100000f32650f01c8c4e2193aa307000000653e0f01cb66ba430066ed3c0ff30f01f5f30fc737f30f1113f30f5cf5", 0x31}], 0x1, 0x1, 0x0, 0x0) msgget$private(0x0, 0x3ac) (async) r4 = msgget$private(0x0, 0x3ac) msgsnd(r4, &(0x7f0000000000)={0x2}, 0x8, 0x0) (async) msgsnd(r4, &(0x7f0000000000)={0x2}, 0x8, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="05000000000000000100000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000edffffffff"], 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x7, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{0x3, 0x1}, 0x4, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x44801) msgsnd(r4, &(0x7f0000000280)={0x2}, 0x8, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)=@arm64={0x1, 0x5, 0x3, '\x00', 0x5}) msgrcv(r4, &(0x7f0000002fc0)={0x0, ""/108}, 0x74, 0x1, 0x4800) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 583.921193ms ago: executing program 8 (id=9271): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400feffb7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf98000000000000b5080000000000008500000007000000b70000000060000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 422.298433ms ago: executing program 8 (id=9272): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000740)="75c1ccf79c5bfe88cd6a6a000063ab59578db263f48925590534d436138406b6417e39a06607de99de69db93fd737428808940bcd0840d82f9b2cb172b3eacfd2f4fc930c81a8bd8b665cd233c5831977dd63ce2c8ae69169591cb5e3c124a30fbbd018d07caa5b538a1927bc3d7b32ed2fa3787557c1efd3ba32b4bdfd2c5879c72", 0x82}, {&(0x7f0000000380)="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", 0x236}, {&(0x7f0000000180)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded5829aceff163e19496e9ba68758412", 0x24}], 0x3}, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000001140), 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) remap_file_pages(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x2, 0x1) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) r7 = syz_usb_connect$cdc_ecm(0x2, 0x122, &(0x7f0000000900)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x110, 0x1, 0x1, 0x8, 0x20, 0x81, "", [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x9, 0x24, 0x6, 0x0, 0x0, "011d27a6"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7f9, 0xfff3, 0x81, 0x40}, [@mdlm_detail={0xc0, 0x24, 0x13, 0xf8, "339d807002f3846dc8640b22aa18b45b1bb51dbcefd24b6134ffc559d509739fb3e446f04f185ac4bffd8a3f10979c5213ec06aceb4b680d5fe4b7cff859de9974086652eb64ae4aca7f9b334d26f2fbe72cd02f7edb24ae15124b4fc4abbf47c4da9b39cf66a3ad9dabd3f063745399b3372769baa7e477885ac0a6a235a5cfdbe0dfbdfbfb5134230a61f713af53689522d91200b5f299ff24c12cefb54589cf4d04c201fbd8e3778070c6b2da426a02afa8f9b42f99fe0c0a6d6b"}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x7, 0x40}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0xd3, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x27, 0x80, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5b, 0x5, 0x9}}}}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x110, 0xf8, 0x8, 0x5, 0x20, 0x9}, 0x10, &(0x7f0000000a80)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x70, 0x5, 0x3, 0x5, 0x5}]}, 0x1, [{0xc8, &(0x7f0000000ac0)=@string={0xc8, 0x3, "85a984ba8e9aa699d0e2f886736ca512f24a118383d3a5ca8be42425631fb5b79399ec4375c7a447fd93c6b6cafc309cd01863678854d0594401a63db073e7349fc63b4d6bf0feb9f447f478b9c877f3dab39469339109165bfb491869897ba967e3d1d4969de2a18acc0c7049351cc0501c8c9288246cf92ecf211df2b01c31c0ac7a7c7c20d7f57ef7d1921ab4d9a924b38ffc3dfe9a509b17b043d11fd6e9f92ed99ab1258c85fc8428d8e5dd845dddc049d3dd0f086c769862c06997ec3cf0ac90ab26c8"}}]}) syz_usb_control_io(r7, &(0x7f0000000d80)={0x2c, &(0x7f0000000c00)={0x20, 0x31, 0x53, {0x53, 0x6, "1e4c1e3c605a0e1fe5dd9c8e461f798037d971b56e1458eed9fbff3bac590d133834d158170e86ea772bb5c9aa5b236d45102d33117d02f2c5e9b5a764a64f01b58500b47645b70647f2106b588c46447d"}}, &(0x7f0000000c80)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000cc0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000d00)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe7, 0x10, 0x5, 0x6, "6acd4d67", "2131fe1e"}}, &(0x7f0000000d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0x0, 0x7, 0x4, 0x81, 0xfffe}}}, &(0x7f0000001280)={0x84, &(0x7f0000000dc0)={0x0, 0xd, 0x88, "aadc3235beca3cd40eaedf19ed015154ca0e718f2c733f8ba1d1e492cfa672a94875bbecf2432320e91b7245ccf7ba60799fa04d8c67f687ac2c228c1577826ae82db4d7d29bd4db7072388a16d6459f85ad52ceb518594f71dc2d55abfa4ccb400cab7a561b3c620c4883fddc6ecdc952287546c02c775af2e3ec6a046411ac904f1b67eb3e910f"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000f40)={0x20, 0x0, 0x8, {0x400, 0x20, [0xf]}}, &(0x7f0000000f80)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000fc0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001000)={0x40, 0xb, 0x2, 'D '}, &(0x7f0000001040)={0x40, 0xf, 0x2}, &(0x7f0000001080)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000010c0)={0x40, 0x17, 0x6, @random="a6178f5cf176"}, &(0x7f0000001100)={0x40, 0x19, 0x2, "83d8"}, &(0x7f0000001180)={0x40, 0x1a, 0x2, 0x134d}, &(0x7f00000011c0)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000001200)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001240)={0x40, 0x21, 0x1, 0x1}}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000800)={0x1, @raw_data="9ee47e3263e921930869ca569cf095ef2a9159c0e7b3cdc2b526fc624bd9f83fe19b567e687916e35212f64ca924ae7e15fa658645b8683f9d1f8d14ab248ac69605b66eb4dbdc26ade9e6139d0a9aa7df3722b60dbcfdb1fab1bb1be04bda1441eb86e9389ab894134e06232b9898d65fba3af2665873dde6105aa23c2636ce9cfb703784e01fcb9c604bc7e6e650efec4e97a2d740d3aaf9127fa39376f5eca0db0dc8ae2e239f32ca5dd1b6eb394e91184209f9eb09a1de5e55dfb5763ee81994447164196116"}) close(r0) ioctl$XFS_IOC_ERROR_INJECTION(r6, 0x40085874, &(0x7f0000000100)={r0, 0x400}) 139.658234ms ago: executing program 7 (id=9273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000000805000000000000000000010000070900010073797a310000000005000300060000001c0004800800014000ae2849e6000002080004400000008008000240000000080600023565580000"], 0x4c}, 0x1, 0x0, 0x0, 0x48054}, 0xa000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x23, 0x301, 0x270bd22, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) sched_setattr(0x0, &(0x7f0000000280)={0xffffffffffffff07, 0x0, 0x1000000c, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0x50000, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x20048804}, 0x840) 0s ago: executing program 6 (id=9274): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x4) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a20020000000000", 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@private2={0xfc, 0x2, '\x00', 0x1}, 0xffffff2f, 0x2, 0x2, 0x18, 0x3, 0xf0a6}, 0x20) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRES64=r1], 0x0) kernel console output (not intermixed with test programs): 9][ T5392] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8730'. [ 1801.177479][ T5393] loop9: detected capacity change from 0 to 2640 [ 1801.186147][ T5393] buffer_io_error: 6 callbacks suppressed [ 1801.186162][ T5393] Buffer I/O error on dev loop9, logical block 0, async page read [ 1801.202513][ T5393] Buffer I/O error on dev loop9, logical block 0, async page read [ 1801.212563][ T5393] Buffer I/O error on dev loop9, logical block 0, async page read [ 1801.221366][ T5393] Buffer I/O error on dev loop9, logical block 0, async page read [ 1801.230763][ T5393] Buffer I/O error on dev loop9, logical block 0, async page read [ 1801.244714][ T5393] loop9: unable to read partition table [ 1801.256133][ T5394] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 1801.275135][ T5393] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 1801.285931][ T5394] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 1801.311657][ T5394] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 1801.311751][ T5394] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 1801.311837][ T5394] Buffer I/O error on dev loop9, logical block 4, lost async page write [ 1801.804314][T25656] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1801.954784][T25656] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1801.954816][T25656] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1801.959325][T25656] usb 1-1: config 0 descriptor?? [ 1802.016990][T25656] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1802.180752][ T5401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1802.181236][ T5401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1802.476407][T25656] usb 1-1: USB disconnect, device number 58 [ 1802.630649][ T5407] vxcan3: entered promiscuous mode [ 1802.688486][ T29] audit: type=1326 audit(1781370826.733:10658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5411 comm="syz.7.8737" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9919ce59 code=0x7ffc0000 [ 1802.713568][ T29] audit: type=1326 audit(1781370826.733:10659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5411 comm="syz.7.8737" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9919ce59 code=0x7ffc0000 [ 1802.738637][ T29] audit: type=1326 audit(1781370826.733:10660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5411 comm="syz.7.8737" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9919ce59 code=0x7ffc0000 [ 1802.772676][ T29] audit: type=1326 audit(1781370826.733:10661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5411 comm="syz.7.8737" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c9919ce59 code=0x7ffc0000 [ 1802.797555][ T29] audit: type=1326 audit(1781370826.733:10662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5411 comm="syz.7.8737" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9919ce59 code=0x7ffc0000 [ 1802.846252][ T29] audit: type=1326 audit(1781370826.733:10663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5411 comm="syz.7.8737" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9919ce59 code=0x7ffc0000 [ 1802.901751][ T29] audit: type=1326 audit(1781370826.733:10664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5411 comm="syz.7.8737" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9919ce59 code=0x7ffc0000 [ 1802.926744][ T29] audit: type=1326 audit(1781370826.733:10665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5411 comm="syz.7.8737" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9919ce59 code=0x7ffc0000 [ 1802.951930][ T29] audit: type=1326 audit(1781370826.733:10666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5411 comm="syz.7.8737" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9919ce59 code=0x7ffc0000 [ 1802.993597][ T5418] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8737'. [ 1803.903260][T25656] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1804.095845][T25656] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1804.110402][T25656] usb 6-1: New USB device found, idVendor=1c9e, idProduct=9603, bcdDevice=f3.0a [ 1804.124723][T11217] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1804.132412][T25656] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1804.147873][T25656] usb 6-1: Product: syz [ 1804.154657][T25656] usb 6-1: Manufacturer: syz [ 1804.162266][T25656] usb 6-1: SerialNumber: syz [ 1804.306570][T11217] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1804.323438][T11217] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1804.339735][T11217] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1804.356193][T11217] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1804.374920][T11217] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1804.389633][T11217] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.404042][T11217] usb 1-1: config 0 descriptor?? [ 1804.785412][ T5444] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8742'. [ 1804.836939][T11217] usbhid 1-1:0.0: can't add hid device: -71 [ 1804.846712][T11217] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1804.860589][T11217] usb 1-1: USB disconnect, device number 59 [ 1805.702284][ T5462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1805.723280][ T5462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1806.084419][T23321] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1806.246041][T23321] usb 1-1: Using ep0 maxpacket: 8 [ 1806.254693][T23321] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1806.278305][T23321] usb 1-1: string descriptor 0 read error: -22 [ 1806.293443][T23321] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 1806.313112][T23321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.337885][T23321] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1806.470962][ T5471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1806.482951][ T5471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1806.536866][ T5471] syzkaller0: entered promiscuous mode [ 1806.542414][ T5471] syzkaller0: entered allmulticast mode [ 1806.614260][T23321] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1806.637436][T25656] option 6-1:4.0: GSM modem (1-port) converter detected [ 1806.665265][T25656] usb 6-1: USB disconnect, device number 119 [ 1806.715942][T25656] option 6-1:4.0: device disconnected [ 1806.832676][T23321] usb 1-1: USB disconnect, device number 60 [ 1806.907898][ T5483] CUSE: unknown device info "" [ 1806.934676][ T5483] CUSE: unknown device info "" [ 1806.951722][ T5483] CUSE: unknown device info "" [ 1806.971213][ T5483] CUSE: unknown device info "" [ 1806.984298][ T5483] CUSE: unknown device info "" [ 1807.003608][ T5483] CUSE: unknown device info "" [ 1807.009049][ T5483] CUSE: unknown device info "" [ 1807.018919][ T5483] CUSE: unknown device info "" [ 1807.030078][ T5483] CUSE: zero length info key specified [ 1807.333418][T23321] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1807.506677][T23321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1807.522325][T23321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1807.547433][T23321] usb 1-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 1807.562570][T23321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1807.578870][T23321] usb 1-1: Product: syz [ 1807.594502][T23321] usb 1-1: Manufacturer: syz [ 1807.614931][T23321] usb 1-1: SerialNumber: syz [ 1807.638918][T23321] usb 1-1: config 0 descriptor?? [ 1807.654353][T23321] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1807.667088][T23321] usb 1-1: Detected SIO [ 1807.673193][T23321] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 1807.686960][T23321] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7 [ 1807.705971][T23321] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1807.856063][T23321] usb 1-1: USB disconnect, device number 61 [ 1807.885779][T23321] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1807.907317][ T5506] coredump: 1441(syz.5.8759): Core dump to core aborted: cannot preserve file permissions [ 1807.919204][T23321] ftdi_sio 1-1:0.0: device disconnected [ 1807.963999][ T5507] netlink: 144 bytes leftover after parsing attributes in process `syz.5.8759'. [ 1808.428202][ T5514] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1808.693279][ T5521] xt_ecn: cannot match TCP bits for non-tcp packets [ 1808.868030][ T5523] fuse: Bad value for 'fd' [ 1809.084694][ T5532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1809.173288][ T5534] binder: 5533:5534 ioctl c0306201 200000000180 returned -14 [ 1809.213259][T25656] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1809.319222][ T5519] xt_hashlimit: size too large, truncated to 1048576 [ 1809.366605][T25656] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1809.375739][T25656] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1809.392007][T25656] usb 1-1: string descriptor 0 read error: -22 [ 1809.401218][T25656] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1809.411103][T25656] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1809.442020][T25656] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1809.643849][T25656] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1809.671245][T25656] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 1809.696540][T25656] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1809.729432][T25656] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1809.751355][T25656] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 1809.774616][T25656] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1809.795496][ T9099] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1809.798465][T25656] usb 1-1: failed to enable PITCH for EP 0x82 [ 1809.983182][ T9099] usb 6-1: Using ep0 maxpacket: 16 [ 1810.002435][ T9099] usb 6-1: config 254 has an invalid interface number: 235 but max is 0 [ 1810.014370][T25656] usb 1-1: USB disconnect, device number 62 [ 1810.029612][ T9099] usb 6-1: config 254 has no interface number 0 [ 1810.057858][ T9099] usb 6-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 1810.131056][ T9099] usb 6-1: config 254 interface 235 altsetting 2 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1810.169963][ T9099] usb 6-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1810.197817][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 1810.197831][ T29] audit: type=1326 audit(1781370834.233:10901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5511 comm="syz.6.8761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd8459ce59 code=0x0 [ 1810.230018][ T9099] usb 6-1: config 254 interface 235 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1810.240764][ T9099] usb 6-1: config 254 interface 235 has no altsetting 0 [ 1810.261806][ T9099] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00 [ 1810.274564][ T9099] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.303610][ T9099] usb 6-1: Product: syz [ 1810.307990][ T9099] usb 6-1: Manufacturer: syz [ 1810.312647][ T9099] usb 6-1: SerialNumber: syz [ 1810.547445][ T9099] usbtest 6-1:254.235: Linux gadget zero [ 1810.553365][ T9099] usbtest 6-1:254.235: high-speed {control in/out bulk-in iso-in} tests (+alt) [ 1810.813681][T23321] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1810.973391][T23321] usb 1-1: Using ep0 maxpacket: 32 [ 1810.980831][T23321] usb 1-1: config index 0 descriptor too short (expected 256, got 27) [ 1810.989508][T23321] usb 1-1: config 0 has an invalid descriptor of length 120, skipping remainder of the config [ 1811.023248][T23321] usb 1-1: config 0 has no interfaces? [ 1811.036268][T23321] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=ea.79 [ 1811.056131][T23321] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=0 [ 1811.068228][T23321] usb 1-1: Product: syz [ 1811.072438][T23321] usb 1-1: Manufacturer: syz [ 1811.104736][T23321] usb 1-1: config 0 descriptor?? [ 1811.151207][ T5558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1811.194279][ T5558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1811.344686][T23321] usb 1-1: USB disconnect, device number 63 [ 1812.558027][T25656] usb 6-1: USB disconnect, device number 120 [ 1812.837428][ T5585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8781'. [ 1813.183933][ T5589] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 1814.350038][ T5598] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8784'. [ 1814.755758][T23321] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1814.943729][T23321] usb 6-1: Using ep0 maxpacket: 32 [ 1814.955149][T23321] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1814.969810][T23321] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1814.979505][T23321] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1814.988105][T23321] usb 6-1: Product: syz [ 1814.992449][T23321] usb 6-1: Manufacturer: syz [ 1814.997682][T23321] usb 6-1: SerialNumber: syz [ 1815.023562][T23321] usb 6-1: config 0 descriptor?? [ 1815.031981][ T5600] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1815.041439][T23321] hub 6-1:0.0: bad descriptor, ignoring hub [ 1815.051502][T23321] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1815.657986][ T5602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1815.713432][ T5602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1816.945501][ T5600] raw-gadget.2 gadget.5: failed to queue resume event [ 1816.959762][ T5613] geneve2: entered promiscuous mode [ 1816.965412][ T5615] FAULT_INJECTION: forcing a failure. [ 1816.965412][ T5615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1816.989307][T20494] raw-gadget.2 gadget.5: failed to queue suspend event [ 1817.011417][ T5615] CPU: 0 UID: 0 PID: 5615 Comm: syz.0.8790 Tainted: G L syzkaller #0 PREEMPT(full) [ 1817.011445][ T5615] Tainted: [L]=SOFTLOCKUP [ 1817.011452][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1817.011463][ T5615] Call Trace: [ 1817.011470][ T5615] [ 1817.011479][ T5615] dump_stack_lvl+0xe8/0x150 [ 1817.011507][ T5615] should_fail_ex+0x40c/0x560 [ 1817.011533][ T5615] _copy_from_user+0x2d/0xb0 [ 1817.011556][ T5615] __se_sys_listns+0x28a/0x2780 [ 1817.011579][ T5615] ? __fget_files+0x3a2/0x420 [ 1817.011606][ T5615] ? __pfx___se_sys_listns+0x10/0x10 [ 1817.011626][ T5615] ? ksys_write+0x242/0x270 [ 1817.011652][ T5615] ? __pfx_ksys_write+0x10/0x10 [ 1817.011683][ T5615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1817.011703][ T5615] do_syscall_64+0x174/0x580 [ 1817.011722][ T5615] ? trace_irq_disable+0x3b/0x140 [ 1817.011747][ T5615] ? clear_bhb_loop+0x40/0x90 [ 1817.011769][ T5615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1817.011787][ T5615] RIP: 0033:0x7f79d1b9ce59 [ 1817.011804][ T5615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1817.011819][ T5615] RSP: 002b:00007f79d2990028 EFLAGS: 00000246 ORIG_RAX: 00000000000001d6 [ 1817.011838][ T5615] RAX: ffffffffffffffda RBX: 00007f79d1e15fa0 RCX: 00007f79d1b9ce59 [ 1817.011852][ T5615] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 1817.011863][ T5615] RBP: 00007f79d2990090 R08: 0000000000000000 R09: 0000000000000000 [ 1817.011881][ T5615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1817.011892][ T5615] R13: 00007f79d1e16038 R14: 00007f79d1e15fa0 R15: 00007f79d1f3fa48 [ 1817.011921][ T5615] [ 1817.243841][ T5600] raw-gadget.2 gadget.5: failed to queue resume event [ 1817.268938][ T59] raw-gadget.2 gadget.5: failed to queue suspend event [ 1817.269774][ T5625] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1817.291262][ T5625] kAFS: unable to lookup cell '({^@' [ 1817.356129][ T5625] gre1: entered promiscuous mode [ 1817.363635][ T5600] raw-gadget.2 gadget.5: failed to queue resume event [ 1817.384195][ T59] raw-gadget.2 gadget.5: failed to queue suspend event [ 1817.473234][ T5600] raw-gadget.2 gadget.5: failed to queue resume event [ 1817.483698][ T9099] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1817.494234][T26345] raw-gadget.2 gadget.5: failed to queue suspend event [ 1817.525041][ T5600] raw-gadget.2 gadget.5: failed to queue disconnect event [ 1817.541356][T23321] usb 6-1: USB disconnect, device number 121 [ 1817.647802][ T9099] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1817.659824][ T9099] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1817.670720][ T9099] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1817.679960][ T9099] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1817.688244][ T9099] usb 1-1: Manufacturer: syz [ 1817.695751][ T9099] usb 1-1: config 0 descriptor?? [ 1817.963243][T23321] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1818.114073][T23321] usb 6-1: Using ep0 maxpacket: 8 [ 1818.120950][ T9099] usbhid 1-1:0.0: can't add hid device: -71 [ 1818.127134][ T9099] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1818.136172][T23321] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 1818.146464][T23321] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 1818.155912][ T9099] usb 1-1: USB disconnect, device number 64 [ 1818.165238][T23321] usb 6-1: config 0 has no interface number 0 [ 1818.172351][T23321] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1818.190919][T23321] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1818.205507][T23321] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1818.219665][T23321] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1818.230186][T23321] usb 6-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1818.238945][T23321] usb 6-1: Product: syz [ 1818.245037][T23321] usb 6-1: Manufacturer: syz [ 1818.251649][T23321] usb 6-1: config 0 descriptor?? [ 1818.464370][ T5633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1818.500812][ T5633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1818.520496][T23321] usb 6-1: USB disconnect, device number 122 [ 1818.621927][ T5639] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8797'. [ 1818.951425][ T5645] netlink: 92 bytes leftover after parsing attributes in process `syz.7.8799'. [ 1819.004378][ T2760] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1819.053165][T23321] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1819.164950][ T2760] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6C, changing to 0xC [ 1819.177121][ T2760] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1819.192006][ T2760] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1819.206153][ T2760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.223264][T23321] usb 6-1: Using ep0 maxpacket: 8 [ 1819.229202][ T2760] usb 1-1: config 0 descriptor?? [ 1819.241369][T23321] usb 6-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1819.246863][ T2760] smsusb:smsusb_probe: board id=8, interface number 0 [ 1819.268967][T23321] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1819.269111][ T2760] smsusb:smsusb_probe: Device initialized with return code -19 [ 1819.306687][T23321] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1819.331474][T23321] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1819.351534][T23321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.387338][T23321] hub 6-1:32.0: bad descriptor, ignoring hub [ 1819.397409][T23321] hub 6-1:32.0: probe with driver hub failed with error -5 [ 1819.442454][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1819.449532][ T5641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8798'. [ 1819.465441][ T5641] loop5: detected capacity change from 0 to 2640 [ 1819.489388][ T5641] buffer_io_error: 325 callbacks suppressed [ 1819.489406][ T5641] Buffer I/O error on dev loop5, logical block 0, async page read [ 1819.523499][ T5641] Buffer I/O error on dev loop5, logical block 0, async page read [ 1819.531825][ T5641] Buffer I/O error on dev loop5, logical block 0, async page read [ 1819.553765][ T5641] Buffer I/O error on dev loop5, logical block 0, async page read [ 1819.567500][ T5649] binder: BINDER_SET_CONTEXT_MGR already set [ 1819.578086][ T5649] binder: 5646:5649 ioctl 4018620d 2000000002c0 returned -16 [ 1819.588992][ T5641] Buffer I/O error on dev loop5, logical block 0, async page read [ 1819.620543][ T5641] Buffer I/O error on dev loop5, logical block 0, async page read [ 1819.630569][ T5633] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x33424752, 4, 0, 0, 0) [ 1819.649289][ T5641] Buffer I/O error on dev loop5, logical block 0, async page read [ 1819.666657][ T5641] Buffer I/O error on dev loop5, logical block 0, async page read [ 1819.684667][ T5641] ldm_validate_partition_table(): Disk read failed. [ 1819.702637][ T5641] Buffer I/O error on dev loop5, logical block 0, async page read [ 1819.752571][ T5641] Buffer I/O error on dev loop5, logical block 0, async page read [ 1819.788003][ T5641] Dev loop5: unable to read RDB block 0 [ 1819.804027][ T9099] usb 6-1: USB disconnect, device number 123 [ 1819.813557][ T5641] loop5: unable to read partition table [ 1819.847152][ T5641] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 1819.890429][ T5654] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8802'. [ 1820.030573][ T5656] FAULT_INJECTION: forcing a failure. [ 1820.030573][ T5656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1820.057375][ T5656] CPU: 0 UID: 0 PID: 5656 Comm: syz.8.8803 Tainted: G L syzkaller #0 PREEMPT(full) [ 1820.057405][ T5656] Tainted: [L]=SOFTLOCKUP [ 1820.057411][ T5656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1820.057419][ T5656] Call Trace: [ 1820.057424][ T5656] [ 1820.057430][ T5656] dump_stack_lvl+0xe8/0x150 [ 1820.057447][ T5656] should_fail_ex+0x40c/0x560 [ 1820.057461][ T5656] _copy_to_user+0x31/0xb0 [ 1820.057475][ T5656] simple_read_from_buffer+0xe1/0x170 [ 1820.057490][ T5656] proc_fail_nth_read+0x1bb/0x230 [ 1820.057505][ T5656] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1820.057519][ T5656] ? rw_verify_area+0x24a/0x4c0 [ 1820.057540][ T5656] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1820.057556][ T5656] vfs_read+0x213/0xa80 [ 1820.057584][ T5656] ? __pfx___mutex_lock+0x10/0x10 [ 1820.057603][ T5656] ? __pfx_vfs_read+0x10/0x10 [ 1820.057627][ T5656] ? __fget_files+0x2a/0x420 [ 1820.057648][ T5656] ? __fget_files+0x3a2/0x420 [ 1820.057659][ T5656] ? __fget_files+0x2a/0x420 [ 1820.057674][ T5656] ksys_read+0x150/0x270 [ 1820.057689][ T5656] ? __pfx_ksys_read+0x10/0x10 [ 1820.057706][ T5656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1820.057717][ T5656] do_syscall_64+0x174/0x580 [ 1820.057727][ T5656] ? trace_irq_disable+0x3b/0x140 [ 1820.057742][ T5656] ? clear_bhb_loop+0x40/0x90 [ 1820.057754][ T5656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1820.057763][ T5656] RIP: 0033:0x7f182195d68e [ 1820.057774][ T5656] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1820.057783][ T5656] RSP: 002b:00007f18228a3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1820.057795][ T5656] RAX: ffffffffffffffda RBX: 00007f18228a46c0 RCX: 00007f182195d68e [ 1820.057803][ T5656] RDX: 000000000000000f RSI: 00007f18228a40a0 RDI: 0000000000000003 [ 1820.057809][ T5656] RBP: 00007f18228a4090 R08: 0000000000000000 R09: 0000000000000000 [ 1820.057815][ T5656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1820.057821][ T5656] R13: 00007f1821c16038 R14: 00007f1821c15fa0 R15: 00007f1821d3fa48 [ 1820.057837][ T5656] [ 1820.297800][ T5000] ldm_validate_partition_table(): Disk read failed. [ 1820.305089][ T5000] Dev loop5: unable to read RDB block 0 [ 1820.311232][ T5000] loop5: unable to read partition table [ 1820.422579][ T5664] netlink: 45 bytes leftover after parsing attributes in process `syz.5.8805'. [ 1820.508573][ T9099] usb 1-1: USB disconnect, device number 65 [ 1820.612729][ T5668] IPv6: sit1: Disabled Multicast RS [ 1820.823869][ T5674] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8809'. [ 1820.878693][ T5677] netlink: 'syz.6.8810': attribute type 14 has an invalid length. [ 1820.953719][ T9099] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 1821.116967][ T9099] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1821.140503][ T9099] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1821.152052][ T9099] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1821.166345][ T9099] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1821.174696][ T9099] usb 1-1: Manufacturer: syz [ 1821.182379][ T9099] usb 1-1: config 0 descriptor?? [ 1821.262967][ T4130] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1821.275937][ T5690] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1821.286646][ T4130] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1821.299109][ T4130] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1821.309287][ T4130] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1821.331899][ T5693] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8815'. [ 1821.339500][ T5690] netlink: 'syz.5.8814': attribute type 10 has an invalid length. [ 1821.609240][ T9099] cougar 0003:060B:700A.0074: unknown main item tag 0x0 [ 1821.617152][ T9099] cougar 0003:060B:700A.0074: unknown main item tag 0x0 [ 1821.624968][ T9099] cougar 0003:060B:700A.0074: unknown main item tag 0x0 [ 1821.635067][ T9099] cougar 0003:060B:700A.0074: unknown main item tag 0x0 [ 1821.646910][ T9099] cougar 0003:060B:700A.0074: unknown main item tag 0x0 [ 1821.667219][ T9099] cougar 0003:060B:700A.0074: hidraw0: USB HID v0.02 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1821.809601][T23321] usb 1-1: USB disconnect, device number 66 [ 1822.371042][ T5702] loop4: detected capacity change from 0 to 7 [ 1822.402850][ T5702] Dev loop4: unable to read RDB block 7 [ 1822.430531][ T5702] loop4: unable to read partition table [ 1822.436839][ T5702] loop4: partition table beyond EOD, truncated [ 1822.471785][ T5702] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1822.903418][ T9099] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1823.075034][ T9099] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1823.083363][ T9099] usb 1-1: config 0 has no interface number 0 [ 1823.089794][ T9099] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1823.114467][ T9099] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1823.124878][ T9099] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1823.134529][ T9099] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.177063][ T9099] usb 1-1: config 0 descriptor?? [ 1823.484982][ T2760] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1823.617787][ T9099] prodikeys 0003:041E:2801.0075: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 1823.656431][ T2760] usb 6-1: device descriptor read/64, error -71 [ 1823.738902][ T9099] hid_prodikeys: hid-prodikeys: failed to find output report [ 1823.738902][ T9099] [ 1823.880604][ T9099] usb 1-1: USB disconnect, device number 67 [ 1823.904848][ T2760] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1824.060223][ T2760] usb 6-1: device descriptor read/64, error -71 [ 1824.067663][ T5715] netlink: 76 bytes leftover after parsing attributes in process `syz.7.8821'. [ 1824.179886][ T2760] usb usb6-port1: attempt power cycle [ 1824.527139][ T2760] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1824.562907][ T2760] usb 6-1: device descriptor read/8, error -71 [ 1824.814455][ T2760] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1824.848696][ T2760] usb 6-1: device descriptor read/8, error -71 [ 1824.964493][ T2760] usb usb6-port1: unable to enumerate USB device [ 1825.103604][T23321] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1825.294415][T23321] usb 1-1: Using ep0 maxpacket: 16 [ 1825.302861][T23321] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 528, setting to 64 [ 1825.314495][T23321] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 11446, setting to 64 [ 1825.327842][T23321] usb 1-1: New USB device found, idVendor=0582, idProduct=002f, bcdDevice= 0.40 [ 1825.351996][T23321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.390232][T23321] usb 1-1: Product: syz [ 1825.400078][T23321] usb 1-1: Manufacturer: syz [ 1825.424086][T23321] usb 1-1: SerialNumber: syz [ 1825.651878][T23321] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1825.798335][T23321] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1825.831610][T23321] usb 1-1: USB disconnect, device number 68 [ 1825.873501][ T5044] udevd[5044]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1826.532605][ T2760] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1826.718210][ T2760] usb 6-1: Using ep0 maxpacket: 16 [ 1826.742544][ T2760] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1826.762998][ T2760] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1826.794460][ T2760] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1826.809128][ T2760] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.818711][ T2760] usb 