last executing test programs: 12m53.304859766s ago: executing program 4 (id=2166): socket$kcm(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet6(0xa, 0x2, 0x80000001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000680)={'security\x00', 0x35, "83efe3afb8ac243b39cfb71e055c02b55c350e3dfc4bdcc384795789aa324813e0ce562257d6d6b7fa7b4ce61ff01bd14902cc1d00"}, &(0x7f00000000c0)=0x59) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_UNLINKAT={0x24, 0x28, 0x0, r4, 0x0, &(0x7f00000001c0)='./file0\x00'}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) r5 = socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1687144bc88b8e9168f2c064962af57af9365925640aad2972cdb80b12a24dab71dc1db1f7d8bcc27a58fd1078ad5b428046cd939874efe0ed8355a92cca0074f0444fbc568f56129a739d21bc7e5821cd9331dbed0584485aee4e61b0d2367e94852a7eebd628010ac792ce2ad7897afc9afef1749751289dc2ae64c78ee6458525d291dd9fb66027fe9b060d9d3bc21fab95a5d07e467fb483478355dd6e5eea3562c859608eea1fed7c58f39dc1fdd2d31e1240bbd030aa0127163f059b6059a41dad8998364ef6ebc34a3ebc", @ANYBLOB='\\\x00'], 0x18, 0xfffffffffffffff9) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='abcdefghijklmnop', 0x0) request_key(&(0x7f0000001d40)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000c000}, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x5f, 0x7ffc0002}]}) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="01ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) sendmmsg(r0, 0x0, 0x0, 0x4000000) socket$inet(0x2, 0x1, 0x100) 12m52.736468677s ago: executing program 3 (id=2167): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00003300000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000008000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500"], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) 12m52.534069466s ago: executing program 3 (id=2170): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021007c109050c04400006030f07059acbf5"], 0x0) syz_usb_control_io$printer(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0003020000000203efa0d3a47e20c6d191ec4eebe314b68e786c22ede84873"]}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000180)="884f56d203d5fef7c2cb0e38e6f46e7c800b977a4cbe7dd4b17bd1722e96710cc8e603b9cbcea89d3512b991f79c242003ba4c1b56c3acad5f1b9db6336ee86c3cd8288ecdf40d04ce156a8e92c55ae301930df1b87fddec9d440953f9e91ebdb45b3ac0f6b5dc83ef850a2848fdb0e427e26369f1a1a24b54e60243f3b70530a011f639c4557cb0e7b7ba7f3ad6", 0x8e) 12m52.304114813s ago: executing program 4 (id=2172): r0 = socket(0x2, 0xa, 0x300) r1 = accept4$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e, 0x800) (async) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040104c500"], 0x7) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x0, 0x6}]}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x80, 0x4) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x20000101, 0x2, 0x1, 0x0, 0xe3}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405668, &(0x7f0000000100)={0x0, 0xfffffffd, 0x2}) syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x11, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}}}}}}}, 0x0) 12m51.516112724s ago: executing program 2 (id=2175): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000ffffffdb00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 12m51.32090004s ago: executing program 4 (id=2176): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x5f}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12m51.184342531s ago: executing program 2 (id=2178): syz_usb_connect(0x5, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000240)=[{}], 0x1, 0x200, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f11", 0x1b}], 0x1}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r1, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd86) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x4, @remote, 0x9}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x15, 0x0, 0xfffffffffffffea1) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r7 = memfd_secret(0x80000) ioctl$KVM_RUN(r7, 0xae80, 0x0) 12m51.148100581s ago: executing program 4 (id=2179): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b00010062726964676500002800028006000600200400000500070007000000"], 0x58}}, 0x0) 12m51.003095616s ago: executing program 4 (id=2181): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000000)="fc0000004800071fab092504090007000aab6000000000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d5715587e6d8a1ad0a4f0108", 0xfc) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x7fff}]}}}]}, 0x3c}}, 0x20004002) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 12m50.381808789s ago: executing program 3 (id=2187): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) syz_io_uring_setup(0x386, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x2, 0x2de}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xa0}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x218, &(0x7f0000000100)=0xa, 0x0, 0x4) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000200)={0xcd, 0x0, 0x0, 0x0, 0x0, 0x0}) 12m50.044170551s ago: executing program 3 (id=2188): pipe(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f041, 0x8e5}) readv(r4, &(0x7f0000001840)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r9, {}, {0x1}, {0x4, 0x3d}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x3c}}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r10) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56f41, 0x70bd2d, 0x80001, {0x0, 0x0, 0x0, r13, {0x0, 0xd}, {0xd, 0xb}, {0x0, 0xd}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 12m49.888400481s ago: executing program 2 (id=2189): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000000000000000000000000626f0c4f82eafca0b2c48943a4e2de872b4927e147fdd2dc56e21d3c896fbf7fa9e84bac28aecbd063d9f5710971afb3ab5fbdc81dc773dbff7fa42b0fb3c", @ANYRES32=0x0, @ANYBLOB="20020600000000001c00128009000100626f6e64000000000c0002800800090003000040"], 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x1}, 'port1\x00', 0x19f, 0x60004, 0xfffffffd, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x80}, 'port0\x00', 0x8719470d9569919, 0x0, 0x7ffc, 0x0, 0x4, 0x1, 0x5, 0x0, 0x0, 0x9}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) preadv(r2, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x4000) (async, rerun: 64) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x10, r0, 0x5531e000) (async, rerun: 64) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000040)=0xe) 12m49.858861358s ago: executing program 3 (id=2190): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x28) r0 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000003c0)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010003689c3d99768c7e802f588520101602a0a08601026f6e9f030109021b0002bc051f8709040308004ed1"], &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) arch_prctl$ARCH_SHSTK_ENABLE(0x5003, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="28000000120001002dbd70007ddbdf2500000000", @ANYRES32=r3], 0xfe87}, 0x1, 0x0, 0x0, 0x881}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x28) (async) syz_usb_connect(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000003c0)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) (async) socket(0x10, 0x803, 0x0) (async) write(r1, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010003689c3d99768c7e802f588520101602a0a08601026f6e9f030109021b0002bc051f8709040308004ed1"], &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x5003, 0x1) (async) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) (async) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="28000000120001002dbd70007ddbdf2500000000", @ANYRES32=r3], 0xfe87}, 0x1, 0x0, 0x0, 0x881}, 0x8000) (async) 12m49.680470529s ago: executing program 2 (id=2191): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b00010062726964676500002800028006000600400400000500070007000000"], 0x58}}, 0x0) 12m49.534007316s ago: executing program 2 (id=2193): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1a, 0x3, 0x3c}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80d1}, 0x20004000) 12m49.400451601s ago: executing program 2 (id=2194): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = msgget$private(0x0, 0x61) msgsnd(r2, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000040)=""/49) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x4000) syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r4, 0xc02c5638, &(0x7f00000000c0)={0x0, 0x1, 0xb2e}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) open_by_handle_at(0xffffffffffffffff, 0x0, 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4810) 12m47.908561163s ago: executing program 3 (id=2197): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021007c109050c04400006030f07059acbf5"], 0x0) syz_usb_control_io$printer(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0003020000000203efa0d3a47e20c6d191"]}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000180)="884f56d203d5fef7c2cb0e38e6f46e7c800b977a4cbe7dd4b17bd1722e96710cc8e603b9cbcea89d3512b991f79c242003ba4c1b56c3acad5f1b9db6336ee86c3cd8288ecdf40d04ce156a8e92c55ae301930df1b87fddec9d440953f9e91ebdb45b3ac0f6b5dc83ef850a2848fdb0e427e26369f1a1a24b54e60243f3b70530a011f639c4557cb0e7b7ba7f3ad6", 0x8e) 12m45.419249982s ago: executing program 4 (id=2198): syz_usb_connect(0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0xfffffffffffffe9a, {0xd000, 0x80a0000}}, "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", "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"}) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000000)={[0xd000, 0x1000, 0x4, 0x155559000], 0x100, 0x42, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) munlock(&(0x7f00006ea000/0x1000)=nil, 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0x6, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12m16.478359451s ago: executing program 32 (id=2192): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x3, 0x2}}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000003c0)={0x0, "530b3626fe91ed3424c96a890636daf1"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000013c0)={0x0, 0x8000000000000001, 0x4}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000017c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001bc0)={0x17, 0x4, {0x5, @struct={0x2400, 0x7}, r3, 0x5, 0x630, 0x5, 0x8, 0x1, 0x10, @usage=0x3, 0x40, 0x9, [0x1, 0x2, 0x9, 0x6, 0x3, 0x7]}, {0x5, @struct={0xa, 0x200}, r4, 0x7, 0x8, 0x6, 0x2, 0x1, 0x1, @struct={0x7}, 0x7fffffff, 0x8001, [0x0, 0x4, 0xe99, 0x9, 0x5, 0x5]}, {0x200, @struct={0x0, 0x5}, r5, 0x7, 0x6637, 0x7, 0x3, 0x401, 0x82, @usage=0x80, 0x200, 0xe, [0x4, 0x5, 0x400, 0xba4, 0x4, 0x4]}, {0x6, 0x7, 0x1}}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b02"], 0x0) syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x3eac, 0x400, 0x2, 0x105}, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x583, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 12m14.067530556s ago: executing program 33 (id=2196): r0 = socket(0x10, 0x803, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000000)={0xe, {0x2, 0x1b288141, 0xe17e, 0x304}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000300)={0x48, 0xe}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000900)=""/237, 0xed, 0x0, &(0x7f00000000c0)=""/47, 0x2f}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000200), &(0x7f0000000240)=0x4) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000380)={0x1, [0xf]}, &(0x7f00000003c0)=0x6) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl(r6, 0x7, &(0x7f0000000840)="cf8ac26189fe9989c925f45575a9c0620cb617b0811a842bc673ed3b873c6eca72e87bee9589a4d06c4079877e879af8b827fb7fae8b190b1069a5bc2b91a905b154223e0d634ac530dee7e4cb77cf29f69d7ad18b4e77cf98d53494ddbc20f6536e2e66999554cd3ee0396c31b889fbb57d63781e73da86ccb5cd044db71953cf3a8209440029b4c080135a0abd21ba9553e86b38d5794c1b9716b01c64d9b1233a8200e4ff") ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f0000000080)=0xeeee0000) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="3c00000f00985466387c4460b169005e337000fb", @ANYRES32=0x0, @ANYBLOB="a5fdad8800400000140012800b00010062617461647600000400028008001f0006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 12m9.324810983s ago: executing program 34 (id=2194): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = msgget$private(0x0, 0x61) msgsnd(r2, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000040)=""/49) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x4000) syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r4, 0xc02c5638, &(0x7f00000000c0)={0x0, 0x1, 0xb2e}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) open_by_handle_at(0xffffffffffffffff, 0x0, 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4810) 12m7.995395378s ago: executing program 35 (id=2197): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021007c109050c04400006030f07059acbf5"], 0x0) syz_usb_control_io$printer(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0003020000000203efa0d3a47e20c6d191"]}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000180)="884f56d203d5fef7c2cb0e38e6f46e7c800b977a4cbe7dd4b17bd1722e96710cc8e603b9cbcea89d3512b991f79c242003ba4c1b56c3acad5f1b9db6336ee86c3cd8288ecdf40d04ce156a8e92c55ae301930df1b87fddec9d440953f9e91ebdb45b3ac0f6b5dc83ef850a2848fdb0e427e26369f1a1a24b54e60243f3b70530a011f639c4557cb0e7b7ba7f3ad6", 0x8e) 12m6.766778261s ago: executing program 36 (id=2198): syz_usb_connect(0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0xfffffffffffffe9a, {0xd000, 0x80a0000}}, "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", "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"}) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000000)={[0xd000, 0x1000, 0x4, 0x155559000], 0x100, 0x42, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) munlock(&(0x7f00006ea000/0x1000)=nil, 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0x6, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m31.554812735s ago: executing program 5 (id=3663): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000006c0)={0x0, 0x0}) 4m31.428304597s ago: executing program 5 (id=3664): removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.apparmor\x00') r0 = gettid() r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) timer_create(0x1, &(0x7f0000000100)={0x0, 0x3c, 0x1, @tid=r2}, &(0x7f0000000140)=0x0) capset(&(0x7f0000000180)={0x20080522, r2}, &(0x7f00000001c0)={0x9, 0x9, 0x5, 0x3ff, 0x2, 0x8}) timer_gettime(r3, &(0x7f0000000200)) r4 = syz_io_uring_setup(0x1a50, &(0x7f0000000240)={0x0, 0x6d3e, 0x80, 0x0, 0x15d}, &(0x7f00000002c0), &(0x7f0000000300)) r5 = syz_io_uring_setup(0x44cc, &(0x7f0000000340)={0x0, 0x870b, 0x4020, 0x2, 0x25b, 0x0, r4}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x10c0080, &(0x7f0000000640)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@default_permissions}], [{@measure}, {@euid_eq}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) r10 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x4, &(0x7f0000000740)=0x1, 0x4) syz_io_uring_setup(0x4dfb, &(0x7f0000000780)={0x0, 0x2199, 0x0, 0x3, 0xc0}, &(0x7f0000000800), &(0x7f0000000840)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r11, &(0x7f0000000880)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x12344, 0x0, 0x0, 0x1, {0x0, r12}}) r13 = signalfd(r1, &(0x7f00000008c0)={[0x7]}, 0x8) ioctl$UFFDIO_REGISTER(r13, 0xc020aa00, &(0x7f0000000900)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) ioctl$SNDCTL_SYNTH_MEMAVL(r13, 0xc004510e, &(0x7f0000000940)) setsockopt$SO_J1939_PROMISC(r10, 0x6b, 0x2, &(0x7f0000000980), 0x4) process_vm_writev(r0, &(0x7f0000000b00)=[{&(0x7f00000009c0)=""/57, 0x39}, {&(0x7f0000000a00)=""/49, 0x31}, {&(0x7f0000000a40)=""/8, 0x8}, {&(0x7f0000000a80)=""/117, 0x75}], 0x4, &(0x7f0000000f80)=[{&(0x7f0000000b40)=""/126, 0x7e}, {&(0x7f0000000bc0)=""/110, 0x6e}, {&(0x7f0000000c40)=""/7, 0x7}, {&(0x7f0000000c80)=""/130, 0x82}, {&(0x7f0000000d40)=""/186, 0xba}, {&(0x7f0000000e00)=""/191, 0xbf}, {&(0x7f0000000ec0)=""/184, 0xb8}], 0x7, 0x0) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_FS_INFO(r4, 0x8400941f, &(0x7f0000001000)) fchdir(r7) ioctl$AUTOFS_IOC_FAIL(r14, 0x9361, 0x5f) splice(r5, &(0x7f0000001400)=0xb, r13, &(0x7f0000001440)=0x9, 0xff, 0x1) setsockopt$inet6_tcp_TLS_TX(r13, 0x11a, 0x1, &(0x7f0000001480)=@gcm_128={{}, "1c66e3e544415523", "0cd5e9c7ab3856101b0af1c38292bb91", "5831b437", "c5af020848e71cbc"}, 0x28) futimesat(r13, &(0x7f00000014c0)='./file0\x00', &(0x7f0000001540)={{0x77359400}}) 4m31.322793126s ago: executing program 5 (id=3665): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x2000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x6, 0x4, {0xd, @pix={0x0, 0xfffffffd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6}}}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="c4000000030000005a"]) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0x80000, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x480400, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000080)={0x0, r8}) 4m30.20177945s ago: executing program 5 (id=3669): r0 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x20, 0x81, 0x0, 0xfffff004}, {0x6, 0x5}]}, 0x10) r2 = dup(r0) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000400)={0x81, 0x0, 0x2}) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000340), 0x129202, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x2, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0x4, 0x0, 0x4) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) chroot(&(0x7f0000002940)='./file0\x00') unshare(0x22020600) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0/../file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f00000000c0)=0x2000) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000010c0)=0x100, 0x4) syz_pidfd_open(0x0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x1, 0x7fff0001}]}) flistxattr(r9, 0x0, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x0, 0x0) r11 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400251, 0x0, r10}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r14 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480), 0x84400) r15 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) syz_io_uring_submit(r12, r13, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0xc, 0x0, r14, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r15}}) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r8, 0x0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="ee4ce1c301758f17f36f34922b1ba159d99ddd5b89c0005659e9573a07860ac92a4b124e08a4a580b99af5ffb13479bde30e4c430c71e8c0bd33f72613e7", 0x3e}, {&(0x7f0000000240)="24b1aa5c6c52ab629f74812434713fb7d4f8a7b14a632858123a5a3eabd793c10cecd3a5dac1df2d1fb5b73f465bde29a04ee0c392685da0b7ac3f5edac03821d14eddae012dbda664f2592dac53bfe69aec6fe8da000ccd", 0x58}], 0x2, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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"], 0x1310}, 0x0, 0x4044811, 0x0, {0x0, r15}}) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb, 0x12, r0, 0x80000000) 4m29.199996602s ago: executing program 5 (id=3673): r0 = socket(0x25, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x0, 0x6}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x3100, 0x625, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x1c, 0x2d, 0x1, 0x70bd28, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @uid=r5}]}, 0x1c}}, 0x48000) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f00000002c0)={0x1, 0x7}, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000108000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="803e01000000010014001a80100002800c000180080009000100000008001b00000000002b739844e2f26084ab51ef1a42d9db0bdfa0eaf6841ac5d6da78a0848d769c85eaf6289c6bc7756fa29ae5dd7e7e71c75b2bb5e47b437b0a7590f1660dc66e966cb208be1d02d1"], 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) 4m28.822020986s ago: executing program 5 (id=3674): r0 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000100)=[{{&(0x7f0000000180)=@l2={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x2}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e20, 0x3}}, 0x80, 0x0}}], 0x2, 0xea) 4m28.307555941s ago: executing program 37 (id=3674): r0 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000100)=[{{&(0x7f0000000180)=@l2={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x2}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e20, 0x3}}, 0x80, 0x0}}], 0x2, 0xea) 2m42.796172664s ago: executing program 1 (id=4050): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) futex_waitv(&(0x7f0000001240)=[{0x62f0, &(0x7f0000000100)=0x2000000080000001, 0x86}], 0x1, 0x0, 0x0, 0x1) unshare(0xc040400) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157) (async) r4 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157) r5 = syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) (async) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340), &(0x7f0000000280)) (async) r9 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r9, 0x351a, 0x100, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'vlan1\x00', 0x20}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) gettid() (async) r13 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r13}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) 2m42.11659078s ago: executing program 1 (id=4053): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000006c0)={0x2, &(0x7f0000000280)=[{0x25, 0x0, 0x2, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4000}]}) 2m41.492273806s ago: executing program 1 (id=4056): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @empty}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0xfffffffffffffffe, 0x7, 0x0, '\x00', {0x1, 0xa2a, 0x4, 0x1, r2, 0x0, 0xa000, '\x00', 0x8000000, 0x1, 0x8000b4e5, 0x2, {0x2, 0x8}, {0x6, 0x10001}, {0x5, 0x1}, {0x343a, 0xa00}, 0x4, 0xb, 0x4, 0xffff}}}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r5, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/118, 0x76}], 0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000014}) close_range(r4, r5, 0x0) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000600)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000100142603600e1208000f0000000401a8001600a000014001000700036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) syz_fuse_handle_req(r3, &(0x7f000000c300)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x6, 0x2, 0xfffffff7, 0x8, {0x3, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x8000, 0x3ff, 0x0, 0x0, 0x4, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) fanotify_init(0x200, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r9, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 2m40.660791294s ago: executing program 1 (id=4062): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x4ca41a67) r1 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) ioctl$FICLONE(r1, 0x40049409, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000380)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x874fd42a7836ef67, 0xc}) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x10) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808"], 0x0, 0x4}, 0x94) syz_usb_connect$cdc_ncm(0x5, 0x85, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x2, 0x1, 0x8, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "f9af2465"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x3ff, 0x4, 0x7}, {0x6, 0x24, 0x1a, 0xe000, 0x34}, [@obex={0x5}, @country_functional={0xe, 0x24, 0x7, 0xb, 0x6, [0xce, 0x8, 0x3, 0x0]}]}, {{0x9, 0x5, 0x81, 0x3, 0x7d7, 0x81, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0x8, 0xea}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x40, 0x6c, 0x1}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0xd, 0x40, 0x4, 0x0, 0x9}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0x1, [{0xee, &(0x7f0000000500)=@string={0xee, 0x3, "c9a491c2c2c2a038b8428c164ec00310342439c9c46954bdeda69940cd08329cba9de49da5b2901a8c4c26ce526b3f04935cb4577228883742062a5a28a82430b3e5f477d65eedf0cafc674127f871d0c11f1a5563e646f6cf911cfe42132a4cadde673e7de25fedc8701d0a0b40bf2eac856dc9e3a920ef2a6c010cb681a3ad879b8afdd6c11ca914e3458721c2a25fc58772c9afedbabfbcbeafc003cd2e81389d9f6704f4cacc1332c4c751f209b883eb2e6084ec791352e8e01ad6fbeffab26bc782cf74b81c73f042fc96602ae4df4c21d5b4fb2517b902d1e866ccbb72c8b760f0138c06e654846170"}}]}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r5, 0x4b4c, &(0x7f0000000080)) 2m37.48805773s ago: executing program 1 (id=4071): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000240)={0xf0f022, 0x100000}) r2 = socket$igmp(0x2, 0x3, 0x2) close(0x3) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@remote, @multicast2, 0x1, "0596232642d17c7dc02cd9f90c8dd705b8dd6dadcd9a1c8ddffa4da80fbf040d", 0x7c, 0x8, 0x100, 0x3}, 0x3c) r3 = socket(0x10, 0x3, 0x0) syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x10000) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000180)={0xfffffc00, 0xfffffffa, 0x1000, 0xf, 0x7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r6, 0xc080aebe, &(0x7f000000a100)={{0x2, 0x0, 0xffc7, {0xd000, 0xdddd1000, 0x5}}}) getgid() syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x2000400, 0x0, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000005700)='./file0\x00', &(0x7f0000005740), 0x100) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) r7 = socket$unix(0x1, 0x1, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000140)={0x8b28, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) bind$unix(r7, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) read$FUSE(r0, &(0x7f0000006300)={0x2020}, 0x2020) 2m37.340544109s ago: executing program 1 (id=4073): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f00000000c0)=[{0x1e, 0x6000, 0x0, 0x0}], 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read(r5, &(0x7f0000001300)=""/112, 0x70) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000004100)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00', &(0x7f00000006c0)=""/77, 0x4d) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x2) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x2fd, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000540)={{{@in=@private, @in=@private}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8) readahead(r3, 0xffff, 0x6) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) 2m22.306311202s ago: executing program 38 (id=4073): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f00000000c0)=[{0x1e, 0x6000, 0x0, 0x0}], 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read(r5, &(0x7f0000001300)=""/112, 0x70) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000004100)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00', &(0x7f00000006c0)=""/77, 0x4d) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x2) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x2fd, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000540)={{{@in=@private, @in=@private}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8) readahead(r3, 0xffff, 0x6) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) 12.767341102s ago: executing program 6 (id=4662): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4a, &(0x7f0000000140)={0x0, 0x0}, 