6-1: Product: syz [ 1826.823762][ T2760] usb 6-1: Manufacturer: syz [ 1826.850859][ T2760] usb 6-1: SerialNumber: syz [ 1826.871303][ T2760] usb 6-1: config 0 descriptor?? [ 1826.918362][ T2760] appledisplay 6-1:0.0: Could not find int-in endpoint [ 1826.933974][ T2760] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1827.562168][ T5741] fuse: Unknown parameter 'g|Je' [ 1827.992226][T23321] usb 6-1: USB disconnect, device number 2 [ 1828.184123][ T5750] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8829'. [ 1828.193314][ T5750] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8829'. [ 1829.343182][T25656] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1829.354979][ T5770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1829.384525][ T5770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1829.424705][ T5773] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8837'. [ 1829.497898][T25656] usb 1-1: Using ep0 maxpacket: 32 [ 1829.519265][T25656] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1829.525109][ T5760] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8833'. [ 1829.535723][T25656] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.556636][T25656] usb 1-1: Product: syz [ 1829.566119][T25656] usb 1-1: Manufacturer: syz [ 1829.575018][T25656] usb 1-1: SerialNumber: syz [ 1829.589254][ T5760] team0 (unregistering): Port device team_slave_0 removed [ 1829.589547][T25656] usb 1-1: config 0 descriptor?? [ 1829.612902][ T5760] team0 (unregistering): Port device team_slave_1 removed [ 1829.629361][T25656] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1830.142640][ T5795] syzkaller0: entered promiscuous mode [ 1830.164331][ T5795] syzkaller0: entered allmulticast mode [ 1830.188020][ T5795] TC_ACT_REPEAT abuse ? [ 1830.596946][ T5820] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5822] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[5820] [ 1830.610821][ T5821] blktrace: Concurrent blktraces are not allowed on sg0 [ 1830.612309][ T5820] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5822] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[5820] [ 1830.640179][ T5821] blktrace: Concurrent blktraces are not allowed on sg0 [ 1831.583943][T25656] gspca_ov534_9: reg_r err -110 [ 1831.844803][T25656] gspca_ov534_9: Unknown sensor 0000 [ 1831.844975][T25656] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 1831.950880][T25656] usb 1-1: USB disconnect, device number 69 [ 1832.192493][ T5852] syzkaller0: entered promiscuous mode [ 1832.218896][ T5852] syzkaller0: entered allmulticast mode [ 1832.255052][ T5854] TC_ACT_REPEAT abuse ? [ 1832.874078][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 1832.881894][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 1833.452351][ T5883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1833.477966][ T5883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1833.506058][ T5856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1833.562827][ T5856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1833.932583][T20480] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.985043][T20480] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.030793][T20480] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.067852][T20480] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.123433][T20774] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1835.285597][T20774] usb 6-1: unable to get BOS descriptor set [ 1835.293701][T20774] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1835.304099][T20774] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1835.320375][T20774] usb 6-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 1835.330146][T20774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.338659][T20774] usb 6-1: Product: syz [ 1835.344635][T20774] usb 6-1: Manufacturer: syz [ 1835.349351][T20774] usb 6-1: SerialNumber: syz [ 1835.412435][ T5907] netlink: 'syz.8.8870': attribute type 1 has an invalid length. [ 1835.560046][ T5910] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1835.629952][ T5907] veth3: entered promiscuous mode [ 1835.662686][ T5910] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8870'. [ 1835.669284][ T5907] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 1835.739804][ T5910] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1835.762076][ T4129] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1836.053387][ T4129] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1836.276880][ T5926] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1836.396112][T20774] usb 6-1: cannot find UAC_HEADER [ 1836.502910][T20774] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1836.520141][ T5930] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8875'. [ 1836.533269][T20774] usb 6-1: USB disconnect, device number 4 [ 1836.569023][ T5044] udevd[5044]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1837.153555][T20774] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1837.190048][ T5943] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1837.206784][ T5942] syzkaller0: entered promiscuous mode [ 1837.212324][ T5942] syzkaller0: entered allmulticast mode [ 1837.343434][T20774] usb 1-1: Using ep0 maxpacket: 32 [ 1837.376168][T20774] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1837.420722][T20774] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1837.461741][T20774] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1837.498657][T20774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1837.516215][T20774] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1837.556698][T20774] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1837.591801][ T5951] netlink: 96 bytes leftover after parsing attributes in process `syz.7.8883'. [ 1837.598028][T20774] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1837.649083][T20774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.705332][T20774] usb 1-1: config 0 descriptor?? [ 1837.858304][ T5958] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8886'. [ 1837.938095][ T5938] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[4576] was attempted by "   l@ \x09$rQ \x09 \x07 \x09 \x09 "[5938] [ 1838.023926][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8879'. [ 1838.038231][T20774] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 70 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1838.078922][T20774] usb 1-1: USB disconnect, device number 70 [ 1838.085583][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8886'. [ 1838.108922][T20774] usblp0: removed [ 1838.227203][ T5956] syzkaller0: entered promiscuous mode [ 1838.234072][ T5956] syzkaller0: entered allmulticast mode [ 1839.052538][ T5982] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8894'. [ 1839.066464][ T5982] loop1: detected capacity change from 0 to 16384 [ 1839.104171][T20774] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1839.265540][T20774] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1839.299175][T20774] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1839.314078][T20774] usb 1-1: config 220 has an invalid descriptor of length 144, skipping remainder of the config [ 1839.333803][ T5986] netlink: 2 bytes leftover after parsing attributes in process `syz.8.8895'. [ 1839.335080][T20774] usb 1-1: config 220 has no interface number 2 [ 1839.357415][T20774] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1839.362766][ T5986] netlink: 2 bytes leftover after parsing attributes in process `syz.8.8895'. [ 1839.380367][T20774] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1839.402090][T20774] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1839.424338][ T5983] loop1: detected capacity change from 16384 to 0 [ 1839.425010][ C1] I/O error, dev loop1, sector 8704 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 1839.446489][T20774] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1839.467247][T20774] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1839.482851][T20774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.498089][T20774] usb 1-1: Product: syz [ 1839.505875][T20774] usb 1-1: Manufacturer: syz [ 1839.520083][T20774] usb 1-1: SerialNumber: syz [ 1839.601093][ T5990] netlink: 96 bytes leftover after parsing attributes in process `syz.8.8896'. [ 1839.716226][ T5992] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1839.735704][ T5992] netlink: 'syz.8.8897': attribute type 1 has an invalid length. [ 1839.774846][T20774] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1839.790434][T20774] uvcvideo 1-1:220.0: No valid video chain found. [ 1839.798406][T20774] usb 1-1: selecting invalid altsetting 0 [ 1839.816999][T20774] usb 1-1: selecting invalid altsetting 0 [ 1839.823134][T20774] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1839.838392][T20774] usb 1-1: USB disconnect, device number 71 [ 1839.858655][ T5992] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1839.956286][ T5994] bond3: (slave veth0_to_bond): making interface the new active one [ 1839.971002][ T5994] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1840.184060][ T5997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1840.203669][ T5997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1840.859171][ T6004] pim6reg1: entered promiscuous mode [ 1840.867000][ T6004] pim6reg1: entered allmulticast mode [ 1841.063452][ T1503] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1841.122483][ T6013] input: syz0 as /devices/virtual/input/input163 [ 1841.248800][ T1503] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1841.280942][ T1503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.324550][ T1503] usb 1-1: config 0 descriptor?? [ 1841.340842][ T1503] cp210x 1-1:0.0: cp210x converter detected [ 1841.558614][ T1503] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1841.625239][ T6017] netlink: 'syz.6.8903': attribute type 13 has an invalid length. [ 1841.680224][ T6017] netlink: 'syz.6.8903': attribute type 17 has an invalid length. [ 1841.753911][ T1503] usb 1-1: USB disconnect, device number 72 [ 1841.789641][ T1503] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1841.836466][ T1503] cp210x 1-1:0.0: device disconnected [ 1842.262373][ T6017] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1842.569814][ T6032] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1842.589929][ T6034] __nla_validate_parse: 2 callbacks suppressed [ 1842.589953][ T6034] netlink: 96 bytes leftover after parsing attributes in process `syz.6.8907'. [ 1843.053412][T11229] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1843.223553][T11229] usb 1-1: Using ep0 maxpacket: 8 [ 1843.231999][T11229] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1843.242743][T11229] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1843.254738][T11229] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1843.265661][T11229] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1843.279736][T11229] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1843.293344][T11229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.428060][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8912'. [ 1843.439060][ T6053] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8912'. [ 1843.532461][T11229] usb 1-1: GET_CAPABILITIES returned 0 [ 1843.550763][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8914'. [ 1843.554321][T11229] usbtmc 1-1:16.0: can't read capabilities [ 1843.737463][ T29] audit: type=1326 audit(1781370867.783:10902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.5.8915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ab39ce59 code=0x7ffc0000 [ 1843.753699][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1843.763280][ T29] audit: type=1326 audit(1781370867.783:10903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.5.8915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ab39ce59 code=0x7ffc0000 [ 1843.771298][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1843.795914][ T29] audit: type=1326 audit(1781370867.803:10904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.5.8915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ab39ce59 code=0x7ffc0000 [ 1843.833981][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1843.843105][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1843.852220][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1843.861325][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1843.885236][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1843.888041][ T6066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1843.894366][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1843.894422][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1843.894468][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1843.898506][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1843.927239][ T6066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1843.930864][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1843.978936][ T29] audit: type=1326 audit(1781370867.803:10905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.5.8915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ab39ce59 code=0x7ffc0000 [ 1844.004050][ T29] audit: type=1326 audit(1781370867.873:10906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.5.8915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe4ab39ce59 code=0x7ffc0000 [ 1844.008966][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1844.028572][ T29] audit: type=1326 audit(1781370867.873:10907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.5.8915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ab39ce59 code=0x7ffc0000 [ 1844.037438][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1844.072327][ T29] audit: type=1326 audit(1781370867.873:10908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.5.8915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe4ab39cbc2 code=0x7ffc0000 [ 1844.101893][ T29] audit: type=1326 audit(1781370867.873:10909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.5.8915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe4ab39cc57 code=0x7ffc0000 [ 1844.124476][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1844.127002][ T29] audit: type=1326 audit(1781370867.873:10910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.5.8915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe4ab359b51 code=0x7ffc0000 [ 1844.155696][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1844.160181][ T29] audit: type=1326 audit(1781370867.873:10911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.5.8915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe4ab39dc49 code=0x7ffc0000 [ 1844.878516][ T6074] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1845.038206][ T1503] usb 1-1: USB disconnect, device number 73 [ 1845.217473][ T6077] fuse: Bad value for 'fd' [ 1845.354942][ T6079] netlink: 96 bytes leftover after parsing attributes in process `syz.7.8919'. [ 1846.353513][T20774] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1846.494286][ T6099] syzkaller0: entered promiscuous mode [ 1846.501583][ T6099] syzkaller0: entered allmulticast mode [ 1846.564395][T20774] usb 1-1: Using ep0 maxpacket: 16 [ 1846.573557][T20774] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1846.598696][T20774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1846.642388][T20774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1846.691589][T20774] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1846.720412][T20774] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1846.763608][ T10] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1846.780336][T20774] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1846.807848][T20774] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1846.829281][T20774] usb 1-1: Manufacturer: syz [ 1846.847542][T20774] usb 1-1: config 0 descriptor?? [ 1846.956156][ T10] usb 6-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1846.972839][ T10] usb 6-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1847.014588][ T10] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1847.038777][ T10] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1847.059971][ T10] usb 6-1: Manufacturer: syz [ 1847.071247][ T10] usb 6-1: SerialNumber: syz [ 1847.223404][T20774] rc_core: IR keymap rc-hauppauge not found [ 1847.234850][T20774] Registered IR keymap rc-empty [ 1847.254940][T20774] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1847.293187][T20774] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1847.330305][ T10] usbhid 6-1:36.0: couldn't find an input interrupt endpoint [ 1847.346610][T20774] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1847.377530][T20774] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input164 [ 1847.379711][ T10] usb 6-1: USB disconnect, device number 5 [ 1847.392682][T20774] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1847.423943][T20774] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1847.453408][T20774] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1847.494355][T20774] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1847.525442][T20774] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1847.563672][T20774] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1847.603521][T20774] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1847.643440][T20774] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1847.691370][T20774] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1847.733183][T20774] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1847.769985][T20774] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1847.798039][T20774] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1847.841454][T20774] usb 