0x10) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) socket$nl_generic(0x11, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r4) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @desc2}, &(0x7f00000008c0)={0x0, "ed426d436179868323920a5adc54a31b3a64a11b7374298d6245e8c488f527db189552c04e929ebde52f12a666c99a8d8493c5dca674a46be2fb61d699aee7af", 0x39}, 0x48, r4) keyctl$read(0xb, r4, &(0x7f0000000140)=""/4, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x150, r8, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x134, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0x2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0xdc, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "67ca90c269ebc393bd5037d6cefe2537d48ff96616b064daf246bdc7e975f8f0"}, @WGPEER_A_ALLOWEDIPS={0xb4, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}]}, {0x4}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xfff2, 0xc}, {0x8, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048054) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 12.469413795s ago: executing program 6 (id=4664): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f000000c000/0x4000)=nil, 0x4000, 0x9) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, &(0x7f00000002c0), 0x6, 0x0) (async) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) (async) r6 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x0) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x8000, 0x8000, 'none\x00', 0x10, 0x2}, 0x2c) (async) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, 0x0, &(0x7f0000000180)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="9110b7000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044801}, 0x4000) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000000c0)={r9, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) (async) r10 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x29, 0x7d, 0x5, 0x3, 0xc, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, 0x8, 0x20, 0x80000000, 0x10000}}) 12.106095681s ago: executing program 6 (id=4666): unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @cgroup_sock}, 0x94) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000180)={0x2020}, 0x2024) lseek(r4, 0xfffffffffffffff5, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) openat$iommufd(0xffffffffffffff9c, &(0x7f0000001300), 0x80002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$int_in(r5, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r5, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0xffffffffffffffda, 0x0, {0x6, 0x1, 0x0, 0x100000300000000, 0xf, 0x0, {0x0, 0xf, 0x0, 0xfffffffffffffffc, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080)) r6 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_open_dev$video(&(0x7f0000000100), 0x5aba9bd0, 0x101001) ioctl$VIDIOC_S_FMT(r7, 0xc0d05640, &(0x7f0000000440)={0x9, @raw_data="c1e314a5bc48e06e943a7fe7ccaa2a01f644f04a45065c638591db5e5fd48aa57768409995527a05422c4d9cec4923e9b0076b354bc6a23d46420ff6e479b7521186a4c7cc15dacbb3344f4048f8a654ee22962ac77d685a8eba448b607c5e878f4eb4055ad3a7def617e21500927a65607624d5d473240e86160deff7fce40f05d07c58bf1ee035940a4a2c3d8e71ec4f9ea740c7f9be9db349cd2dfd2b6a761da5cfc432b5545a306d5479472b8bf65254db9b154494765bf904fb5e2598358ae0bfd993b451fa"}) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) 8.554909253s ago: executing program 6 (id=4690): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}], 0x1, 0x4000) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0xc6}, &(0x7f0000000200)=0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f00000003c0)={0x2, 0x4, 0xe, 0xfffffffffffffffd}) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}], 0x1, 0x4000) (async) shutdown(r0, 0x1) (async) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0xc6}, &(0x7f0000000200)=0x8) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f00000003c0)={0x2, 0x4, 0xe, 0xfffffffffffffffd}) (async) 8.108021017s ago: executing program 6 (id=4692): r0 = userfaultfd(0x80001) syz_usbip_server_init(0x1) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), &(0x7f0000000040)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000100)={r1}) 7.335643429s ago: executing program 6 (id=4697): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read(r5, &(0x7f0000001300)=""/112, 0x70) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000004100)={0x2020}, 0x2020) r7 = socket$nl_route(0x10, 0x3, 0x0) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00', &(0x7f00000006c0)=""/77, 0x4d) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x2) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x2fd, 0x0, 0x0, 0x0, 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000540)={{{@in=@private, @in=@private}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8) readahead(r3, 0xffff, 0x6) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r12, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sync_file_range(r0, 0x7fff, 0x5, 0xf) 6.788312786s ago: executing program 9 (id=4698): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x30, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0xe, '\x00', {0xe, 0x6, "ea785a", 0x7fff, 0x2f, 0xff, @empty, @mcast2}}}}}}}, 0x0) (async) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x4) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 6.638557645s ago: executing program 9 (id=4700): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x3, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x2, 0x4, 0x31, @mcast2, @mcast1, 0x7, 0x10, 0xe03, 0x1}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x401, 0x8, 0x1, 0x6, 0x5}) fcntl$lock(r2, 0x24, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r3, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000000)={0x2000}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018124000", @ANYRES32=r4, @ANYBLOB="ffffff8500000000b7030000000000008500000089000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.212553404s ago: executing program 8 (id=4701): unshare(0x6a040000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = getpid() syz_open_procfs$pagemap(r2, &(0x7f00000000c0)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0xffffff6a) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaedf, 0x0, 0xffffffff, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x8, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000020, 0x1, {0x2}}) r7 = mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x8c2, 0x30, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mq_getsetattr(r7, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r7, &(0x7f00000003c0)=""/100, 0x64, 0xfffffffffffffff8, &(0x7f0000000280)={0x77359400}) io_uring_enter(r4, 0x52de, 0xf62e, 0x8, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x3, 0x0, {0x1, 0x1, 0x0, ')'}}, 0x22) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r9, 0x40045568, 0x29) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) 5.769390053s ago: executing program 7 (id=4702): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x7cc5c281160b411a, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xff}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000240), 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtfilter={0x2c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x8}, {0xfff2}, {0xfff1, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x2c}}, 0x0) socket(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x7cc5c281160b411a, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xff}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000240), 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtfilter={0x2c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x8}, {0xfff2}, {0xfff1, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x2c}}, 0x0) (async) 5.146188917s ago: executing program 7 (id=4703): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x26, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0xffffffff, 0x0, 0x0, 0x7, 0xfe], [0x0, 0x0, 0x2, 0xb56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xe, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x548], [0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz0\x00', {0x2f00}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x85, 0x0, 0x5d30, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc7, 0xfffffff1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40000000, 0x1, 0x0, 0xb, 0x8, 0x0, 0x2, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) 4.840400022s ago: executing program 9 (id=4706): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c010000190001000000000003000000e0000002000000000000000000000000fe8000000000000000000000000000aa00000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffff8000000000000000000000000000000000000000000000000000000000000200000000000000000000c4000500e0000001000000000000000000000000000004d53c00000002000000e00000010000000000000000000000000735000004030700080000000400000001000000fe80000000000000000000000000000c000004d36c00000002000000fc0000000000000000000000000000010135000002007300018000000400000007000000fe800000000000000000000000000092800000013c0000000aef0000ac1414bb0000000000000000000000000000000005"], 0x17c}}, 0x0) 4.664532184s ago: executing program 7 (id=4707): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newlink={0x20, 0x10, 0x609, 0x70bda7, 0x4, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4.572287012s ago: executing program 9 (id=4708): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x0) (async) setpgid(r0, r0) (async) setpgid(0x0, r0) (async) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) (async) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$kcm(0xa, 0x3, 0x87) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x1, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) (async) unshare(0x24020400) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$kcm(0x2, 0x3, 0x2) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000020105000000000000000000020000084e2a5419597656b7e98908f691bfb2caa405bf100a0ac5bb1c6998ab779b7a97b0"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x48040) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) (async, rerun: 32) r6 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) (rerun: 32) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) (async) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x8, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) 4.321456943s ago: executing program 7 (id=4710): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local, 0x400}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0xfffff63d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x40000000}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 3.93241379s ago: executing program 7 (id=4711): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80800) lsm_set_self_attr(0x68, 0x0, 0x0, 0x1f) r1 = syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109023800010000000009043200019740a400052406000105240000000d240f0109000000020009004e06241a00b51409058203ff"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000000056b178b00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x48) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) set_mempolicy(0x8004, 0x0, 0x5) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000000000000b6160646bce3faaa103fc1ff2d14bd1b"]) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x690c, 0xd0, 0x0, 0x9, 0x329b}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80800) (async) lsm_set_self_attr(0x68, 0x0, 0x0, 0x1f) (async) syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109023800010000000009043200019740a400052406000105240000000d240f0109000000020009004e06241a00b51409058203ff"], 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000000056b178b00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x48) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) (async) set_mempolicy(0x8004, 0x0, 0x5) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000000000000b6160646bce3faaa103fc1ff2d14bd1b"]) (async) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x690c, 0xd0, 0x0, 0x9, 0x329b}) (async) 3.197221606s ago: executing program 8 (id=4712): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x1, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1d, 0x13, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000050000000000000000000100181100", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018", @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000050000008500000084000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000280003802400008004000180040002800c0004"], 0xe8}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r9, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.068753416s ago: executing program 0 (id=4713): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, 0x0, 0x0) getpid() (async) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) (async) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='trylxck mem\x00'], 0xc) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) socket$kcm(0xa, 0x2, 0x3a) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xfff1, 0x9}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x0, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x4, {0x10001, 0x7, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x0, 0x0, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc000) (async) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc000) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7800000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000028000005000128009000100766c616e00000000400002800600010002000000340003800c00010000000000050000000c00010000000000800000000c00010070000000018000000c000100000000000900000008000500", @ANYRES32=r5], 0x78}}, 0x0) getsockopt$sock_int(r8, 0x1, 0x21, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[], 0x34}}, 0x0) 2.828738879s ago: executing program 9 (id=4714): r0 = socket$alg(0x26, 0x5, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r5, 0x0, 0x0) dup2(r5, r1) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) close_range(r0, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.765748933s ago: executing program 8 (id=4715): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x5, 0xfffffffffffffffc, 0x0, 0x2, 0x8000000000000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0xfffffffffffffffe, 0x1c, 0x5, 0x3, 0x2, 0x4000000000002, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x5, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xac18, 0x0, 0x0, 0x4000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1]}) 1.755618279s ago: executing program 0 (id=4716): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000080ffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000008000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500"], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.648330004s ago: executing program 0 (id=4717): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x26, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0xffffffff, 0x0, 0x0, 0x7, 0xfe], [0x0, 0x0, 0x2, 0xb56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xe, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x548], [0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz0\x00', {0x2f00}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x85, 0x0, 0x5d30, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc7, 0xfffffff1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40000000, 0x1, 0x0, 0xb, 0x8, 0x0, 0x2, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) 1.643476199s ago: executing program 8 (id=4718): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c010000190001000000000003000000e0000002000000000000000000000000fe8000000000000000000000000000aa00000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080ffffffffffffff00000000000000000000000000000000000000000000000000000000000200000000000000000000c4000500e0000001000000000000000000000000000004d53c00000002000000e00000010000000000000000000000000735000004030700080000000400000001000000fe80000000000000000000000000000c000004d36c00000002000000fc0000000000000000000000000000010135000002007300018000000400000007000000fe800000000000000000000000000092800000013c0000000aef0000ac1414bb0000000000000000000000000000000005"], 0x17c}}, 0x0) 1.577005171s ago: executing program 8 (id=4719): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x242) syz_open_dev$loop(&(0x7f00000000c0), 0x2, 0x0) fsetxattr$security_capability(r0, &(0x7f0000001cc0), 0x0, 0x0, 0x1) 1.519366089s ago: executing program 0 (id=4720): socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = userfaultfd(0x801) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = dup2(r2, r2) ioctl$KVM_IOEVENTFD(r3, 0x40a0ae49, &(0x7f0000000000)={0x7, 0x0, 0x0, r4, 0x100000}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x34, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000480)="fca665c9352e2708b3735708cdd1f59c1bf076935208ea1f00f927b5dee6a943af2d7e0c25a12b2120595dc9e7eabea82a083c6c22fc562dc468d96ae52ba6bbb98573151dc7b1092570290d8fe2a50e5296563b6902f29a3a92a9812d58358a70608e37d16cf697c1483713fc59d503efc1aae8014906ea36d5a40ee30b0f4628e58414dbbd2e45e74e8db4651af6a7f51c15715bddeed8f1f781c303c564a957652b1e20613d672bb6feda0eec5b8abd4121321e4c1d9e52ee04c22c3839b3083b87f8f548e29e065e37f0799b", &(0x7f0000000300)="e8a565438180bd2d20bf590f4838368bed50e381334a6e070b40b96b537611f530db6139ded7b5aae91881d54c58daef9ea075464a48650c1e73f810c00ab55c199575f8ff74d9ff72e242dab0618787d9c5c3d85d1609c8d6064085bfab3abc3bea6995188979f26f7fb18a53987b2ab06f4515b2d955012102c9c4361210c2b0592272b7ded9f1cea9dc940336a6007eb84e7d940bbe17d53296465c0d5ae4d1"}}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x4, 0x4, 0x4, 0x4000b, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) 1.460091679s ago: executing program 8 (id=4721): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYRES8], 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x4004080) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) (async) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="00170400000001fcffff27c4388f73de56b5830584e7393d4a140bfa6f85c4218c4f24a98480a0af5ad398f484add1b957827cb340fdbb156bdccc049e1c6f5256d2255063653fd4f160942e26cebe9c28"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="00170400000001fcffff27c4388f73de56b5830584e7393d4a140bfa6f85c4218c4f24a98480a0af5ad398f484add1b957827cb340fdbb156bdccc049e1c6f5256d2255063653fd4f160942e26cebe9c28"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r9, &(0x7f0000000800)={&(0x7f00000002c0)={0xa, 0x4e24, 0x8, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) dup(r8) (async) r10 = dup(r8) socket(0x10, 0x80003, 0x0) (async) r11 = socket(0x10, 0x80003, 0x0) write(r11, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00", 0x20) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000080)={'sit0\x00'}) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000000)='bridge_slave_0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x3d}}, 0x7, 0x1, 0xf06, 0x3, 0xe2, 0x8, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) setrlimit(0x3, 0x0) (async) setrlimit(0x3, 0x0) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$SHM_LOCK(0x0, 0xb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000140)=0x90) (async) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000140)=0x90) write$P9_RSETATTR(r12, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) 1.40779823s ago: executing program 9 (id=4722): unshare(0x6a040000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = getpid() syz_open_procfs$pagemap(r2, &(0x7f00000000c0)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0xffffff6a) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaedf, 0x0, 0xffffffff, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x8, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000020, 0x1, {0x2}}) r7 = mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x8c2, 0x30, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mq_getsetattr(r7, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r7, &(0x7f00000003c0)=""/100, 0x64, 0xfffffffffffffff8, &(0x7f0000000280)={0x77359400}) io_uring_enter(r4, 0x52de, 0xf62e, 0x8, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x3, 0x0, {0x1, 0x1, 0x0, ')'}}, 0x22) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r9, 0x40045568, 0x29) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) 812.880318ms ago: executing program 7 (id=4723): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = gettid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143043, 0xe0) pwritev2(r5, 0x0, 0x0, 0x5412, 0x0, 0x500) writev(r3, &(0x7f00000006c0)=[{&(0x7f00000005c0)="f3", 0x1}], 0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x20000015, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) timer_gettime(r2, &(0x7f0000000140)) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r8 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x701c02, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(r8, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5, 0x3}}, './file0\x00'}) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='g\xf6\xc7\xe7\x19\x1a\x1e\xc3\x9bT\x103\xad\xb5=\xaf\x0e\x85\xb2\x1b\x93L\xf1\x03\xb9#\xfad\x88Iu\xf9\'\xe8\x91\xdclS\xda\x01\xed\f\x0ev\xc4\xd6\xd8=', &(0x7f0000000040)='\xc3', 0x0) 76.173327ms ago: executing program 0 (id=4724): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000900", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 0s ago: executing program 0 (id=4725): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\xf3\xeb\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xbd\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfKn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92$\x14a\xf4\x15_\x19Kt\r\xe3\xd9\xb4\x15mWl\xeb', 0x5) syz_io_uring_setup(0x2c0e, &(0x7f0000000400)={0x0, 0x6, 0xc002, 0x1000}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) (async) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\xf3\xeb\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xbd\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfKn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92$\x14a\xf4\x15_\x19Kt\r\xe3\xd9\xb4\x15mWl\xeb', 0x5) (async) syz_io_uring_setup(0x2c0e, &(0x7f0000000400)={0x0, 0x6, 0xc002, 0x1000}, 0x0, 0x0) (async) kernel console output (not intermixed with test programs): 1224.541857][T21946] RAX: ffffffffffffffda RBX: 00007f4ff49e5fa0 RCX: 00007f4ff478efc9 [ 1224.541874][T21946] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 1224.541889][T21946] RBP: 00007f4ff4811f91 R08: 0000000000000052 R09: 0000000000000000 [ 1224.541902][T21946] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1224.541915][T21946] R13: 00007f4ff49e6038 R14: 00007f4ff49e5fa0 R15: 00007f4ff4b0fa28 [ 1224.541949][T21946] [ 1224.541958][T21946] Mem-Info: [ 1224.782298][T13764] Bluetooth: hci1: command tx timeout [ 1224.857867][T21946] active_anon:9127 inactive_anon:0 isolated_anon:0 [ 1224.857867][T21946] active_file:23555 inactive_file:40359 isolated_file:0 [ 1224.857867][T21946] unevictable:780 dirty:79 writeback:0 [ 1224.857867][T21946] slab_reclaimable:11720 slab_unreclaimable:105881 [ 1224.857867][T21946] mapped:38302 shmem:1378 pagetables:2096 [ 1224.857867][T21946] sec_pagetables:0 bounce:0 [ 1224.857867][T21946] kernel_misc_reclaimable:0 [ 1224.857867][T21946] free:1271671 free_pcp:17371 free_cma:0 [ 1224.903240][ C1] vkms_vblank_simulate: vblank timer overrun [ 1224.927125][T21946] Node 0 active_anon:36508kB inactive_anon:0kB active_file:94188kB inactive_file:161232kB unevictable:1584kB isolated(anon):0kB isolated(file):0kB mapped:153176kB dirty:316kB writeback:0kB shmem:3976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13900kB pagetables:8156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1224.958946][ C1] vkms_vblank_simulate: vblank timer overrun [ 1224.965528][T21946] Node 1 active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1224.995570][ C1] vkms_vblank_simulate: vblank timer overrun [ 1225.003508][T21946] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1225.033358][ C1] vkms_vblank_simulate: vblank timer overrun [ 1225.049678][T21946] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 1225.057619][T21946] Node 0 DMA32 free:1185880kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36576kB inactive_anon:0kB active_file:94188kB inactive_file:161240kB unevictable:1584kB writepending:352kB zspages:0kB present:3129332kB managed:2565184kB mlocked:44kB bounce:0kB free_pcp:45528kB local_pcp:10768kB free_cma:0kB [ 1225.091090][ C1] vkms_vblank_simulate: vblank timer overrun [ 1225.199365][T21946] lowmem_reserve[]: 0 0 0 0 0 [ 1225.214427][T21946] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1225.243774][ C1] vkms_vblank_simulate: vblank timer overrun [ 1225.278517][T21946] lowmem_reserve[]: 0 0 0 0 0 [ 1225.329683][T21946] Node 1 Normal free:3885444kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24512kB local_pcp:12800kB free_cma:0kB [ 1225.362210][ C1] vkms_vblank_simulate: vblank timer overrun [ 1225.394001][T21946] lowmem_reserve[]: 0 0 0 0 0 [ 1225.415967][T21946] Node 0 DMA: [ 1225.437642][T21972] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4156'. [ 1225.480973][T21946] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1225.590545][ T5950] usb 9-1: new high-speed USB device number 107 using dummy_hcd [ 1225.613680][T21946] Node 0 DMA32: 824*4kB (UME) 618*8kB (UME) 813*16kB (UME) 545*32kB (UME) 301*64kB (UME) 164*128kB (UME) 99*256kB (UME) 106*512kB (UME) 38*1024kB (UME) 6*2048kB (UME) 239*4096kB (UM) = 1188704kB [ 1225.653785][T21946] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1225.714958][T21946] Node 1 Normal: 183*4kB (UE) 55*8kB (UME) 35*16kB (UME) 170*32kB (UE) 58*64kB (UME) 14*128kB (UME) 6*256kB (UME) 3*512kB (ME) 1*1024kB (M) 1*2048kB (E) 944*4096kB (UM) = 3885444kB [ 1225.733792][T21946] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1225.743946][T21946] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 1225.781452][T21946] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1225.791638][T21946] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1225.814441][T21946] 65290 total pagecache pages [ 1225.823591][T21946] 0 pages in swap cache [ 1225.827970][T21946] Free swap = 124996kB [ 1225.831081][ T5950] usb 9-1: Using ep0 maxpacket: 32 [ 1225.832357][T21946] Total swap = 124996kB [ 1225.844389][T21946] 2097051 pages RAM [ 1225.848336][T21946] 0 pages HighMem/MovableOnly [ 1225.853308][T21946] 424113 pages reserved [ 1225.866880][ T5950] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 1225.872665][T21946] 0 pages cma reserved [ 1225.894906][ T5950] usb 9-1: config 0 has no interface number 0 [ 1225.928603][ T24] usb 10-1: new high-speed USB device number 98 using dummy_hcd [ 1225.946491][ T5950] usb 9-1: config 0 interface 12 has no altsetting 0 [ 1226.021367][ T5950] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1226.034759][ T5950] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.050996][ T5950] usb 9-1: Product: syz [ 1226.060428][ T5950] usb 9-1: Manufacturer: syz [ 1226.079039][ T5950] usb 9-1: SerialNumber: syz [ 1226.102771][ T24] usb 10-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 1226.117221][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.140186][ T24] usb 10-1: Product: syz [ 1226.149258][ T5950] usb 9-1: config 0 descriptor?? [ 1226.156043][ T24] usb 10-1: Manufacturer: syz [ 1226.214040][ T24] usb 10-1: SerialNumber: syz [ 1226.242069][T21887] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1226.289118][ T24] usb 10-1: config 0 descriptor?? [ 1226.375489][T21887] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1226.394031][T21887] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1226.428981][T21987] input: syz0 as /devices/virtual/input/input206 [ 1226.435583][ T24] go7007 10-1:0.0: Sensoray 2250 found [ 1226.443630][ T24] go7007 10-1:0.0: probe with driver go7007 failed with error -12 [ 1226.458929][T21887] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1226.508353][T14039] usb 10-1: USB disconnect, device number 98 [ 1226.565434][T21970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1226.597050][T21970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1226.907617][T13764] Bluetooth: hci1: command tx timeout [ 1226.983097][T21887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1227.006934][T21887] 8021q: adding VLAN 0 to HW filter on device team0 [ 1227.031758][T16510] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.031907][T16510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1227.093466][T16517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.093574][T16517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1227.219670][T21887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1227.544636][T22016] dvmrp0: left allmulticast mode [ 1227.568035][T14039] usb 10-1: new high-speed USB device number 99 using dummy_hcd [ 1227.588456][T22017] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4163'. [ 1227.650637][T22019] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4163'. [ 1227.729587][T14039] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1227.746925][T14039] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.765345][T14039] usb 10-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 1227.772201][T21887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1227.783607][T14039] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.799240][T14039] usb 10-1: config 0 descriptor?? [ 1227.906883][T21887] veth0_vlan: entered promiscuous mode [ 1227.937179][T21887] veth1_vlan: entered promiscuous mode [ 1227.983149][T21887] veth0_macvtap: entered promiscuous mode [ 1228.006486][T21887] veth1_macvtap: entered promiscuous mode [ 1228.069987][T14039] usbhid 10-1:0.0: can't add hid device: -71 [ 1228.070621][T21887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1228.098250][T21887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1228.157244][T14039] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1228.185651][T16517] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.214442][T14039] usb 10-1: USB disconnect, device number 99 [ 1228.215199][T16517] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.271071][T16517] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.291208][T16517] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.431324][ T5950] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 1228.463555][ T5950] f81534 9-1:0.12: f81534_find_config_idx: read failed: -32 [ 1228.475577][ T5950] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 1228.484612][ T5950] f81534 9-1:0.12: probe with driver f81534 failed with error -32 [ 1228.494853][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.513862][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1228.613960][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.622132][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1228.708614][T22047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4131'. [ 1228.973487][ T24] usb 9-1: USB disconnect, device number 107 [ 1228.979841][T15915] Bluetooth: hci1: command tx timeout [ 1229.236803][T22056] tipc: Enabled bearer , priority 0 [ 1229.248112][T22056] syzkaller0: entered promiscuous mode [ 1229.260495][T22056] syzkaller0: entered allmulticast mode [ 1229.537459][T22068] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4168'. [ 1229.557044][T22069] tipc: Resetting bearer [ 1229.576434][T22073] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4170'. [ 1229.590372][T22055] tipc: Resetting bearer [ 1229.601491][T22075] ptrace attach of "./syz-executor exec"[13851] was attempted by "   "[22075] [ 1230.049569][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1230.196738][T22055] tipc: Disabling bearer [ 1230.247633][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 1230.256300][ T24] usb 1-1: config 0 has an invalid interface number: 79 but max is 0 [ 1230.264916][ T24] usb 1-1: config 0 has no interface number 0 [ 1230.275865][ T24] usb 1-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 1230.285258][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.320140][ T5923] tipc: Node number set to 1810409219 [ 1230.335871][ T24] usb 1-1: Product: syz [ 1230.347283][ T24] usb 1-1: Manufacturer: syz [ 1230.408716][ T24] usb 1-1: SerialNumber: syz [ 1230.448666][ T24] usb 1-1: config 0 descriptor?? [ 1231.802974][T13940] usb 9-1: new high-speed USB device number 108 using dummy_hcd [ 1231.986408][T13940] usb 9-1: Using ep0 maxpacket: 16 [ 1232.010437][T13940] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.086838][T13940] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.151976][T13940] usb 9-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1232.207848][T13940] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.248001][T13940] usb 9-1: config 0 descriptor?? [ 1232.499714][T13940] usbhid 9-1:0.0: can't add hid device: -71 [ 1232.520077][T13940] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1232.574001][T13940] usb 9-1: USB disconnect, device number 108 [ 1232.796378][T22120] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4178'. [ 1233.086766][ T24] cp210x 1-1:0.79: cp210x converter detected [ 1233.087726][ T89] usb 10-1: new high-speed USB device number 100 using dummy_hcd [ 1233.104193][ T24] cp210x 1-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 1233.157271][ T24] cp210x 1-1:0.79: querying part number failed [ 1233.206443][ T24] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1233.244871][ T24] usb 1-1: USB disconnect, device number 6 [ 1233.280579][ T89] usb 10-1: Using ep0 maxpacket: 32 [ 1233.322495][ T89] usb 10-1: config 0 has an invalid interface number: 9 but max is 0 [ 1233.370384][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1233.384471][ T89] usb 10-1: config 0 has no interface number 0 [ 1233.414249][ T89] usb 10-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1233.427818][ T24] cp210x 1-1:0.79: device disconnected [ 1233.427871][ T89] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.459087][ T89] usb 10-1: Product: syz [ 1233.474755][ T89] usb 10-1: Manufacturer: syz [ 1233.527602][ T89] usb 10-1: SerialNumber: syz [ 1233.562052][ T89] usb 10-1: config 0 descriptor?? [ 1233.571999][ T89] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1233.906663][T22144] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4182'. [ 1234.003982][T22146] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4183'. [ 1234.108081][T22146] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4183'. [ 1235.170843][ T89] gspca_topro: reg_r err -71 [ 1235.175585][ T89] gspca_topro: Sensor soi763a [ 1235.202444][ T89] usb 10-1: USB disconnect, device number 100 [ 1236.740500][T15297] usb 10-1: new low-speed USB device number 101 using dummy_hcd [ 1236.929224][T15297] usb 10-1: Invalid ep0 maxpacket: 64 [ 1237.087732][T15297] usb 10-1: new low-speed USB device number 102 using dummy_hcd [ 1237.267675][T15297] usb 10-1: Invalid ep0 maxpacket: 64 [ 1237.275596][T15297] usb usb10-port1: attempt power cycle [ 1237.446182][T22209] fuse: Bad value for 'fd' [ 1237.647648][T15297] usb 10-1: new low-speed USB device number 103 using dummy_hcd [ 1238.019329][T15297] usb 10-1: Invalid ep0 maxpacket: 64 [ 1238.190586][T15297] usb 10-1: new low-speed USB device number 104 using dummy_hcd [ 1238.228179][T22219] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4195'. [ 1238.269026][T15297] usb 10-1: Invalid ep0 maxpacket: 64 [ 1238.274971][T15297] usb usb10-port1: unable to enumerate USB device [ 1238.296249][T22208] fuse: Bad value for 'fd' [ 1238.577613][T19268] usb 9-1: new high-speed USB device number 109 using dummy_hcd [ 1238.917925][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.924213][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.986556][T19268] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.007644][T19268] usb 9-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1239.077831][T19268] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.126926][T19268] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1239.832722][ T60] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1239.893858][ T60] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1239.924331][ T60] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1239.977706][ T60] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1240.139442][T22250] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4198'. [ 1240.183868][T19268] stv0680 9-1:4.0: STV(e): camera ping failed!! [ 1240.466978][T19268] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1240.502734][T19268] stv0680 9-1:4.0: last error: 0, command = 0x0 [ 1240.549586][T19268] usb 9-1: USB disconnect, device number 109 [ 1241.532530][T22258] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1241.540118][T22258] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1241.547889][T22258] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1241.557079][T22258] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1241.564020][T22258] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1241.577902][T22258] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1241.584213][T22258] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1241.594318][T22258] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1241.872649][T22294] loop2: detected capacity change from 0 to 7 [ 1241.903938][T22294] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 [ 1241.926340][T22294] loop2: p1 start 48758784 is beyond EOD, truncated [ 1241.953747][T22294] loop2: p2 size 4294901760 extends beyond EOD, truncated [ 1241.980380][T22294] loop2: p3 start 4294962096 is beyond EOD, truncated [ 1242.086722][T22294] loop2: p4 start 1597073524 is beyond EOD, truncated [ 1242.100088][T22294] loop2: p5 start 11010048 is beyond EOD, truncated [ 1242.106873][T22294] loop2: p6 start 3670018 is beyond EOD, truncated [ 1242.130714][T22294] loop2: p7 size 197376 extends beyond EOD, truncated [ 1242.163190][T22294] loop2: p8 start 1680801792 is beyond EOD, truncated [ 1242.380895][T22304] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4208'. [ 1242.897825][T15915] Bluetooth: hci2: command 0x0406 tx timeout [ 1242.917401][T13975] udevd[13975]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 1242.922598][T13960] udevd[13960]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1243.224009][ T30] audit: type=1326 audit(1761492773.020:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22311 comm="syz.9.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682fd8efc9 code=0x7ffc0000 [ 1243.432128][ T30] audit: type=1326 audit(1761492773.020:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22311 comm="syz.9.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682fd8efc9 code=0x7ffc0000 [ 1243.515462][ T30] audit: type=1326 audit(1761492773.020:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22311 comm="syz.9.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f682fd8efc9 code=0x7ffc0000 [ 1243.592530][ T30] audit: type=1326 audit(1761492773.020:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22311 comm="syz.9.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682fd8efc9 code=0x7ffc0000 [ 1243.627827][T15915] Bluetooth: hci1: command 0x0c1a tx timeout [ 1243.633959][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 1243.633992][T15915] Bluetooth: hci5: command 0x0406 tx timeout [ 1243.640396][T13764] Bluetooth: hci0: command 0x0c1a tx timeout [ 1243.646735][ T89] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1243.652754][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 1243.669733][ T30] audit: type=1326 audit(1761492773.020:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22311 comm="syz.9.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682fd8efc9 code=0x7ffc0000 [ 1243.747373][ T30] audit: type=1326 audit(1761492773.020:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22311 comm="syz.9.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f682fd8efc9 code=0x7ffc0000 [ 1243.871373][ T89] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1243.897768][ T89] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.933767][ T30] audit: type=1326 audit(1761492773.030:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22311 comm="syz.9.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682fd8efc9 code=0x7ffc0000 [ 1243.974200][ T89] usb 1-1: Product: syz [ 1244.007872][ T89] usb 1-1: Manufacturer: syz [ 1244.033761][ T89] usb 1-1: SerialNumber: syz [ 1244.055211][ T30] audit: type=1326 audit(1761492773.030:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22311 comm="syz.9.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682fd8efc9 code=0x7ffc0000 [ 1244.162687][ T30] audit: type=1326 audit(1761492773.030:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22311 comm="syz.9.