1-1: USB disconnect, device number 74 [ 1847.951058][ T6112] syzkaller0: entered promiscuous mode [ 1848.123384][ T6112] syzkaller0: entered allmulticast mode [ 1848.149222][ T6118] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8930'. [ 1848.569244][T25440] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1848.578414][T25440] Bluetooth: hci3: Injecting HCI hardware error event [ 1848.594727][T25440] Bluetooth: hci3: hardware error 0x00 [ 1848.963460][ T5870] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 1849.060311][ T5870] hid-generic 0000:0000:0000.0076: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1849.428608][ T10] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 1849.615389][ T10] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1849.639881][ T10] usb 1-1: config 0 has no interface number 0 [ 1849.667397][ T10] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1849.727956][ T10] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1849.756922][ T10] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1849.811191][ T10] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1849.835892][ T10] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1849.866022][ T10] usb 1-1: Product: syz [ 1849.893350][ T10] usb 1-1: SerialNumber: syz [ 1849.935844][ T10] usb 1-1: config 0 descriptor?? [ 1849.982642][ T10] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 1850.003245][ T6124] Bluetooth: hci2: command 0x0406 tx timeout [ 1850.012239][ T6145] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8939'. [ 1850.021974][ T6132] hid-generic 0000:0000:0000.0076: pid 6132 passed too large report [ 1850.024317][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input165 [ 1850.140451][ T6150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1850.161319][ T6145] geneve3: entered promiscuous mode [ 1850.169279][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1850.184559][ T6150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1850.192494][ T6145] geneve3: entered allmulticast mode [ 1850.224676][ T6150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1850.284394][ T6150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1850.342958][ T6150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1850.406001][ T6150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1850.445050][ T6150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1850.497648][ T6150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1850.534462][ T6150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1850.569663][ T6150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1850.709179][ T6154] netlink: 96 bytes leftover after parsing attributes in process `syz.6.8942'. [ 1850.762608][ T6159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1850.792542][ T6159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1850.847373][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1850.884055][T25440] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1851.023217][ T10] usb 6-1: device descriptor read/64, error -71 [ 1851.121627][T25408] usb 1-1: USB disconnect, device number 75 [ 1851.133718][ T6161] netlink: 364 bytes leftover after parsing attributes in process `syz.7.8944'. [ 1851.200166][T25408] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1851.275439][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1851.425138][ T10] usb 6-1: device descriptor read/64, error -71 [ 1851.448625][ T6170] random: crng reseeded on system resumption [ 1851.504233][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8947'. [ 1851.554082][ T10] usb usb6-port1: attempt power cycle [ 1851.913460][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1851.962121][ T10] usb 6-1: device descriptor read/8, error -71 [ 1852.223250][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1852.265263][ T10] usb 6-1: device descriptor read/8, error -71 [ 1852.404621][ T10] usb usb6-port1: unable to enumerate USB device [ 1853.048903][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.057679][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.191690][ T6200] netlink: 96 bytes leftover after parsing attributes in process `syz.7.8955'. [ 1853.389442][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8957'. [ 1853.436496][ T10] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1853.653449][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1853.665839][ T10] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1853.703333][ T10] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1853.766283][ T10] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1853.781118][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1853.789206][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1853.800133][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.844371][ T10] usb 1-1: config 0 descriptor?? [ 1854.594250][T20774] usb 1-1: USB disconnect, device number 76 [ 1854.703415][ T6212] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8960'. [ 1855.264085][T20774] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1855.343191][ T6225] loop8: detected capacity change from 0 to 8 [ 1855.351961][ T6225] Dev loop8: unable to read RDB block 8 [ 1855.358521][ T6225] loop8: unable to read partition table [ 1855.368939][ T6225] loop8: partition table beyond EOD, truncated [ 1855.377761][ T6225] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1855.436115][T20774] usb 6-1: Using ep0 maxpacket: 16 [ 1855.444112][T20774] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1855.457351][T20774] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1855.472317][T20774] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1855.481685][T20774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.492902][T20774] usb 6-1: Product: syz [ 1855.497333][T20774] usb 6-1: Manufacturer: syz [ 1855.502590][T20774] usb 6-1: SerialNumber: syz [ 1855.790639][ T6219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1855.819129][ T6219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1855.891787][T20774] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1855.927886][T20774] usb 6-1: unit 1 not found! [ 1855.965943][ T6236] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8968'. [ 1856.082685][T20774] usb 6-1: USB disconnect, device number 10 [ 1856.148487][ T6243] netlink: 'syz.6.8970': attribute type 5 has an invalid length. [ 1856.206187][ T6242] loop4: detected capacity change from 0 to 7 [ 1856.231291][ T3653] udevd[3653]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1856.257610][ T6242] Dev loop4: unable to read RDB block 7 [ 1856.282328][ T6242] loop4: unable to read partition table [ 1856.321205][ T6242] loop4: partition table beyond EOD, truncated [ 1856.385529][ T6242] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1856.802022][ T10] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1856.944614][ T6262] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8976'. [ 1856.986982][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1857.017969][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1857.036114][ T6265] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8978'. [ 1857.054022][ T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1857.077520][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.141348][ T10] usb 1-1: config 0 descriptor?? [ 1857.420794][ T6255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1857.461451][ T6255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1858.128933][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 1858.141152][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1858.181337][ T10] usb 1-1: USB disconnect, device number 77 [ 1858.906716][ T6283] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8983'. [ 1859.183737][ T6293] binder: 6281:6293 ioctl c0189374 2000000000c0 returned -22 [ 1859.255561][ T6297] loop4: detected capacity change from 0 to 7 [ 1859.342970][ T6297] Dev loop4: unable to read RDB block 7 [ 1859.380725][ T6297] loop4: unable to read partition table [ 1859.391842][ T6297] loop4: partition table beyond EOD, truncated [ 1859.408190][ T6297] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1859.813725][T20774] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 1859.829861][ T6313] geneve2: entered allmulticast mode [ 1859.865466][ T4130] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 1859.923734][ T4071] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 1859.963190][ T4071] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 1859.995560][T20774] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1860.014541][ T4071] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 1860.040187][T20774] usb 1-1: config 0 has no interface number 0 [ 1860.073327][T20774] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1860.108137][T20774] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1860.143451][T20774] usb 1-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.18 [ 1860.173969][T20774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1860.200453][T20774] usb 1-1: config 0 descriptor?? [ 1860.687299][T20774] holtek_mouse 0003:04D9:A070.0078: unknown main item tag 0x0 [ 1860.737909][T20774] holtek_mouse 0003:04D9:A070.0078: unknown main item tag 0x0 [ 1860.770867][T20774] holtek_mouse 0003:04D9:A070.0078: unknown main item tag 0x0 [ 1860.804722][T20774] holtek_mouse 0003:04D9:A070.0078: unknown main item tag 0x0 [ 1860.833934][T20774] holtek_mouse 0003:04D9:A070.0078: unknown main item tag 0x0 [ 1860.903096][T20774] holtek_mouse 0003:04D9:A070.0078: hidraw0: USB HID v0.00 Device [HID 04d9:a070] on usb-dummy_hcd.0-1/input1 [ 1861.774295][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1861.968199][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1861.999784][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1862.037168][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1862.075874][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1862.108762][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40 [ 1862.152310][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.187274][ T10] usb 6-1: Product: syz [ 1862.202059][ T10] usb 6-1: Manufacturer: syz [ 1862.227750][ T10] usb 6-1: SerialNumber: syz [ 1862.478081][ T10] usb 6-1: unit 255 not found! [ 1862.617871][ T2759] usb 1-1: USB disconnect, device number 78 [ 1862.739237][ T10] usb 6-1: USB disconnect, device number 11 [ 1862.936553][ T5044] udevd[5044]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1863.621356][ T6343] loop4: detected capacity change from 0 to 7 [ 1863.628197][ T6338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1863.646600][ T6344] netlink: 'syz.0.9001': attribute type 3 has an invalid length. [ 1863.662806][ T6343] Dev loop4: unable to read RDB block 7 [ 1863.682077][ T6343] loop4: unable to read partition table [ 1863.685482][ T6344] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9001'. [ 1863.716039][ T6343] loop4: partition table beyond EOD, truncated [ 1863.733649][ T6343] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1863.745387][ T6338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1864.363177][ T10] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1864.506809][ T10] usb 6-1: device descriptor read/64, error -71 [ 1864.753454][ T10] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1864.784521][ T6360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1864.800956][ T6360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1864.893270][ T10] usb 6-1: device descriptor read/64, error -71 [ 1865.004860][ T10] usb usb6-port1: attempt power cycle [ 1865.030185][ T6365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1865.053589][ T6365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1865.100878][ T6365] batadv_slave_1: entered promiscuous mode [ 1865.138497][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9008'. [ 1865.177582][ T6364] batadv_slave_1: left promiscuous mode [ 1865.294898][ T6372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9010'. [ 1865.363390][ T10] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1865.394515][ T10] usb 6-1: device descriptor read/8, error -71 [ 1865.489680][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 1865.489696][ T29] audit: type=1326 audit(1781370889.533:10975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.6.9011" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8459ce59 code=0x7ffc0000 [ 1865.536910][ T29] audit: type=1326 audit(1781370889.533:10976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.6.9011" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8459ce59 code=0x7ffc0000 [ 1865.544105][ T2759] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1865.563087][ T29] audit: type=1326 audit(1781370889.563:10977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.6.9011" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fcd8459ce59 code=0x7ffc0000 [ 1865.563130][ T29] audit: type=1326 audit(1781370889.563:10978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.6.9011" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8459ce59 code=0x7ffc0000 [ 1865.563164][ T29] audit: type=1326 audit(1781370889.563:10979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.6.9011" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8459ce59 code=0x7ffc0000 [ 1865.563199][ T29] audit: type=1326 audit(1781370889.563:10980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.6.9011" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcd8459ce59 code=0x7ffc0000 [ 1865.563237][ T29] audit: type=1326 audit(1781370889.563:10981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.6.9011" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8459ce59 code=0x7ffc0000 [ 1865.563274][ T29] audit: type=1326 audit(1781370889.563:10982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.6.9011" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8459ce59 code=0x7ffc0000 [ 1865.563312][ T29] audit: type=1326 audit(1781370889.573:10983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.6.9011" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fcd8459ce59 code=0x7ffc0000 [ 1865.563348][ T29] audit: type=1326 audit(1781370889.573:10984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.6.9011" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8459ce59 code=0x7ffc0000 [ 1865.863253][ T10] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1865.894370][ T10] usb 6-1: device descriptor read/8, error -71 [ 1865.975776][ T2759] usb 1-1: Using ep0 maxpacket: 8 [ 1865.985871][ T2759] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1866.002155][ T2759] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1866.026601][ T10] usb usb6-port1: unable to enumerate USB device [ 1866.038025][ T2759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.065983][ T2759] usb 1-1: Product: syz [ 1866.077101][ T2759] usb 1-1: Manufacturer: syz [ 1866.088045][ T2759] usb 1-1: SerialNumber: syz [ 1866.105689][ T6383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1866.117109][ T6383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1866.127664][ T2759] usb 1-1: config 0 descriptor?? [ 1866.202916][ T6383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1866.221801][ T6383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1866.309783][ T6383] bond0: left promiscuous mode [ 1866.315983][ T6383] bond_slave_0: left promiscuous mode [ 1866.321594][ T6383] bond_slave_1: left promiscuous mode [ 1866.342459][T26345] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1866.357835][T26345] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1866.368536][ T6371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1866.390207][T26345] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1866.408261][ T6371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1866.431912][T26345] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1866.438694][ T2759] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 1866.455932][ T2759] dvb-usb: bulk message failed: -22 (2/0) [ 1866.472087][ T2759] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1866.489817][ T2759] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 1866.502995][ T2759] usb 1-1: media controller created [ 1866.510024][ T6395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1866.523907][ T6395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1866.538478][ T2759] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1866.579284][ T2759] usb 1-1: selecting invalid altsetting 0 [ 1866.585913][ T2759] cxusb: set interface failed [ 1866.590616][ T2759] dvb-usb: bulk message failed: -22 (1/0) [ 1866.712251][ T2759] DVB: Unable to find symbol mt352_attach() [ 1866.751111][ T2759] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 1866.904767][ T2759] rc_core: IR keymap rc-dvico-portable not found [ 1866.936790][ T2759] Registered IR keymap rc-empty [ 1866.958255][ T2759] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1867.028382][ T2759] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input166 [ 1867.042235][ T2759] dvb-usb: schedule remote query interval to 100 msecs. [ 1867.042298][ T2759] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 1867.066289][ T2759] usb 1-1: USB disconnect, device number 79 [ 1867.197374][ T6409] netlink: 'syz.5.9020': attribute type 4 has an invalid length. [ 1867.202670][ T6409] netlink: 'syz.5.9020': attribute type 4 has an invalid length. [ 1867.264603][ T6407] netlink: 'syz.6.9019': attribute type 1 has an invalid length. [ 1867.264683][ T6407] netlink: 'syz.6.9019': attribute type 1 has an invalid length. [ 1867.289229][ T6414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9021'. [ 1867.339648][ T2759] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 1867.546942][ T6423] netlink: 80 bytes leftover after parsing attributes in process `syz.8.9023'. [ 1867.552280][ T6423] netlink: 64 bytes leftover after parsing attributes in process `syz.8.9023'. [ 1867.667449][ T6425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1867.928225][ T5870] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1868.073486][ T5870] usb 1-1: Using ep0 maxpacket: 8 [ 1868.103935][ T5870] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1868.131219][ T5870] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1021 [ 1868.175728][ T5870] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1868.202885][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.238970][ T5870] usb 1-1: Product: syz [ 1868.275140][ T5870] usb 1-1: Manufacturer: syz [ 1868.307300][ T5870] usb 1-1: SerialNumber: syz [ 1869.060080][ T6440] mac80211_hwsim hwsim81 wlan0: entered promiscuous mode [ 1869.109186][ T6440] mac80211_hwsim hwsim81 wlan0: entered allmulticast mode [ 1870.276508][ T6451] FAULT_INJECTION: forcing a failure. [ 1870.276508][ T6451] name failslab, interval 1, probability 0, space 0, times 0 [ 1870.312752][ T6451] CPU: 0 UID: 0 PID: 6451 Comm: syz.7.9033 Tainted: G L syzkaller #0 PREEMPT(full) [ 1870.312782][ T6451] Tainted: [L]=SOFTLOCKUP [ 1870.312790][ T6451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1870.312801][ T6451] Call Trace: [ 1870.312808][ T6451] [ 1870.312816][ T6451] dump_stack_lvl+0xe8/0x150 [ 1870.312847][ T6451] should_fail_ex+0x40c/0x560 [ 1870.312871][ T6451] should_failslab+0xa8/0x100 [ 1870.312902][ T6451] __kmalloc_noprof+0xe8/0x750 [ 1870.312924][ T6451] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1870.312949][ T6451] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1870.312976][ T6451] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1870.313003][ T6451] genl_family_rcv_msg_doit+0xda/0x340 [ 1870.313026][ T6451] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1870.313052][ T6451] ? apparmor_capable+0x126/0x170 [ 1870.313075][ T6451] ? bpf_lsm_capable+0x9/0x20 [ 1870.313091][ T6451] ? security_capable+0x7e/0x2c0 [ 1870.313120][ T6451] genl_rcv_msg+0x614/0x7a0 [ 1870.313148][ T6451] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1870.313166][ T6451] ? __pfx_wg_set_device_doit+0x10/0x10 [ 1870.313338][ T6451] netlink_rcv_skb+0x226/0x4a0 [ 1870.313365][ T6451] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1870.313385][ T6451] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1870.313424][ T6451] ? down_read+0x270/0x2e0 [ 1870.313442][ T6451] ? genl_rcv+0xd/0x40 [ 1870.313462][ T6451] genl_rcv+0x28/0x40 [ 1870.313479][ T6451] netlink_unicast+0x7bb/0x940 [ 1870.313511][ T6451] netlink_sendmsg+0x813/0xb40 [ 1870.313545][ T6451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1870.313574][ T6451] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1870.313601][ T6451] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1870.313624][ T6451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1870.313650][ T6451] ____sys_sendmsg+0x9b9/0xa20 [ 1870.313677][ T6451] ? __might_fault+0xaf/0x130 [ 1870.313707][ T6451] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1870.313743][ T6451] ? import_iovec+0x73/0xa0 [ 1870.313768][ T6451] ___sys_sendmsg+0x2a5/0x360 [ 1870.313793][ T6451] ? __lock_acquire+0x683/0x2cd0 [ 1870.313816][ T6451] ? __pfx____sys_sendmsg+0x10/0x10 [ 1870.313863][ T6451] ? lockdep_hardirqs_on+0x7a/0x110 [ 1870.313913][ T6451] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1870.313943][ T6451] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1870.313978][ T6451] ? __pfx_ksys_write+0x10/0x10 [ 1870.314011][ T6451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1870.314033][ T6451] do_syscall_64+0x174/0x580 [ 1870.314051][ T6451] ? clear_bhb_loop+0x40/0x90 [ 1870.314072][ T6451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1870.314100][ T6451] RIP: 0033:0x7f1c9919ce59 [ 1870.314119][ T6451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1870.314136][ T6451] RSP: 002b:00007f1c99f9a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1870.314155][ T6451] RAX: ffffffffffffffda RBX: 00007f1c99415fa0 RCX: 00007f1c9919ce59 [ 1870.314169][ T6451] RDX: 0000000000000080 RSI: 0000200000001000 RDI: 0000000000000003 [ 1870.314181][ T6451] RBP: 00007f1c99f9a090 R08: 0000000000000000 R09: 0000000000000000 [ 1870.314192][ T6451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1870.314203][ T6451] R13: 00007f1c99416038 R14: 00007f1c99415fa0 R15: 00007f1c9953fa48 [ 1870.314233][ T6451] [ 1870.723495][ T5870] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1870.787421][ T5870] cdc_ncm 1-1:1.0: bind() failure [ 1870.841985][ T5870] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1870.865298][ T5870] cdc_ncm 1-1:1.1: bind() failure [ 1870.909383][ T5870] usb 1-1: USB disconnect, device number 80 [ 1870.927526][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9035'. [ 1871.027427][ T6465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1871.051821][ T6465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1871.285161][T20774] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1871.312665][ T6472] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.9038'. [ 1871.696933][ T6488] syzkaller0: entered promiscuous mode [ 1871.722507][ T6488] syzkaller0: entered allmulticast mode [ 1872.023768][T20774] usb 6-1: device descriptor read/64, error -71 [ 1872.133659][ T1503] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1872.353832][T20774] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1872.425739][ T1503] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1872.435244][ T1503] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.443776][ T1503] usb 1-1: Product: syz [ 1872.455059][ T1503] usb 1-1: Manufacturer: syz [ 1872.479734][ T1503] usb 1-1: SerialNumber: syz [ 1872.514297][ T1503] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1872.540982][ T5870] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1872.625714][T20774] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1872.654463][ T6516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1872.663235][ T6516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1872.663588][T20774] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1872.687485][T20774] usb 6-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1872.697721][ T6516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1872.707553][ T6517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1872.715161][T20774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1872.717391][ T6517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1872.763752][T25408] usb 1-1: USB disconnect, device number 81 [ 1872.777954][ T6516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1872.790907][T20774] usb 6-1: config 0 descriptor?? [ 1872.858343][ T6513] netlink: 'syz.8.9048': attribute type 2 has an invalid length. [ 1873.414324][T20774] hid-led 0003:1D34:000A.0079: unknown main item tag 0x3 [ 1873.567850][ T6527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1873.577830][ T6527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1873.593465][ T6528] fuse: Bad value for 'fd' [ 1873.615935][ T5870] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1873.623323][T20774] hid-led 0003:1D34:000A.0079: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.5-1/input0 [ 1873.635011][ T5870] ath9k_htc: Failed to initialize the device [ 1873.647216][T25408] usb 1-1: ath9k_htc: USB layer deinitialized [ 1873.686225][T20774] hid-led 0003:1D34:000A.0079: Dream Cheeky Webmail Notifier initialized [ 1873.813762][ T5869] usb 6-1: USB disconnect, device number 17 [ 1874.173287][T25408] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 1874.348246][T25408] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 1874.358706][T25408] usb 1-1: config 8 has an invalid descriptor of length 176, skipping remainder of the config [ 1874.370794][ T6538] netlink: zone id is out of range [ 1874.377481][ T6538] netlink: zone id is out of range [ 1874.383276][T25408] usb 1-1: config 8 has no interface number 0 [ 1874.405416][ T6538] netlink: zone id is out of range [ 1874.411652][T25408] usb 1-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1874.428783][ T6538] netlink: zone id is out of range [ 1874.434825][T25408] usb 1-1: config 8 interface 177 has no altsetting 0 [ 1874.444558][T25408] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1874.457732][T25408] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1874.470717][ T6538] netlink: set zone limit has 4 unknown bytes [ 1874.839776][T25408] usb 1-1: string descriptor 0 read error: -71 [ 1874.852864][T25408] ir_toy 1-1:8.177: required endpoints not found [ 1874.867511][T25408] usb 1-1: USB disconnect, device number 82 [ 1875.258962][ T6547] syzkaller0: entered promiscuous mode [ 1875.258985][ T6547] syzkaller0: entered allmulticast mode [ 1875.481103][ T6552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1875.490752][ T6552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1875.667636][ T5870] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 1875.747617][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1875.747633][ T29] audit: type=1800 audit(1781370899.793:10991): pid=6556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.9062" name="memory.events" dev="tmpfs" ino=916 res=0 errno=0 [ 1875.819175][ T29] audit: type=1804 audit(1781370899.823:10992): pid=6556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.9062" name="/newroot/171/memory.events" dev="tmpfs" ino=916 res=1 errno=0 [ 1876.088750][ T5870] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1876.109899][ T5870] usb 1-1: can't read configurations, error -71 [ 1876.125242][ T6565] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1876.221831][ T6567] netlink: 96 bytes leftover after parsing attributes in process `syz.8.9066'. [ 1876.599496][ T29] audit: type=1326 audit(1781370900.643:10993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.8.9069" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f182199ce59 code=0x0 [ 1877.006919][ T6590] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9074'. [ 1877.035703][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9069'. [ 1877.655157][ T6596] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9076'. [ 1877.720930][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9076'. [ 1877.889036][ T6601] loop4: detected capacity change from 0 to 7 [ 1877.939857][ T6601] Dev loop4: unable to read RDB block 7 [ 1878.003694][ T6601] loop4: unable to read partition table [ 1878.021349][ T6601] loop4: partition table beyond EOD, truncated [ 1878.050249][ T6601] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1878.142296][ T29] audit: type=1326 audit(1781370902.153:10994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm="syz.8.9081" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f182199ce59 code=0x0 [ 1878.407497][ T6614] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.9081'. [ 1878.585733][ T6577] vivid-000: kernel_thread() failed [ 1878.750472][ T6620] netlink: 6032 bytes leftover after parsing attributes in process `syz.6.9084'. [ 1879.190979][ T6623] netlink: 144 bytes leftover after parsing attributes in process `syz.6.9085'. [ 1879.459768][ T6636] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.9089'. [ 1879.673833][T20774] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1879.834763][T20774] usb 1-1: Using ep0 maxpacket: 16 [ 1879.844581][T20774] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1879.855991][T20774] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1879.862718][T20774] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1879.872483][T20774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.891420][T20774] usb 1-1: config 0 descriptor?? [ 1880.402135][T20774] nzxt-smart2 0003:1E71:2009.007A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1880.779338][T20774] usb 1-1: USB disconnect, device number 85 [ 1880.909562][ T6649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1880.925071][ T6649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1880.991671][ T6649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1881.002961][ T6649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1881.353342][T11229] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1881.513217][T11229] usb 1-1: Using ep0 maxpacket: 16 [ 1881.542647][T11229] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 1881.684366][ T6655] netlink: 6032 bytes leftover after parsing attributes in process `syz.8.9095'. [ 1881.829240][ T6658] fuse: Bad value for 'fd' [ 1881.889470][T11229] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1881.903293][T11229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.912446][T11229] usb 1-1: Product: syz [ 1881.917912][T11229] usb 1-1: Manufacturer: syz [ 1881.926987][T11229] usb 1-1: SerialNumber: syz [ 1882.019558][T11229] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1882.026614][T11229] r8152-cfgselector 1-1: config 0 descriptor?? [ 1882.326854][ T6652] netlink: 'syz.0.9094': attribute type 1 has an invalid length. [ 1882.360328][ T6652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1882.413941][ T6670] netlink: 96 bytes leftover after parsing attributes in process `syz.8.9099'. [ 1882.423013][ T6670] FAULT_INJECTION: forcing a failure. [ 1882.423013][ T6670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1882.438084][ T6670] CPU: 0 UID: 0 PID: 6670 Comm: syz.8.9099 Tainted: G L syzkaller #0 PREEMPT(full) [ 1882.438113][ T6670] Tainted: [L]=SOFTLOCKUP [ 1882.438126][ T6670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1882.438137][ T6670] Call Trace: [ 1882.438146][ T6670] [ 1882.438154][ T6670] dump_stack_lvl+0xe8/0x150 [ 1882.438181][ T6670] should_fail_ex+0x40c/0x560 [ 1882.438205][ T6670] _copy_to_user+0x31/0xb0 [ 1882.438230][ T6670] simple_read_from_buffer+0xe1/0x170 [ 1882.438258][ T6670] proc_fail_nth_read+0x1bb/0x230 [ 1882.438285][ T6670] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1882.438309][ T6670] ? rw_verify_area+0x24a/0x4c0 [ 1882.438332][ T6670] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1882.438354][ T6670] vfs_read+0x213/0xa80 [ 1882.438383][ T6670] ? __pfx___mutex_lock+0x10/0x10 [ 1882.438402][ T6670] ? __pfx_vfs_read+0x10/0x10 [ 1882.438426][ T6670] ? __fget_files+0x2a/0x420 [ 1882.438449][ T6670] ? __fget_files+0x3a2/0x420 [ 1882.438467][ T6670] ? __fget_files+0x2a/0x420 [ 1882.438494][ T6670] ksys_read+0x150/0x270 [ 1882.438518][ T6670] ? __pfx_ksys_read+0x10/0x10 [ 1882.438551][ T6670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1882.438570][ T6670] do_syscall_64+0x174/0x580 [ 1882.438588][ T6670] ? trace_irq_disable+0x3b/0x140 [ 1882.438614][ T6670] ? clear_bhb_loop+0x40/0x90 [ 1882.438636][ T6670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1882.438654][ T6670] RIP: 0033:0x7f182195d68e [ 1882.438672][ T6670] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1882.438687][ T6670] RSP: 002b:00007f18228a3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1882.438707][ T6670] RAX: ffffffffffffffda RBX: 00007f18228a46c0 RCX: 00007f182195d68e [ 1882.438721][ T6670] RDX: 000000000000000f RSI: 00007f18228a40a0 RDI: 0000000000000007 [ 1882.438732][ T6670] RBP: 00007f18228a4090 R08: 0000000000000000 R09: 0000000000000000 [ 1882.438744][ T6670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1882.438755][ T6670] R13: 00007f1821c16038 R14: 00007f1821c15fa0 R15: 00007f1821d3fa48 [ 1882.438785][ T6670] [ 1882.744370][T11229] r8152-cfgselector 1-1: USB disconnect, device number 86 [ 1883.011449][ T6682] fuse: Unknown parameter 'gs}@|Mx;E4ypYx0\p)BFJ}' [ 1883.223398][T20774] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1883.384279][T20774] usb 6-1: Using ep0 maxpacket: 32 [ 1883.398224][T20774] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1883.417274][T20774] usb 6-1: config 0 has no interface number 0 [ 1883.420511][ T6690] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.9106'. [ 1883.440095][T20774] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1883.459875][T20774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.487073][T20774] usb 6-1: Product: syz [ 1883.491919][T20774] usb 6-1: Manufacturer: syz [ 1883.510764][T20774] usb 6-1: SerialNumber: syz [ 1883.568862][T20774] usb 6-1: config 0 descriptor?? [ 1883.602277][T20774] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1883.808696][T20774] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1883.857960][T20774] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1884.340305][ T10] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1884.416611][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1884.425055][T20774] usb 6-1: USB disconnect, device number 18 [ 1884.467539][T20774] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1884.559196][T20774] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1884.593731][T20774] quatech2 6-1:0.51: device disconnected [ 1884.626610][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1884.644957][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1884.657658][ T10] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 255, using maximum allowed: 30 [ 1884.707503][ T10] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1884.743901][ T10] usb 1-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 1884.762954][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1884.786745][ T10] usb 1-1: Product: syz [ 1884.793584][ T10] usb 1-1: Manufacturer: syz [ 1884.798697][ T10] usb 1-1: SerialNumber: syz [ 1885.157717][ T6704] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9111'. [ 1885.518017][T20774] IPVS: starting estimator thread 0... [ 1885.528022][ T6713] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 1885.763803][ T6730] IPVS: using max 33 ests per chain, 79200 per kthread [ 1886.063588][ T6752] loop4: detected capacity change from 0 to 7 [ 1886.087247][ T6752] Dev loop4: unable to read RDB block 7 [ 1886.099249][ T6752] loop4: unable to read partition table [ 1886.105192][ T6752] loop4: partition table beyond EOD, truncated [ 1886.125798][ T6757] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.9119'. [ 1886.151268][ T10] usb 1-1: 0:2 : does not exist [ 1886.187446][ T6752] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1886.324439][ T6754] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9115'. [ 1886.495482][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1886.593051][ T6766] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9122'. [ 1886.612043][ T5044] udevd[5044]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1886.612322][ T10] usb 1-1: USB disconnect, device number 87 [ 1886.767947][ T6771] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9125'. [ 1887.351869][T20774] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1887.373505][ T5870] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1887.523417][ T5870] usb 1-1: device descriptor read/64, error -71 [ 1887.533992][T20774] usb 6-1: too many configurations: 30, using maximum allowed: 8 [ 1887.568394][T20774] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1887.583342][T20774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.599354][T20774] usb 6-1: Product: syz [ 1887.603934][T20774] usb 6-1: Manufacturer: syz [ 1887.608575][T20774] usb 6-1: SerialNumber: syz [ 1887.619477][T20774] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1887.658542][ T5869] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1887.783492][ T5870] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1887.902379][ T6778] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9126'. [ 1887.933569][ T5870] usb 1-1: device descriptor read/64, error -71 [ 1888.657317][T20774] usb 6-1: USB disconnect, device number 19 [ 1888.723352][ T5869] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1888.748364][ T5869] ath9k_htc: Failed to initialize the device [ 1888.754899][ T5870] usb usb1-port1: attempt power cycle [ 1888.783242][T20774] usb 6-1: ath9k_htc: USB layer deinitialized [ 1888.984139][ T6782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1888.995011][ T6782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1889.113170][ T5870] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1889.134745][ T5870] usb 1-1: device descriptor read/8, error -71 [ 1889.373458][ T5870] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1889.404099][ T5870] usb 1-1: device descriptor read/8, error -71 [ 1889.517951][ T5870] usb usb1-port1: unable to enumerate USB device [ 1890.302288][ T6810] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.9136'. [ 1891.029587][ T6826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1891.051680][ T6826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1891.061744][ T6823] 8021q: VLANs not supported on ip_vti0 [ 1891.112940][ T6823] syzkaller0: entered promiscuous mode [ 1891.118830][ T6823] syzkaller0: entered allmulticast mode [ 1891.145148][ T4131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1891.155177][ T6823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1893.687356][ T6861] netlink: 'syz.7.9151': attribute type 5 has an invalid length. [ 1893.779807][ T6861] loop9: detected capacity change from 0 to 8 [ 1893.869597][ T6861] loop9: detected capacity change from 8 to 7 [ 1893.890535][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1893.899791][ C1] buffer_io_error: 32 callbacks suppressed [ 1893.899807][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1893.915399][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1893.924641][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1893.949933][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1893.960228][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1894.013156][ T6873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9154'. [ 1894.018262][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1894.031250][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1894.035696][ T6873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9154'. [ 1894.059333][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1894.080606][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1894.116252][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1894.125415][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1894.143305][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1894.152575][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1894.180366][ T6861] ldm_validate_partition_table(): Disk read failed. [ 1894.211579][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1894.220830][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1894.239649][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1894.248830][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1894.256923][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1894.266065][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1894.288569][ T6861] Dev loop9: unable to read RDB block 0 [ 1894.340307][ T6861] loop9: unable to read partition table [ 1894.352021][ T6861] loop9: partition table beyond EOD, truncated [ 1894.360683][ T6861] loop_reread_partitions: partition scan of loop9 (|LCTn1`BPY 꽡7=ݥ4ɫ,߸MyV4!4) failed (rc=-5) [ 1894.406175][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1894.451347][ T5000] ldm_validate_partition_table(): Disk read failed. [ 1894.475791][ T5000] Dev loop9: unable to read RDB block 0 [ 1894.486507][ T5000] loop9: unable to read partition table [ 1894.511834][ T5000] loop9: partition table beyond EOD, truncated [ 1894.783154][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1894.794520][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1894.810707][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1894.822638][ T10] usb 6-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 1894.834797][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1894.869307][ T10] usb 6-1: config 0 descriptor?? [ 1895.147080][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 1895.182864][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1895.216514][ T10] usb 6-1: USB disconnect, device number 20 [ 1895.241996][ T6872] tipc: Enabling not permitted [ 1895.260458][ T6872] tipc: Enabling of bearer rejected, failed to enable media [ 1895.939403][ T6912] loop5: detected capacity change from 0 to 7 [ 1895.953300][ T6912] loop5: p1 < > p3 p4 [ 1895.994168][ T6912] loop5: partition table partially beyond EOD, truncated [ 1896.432745][ T6916] dvmrp0: entered allmulticast mode [ 1896.839677][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9171'. [ 1896.919527][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9171'. [ 1897.473250][ T5870] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1897.627558][ T5000] loop5: p1 < > p3 p4 [ 1897.631688][ T5000] loop5: partition table partially beyond EOD, truncated [ 1897.649823][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 1897.662641][ T5870] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1897.689698][ T5870] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1897.711200][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9174'. [ 1897.722332][ T5870] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1897.722363][ T5870] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1897.722385][ T5870] usb 1-1: Product: syz [ 1897.722401][ T5870] usb 1-1: Manufacturer: syz [ 1897.776385][ T6938] ip6tnl2: entered allmulticast mode [ 1897.792436][ T5870] hub 1-1:4.0: USB hub found [ 1897.982092][ T5870] hub 1-1:4.0: 2 ports detected [ 1898.012485][ T5000] loop5: p1 < > p3 p4 [ 1898.017762][ T5000] loop5: partition table partially beyond EOD, truncated [ 1898.047819][ T29] audit: type=1326 audit(1781370922.093:10995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.6.9176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcd8459ce59 code=0x0 [ 1898.217828][ T6944] tipc: Started in network mode [ 1898.224309][ T6944] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 1898.235319][ T6944] tipc: Enabled bearer , priority 10 [ 1898.494554][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1898.755576][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1898.767329][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1898.780287][ T10] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1898.795228][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1898.805510][ T10] usb 6-1: Product: syz [ 1898.810232][ T10] usb 6-1: Manufacturer: syz [ 1898.815535][ T10] usb 6-1: SerialNumber: syz [ 1899.194377][ T5870] hub 1-1:4.0: activate --> -90 [ 1899.351350][T20774] tipc: Node number set to 10005162 [ 1899.448682][ T6960] Cannot find add_set index 0 as target [ 1899.688413][ T5000] loop5: p1 < > p3 p4 [ 1899.692545][ T5000] loop5: partition table partially beyond EOD, truncated [ 1899.886830][ T10] usb 6-1: unit 4 not found! [ 1899.917027][ T6967] syzkaller0: entered promiscuous mode [ 1899.922673][ T6967] syzkaller0: entered allmulticast mode [ 1899.935038][ T10] usb 6-1: USB disconnect, device number 21 [ 1899.976847][ T5044] udevd[5044]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1900.480232][ T10] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1900.743727][T25408] usb 1-1: USB disconnect, device number 92 [ 1900.760147][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1900.785873][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 1900.809471][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1900.842594][ T10] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1900.864592][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1900.884707][ T10] usb 6-1: Product: syz [ 1900.895775][ T10] usb 6-1: Manufacturer: syz [ 1900.906196][ T10] usb 6-1: SerialNumber: syz [ 1901.287762][ T6986] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1901.353328][ T5870] usb 1-1: new low-speed USB device number 93 using dummy_hcd [ 1901.525990][ T5870] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1901.536373][ T5870] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1901.548827][ T5870] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1901.560414][ T5870] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1901.589635][ T5870] usb 1-1: string descriptor 0 read error: -22 [ 1901.599485][ T5870] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 1901.609055][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.771597][ T6994] netlink: 45 bytes leftover after parsing attributes in process `syz.8.9193'. [ 1901.793589][ T29] audit: type=1326 audit(1781370925.843:10996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6993 comm="syz.8.9193" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f182199ce59 code=0x0 [ 1901.886254][T20774] usb 1-1: USB disconnect, device number 93 [ 1901.944616][ T6997] Cannot find add_set index 4 as target [ 1902.272724][ T7010] fuse: Bad value for 'rootmode' [ 1902.657425][ T7014] fuse: Unknown parameter 'r' [ 1902.665940][ T7014] netlink: 'syz.0.9198': attribute type 4 has an invalid length. [ 1902.733735][ T7015] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9198'. [ 1902.963565][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1902.992094][ T5000] loop5: p1 < > p3 p4 [ 1902.996213][ T5000] loop5: partition table partially beyond EOD, truncated [ 1903.092638][ T7023] netlink: 96 bytes leftover after parsing attributes in process `syz.5.9201'. [ 1903.212301][ T10] usb 6-1: USB disconnect, device number 22 [ 1903.828747][ T7045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1903.839340][ T7045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1904.391629][ T5000] loop5: p1 < > p3 p4 [ 1904.409213][ T5000] loop5: partition table partially beyond EOD, truncated [ 1904.666433][ T7073] netlink: 96 bytes leftover after parsing attributes in process `syz.5.9215'. [ 1904.685847][ T5000] loop5: p1 < > p3 p4 [ 1904.693093][ T5000] loop5: partition table partially beyond EOD, truncated [ 1904.754769][ T5000] loop5: p1 < > p3 p4 [ 1904.758903][ T5000] loop5: partition table partially beyond EOD, truncated [ 1906.151067][ T7101] sysfs: cannot create duplicate filename '/class/ieee80211/1^!00000000000000000005' [ 1906.212862][ T7101] CPU: 1 UID: 0 PID: 7101 Comm: syz.7.9222 Tainted: G L syzkaller #0 PREEMPT(full) [ 1906.212897][ T7101] Tainted: [L]=SOFTLOCKUP [ 1906.212906][ T7101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1906.212919][ T7101] Call Trace: [ 1906.212928][ T7101] [ 1906.212939][ T7101] dump_stack_lvl+0xe8/0x150 [ 1906.212970][ T7101] sysfs_warn_dup+0x8e/0xa0 [ 1906.213001][ T7101] sysfs_do_create_link_sd+0xc0/0x110 [ 1906.213028][ T7101] device_add_class_symlinks+0x1cf/0x240 [ 1906.213065][ T7101] device_add+0x467/0xb90 [ 1906.213096][ T7101] wiphy_register+0x1dca/0x2de0 [ 1906.213134][ T7101] ? __pfx_wiphy_register+0x10/0x10 [ 1906.213157][ T7101] ? __pfx_netdev_run_todo+0x10/0x10 [ 1906.213178][ T7101] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1906.213221][ T7101] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1906.213261][ T7101] ieee80211_register_hw+0x3d58/0x4a40 [ 1906.213299][ T7101] ? ieee80211_register_hw+0x18c1/0x4a40 [ 1906.213348][ T7101] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1906.213375][ T7101] ? __asan_memset+0x22/0x50 [ 1906.213401][ T7101] ? __hrtimer_setup+0x1b7/0x260 [ 1906.213426][ T7101] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1906.213453][ T7101] mac80211_hwsim_new_radio+0x2ff9/0x5390 [ 1906.213512][ T7101] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1906.213543][ T7101] ? __asan_memcpy+0x40/0x70 [ 1906.213570][ T7101] ? kstrndup+0xbd/0x160 [ 1906.213592][ T7101] hwsim_new_radio_nl+0xf63/0x1c00 [ 1906.213646][ T7101] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1906.213686][ T7101] ? rcu_is_watching+0x15/0xb0 [ 1906.213710][ T7101] ? trace_kmalloc+0x2a/0xf0 [ 1906.213744][ T7101] ? __nla_parse+0x40/0x60 [ 1906.213775][ T7101] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1906.213799][ T7101] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1906.213830][ T7101] genl_family_rcv_msg_doit+0x233/0x340 [ 1906.213861][ T7101] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1906.213898][ T7101] ? bpf_lsm_capable+0x9/0x20 [ 1906.213918][ T7101] ? security_capable+0x7e/0x2c0 [ 1906.213952][ T7101] genl_rcv_msg+0x614/0x7a0 [ 1906.213983][ T7101] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1906.214005][ T7101] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1906.214049][ T7101] netlink_rcv_skb+0x226/0x4a0 [ 1906.214078][ T7101] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1906.214102][ T7101] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1906.214148][ T7101] ? down_read+0x270/0x2e0 [ 1906.214169][ T7101] ? genl_rcv+0xd/0x40 [ 1906.214193][ T7101] genl_rcv+0x28/0x40 [ 1906.214221][ T7101] netlink_unicast+0x7bb/0x940 [ 1906.214260][ T7101] netlink_sendmsg+0x813/0xb40 [ 1906.214301][ T7101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1906.214335][ T7101] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1906.214367][ T7101] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1906.214392][ T7101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1906.214424][ T7101] ____sys_sendmsg+0x9b9/0xa20 [ 1906.214455][ T7101] ? __might_fault+0xaf/0x130 [ 1906.214488][ T7101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1906.214529][ T7101] ? import_iovec+0x73/0xa0 [ 1906.214558][ T7101] ___sys_sendmsg+0x2a5/0x360 [ 1906.214588][ T7101] ? __lock_acquire+0x683/0x2cd0 [ 1906.214614][ T7101] ? __pfx____sys_sendmsg+0x10/0x10 [ 1906.214652][ T7101] ? futex_wait+0x2a2/0x390 [ 1906.214707][ T7101] ? __fget_files+0x2a/0x420 [ 1906.214732][ T7101] ? __fget_files+0x3a2/0x420 [ 1906.214766][ T7101] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1906.214800][ T7101] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1906.214842][ T7101] ? rcu_is_watching+0x15/0xb0 [ 1906.214876][ T7101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.214899][ T7101] do_syscall_64+0x174/0x580 [ 1906.214919][ T7101] ? trace_irq_disable+0x3b/0x140 [ 1906.214949][ T7101] ? clear_bhb_loop+0x40/0x90 [ 1906.214974][ T7101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.214995][ T7101] RIP: 0033:0x7f1c9919ce59 [ 1906.215016][ T7101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1906.215034][ T7101] RSP: 002b:00007f1c99f79028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1906.215057][ T7101] RAX: ffffffffffffffda RBX: 00007f1c99416090 RCX: 00007f1c9919ce59 [ 1906.215073][ T7101] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000005 [ 1906.215087][ T7101] RBP: 00007f1c99232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1906.215102][ T7101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1906.215114][ T7101] R13: 00007f1c99416128 R14: 00007f1c99416090 R15: 00007f1c9953fa48 [ 1906.215149][ T7101] [ 1906.991113][ T5000] loop5: p1 < > p3 p4 [ 1906.995322][ T5000] loop5: partition table partially beyond EOD, truncated [ 1907.211428][ T5000] loop5: p1 < > p3 p4 [ 1907.228150][ T5000] loop5: partition table partially beyond EOD, truncated [ 1908.183693][ T5870] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1908.370141][ T5870] usb 6-1: not running at top speed; connect to a high speed hub [ 1908.413386][ T5870] usb 6-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 