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f682fd8efc9 code=0x7ffc0000 [ 1244.231766][T22328] tipc: Enabled bearer , priority 0 [ 1244.278971][T22328] syzkaller0: entered promiscuous mode [ 1244.281706][ T30] audit: type=1326 audit(1761492773.030:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22311 comm="syz.9.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f682fd2b099 code=0x7ffc0000 [ 1244.298569][T22328] syzkaller0: entered allmulticast mode [ 1244.466044][T22328] tipc: Resetting bearer [ 1244.493377][T22328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.502515][T22328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.517467][T22337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.526784][T22337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.562865][T22326] tipc: Resetting bearer [ 1244.632632][T22326] tipc: Disabling bearer [ 1244.787294][ T89] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 1244.809473][ T89] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1244.850813][ T89] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1244.873027][ T89] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1244.917696][ T89] usb 1-1: USB disconnect, device number 7 [ 1245.106085][T22355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1245.237329][T22361] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4219'. [ 1245.611748][T22371] @: renamed from vlan0 (while UP) [ 1245.697638][T22321] Bluetooth: hci1: command 0x0c1a tx timeout [ 1246.625492][ T24] usb 9-1: new high-speed USB device number 110 using dummy_hcd [ 1246.661317][T22392] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4225'. [ 1246.701233][T22395] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4223'. [ 1246.865158][ T24] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1246.879997][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.901810][ T24] usb 9-1: Product: syz [ 1246.919649][ T24] usb 9-1: Manufacturer: syz [ 1246.924502][ T24] usb 9-1: SerialNumber: syz [ 1246.934353][ T24] usb 9-1: config 0 descriptor?? [ 1246.967652][ T89] usb 10-1: new high-speed USB device number 105 using dummy_hcd [ 1247.127760][ T89] usb 10-1: Using ep0 maxpacket: 32 [ 1247.129735][ T89] usb 10-1: config 0 has an invalid interface number: 79 but max is 0 [ 1247.144181][ T89] usb 10-1: config 0 has no interface number 0 [ 1247.159151][ T89] usb 10-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 1247.168801][ T89] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.169440][ T24] hso 9-1:0.0: Failed to find BULK IN ep [ 1247.177062][ T89] usb 10-1: Product: syz [ 1247.188700][ T89] usb 10-1: Manufacturer: syz [ 1247.194592][ T89] usb 10-1: SerialNumber: syz [ 1247.232436][ T89] usb 10-1: config 0 descriptor?? [ 1247.266756][ T24] usb-storage 9-1:0.0: USB Mass Storage device detected [ 1247.560777][T22407] tipc: Enabled bearer , priority 0 [ 1247.569197][T22407] syzkaller0: entered promiscuous mode [ 1247.576067][T22407] syzkaller0: entered allmulticast mode [ 1247.743463][T22409] tipc: Resetting bearer [ 1247.750975][T22409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.760111][T22409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.778552][T22321] Bluetooth: hci1: command 0x0c1a tx timeout [ 1247.813003][T22406] tipc: Resetting bearer [ 1247.862979][T22406] tipc: Disabling bearer [ 1248.289314][T22420] netlink: 'syz.7.4229': attribute type 1 has an invalid length. [ 1248.396702][ T30] kauditd_printk_skb: 1361 callbacks suppressed [ 1248.396721][ T30] audit: type=1800 audit(1761492778.210:3578): pid=22421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4229" name="nullb0" dev="devtmpfs" ino=4978 res=0 errno=0 [ 1248.600660][T22420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1249.364033][T22433] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4231'. [ 1250.387086][ T89] cp210x 10-1:0.79: cp210x converter detected [ 1250.409623][ T89] cp210x 10-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 1250.441115][ T89] cp210x 10-1:0.79: querying part number failed [ 1250.488292][ T89] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1250.518397][ T89] usb 10-1: USB disconnect, device number 105 [ 1250.552743][ T89] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1250.595552][ T89] cp210x 10-1:0.79: device disconnected [ 1250.842447][T13940] usb 9-1: USB disconnect, device number 110 [ 1250.897998][T22449] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4236'. [ 1251.079869][T22454] input: syz0 as /devices/virtual/input/input207 [ 1251.394341][T13960] udevd[13960]: setting mode of /dev/input/js0 to 020664 failed: No such file or directory [ 1251.417749][T13960] udevd[13960]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 1251.638449][T22466] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4241'. [ 1251.648531][T22467] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4241'. [ 1252.157611][T13940] usb 10-1: new high-speed USB device number 106 using dummy_hcd [ 1252.333259][T13940] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1252.346654][T13940] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1252.362050][T13940] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1252.372597][T13940] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1252.397821][T13940] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1252.407359][T13940] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1252.418290][T13940] usb 10-1: Manufacturer: syz [ 1252.487101][T13940] usb 10-1: config 0 descriptor?? [ 1252.607144][T22481] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4244'. [ 1252.942175][T13940] appleir 0003:05AC:8243.0031: unknown main item tag 0x0 [ 1252.982616][T13940] appleir 0003:05AC:8243.0031: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 1253.008469][ T24] usb 9-1: new high-speed USB device number 111 using dummy_hcd [ 1253.169876][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 1253.335589][ T24] usb 9-1: config 0 has an invalid interface number: 79 but max is 0 [ 1253.426994][T22486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1253.493766][T22486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.534858][T22486] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4243'. [ 1253.606437][T22486] gretap0: refused to change device tx_queue_len [ 1253.616278][T22486] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1253.762933][ T24] usb 9-1: config 0 has no interface number 0 [ 1253.966467][T22492] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4247'. [ 1254.002432][ T24] usb 9-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 1254.016692][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.044537][ T24] usb 9-1: Product: syz [ 1254.059209][ T24] usb 9-1: Manufacturer: syz [ 1254.082928][ T24] usb 9-1: SerialNumber: syz [ 1254.135332][ T24] usb 9-1: config 0 descriptor?? [ 1254.497807][ T5923] usb 10-1: reset high-speed USB device number 106 using dummy_hcd [ 1254.648027][ T5923] usb 10-1: device descriptor read/64, error -32 [ 1254.706375][T22499] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4249'. [ 1254.898687][ T5923] usb 10-1: reset high-speed USB device number 106 using dummy_hcd [ 1255.027620][ T5923] usb 10-1: device descriptor read/64, error -32 [ 1255.267688][ T5923] usb 10-1: reset high-speed USB device number 106 using dummy_hcd [ 1255.288000][ T5923] usb 10-1: device descriptor read/8, error -32 [ 1255.545707][T22475] raw-gadget.3 gadget.9: failed to queue suspend event [ 1255.556156][ T5923] usb 10-1: reset high-speed USB device number 106 using dummy_hcd [ 1255.564423][T22475] raw-gadget.3 gadget.9: failed to queue disconnect event [ 1255.787630][ T5923] usb 10-1: device not accepting address 106, error -71 [ 1255.818618][T13940] usb 10-1: USB disconnect, device number 106 [ 1255.995471][ T24] cp210x 9-1:0.79: cp210x converter detected [ 1256.037441][ T24] cp210x 9-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 1256.250945][ T24] cp210x 9-1:0.79: querying part number failed [ 1256.367042][ T24] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1256.430280][ T24] usb 9-1: USB disconnect, device number 111 [ 1256.441869][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1256.473529][ T24] cp210x 9-1:0.79: device disconnected [ 1256.548780][T22513] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1256.555544][T22513] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1256.574613][T22513] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1256.589265][T22513] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1256.598290][T22513] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1256.667765][T22513] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1258.246852][T22537] input: syz0 as /devices/virtual/input/input208 [ 1258.420464][T22542] input: syz0 as /devices/virtual/input/input209 [ 1258.581760][T13763] Bluetooth: hci5: command 0x0406 tx timeout [ 1258.587909][T13763] Bluetooth: hci4: command 0x0406 tx timeout [ 1258.593976][T13763] Bluetooth: hci2: command 0x0406 tx timeout [ 1258.657765][T13763] Bluetooth: hci0: command 0x0c1a tx timeout [ 1258.657874][T22321] Bluetooth: hci3: command 0x0406 tx timeout [ 1258.783993][T22321] Bluetooth: hci1: command 0x0c1a tx timeout [ 1259.299169][T22553] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4263'. [ 1259.569704][ T5950] usb 9-1: new high-speed USB device number 112 using dummy_hcd [ 1259.769637][ T5950] usb 9-1: Using ep0 maxpacket: 32 [ 1259.794013][ T5950] usb 9-1: config 0 has an invalid interface number: 79 but max is 0 [ 1259.804089][ T5950] usb 9-1: config 0 has no interface number 0 [ 1259.839351][ T5950] usb 9-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 1259.857597][ T5950] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.866418][ T5950] usb 9-1: Product: syz [ 1259.879219][ T5950] usb 9-1: Manufacturer: syz [ 1259.897425][ T5950] usb 9-1: SerialNumber: syz [ 1259.925232][ T5950] usb 9-1: config 0 descriptor?? [ 1260.180847][T22568] fuse: Unknown parameter 'ft' [ 1261.033973][T22575] input: syz0 as /devices/virtual/input/input210 [ 1261.173948][T22578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4271'. [ 1261.245358][T22578] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4271'. [ 1261.351466][T22578] vlan0: entered allmulticast mode [ 1261.356667][T22578] bridge_slave_0: entered allmulticast mode [ 1263.031931][T22595] block device autoloading is deprecated and will be removed. [ 1263.071483][ T5950] cp210x 9-1:0.79: cp210x converter detected [ 1263.091068][ T5950] cp210x 9-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 1263.102816][ T5950] cp210x 9-1:0.79: querying part number failed [ 1263.114422][ T5950] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1263.144091][T22602] loop2: detected capacity change from 0 to 7 [ 1263.161944][ T5950] usb 9-1: USB disconnect, device number 112 [ 1263.183730][T22602] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 [ 1263.191552][ T5950] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1263.210593][T22602] loop2: p1 start 48758784 is beyond EOD, truncated [ 1263.217890][ T5950] cp210x 9-1:0.79: device disconnected [ 1263.240597][T22602] loop2: p2 size 4294901760 extends beyond EOD, truncated [ 1263.283625][T22602] loop2: p3 start 4294962096 is beyond EOD, truncated [ 1263.350512][T22611] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4279'. [ 1263.401129][ T89] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1263.452651][T22602] loop2: p4 start 1597073524 is beyond EOD, truncated [ 1263.507684][T22602] loop2: p5 start 11010048 is beyond EOD, truncated [ 1263.514506][T22602] loop2: p6 start 3670018 is beyond EOD, truncated [ 1263.522198][T22602] loop2: p7 size 197376 extends beyond EOD, truncated [ 1263.536086][T22602] loop2: p8 start 1680801792 is beyond EOD, truncated [ 1263.811928][ T89] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1263.844297][T13975] udevd[13975]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 1263.858774][T13960] udevd[13960]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1263.907337][ T89] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.930915][ T89] usb 1-1: Product: syz [ 1263.944787][ T89] usb 1-1: Manufacturer: syz [ 1263.965266][ T89] usb 1-1: SerialNumber: syz [ 1263.985929][ T89] usb 1-1: config 0 descriptor?? [ 1264.018414][T22619] loop2: detected capacity change from 0 to 7 [ 1264.029048][ T89] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1264.038358][T22619] Dev loop2: unable to read RDB block 7 [ 1264.043922][T22619] loop2: unable to read partition table [ 1264.053749][ T89] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1264.064078][T22619] loop2: partition table beyond EOD, truncated [ 1264.070394][T22619] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1264.095694][ T89] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1264.123373][ T89] usb 1-1: media controller created [ 1264.208951][ T89] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1264.229354][T22621] input: syz0 as /devices/virtual/input/input211 [ 1264.312494][T22625] sch_fq: defrate 16 ignored. [ 1264.432203][ T89] DVB: Unable to find symbol mt352_attach() [ 1264.757785][ T89] DVB: Unable to find symbol nxt6000_attach() [ 1264.801740][ T89] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1264.816784][ T89] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input212 [ 1264.830815][ T89] dvb-usb: schedule remote query interval to 1000 msecs. [ 1264.839774][ T89] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1264.850360][ T89] dvb-usb: bulk message failed: -22 (7/0) [ 1264.856105][ T89] dvb-usb: bulk message failed: -22 (7/0) [ 1264.983200][ T89] usb 1-1: USB disconnect, device number 8 [ 1265.071351][ T5923] usb 10-1: new high-speed USB device number 107 using dummy_hcd [ 1265.305924][ T5923] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1265.306123][ T89] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1265.385999][ T5923] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1265.400389][ T5923] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.468512][ T5923] usb 10-1: config 0 descriptor?? [ 1265.489519][ T5923] pwc: Askey VC010 type 2 USB webcam detected. [ 1265.683504][ T5923] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1265.692336][ T5923] pwc: recv_control_msg error -32 req 02 val 2700 [ 1265.699699][ T5923] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1265.706875][ T5923] pwc: recv_control_msg error -32 req 04 val 1000 [ 1265.715867][ T5923] pwc: recv_control_msg error -32 req 04 val 1300 [ 1265.723428][ T5923] pwc: recv_control_msg error -32 req 04 val 1400 [ 1265.730778][ T5923] pwc: recv_control_msg error -32 req 02 val 2000 [ 1265.738120][ T5923] pwc: recv_control_msg error -32 req 02 val 2100 [ 1265.745382][ T5923] pwc: recv_control_msg error -32 req 04 val 1500 [ 1265.756619][ T5923] pwc: recv_control_msg error -32 req 02 val 2500 [ 1265.765804][ T5923] pwc: recv_control_msg error -32 req 02 val 2400 [ 1265.774007][ T5923] pwc: recv_control_msg error -32 req 02 val 2600 [ 1265.783792][ T5923] pwc: recv_control_msg error -32 req 02 val 2900 [ 1265.816800][T22639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.841256][T22640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.865645][T22639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.904977][T22640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.129297][ T5923] pwc: recv_control_msg error -71 req 04 val 1100 [ 1266.156404][ T5923] pwc: recv_control_msg error -71 req 04 val 1200 [ 1266.218852][ T5923] pwc: Registered as video103. [ 1266.268371][ T5923] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input213 [ 1266.572803][ T5923] usb 10-1: USB disconnect, device number 107 [ 1267.395985][T22666] loop2: detected capacity change from 0 to 7 [ 1267.396541][T22664] input: syz0 as /devices/virtual/input/input214 [ 1267.410992][T22666] Dev loop2: unable to read RDB block 7 [ 1267.424105][T22666] loop2: unable to read partition table [ 1267.435651][T22666] loop2: partition table beyond EOD, truncated [ 1267.465330][T22666] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1267.852737][T22678] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1268.436442][T22684] xt_ecn: cannot match TCP bits for non-tcp packets [ 1269.719688][T22709] vlan0: entered promiscuous mode [ 1269.733872][T22709] bridge0: entered promiscuous mode [ 1269.982406][T22713] input: syz0 as /devices/virtual/input/input215 [ 1270.308044][T22729] xt_connbytes: Forcing CT accounting to be enabled [ 1270.517324][ T30] audit: type=1800 audit(1761492800.330:3579): pid=22730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4311" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1270.600859][T22734] vivid-000: disconnect [ 1270.841294][T22710] vivid-000: reconnect [ 1271.713148][T22747] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1271.726952][T22747] team0: Port device batadv1 added [ 1272.838797][T22755] loop2: detected capacity change from 0 to 7 [ 1272.869427][T22755] Dev loop2: unable to read RDB block 7 [ 1272.875053][T22755] loop2: unable to read partition table [ 1272.908309][T22755] loop2: partition table beyond EOD, truncated [ 1272.918298][T22755] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1272.942540][ T5198] Dev loop2: unable to read RDB block 7 [ 1272.957700][ T5198] loop2: unable to read partition table [ 1272.963590][ T5198] loop2: partition table beyond EOD, truncated [ 1273.001693][T22759] input: syz0 as /devices/virtual/input/input216 [ 1273.102887][T22761] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4321'. [ 1273.203252][T22766] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1273.214561][T22769] loop5: detected capacity change from 0 to 2791 [ 1273.233011][T22765] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4322'. [ 1273.245289][T22765] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1273.524173][T22777] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4323'. [ 1273.578764][T13960] buffer_io_error: 315 callbacks suppressed [ 1273.578784][T13960] Buffer I/O error on dev loop5, logical block 348, async page read [ 1274.270787][T22788] vivid-000: disconnect [ 1274.417403][T22790] loop6: detected capacity change from 0 to 7 [ 1274.435155][T22790] Dev loop6: unable to read RDB block 7 [ 1274.458194][T22790] loop6: unable to read partition table [ 1274.464076][T22790] loop6: partition table beyond EOD, truncated [ 1274.474757][T22790] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1274.734514][T22782] vivid-000: reconnect [ 1274.754804][T22796] syzkaller0: entered promiscuous mode [ 1274.763951][T22796] syzkaller0: entered allmulticast mode [ 1275.144503][T22800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4331'. [ 1275.429870][T22805] loop2: detected capacity change from 0 to 7 [ 1275.437345][T22805] Dev loop2: unable to read RDB block 7 [ 1275.444117][T22805] loop2: unable to read partition table [ 1275.451189][T22805] loop2: partition table beyond EOD, truncated [ 1275.457416][T22805] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1275.759341][ T89] usb 9-1: new high-speed USB device number 113 using dummy_hcd [ 1275.917639][ T89] usb 9-1: Using ep0 maxpacket: 16 [ 1275.943370][ T89] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1275.952592][ T89] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.010744][ T89] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1276.044258][ T89] usb 9-1: config 1 has no interface number 1 [ 1276.058411][ T89] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1276.122083][ T89] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1276.136186][ T89] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1276.145689][ T89] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.363867][ T30] audit: type=1326 audit(1761492806.180:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22823 comm="syz.0.4338" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7cb38efc9 code=0x0 [ 1276.369462][ T89] usb 9-1: Product: syz [ 1276.417831][ T89] usb 9-1: Manufacturer: syz [ 1276.422935][ T89] usb 9-1: SerialNumber: syz [ 1276.496848][T22829] netlink: 'syz.0.4340': attribute type 10 has an invalid length. [ 1276.520045][T22829] macvlan1: entered allmulticast mode [ 1276.531979][T22829] veth1_vlan: entered allmulticast mode [ 1276.541428][T22829] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 1276.632277][T22835] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1276.643144][T22807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.654475][T22807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.696499][T22835] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1276.726984][ T89] usb 9-1: USB disconnect, device number 113 [ 1276.735468][T22836] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1276.745035][T22837] iommufd_mock iommufd_mock2: Adding to iommu group 0 [ 1276.861854][T13960] udevd[13960]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1277.285548][T22850] input: syz0 as /devices/virtual/input/input217 [ 1277.504762][T22860] tipc: Enabled bearer , priority 0 [ 1277.599677][ T30] audit: type=1326 audit(1761492807.410:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22856 comm="syz.9.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682fd8efc9 code=0x7ffc0000 [ 1277.660604][ T30] audit: type=1326 audit(1761492807.410:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22856 comm="syz.9.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f682fd8efc9 code=0x7ffc0000 [ 1277.829638][T22868] syzkaller0: entered promiscuous mode [ 1277.865676][T22868] syzkaller0: entered allmulticast mode [ 1278.066715][ T30] audit: type=1326 audit(1761492807.410:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22856 comm="syz.9.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682fd8efc9 code=0x7ffc0000 [ 1278.094599][T22860] tipc: Resetting bearer [ 1278.117377][T22860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.126521][T22860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.181076][ T30] audit: type=1326 audit(1761492807.410:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22856 comm="syz.9.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f682fd8efc9 code=0x7ffc0000 [ 1278.231573][T22859] tipc: Resetting bearer [ 1278.243660][ T30] audit: type=1326 audit(1761492807.410:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22856 comm="syz.9.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682fd8efc9 code=0x7ffc0000 [ 1278.301567][ T30] audit: type=1326 audit(1761492807.410:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22856 comm="syz.9.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f682fd8efc9 code=0x7ffc0000 [ 1278.373536][T22859] tipc: Disabling bearer [ 1278.379483][ T30] audit: type=1326 audit(1761492807.410:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22856 comm="syz.9.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682fd8efc9 code=0x7ffc0000 [ 1278.559116][ T30] audit: type=1326 audit(1761492807.410:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22856 comm="syz.9.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f682fd8efc9 code=0x7ffc0000 [ 1278.777650][ T30] audit: type=1326 audit(1761492807.410:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22856 comm="syz.9.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682fd8efc9 code=0x7ffc0000 [ 1278.797834][T22879] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4353'. [ 1279.899489][T22902] input: syz0 as /devices/virtual/input/input218 [ 1280.259573][T22908] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4362'. [ 1280.287667][ T89] usb 10-1: new full-speed USB device number 108 using dummy_hcd [ 1280.449698][ T89] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.468331][ T89] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1280.492153][ T89] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1280.504179][ T89] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.521091][ T89] usb 10-1: Product: syz [ 1280.531064][ T89] usb 10-1: Manufacturer: syz [ 1280.542112][ T89] usb 10-1: SerialNumber: syz [ 1280.784458][ T89] usb 10-1: 0:2 : does not exist [ 1280.803592][ T89] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1280.825536][ T89] usb 10-1: USB disconnect, device number 108 [ 1280.852140][T13960] udevd[13960]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1282.322000][T22935] netlink: 'syz.6.4368': attribute type 12 has an invalid length. [ 1284.307852][T22961] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4374'. [ 1284.339381][T22961] input: syz0 as /devices/virtual/input/input219 [ 1285.776879][T22977] binder: 22976:22977 ioctl 4008ae90 200000000000 returned -22 [ 1285.877986][T22983] loop2: detected capacity change from 0 to 7 [ 1285.905159][T13960] Dev loop2: unable to read RDB block 7 [ 1285.922621][T13960] loop2: unable to read partition table [ 1285.955254][T13960] loop2: partition table beyond EOD, truncated [ 1285.977297][T22983] Dev loop2: unable to read RDB block 7 [ 1285.983435][T22983] loop2: unable to read partition table [ 1286.013012][T22983] loop2: partition table beyond EOD, truncated [ 1286.041439][T22983] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1286.073116][ T5198] Dev loop2: unable to read RDB block 7 [ 1286.078969][ T5198] loop2: unable to read partition table [ 1286.089909][ T5198] loop2: partition table beyond EOD, truncated [ 1286.332834][T22998] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4388'. [ 1286.333764][T22996] input: syz0 as /devices/virtual/input/input220 [ 1286.465944][T23001] fuse: Unknown parameter 'bd' [ 1287.406776][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 1287.406794][ T30] audit: type=1326 audit(1761492817.220:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23023 comm="syz.8.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44aaf8efc9 code=0x7ffc0000 [ 1287.440718][ T30] audit: type=1326 audit(1761492817.260:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23023 comm="syz.8.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44aaf8efc9 code=0x7ffc0000 [ 1287.464624][ T30] audit: type=1326 audit(1761492817.260:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23023 comm="syz.8.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f44aaf8efc9 code=0x7ffc0000 [ 1287.493093][ T30] audit: type=1326 audit(1761492817.260:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23023 comm="syz.8.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44aaf8efc9 code=0x7ffc0000 [ 1287.517654][ T30] audit: type=1326 audit(1761492817.260:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23023 comm="syz.8.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44aaf8efc9 code=0x7ffc0000 [ 1287.540107][ C1] vkms_vblank_simulate: vblank timer overrun [ 1287.549715][ T30] audit: type=1326 audit(1761492817.260:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23023 comm="syz.8.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44aaf8efc9 code=0x7ffc0000 [ 1287.572178][ C1] vkms_vblank_simulate: vblank timer overrun [ 1287.579170][ T30] audit: type=1326 audit(1761492817.260:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23023 comm="syz.8.