1908.450031][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.479398][ T5870] usb 6-1: Product: syz [ 1908.501343][ T5870] usb 6-1: Manufacturer: syz [ 1908.516214][ T5870] usb 6-1: SerialNumber: syz [ 1911.142027][ T7138] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9231'. [ 1911.999218][ T5870] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1912.041864][ T5870] usb 6-1: MIDIStreaming interface descriptor not found [ 1912.221465][ T5000] loop5: p1 < > p3 p4 [ 1912.301939][ T5870] usb 6-1: USB disconnect, device number 23 [ 1912.344999][ T5000] loop5: partition table partially beyond EOD, truncated [ 1912.537969][ T7151] syzkaller1: entered promiscuous mode [ 1912.565746][ T7151] syzkaller1: entered allmulticast mode [ 1912.719616][ T7036] udevd[7036]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1913.092579][ T5000] loop5: p1 < > p3 p4 [ 1913.106279][ T5000] loop5: partition table partially beyond EOD, truncated [ 1913.218855][ T7162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1913.316992][ T7162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1913.342502][ T5000] loop5: p1 < > p3 p4 [ 1913.360306][ T5000] loop5: partition table partially beyond EOD, truncated [ 1913.507252][ T7165] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9241'. [ 1914.231960][ T5000] loop5: p1 < > p3 p4 [ 1914.241038][ T5000] loop5: partition table partially beyond EOD, truncated [ 1914.417777][ T10] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1914.485783][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.493451][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.643966][T11229] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1914.807909][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1914.820869][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1914.857418][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1914.867159][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1914.876960][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1914.923072][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1914.967943][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1914.977016][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1915.216437][T11229] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1915.240831][T11229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1915.263331][T11229] usb 6-1: config 0 descriptor?? [ 1915.289321][T11229] cp210x 6-1:0.0: cp210x converter detected [ 1916.391325][ T5000] loop5: p1 < > p3 p4 [ 1916.406779][T11229] cp210x 6-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 1916.415465][ T5000] loop5: partition table partially beyond EOD, truncated [ 1916.477559][T11229] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 1916.589503][T11229] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1916.642650][T11229] usb 6-1: USB disconnect, device number 24 [ 1916.718871][T11229] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1916.854917][T11229] cp210x 6-1:0.0: device disconnected [ 1917.412422][ T5870] usb 1-1: USB disconnect, device number 94 [ 1918.066756][ T7194] cgroup: fork rejected by pids controller in /syz0 [ 1918.279934][ T7197] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[7206] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[7197] [ 1918.325288][ T29] audit: type=1800 audit(1781370942.343:10997): pid=7197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.9245" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1919.008530][ T7309] fuse: Bad value for 'rootmode' [ 1919.014344][ T7308] fuse: Bad value for 'rootmode' [ 1923.797495][ T5000] loop5: p1 < > p3 p4 [ 1923.801633][ T5000] loop5: partition table partially beyond EOD, truncated [ 1924.198586][ T5000] loop5: p1 < > p3 p4 [ 1924.210745][ T5000] loop5: partition table partially beyond EOD, truncated [ 1924.238456][ T7323] netlink: 'syz.7.9254': attribute type 1 has an invalid length. [ 1924.259868][ T7323] netlink: 256 bytes leftover after parsing attributes in process `syz.7.9254'. [ 1924.310328][ T7325] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9255'. [ 1924.326159][ T7327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1924.375616][ T7327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1925.269016][T30717] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1925.302049][T11229] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1925.313221][T30717] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1925.324417][T30717] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1925.334391][T30717] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1925.342688][T30717] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1925.391296][ T4129] team0: Port device netdevsim1 removed [ 1925.508187][ T7344] syzkaller0: entered promiscuous mode [ 1925.530953][ T7344] syzkaller0: entered allmulticast mode [ 1925.786433][ T29] audit: type=1326 audit(1781370949.833:10998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.6.9261" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8459ce59 code=0x7ffc0000 [ 1925.814866][ T29] audit: type=1326 audit(1781370949.853:10999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.6.9261" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcd8459ce59 code=0x7ffc0000 [ 1925.911262][ T29] audit: type=1326 audit(1781370949.853:11000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.6.9261" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8459ce59 code=0x7ffc0000 [ 1925.970405][T11229] usb 6-1: Using ep0 maxpacket: 8 [ 1925.993420][ T29] audit: type=1326 audit(1781370949.853:11001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.6.9261" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fcd8459ce59 code=0x7ffc0000 [ 1926.049535][ T29] audit: type=1326 audit(1781370949.853:11002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.6.9261" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8459ce59 code=0x7ffc0000 [ 1926.145530][ T29] audit: type=1326 audit(1781370949.853:11003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.6.9261" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcd8459ce59 code=0x7ffc0000 [ 1926.209419][ T4129] bridge_slave_1: left allmulticast mode [ 1926.213478][ T29] audit: type=1326 audit(1781370949.853:11004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.6.9261" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8459ce59 code=0x7ffc0000 [ 1926.215091][ T4129] bridge_slave_1: left promiscuous mode [ 1926.215305][ T4129] bridge0: port 2(bridge_slave_1) entered disabled state [ 1926.286485][ T29] audit: type=1326 audit(1781370949.863:11005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.6.9261" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcd8459ce59 code=0x7ffc0000 [ 1926.343715][ T7362] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1926.349345][ T4129] bridge_slave_0: left allmulticast mode [ 1926.350263][ T7362] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1926.355901][ T4129] bridge_slave_0: left promiscuous mode [ 1926.366799][ T29] audit: type=1326 audit(1781370949.863:11006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.6.9261" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8459ce59 code=0x7ffc0000 [ 1926.369114][ T4129] bridge0: port 1(bridge_slave_0) entered disabled state [ 1926.395613][ T7362] vhci_hcd vhci_hcd.0: Device attached [ 1926.404208][ T29] audit: type=1326 audit(1781370949.863:11007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.6.9261" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8459ce59 code=0x7ffc0000 [ 1926.633120][ T5870] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1926.744416][T11229] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1926.765417][T11229] usb 6-1: config 4 has an invalid interface number: 163 but max is 0 [ 1926.783251][T11229] usb 6-1: config 4 has no interface number 0 [ 1926.789405][T11229] usb 6-1: config 4 interface 163 has no altsetting 0 [ 1926.923289][T11229] usb 6-1: New USB device found, idVendor=106c, idProduct=caa3, bcdDevice=49.b0 [ 1926.935789][T11229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.945082][T11229] usb 6-1: Product: syz [ 1926.949541][T11229] usb 6-1: Manufacturer: syz [ 1926.954758][T11229] usb 6-1: SerialNumber: syz [ 1926.992296][ T4129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1927.012829][ T4129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1927.025599][ T4129] bond0 (unregistering): Released all slaves [ 1927.101239][ T5296] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1927.235721][ T7345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1927.243330][ T7345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1927.250586][ T7345] bridge_slave_0: entered allmulticast mode [ 1927.257785][ T7345] bridge_slave_0: entered promiscuous mode [ 1927.268172][ T7345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1927.279390][ T7345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1927.288607][ T7345] bridge_slave_1: entered allmulticast mode [ 1927.296921][ T7345] bridge_slave_1: entered promiscuous mode [ 1927.443126][T30717] Bluetooth: hci3: command tx timeout [ 1927.481732][ T7345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1927.571573][ T7345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1927.634782][ T7383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1927.654518][ T7383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1927.667803][ T7383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1927.685750][ T7383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1927.701517][ T7345] team0: Port device team_slave_0 added [ 1927.717815][ T7345] team0: Port device team_slave_1 added [ 1927.742722][T11229] qmi_wwan 6-1:4.163: bogus CDC Union: master=0, slave=0 [ 1927.766285][ T5000] loop5: p1 < > p3 p4 [ 1927.779268][ T5000] loop5: partition table partially beyond EOD, truncated [ 1927.807029][ T4129] hsr_slave_0: left promiscuous mode [ 1927.828991][ T4129] hsr_slave_1: left promiscuous mode [ 1927.848227][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1927.876873][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1927.932180][ T5000] loop5: p1 < > p3 p4 [ 1927.944232][ T5000] loop5: partition table partially beyond EOD, truncated [ 1928.078727][T11229] qmi_wwan 6-1:4.163: probe with driver qmi_wwan failed with error -22 [ 1928.117103][T11229] usb 6-1: USB disconnect, device number 25 [ 1928.750500][ T4129] team0 (unregistering): Port device team_slave_1 removed [ 1928.878390][ T4129] team0 (unregistering): Port device team_slave_0 removed [ 1929.234386][ T5296] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1929.293775][ T7345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1929.329742][ T7345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1929.391626][ T7423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1929.404265][ T7345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1929.419661][ T7423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1929.442843][ T7345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1929.485354][ T7363] vhci_hcd: connection reset by peer [ 1929.510212][ T7345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1929.526362][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9273'. [ 1929.566924][T30717] Bluetooth: hci3: command tx timeout [ 1929.574616][ T4131] vhci_hcd vhci_hcd.6: stop threads [ 1929.605843][ T4131] vhci_hcd vhci_hcd.6: release socket [ 1929.624327][ T4131] vhci_hcd vhci_hcd.6: disconnect device [ 1929.645050][ T7345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1929.718622][ T7428] [ 1929.720982][ T7428] ===================================================== [ 1929.727937][ T7428] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1929.735527][ T7428] syzkaller #0 Tainted: G L [ 1929.741492][ T7428] ----------------------------------------------------- [ 1929.748441][ T7428] syz.6.9274/7428 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1929.756113][ T7428] ffff8880552e8360 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1929.764873][ T7428] [ 1929.764873][ T7428] and this task is already holding: [ 1929.772219][ T7428] ffff888029ebf028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xcb/0xc00 [ 1929.782042][ T7428] which would create a new lock dependency: [ 1929.787910][ T7428] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1929.796038][ T7428] [ 1929.796038][ T7428] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1929.805489][ T7428] (&client->buffer_lock){..-.}-{3:3} [ 1929.805512][ T7428] [ 1929.805512][ T7428] ... which became SOFTIRQ-irq-safe at: [ 1929.818538][ T7428] lock_acquire+0x106/0x350 [ 1929.823145][ T7428] _raw_spin_lock+0x2e/0x40 [ 1929.827733][ T7428] evdev_pass_values+0xcb/0xc00 [ 1929.832653][ T7428] evdev_events+0x1e6/0x340 [ 1929.837253][ T7428] input_pass_values+0x288/0x890 [ 1929.842338][ T7428] input_event_dispose+0x330/0x6b0 [ 1929.847523][ T7428] input_event+0x84/0xc0 [ 1929.851841][ T7428] aiptek_irq+0x18b9/0x28a0 [ 1929.856505][ T7428] __usb_hcd_giveback_urb+0x374/0x530 [ 1929.862007][ T7428] dummy_timer+0xac3/0x4b40 [ 1929.866600][ T7428] __hrtimer_run_queues+0x3bc/0xa10 [ 1929.872321][ T7428] hrtimer_run_softirq+0x17a/0x240 [ 1929.877517][ T7428] handle_softirqs+0x225/0x840 [ 1929.882357][ T7428] __irq_exit_rcu+0xca/0x220 [ 1929.887027][ T7428] irq_exit_rcu+0x9/0x30 [ 1929.891356][ T7428] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1929.897082][ T7428] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1929.903143][ T7428] lock_is_held_type+0x106/0x150 [ 1929.908157][ T7428] xas_start+0x295/0x770 [ 1929.912572][ T7428] xas_load+0x2c/0x5a0 [ 1929.916730][ T7428] xa_load+0x118/0x210 [ 1929.920875][ T7428] memcg_list_lru_alloc+0x13d/0x800 [ 1929.926161][ T7428] __memcg_slab_post_alloc_hook+0x395/0xe60 [ 1929.932140][ T7428] kmem_cache_alloc_lru_noprof+0x342/0x640 [ 1929.938028][ T7428] shmem_alloc_inode+0x28/0x40 [ 1929.942877][ T7428] alloc_inode+0x6a/0x1b0 [ 1929.947289][ T7428] new_inode+0x1f/0x170 [ 1929.951527][ T7428] shmem_get_inode+0x3b6/0xfc0 [ 1929.956375][ T7428] shmem_symlink+0xa2/0x460 [ 1929.960964][ T7428] vfs_symlink+0x18b/0x330 [ 1929.965463][ T7428] filename_symlinkat+0x1cd/0x410 [ 1929.970568][ T7428] __se_sys_symlinkat+0x4e/0x2b0 [ 1929.975585][ T7428] do_syscall_64+0x174/0x580 [ 1929.980261][ T7428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1929.986254][ T7428] [ 1929.986254][ T7428] to a SOFTIRQ-irq-unsafe lock: [ 1929.993345][ T7428] (tasklist_lock){.+.+}-{3:3} [ 1929.993375][ T7428] [ 1929.993375][ T7428] ... which became SOFTIRQ-irq-unsafe at: [ 1930.005987][ T7428] ... [ 1930.005997][ T7428] lock_acquire+0x106/0x350 [ 1930.013150][ T7428] _raw_read_lock+0x36/0x50 [ 1930.017749][ T7428] __do_wait+0xd9/0x720 [ 1930.021986][ T7428] do_wait+0x1e7/0x510 [ 1930.026135][ T7428] kernel_wait+0xd6/0x1c0 [ 1930.030555][ T7428] call_usermodehelper_exec_work+0xbe/0x230 [ 1930.036540][ T7428] process_scheduled_works+0xa8e/0x14e0 [ 1930.042170][ T7428] worker_thread+0xa47/0xfb0 [ 1930.046840][ T7428] kthread+0x389/0x470 [ 1930.050993][ T7428] ret_from_fork+0x514/0xb70 [ 1930.055664][ T7428] ret_from_fork_asm+0x1a/0x30 [ 1930.060527][ T7428] [ 1930.060527][ T7428] other info that might help us debug this: [ 1930.060527][ T7428] [ 1930.070752][ T7428] Chain exists of: [ 1930.070752][ T7428] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 1930.070752][ T7428] [ 1930.083949][ T7428] Possible interrupt unsafe locking scenario: [ 1930.083949][ T7428] [ 1930.092315][ T7428] CPU0 CPU1 [ 1930.097667][ T7428] ---- ---- [ 1930.103074][ T7428] lock(tasklist_lock); [ 1930.107313][ T7428] local_irq_disable(); [ 1930.114050][ T7428] lock(&client->buffer_lock); [ 1930.121462][ T7428] lock(&new->fa_lock); [ 1930.128213][ T7428] [ 1930.131704][ T7428] lock(&client->buffer_lock); [ 1930.136757][ T7428] [ 1930.136757][ T7428] *** DEADLOCK *** [ 1930.136757][ T7428] [ 1930.144888][ T7428] 7 locks held by syz.6.9274/7428: [ 1930.150072][ T7428] #0: ffff88802b6fe110 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 1930.159271][ T7428] #1: ffff88801ff50230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa4/0x330 [ 1930.169381][ T7428] #2: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb5/0x330 [ 1930.179067][ T7428] #3: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1930.188666][ T7428] #4: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1930.197811][ T7428] #5: ffff888029ebf028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xcb/0xc00 [ 1930.207990][ T7428] #6: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1930.217046][ T7428] [ 1930.217046][ T7428] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1930.227439][ T7428] -> (&client->buffer_lock){..-.}-{3:3} { [ 1930.233166][ T7428] IN-SOFTIRQ-W at: [ 1930.237227][ T7428] lock_acquire+0x106/0x350 [ 1930.243377][ T7428] _raw_spin_lock+0x2e/0x40 [ 1930.249524][ T7428] evdev_pass_values+0xcb/0xc00 [ 1930.256023][ T7428] evdev_events+0x1e6/0x340 [ 1930.262165][ T7428] input_pass_values+0x288/0x890 [ 1930.268749][ T7428] input_event_dispose+0x330/0x6b0 [ 1930.275504][ T7428] input_event+0x84/0xc0 [ 1930.281395][ T7428] aiptek_irq+0x18b9/0x28a0 [ 1930.287551][ T7428] __usb_hcd_giveback_urb+0x374/0x530 [ 1930.294569][ T7428] dummy_timer+0xac3/0x4b40 [ 1930.300724][ T7428] __hrtimer_run_queues+0x3bc/0xa10 [ 1930.307566][ T7428] hrtimer_run_softirq+0x17a/0x240 [ 1930.314324][ T7428] handle_softirqs+0x225/0x840 [ 1930.320730][ T7428] __irq_exit_rcu+0xca/0x220 [ 1930.326962][ T7428] irq_exit_rcu+0x9/0x30 [ 1930.332847][ T7428] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1930.340131][ T7428] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1930.347849][ T7428] lock_is_held_type+0x106/0x150 [ 1930.354429][ T7428] xas_start+0x295/0x770 [ 1930.360329][ T7428] xas_load+0x2c/0x5a0 [ 1930.366064][ T7428] xa_load+0x118/0x210 [ 1930.371780][ T7428] memcg_list_lru_alloc+0x13d/0x800 [ 1930.378639][ T7428] __memcg_slab_post_alloc_hook+0x395/0xe60 [ 1930.386185][ T7428] kmem_cache_alloc_lru_noprof+0x342/0x640 [ 1930.393638][ T7428] shmem_alloc_inode+0x28/0x40 [ 1930.400050][ T7428] alloc_inode+0x6a/0x1b0 [ 1930.406019][ T7428] new_inode+0x1f/0x170 [ 1930.411818][ T7428] shmem_get_inode+0x3b6/0xfc0 [ 1930.418228][ T7428] shmem_symlink+0xa2/0x460 [ 1930.424375][ T7428] vfs_symlink+0x18b/0x330 [ 1930.430432][ T7428] filename_symlinkat+0x1cd/0x410 [ 1930.437096][ T7428] __se_sys_symlinkat+0x4e/0x2b0 [ 1930.443675][ T7428] do_syscall_64+0x174/0x580 [ 1930.449905][ T7428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1930.457440][ T7428] INITIAL USE at: [ 1930.461337][ T7428] lock_acquire+0x106/0x350 [ 1930.467398][ T7428] _raw_spin_lock+0x2e/0x40 [ 1930.473463][ T7428] evdev_pass_values+0xcb/0xc00 [ 1930.479869][ T7428] evdev_events+0x1e6/0x340 [ 1930.485928][ T7428] input_pass_values+0x288/0x890 [ 1930.492430][ T7428] input_event_dispose+0x330/0x6b0 [ 1930.499107][ T7428] input_inject_event+0x1dd/0x330 [ 1930.505689][ T7428] evdev_write+0x325/0x4c0 [ 1930.511659][ T7428] vfs_write+0x296/0xba0 [ 1930.517463][ T7428] ksys_write+0x150/0x270 [ 1930.523352][ T7428] do_syscall_64+0x174/0x580 [ 1930.529495][ T7428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1930.536945][ T7428] } [ 1930.539432][ T7428] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1930.547696][ T7428] [ 1930.547696][ T7428] the dependencies between the lock to be acquired [ 1930.547706][ T7428] and SOFTIRQ-irq-unsafe lock: [ 1930.561200][ T7428] -> (tasklist_lock){.+.+}-{3:3} { [ 1930.566495][ T7428] HARDIRQ-ON-R at: [ 1930.570640][ T7428] lock_acquire+0x106/0x350 [ 1930.577136][ T7428] _raw_read_lock+0x36/0x50 [ 1930.583723][ T7428] __do_wait+0xd9/0x720 [ 1930.589876][ T7428] do_wait+0x1e7/0x510 [ 1930.595936][ T7428] kernel_wait+0xd6/0x1c0 [ 1930.602258][ T7428] call_usermodehelper_exec_work+0xbe/0x230 [ 1930.610145][ T7428] process_scheduled_works+0xa8e/0x14e0 [ 1930.617682][ T7428] worker_thread+0xa47/0xfb0 [ 1930.624262][ T7428] kthread+0x389/0x470 [ 1930.630323][ T7428] ret_from_fork+0x514/0xb70 [ 1930.637429][ T7428] ret_from_fork_asm+0x1a/0x30 [ 1930.644186][ T7428] SOFTIRQ-ON-R at: [ 1930.648334][ T7428] lock_acquire+0x106/0x350 [ 1930.654825][ T7428] _raw_read_lock+0x36/0x50 [ 1930.661322][ T7428] __do_wait+0xd9/0x720 [ 1930.667477][ T7428] do_wait+0x1e7/0x510 [ 1930.673536][ T7428] kernel_wait+0xd6/0x1c0 [ 1930.679865][ T7428] call_usermodehelper_exec_work+0xbe/0x230 [ 1930.687753][ T7428] process_scheduled_works+0xa8e/0x14e0 [ 1930.695289][ T7428] worker_thread+0xa47/0xfb0 [ 1930.701866][ T7428] kthread+0x389/0x470 [ 1930.707924][ T7428] ret_from_fork+0x514/0xb70 [ 1930.714502][ T7428] ret_from_fork_asm+0x1a/0x30 [ 1930.721253][ T7428] INITIAL USE at: [ 1930.725312][ T7428] lock_acquire+0x106/0x350 [ 1930.731715][ T7428] _raw_write_lock_irq+0x3d/0x50 [ 1930.738560][ T7428] copy_process+0x29eb/0x4380 [ 1930.745142][ T7428] kernel_clone+0x2d7/0x940 [ 1930.751548][ T7428] user_mode_thread+0x110/0x180 [ 1930.758306][ T7428] rest_init+0x23/0x300 [ 1930.764364][ T7428] start_kernel+0x38a/0x3e0 [ 1930.770893][ T7428] x86_64_start_reservations+0x24/0x30 [ 1930.778290][ T7428] x86_64_start_kernel+0x137/0x1b0 [ 1930.785304][ T7428] common_startup_64+0x13e/0x147 [ 1930.792150][ T7428] INITIAL READ USE at: [ 1930.796643][ T7428] lock_acquire+0x106/0x350 [ 1930.803477][ T7428] _raw_read_lock+0x36/0x50 [ 1930.810320][ T7428] __do_wait+0xd9/0x720 [ 1930.816817][ T7428] do_wait+0x1e7/0x510 [ 1930.823226][ T7428] kernel_wait+0xd6/0x1c0 [ 1930.829892][ T7428] call_usermodehelper_exec_work+0xbe/0x230 [ 1930.838132][ T7428] process_scheduled_works+0xa8e/0x14e0 [ 1930.846009][ T7428] worker_thread+0xa47/0xfb0 [ 1930.852932][ T7428] kthread+0x389/0x470 [ 1930.859339][ T7428] ret_from_fork+0x514/0xb70 [ 1930.866261][ T7428] ret_from_fork_asm+0x1a/0x30 [ 1930.873363][ T7428] } [ 1930.876022][ T7428] ... key at: [] tasklist_lock+0x18/0x40 [ 1930.884036][ T7428] ... acquired at: [ 1930.888002][ T7428] _raw_read_lock+0x36/0x50 [ 1930.892674][ T7428] send_sigio+0x101/0x370 [ 1930.897180][ T7428] dnotify_handle_event+0x169/0x440 [ 1930.902541][ T7428] fsnotify+0x18a5/0x1b60 [ 1930.907068][ T7428] path_openat+0x11aa/0x3890 [ 1930.911828][ T7428] do_file_open+0x23e/0x4a0 [ 1930.916494][ T7428] do_sys_openat2+0x113/0x200 [ 1930.921337][ T7428] __x64_sys_open+0x11e/0x150 [ 1930.926263][ T7428] do_syscall_64+0x174/0x580 [ 1930.931014][ T7428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1930.937073][ T7428] [ 1930.939383][ T7428] -> (&f_owner->lock){....}-{3:3} { [ 1930.944675][ T7428] INITIAL USE at: [ 1930.948645][ T7428] lock_acquire+0x106/0x350 [ 1930.954879][ T7428] _raw_write_lock_irq+0x3d/0x50 [ 1930.961554][ T7428] __f_setown+0x5f/0x380 [ 1930.967530][ T7428] f_setown+0x23a/0x300 [ 1930.973449][ T7428] sock_ioctl+0x5c3/0x7e0 [ 1930.979509][ T7428] __se_sys_ioctl+0xfc/0x170 [ 1930.985837][ T7428] do_syscall_64+0x174/0x580 [ 1930.992156][ T7428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1930.999773][ T7428] INITIAL READ USE at: [ 1931.004180][ T7428] lock_acquire+0x106/0x350 [ 1931.010840][ T7428] _raw_read_lock_irqsave+0x48/0x60 [ 1931.018205][ T7428] send_sigio+0x38/0x370 [ 1931.024619][ T7428] kill_fasync+0x24d/0x4d0 [ 1931.031198][ T7428] lease_break_callback+0x26/0x30 [ 1931.038422][ T7428] __break_lease+0x80d/0x1e70 [ 1931.045286][ T7428] do_dentry_open+0xf11/0x1380 [ 1931.052215][ T7428] vfs_open+0x3b/0x340 [ 1931.058445][ T7428] path_openat+0x2e3b/0x3890 [ 1931.065202][ T7428] do_file_open+0x23e/0x4a0 [ 1931.071871][ T7428] do_sys_openat2+0x113/0x200 [ 1931.078706][ T7428] __x64_sys_open+0x11e/0x150 [ 1931.085545][ T7428] do_syscall_64+0x174/0x580 [ 1931.092293][ T7428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1931.100347][ T7428] } [ 1931.102916][ T7428] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1931.111932][ T7428] ... acquired at: [ 1931.115808][ T7428] _raw_read_lock_irqsave+0x48/0x60 [ 1931.121174][ T7428] send_sigio+0x38/0x370 [ 1931.125587][ T7428] kill_fasync+0x24d/0x4d0 [ 1931.130173][ T7428] lease_break_callback+0x26/0x30 [ 1931.135368][ T7428] __break_lease+0x80d/0x1e70 [ 1931.140214][ T7428] do_dentry_open+0xf11/0x1380 [ 1931.145142][ T7428] vfs_open+0x3b/0x340 [ 1931.149376][ T7428] path_openat+0x2e3b/0x3890 [ 1931.154134][ T7428] do_file_open+0x23e/0x4a0 [ 1931.158806][ T7428] do_sys_openat2+0x113/0x200 [ 1931.163643][ T7428] __x64_sys_open+0x11e/0x150 [ 1931.168483][ T7428] do_syscall_64+0x174/0x580 [ 1931.173238][ T7428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1931.179292][ T7428] [ 1931.181600][ T7428] -> (&new->fa_lock){....}-{3:3} { [ 1931.186719][ T7428] INITIAL USE at: [ 1931.190601][ T7428] lock_acquire+0x106/0x350 [ 1931.196666][ T7428] _raw_write_lock_irq+0x3d/0x50 [ 1931.203262][ T7428] fasync_remove_entry+0xf1/0x1c0 [ 1931.209856][ T7428] pipe_fasync+0xa9/0x1f0 [ 1931.215742][ T7428] __fput+0x88d/0xa50 [ 1931.221282][ T7428] task_work_run+0x1d9/0x270 [ 1931.227431][ T7428] exit_to_user_mode_loop+0x193/0x6b0 [ 1931.234358][ T7428] do_syscall_64+0x353/0x580 [ 1931.240504][ T7428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1931.247949][ T7428] INITIAL READ USE at: [ 1931.252266][ T7428] lock_acquire+0x106/0x350 [ 1931.258761][ T7428] _raw_read_lock_irqsave+0x48/0x60 [ 1931.265954][ T7428] kill_fasync+0x199/0x4d0 [ 1931.272362][ T7428] do_splice+0x1052/0x1970 [ 1931.278768][ T7428] __se_sys_splice+0x353/0x490 [ 1931.285523][ T7428] do_syscall_64+0x174/0x580 [ 1931.292127][ T7428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1931.300012][ T7428] } [ 1931.302501][ T7428] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1931.311166][ T7428] ... acquired at: [ 1931.314957][ T7428] _raw_read_lock_irqsave+0x48/0x60 [ 1931.320326][ T7428] kill_fasync+0x199/0x4d0 [ 1931.324912][ T7428] evdev_pass_values+0x552/0xc00 [ 1931.330012][ T7428] evdev_events+0x1e6/0x340 [ 1931.334681][ T7428] input_pass_values+0x288/0x890 [ 1931.339787][ T7428] input_event_dispose+0x330/0x6b0 [ 1931.345063][ T7428] input_inject_event+0x1dd/0x330 [ 1931.350254][ T7428] evdev_write+0x325/0x4c0 [ 1931.354833][ T7428] vfs_write+0x296/0xba0 [ 1931.359243][ T7428] ksys_write+0x150/0x270 [ 1931.363740][ T7428] do_syscall_64+0x174/0x580 [ 1931.368494][ T7428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1931.374552][ T7428] [ 1931.376863][ T7428] [ 1931.376863][ T7428] stack backtrace: [ 1931.382744][ T7428] CPU: 1 UID: 0 PID: 7428 Comm: syz.6.9274 Tainted: G L syzkaller #0 PREEMPT(full) [ 1931.382766][ T7428] Tainted: [L]=SOFTLOCKUP [ 1931.382773][ T7428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1931.382785][ T7428] Call Trace: [ 1931.382794][ T7428] [ 1931.382802][ T7428] dump_stack_lvl+0xe8/0x150 [ 1931.382823][ T7428] __lock_acquire+0x2a37/0x2cd0 [ 1931.382850][ T7428] ? kill_fasync+0x199/0x4d0 [ 1931.382872][ T7428] lock_acquire+0x106/0x350 [ 1931.382888][ T7428] ? kill_fasync+0x199/0x4d0 [ 1931.382912][ T7428] ? do_raw_spin_lock+0x12b/0x2f0 [ 1931.382932][ T7428] ? evdev_pass_values+0xcb/0xc00 [ 1931.382952][ T7428] _raw_read_lock_irqsave+0x48/0x60 [ 1931.382977][ T7428] ? kill_fasync+0x199/0x4d0 [ 1931.383000][ T7428] kill_fasync+0x199/0x4d0 [ 1931.383023][ T7428] ? kill_fasync+0x53/0x4d0 [ 1931.383056][ T7428] evdev_pass_values+0x552/0xc00 [ 1931.383077][ T7428] ? evdev_pass_values+0x6a1/0xc00 [ 1931.383096][ T7428] evdev_events+0x1e6/0x340 [ 1931.383112][ T7428] ? evdev_events+0x79/0x340 [ 1931.383127][ T7428] ? input_pass_values+0x8d/0x890 [ 1931.383151][ T7428] input_pass_values+0x288/0x890 [ 1931.383178][ T7428] ? input_handle_event+0x6fd/0xf10 [ 1931.383199][ T7428] input_event_dispose+0x330/0x6b0 [ 1931.383222][ T7428] input_inject_event+0x1dd/0x330 [ 1931.383244][ T7428] ? input_inject_event+0xb5/0x330 [ 1931.383265][ T7428] evdev_write+0x325/0x4c0 [ 1931.383281][ T7428] ? __lock_acquire+0x683/0x2cd0 [ 1931.383298][ T7428] ? __pfx_evdev_write+0x10/0x10 [ 1931.383316][ T7428] ? bpf_lsm_file_permission+0x9/0x20 [ 1931.383339][ T7428] ? security_file_permission+0x75/0x260 [ 1931.383440][ T7428] ? rw_verify_area+0x203/0x4c0 [ 1931.383460][ T7428] ? __pfx_evdev_write+0x10/0x10 [ 1931.383478][ T7428] vfs_write+0x296/0xba0 [ 1931.383503][ T7428] ? __pfx_vfs_write+0x10/0x10 [ 1931.383524][ T7428] ? __fget_files+0x2a/0x420 [ 1931.383547][ T7428] ? __fget_files+0x2a/0x420 [ 1931.383566][ T7428] ? __fget_files+0x3a2/0x420 [ 1931.383584][ T7428] ? __fget_files+0x2a/0x420 [ 1931.383606][ T7428] ksys_write+0x150/0x270 [ 1931.383629][ T7428] ? __pfx_ksys_write+0x10/0x10 [ 1931.383653][ T7428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1931.383673][ T7428] do_syscall_64+0x174/0x580 [ 1931.383687][ T7428] ? trace_irq_disable+0x3b/0x140 [ 1931.383711][ T7428] ? clear_bhb_loop+0x40/0x90 [ 1931.383731][ T7428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1931.383747][ T7428] RIP: 0033:0x7fcd8459ce59 [ 1931.383765][ T7428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1931.383779][ T7428] RSP: 002b:00007fcd854ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1931.383798][ T7428] RAX: ffffffffffffffda RBX: 00007fcd84815fa0 RCX: 00007fcd8459ce59 [ 1931.383811][ T7428] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000003 [ 1931.383822][ T7428] RBP: 00007fcd84632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1931.383834][ T7428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1931.383844][ T7428] R13: 00007fcd84816038 R14: 00007fcd84815fa0 R15: 00007fcd8493fa48 [ 1931.383863][ T7428] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1931.907129][T30717] Bluetooth: hci3: command tx timeout [ 1931.917958][ T7345] hsr_slave_0: entered promiscuous mode [ 1931.926422][ T7345] hsr_slave_1: entered promiscuous mode [ 1931.932637][ T7345] debugfs: 'hsr0' already exists in 'hsr' [ 1931.938520][ T7345] Cannot create hsr debugfs directory [ 1931.983427][ T5870] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1932.417565][ T5869] usb 9-1: USB disconnect, device number 25 [ 1934.044444][ T5296] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1934.319026][ T4129] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 1934.455924][ T4129] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 1934.665392][ T4129] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 1934.967940][ T4129] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 1935.378896][ T4129] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1935.416380][ T4129] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1935.459482][ T5296] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1935.489058][ T4129] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1935.523184][ T4129] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1935.624743][ T4129] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1935.665120][ T4129] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1935.740620][ T4129] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1935.751305][ T4129] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1935.865847][ T4129] bridge_slave_1: left allmulticast mode [ 1935.871674][ T4129] bridge_slave_1: left promiscuous mode [ 1935.880039][ T4129] bridge0: port 2(bridge_slave_1) entered disabled state [ 1935.891962][ T4129] bridge_slave_0: left allmulticast mode [ 1935.902446][ T4129] bridge_slave_0: left promiscuous mode [ 1935.908731][ T4129] bridge0: port 1(bridge_slave_0) entered disabled state [ 1935.919007][ T4129] bond1: left allmulticast mode [ 1935.924376][ T4129] bond1: left promiscuous mode [ 1935.931774][ T4129] bridge0: port 3(bond1) entered disabled state [ 1935.940691][ T4129] bridge_slave_1: left allmulticast mode [ 1935.946800][ T4129] bridge_slave_1: left promiscuous mode [ 1935.953045][ T4129] bridge0: port 2(bridge_slave_1) entered disabled state [ 1935.962951][ T4129] bridge_slave_0: left allmulticast mode [ 1935.970687][ T4129] bridge0: port 1(bridge_slave_0) entered disabled state [ 1935.986214][ T4129] bridge_slave_1: left allmulticast mode [ 1935.991911][ T4129] bridge_slave_1: left promiscuous mode [ 1936.004079][ T4129] bridge0: port 2(bridge_slave_1) entered disabled state [ 1936.012860][ T4129] bridge_slave_0: left allmulticast mode [ 1936.018976][ T4129] bridge_slave_0: left promiscuous mode [ 1936.025410][ T4129] bridge0: port 1(bridge_slave_0) entered disabled state [ 1936.189258][ T4129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1936.199956][ T4129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1936.210714][ T4129] bond0 (unregistering): Released all slaves [ 1936.386798][ T4129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1936.396794][ T4129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1936.406430][ T4129] bond0 (unregistering): Released all slaves [ 1936.416003][ T4129] bond1 (unregistering): Released all slaves [ 1936.491190][ T4129] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 1936.499422][ T4129] ip6gre1 (unregistering): left promiscuous mode [ 1936.669376][ T4129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1936.681120][ T4129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1936.691996][ T4129] bond0 (unregistering): Released all slaves [ 1936.701545][ T4129] bond1 (unregistering): Released all slaves [ 1936.713804][ T4129] bond2 (unregistering): Released all slaves [ 1936.724931][ T4129] bond3 (unregistering): Released all slaves [ 1936.740740][ T5296] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1936.878928][ T4129] tipc: Left network mode [ 1936.922487][ T4129] tipc: Disabling bearer [ 1936.931411][ T4129] tipc: Left network mode [ 1937.300611][ T5296] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1937.518503][ T4129] hsr_slave_0: left promiscuous mode [ 1937.526474][ T4129] hsr_slave_1: left promiscuous mode [ 1937.532590][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1937.545821][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1937.559124][ T4129] hsr_slave_0: left promiscuous mode [ 1937.575347][ T4129] hsr_slave_1: left promiscuous mode [ 1937.581891][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1937.592508][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1937.614476][ T4129] hsr_slave_0: left promiscuous mode [ 1937.630522][ T4129] hsr_slave_1: left promiscuous mode [ 1937.637117][ T4129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1937.646121][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1937.655987][ T4129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1937.667237][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1937.682718][ T4129] veth1_macvtap: left promiscuous mode [ 1937.690417][ T4129] veth0_macvtap: left promiscuous mode [ 1937.697959][ T4129] veth1_vlan: left promiscuous mode [ 1937.704694][ T4129] veth0_vlan: left promiscuous mode [ 1937.864225][ T4129] team0 (unregistering): Port device team_slave_1 removed [ 1937.882009][ T4129] team0 (unregistering): Port device team_slave_0 removed [ 1938.000473][ T4129] team0 (unregistering): Port device team_slave_1 removed [ 1938.021064][ T4129] team0 (unregistering): Port device team_slave_0 removed [ 1938.357663][ T5296] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1938.751907][ T5296] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1939.392876][ T5296] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1939.474791][ T4129] IPVS: stop unused estimator thread 0... [ 1939.681872][ T5296] 8021q: adding VLAN 0 to HW filter on device eth26