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f44aaf8efc9 code=0x7ffc0000 [ 1287.602986][T23026] program syz.8.4397 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1287.610090][ T30] audit: type=1326 audit(1761492817.260:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23023 comm="syz.8.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44aaf8efc9 code=0x7ffc0000 [ 1287.636592][ T30] audit: type=1326 audit(1761492817.260:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23023 comm="syz.8.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f44aaf8efc9 code=0x7ffc0000 [ 1287.658980][ C1] vkms_vblank_simulate: vblank timer overrun [ 1287.668715][ T30] audit: type=1326 audit(1761492817.260:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23023 comm="syz.8.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44aaf8efc9 code=0x7ffc0000 [ 1287.691327][ C1] vkms_vblank_simulate: vblank timer overrun [ 1288.127757][T23031] vivid-007: ================= START STATUS ================= [ 1288.135544][T23031] vivid-007: Enable Output Cropping: true [ 1288.141473][T23031] vivid-007: Enable Output Composing: true [ 1288.147380][T23031] vivid-007: Enable Output Scaler: true [ 1288.153271][T23031] vivid-007: Tx RGB Quantization Range: Automatic [ 1288.159919][T23031] vivid-007: Transmit Mode: HDMI [ 1288.164954][T23031] vivid-007: Hotplug Present: 0x00000000 [ 1288.170752][T23031] vivid-007: RxSense Present: 0x00000000 [ 1288.176665][T23031] vivid-007: EDID Present: 0x00000000 [ 1288.183034][T23031] vivid-007: ================== END STATUS ================== [ 1288.547662][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1288.721623][ T24] usb 1-1: config 0 has no interfaces? [ 1288.736323][ T24] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1288.746245][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.773997][ T24] usb 1-1: Product: syz [ 1288.786125][ T24] usb 1-1: Manufacturer: syz [ 1288.787639][T14039] usb 10-1: new high-speed USB device number 109 using dummy_hcd [ 1288.812478][ T24] usb 1-1: SerialNumber: syz [ 1288.829736][ T24] usb 1-1: config 0 descriptor?? [ 1288.968923][T14039] usb 10-1: Using ep0 maxpacket: 8 [ 1288.976614][T14039] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1288.992397][T14039] usb 10-1: config 5 has an invalid interface number: 212 but max is 0 [ 1289.001234][T14039] usb 10-1: config 5 has an invalid descriptor of length 184, skipping remainder of the config [ 1289.014219][T14039] usb 10-1: config 5 has no interface number 0 [ 1289.020848][T14039] usb 10-1: config 5 interface 212 altsetting 41 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1289.035052][T14039] usb 10-1: config 5 interface 212 has no altsetting 0 [ 1289.054131][T14039] usb 10-1: New USB device found, idVendor=0763, idProduct=2019, bcdDevice=3a.5e [ 1289.065319][T14039] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.074545][T14039] usb 10-1: Product: syz [ 1289.080616][T14039] usb 10-1: Manufacturer: syz [ 1289.085541][T14039] usb 10-1: SerialNumber: syz [ 1290.284931][T23060] vivid-000: disconnect [ 1290.830711][ T5923] usb 1-1: USB disconnect, device number 9 [ 1291.450239][T23069] input: syz1 as /devices/virtual/input/input221 [ 1291.649913][T23049] vivid-000: reconnect [ 1291.833312][T14039] usb 10-1: USB disconnect, device number 109 [ 1291.933291][T13960] udevd[13960]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:5.212/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1292.257726][T14039] usb 10-1: new high-speed USB device number 110 using dummy_hcd [ 1292.327785][ T89] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1292.513328][T14039] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1292.524542][ T89] usb 1-1: Using ep0 maxpacket: 16 [ 1292.561317][T14039] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1292.622611][T14039] usb 10-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1292.632219][T23082] vlan0: left allmulticast mode [ 1292.647697][T23082] bridge_slave_0: left allmulticast mode [ 1292.685901][T14039] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.856664][T19268] usb 9-1: new high-speed USB device number 114 using dummy_hcd [ 1292.866141][T14039] usb 10-1: config 0 descriptor?? [ 1293.023523][T19268] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1293.034029][T19268] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1293.045543][T19268] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1293.064691][T19268] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1293.133968][T19268] usb 9-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 1293.157888][T19268] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.198950][T19268] usb 9-1: config 0 descriptor?? [ 1293.569292][T14039] hid-led 0003:1D34:000A.0032: probe with driver hid-led failed with error -71 [ 1293.589276][T14039] usb 10-1: USB disconnect, device number 110 [ 1293.643679][T19268] nti 0003:0757:0A00.0033: unknown main item tag 0x0 [ 1293.656813][T19268] nti 0003:0757:0A00.0033: unknown main item tag 0x0 [ 1293.667848][T19268] nti 0003:0757:0A00.0033: unknown main item tag 0x0 [ 1293.675320][T19268] nti 0003:0757:0A00.0033: unknown main item tag 0x0 [ 1293.682653][T19268] nti 0003:0757:0A00.0033: unknown main item tag 0x0 [ 1293.736006][T19268] nti 0003:0757:0A00.0033: unknown main item tag 0x0 [ 1293.792580][T19268] nti 0003:0757:0A00.0033: unknown main item tag 0x0 [ 1293.808068][T23098] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1293.819877][T19268] nti 0003:0757:0A00.0033: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.8-1/input0 [ 1293.930448][T23098] bridge7: entered allmulticast mode [ 1293.941807][T23098] team0: Port device bridge7 added [ 1294.026277][T19268] usb 9-1: USB disconnect, device number 114 [ 1294.516871][T23113] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4419'. [ 1294.617360][T23101] fido_id[23101]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1294.789482][ T5923] usb 10-1: new high-speed USB device number 111 using dummy_hcd [ 1295.022632][ T89] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1295.036078][ T5923] usb 10-1: Using ep0 maxpacket: 32 [ 1295.042360][ T89] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1295.052968][ T5923] usb 10-1: config 0 has an invalid interface number: 79 but max is 0 [ 1295.060476][ T89] usb 1-1: can't read configurations, error -71 [ 1295.066169][ T5923] usb 10-1: config 0 has no interface number 0 [ 1295.082360][ T5923] usb 10-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 1295.094630][ T5923] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.116732][ T5923] usb 10-1: Product: syz [ 1295.123852][ T5923] usb 10-1: Manufacturer: syz [ 1295.133672][ T5923] usb 10-1: SerialNumber: syz [ 1295.160348][ T5923] usb 10-1: config 0 descriptor?? [ 1296.477626][T13940] usb 9-1: new high-speed USB device number 115 using dummy_hcd [ 1296.479490][T23140] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.493053][T23140] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.628271][T13940] usb 9-1: Using ep0 maxpacket: 32 [ 1296.635871][T13940] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 1296.662235][T13940] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.686836][T13940] usb 9-1: config 0 has no interface number 0 [ 1296.713218][T13940] usb 9-1: config 0 interface 8 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1296.755811][T13940] usb 9-1: config 0 interface 8 has no altsetting 0 [ 1296.780309][T13940] usb 9-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 1296.789787][T13940] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.798541][T13940] usb 9-1: Product: syz [ 1296.803210][T13940] usb 9-1: Manufacturer: syz [ 1296.809099][T13940] usb 9-1: SerialNumber: syz [ 1296.817315][T13940] usb 9-1: config 0 descriptor?? [ 1297.044331][T23144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.055665][T23144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1297.087339][T13940] ath6kl: Failed to submit usb control message: -71 [ 1297.097015][T13940] ath6kl: unable to send the bmi data to the device: -71 [ 1297.113236][T13940] ath6kl: Unable to send get target info: -71 [ 1297.133477][T13940] ath6kl: Failed to init ath6kl core: -71 [ 1297.155895][T13940] ath6kl_usb 9-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 1297.181548][T13940] usb 9-1: USB disconnect, device number 115 [ 1297.292338][ T5923] cp210x 10-1:0.79: cp210x converter detected [ 1297.299956][ T5923] cp210x 10-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 1297.308995][ T5923] cp210x 10-1:0.79: querying part number failed [ 1297.350889][ T5923] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1297.376514][ T5923] usb 10-1: USB disconnect, device number 111 [ 1297.392819][T23148] input: syz0 as /devices/virtual/input/input222 [ 1297.409380][ T5923] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1297.430642][ T5923] cp210x 10-1:0.79: device disconnected [ 1297.467879][T23150] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4435'. [ 1297.550545][T23140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1297.669246][T23140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1297.859208][T23140] veth1_vlan: left allmulticast mode [ 1297.930990][ T5923] usb 9-1: new high-speed USB device number 116 using dummy_hcd [ 1298.104775][ T5923] usb 9-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 1298.120789][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.138939][ T5923] usb 9-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 1298.155063][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.168938][ T5923] usb 9-1: Product: syz [ 1298.173144][ T5923] usb 9-1: SerialNumber: syz [ 1298.187828][T16508] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.212451][T16508] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.238971][ T5923] usb 9-1: config 0 descriptor?? [ 1298.567731][T23171] vivid-000: disconnect [ 1298.668316][T23157] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1298.827701][T23157] usb 1-1: Using ep0 maxpacket: 16 [ 1298.838853][T23157] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1298.854096][T23157] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.886322][T23157] usb 1-1: Product: syz [ 1298.915247][T23157] usb 1-1: Manufacturer: syz [ 1298.923862][T23157] usb 1-1: SerialNumber: syz [ 1298.943786][T23157] usb 1-1: config 0 descriptor?? [ 1298.977064][ T5923] ldusb 9-1:0.0: Interrupt in endpoint not found [ 1299.003823][ T5923] usb 9-1: USB disconnect, device number 116 [ 1299.370771][T23157] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1299.393587][T23157] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1299.414344][T23157] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1299.422649][T23157] usb 1-1: media controller created [ 1299.778913][T23187] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4446'. [ 1299.814144][T23168] vivid-000: reconnect [ 1299.880742][T23157] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1300.037652][T14039] usb 9-1: new high-speed USB device number 117 using dummy_hcd [ 1300.157865][T23157] zl10353_read_register: readreg error (reg=127, ret==0) [ 1300.199708][T14039] usb 9-1: Using ep0 maxpacket: 32 [ 1300.208231][T14039] usb 9-1: config 0 has an invalid interface number: 79 but max is 0 [ 1300.209161][T23157] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1300.224840][T14039] usb 9-1: config 0 has no interface number 0 [ 1300.236393][T14039] usb 9-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 1300.245702][T14039] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.253767][T14039] usb 9-1: Product: syz [ 1300.260537][T14039] usb 9-1: Manufacturer: syz [ 1300.265144][T14039] usb 9-1: SerialNumber: syz [ 1300.284855][T14039] usb 9-1: config 0 descriptor?? [ 1300.301700][T23193] input: syz0 as /devices/virtual/input/input223 [ 1300.343790][T23157] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1300.368111][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.374452][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.485682][T23157] usb 1-1: USB disconnect, device number 12 [ 1300.584632][T23196] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4449'. [ 1300.661077][T23157] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1301.518511][T23157] usb 10-1: new high-speed USB device number 112 using dummy_hcd [ 1301.760625][T23157] usb 10-1: Using ep0 maxpacket: 32 [ 1301.770625][T23157] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1301.846380][T23157] usb 10-1: config 128 has an invalid interface number: 127 but max is 3 [ 1301.855413][T23157] usb 10-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.867159][T23157] usb 10-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1301.876567][T23157] usb 10-1: config 128 has no interface number 0 [ 1301.883956][T23157] usb 10-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 1301.895978][T23157] usb 10-1: config 128 interface 127 has no altsetting 0 [ 1301.924917][T23157] usb 10-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1301.951080][T23157] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.967733][T23157] usb 10-1: Product: syz [ 1301.982452][T23157] usb 10-1: Manufacturer: syz [ 1301.992594][T23157] usb 10-1: SerialNumber: syz [ 1302.017485][T23216] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1302.708366][T23242] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4461'. [ 1302.803300][T14039] cp210x 9-1:0.79: cp210x converter detected [ 1302.942081][T14039] cp210x 9-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 1302.994329][T14039] cp210x 9-1:0.79: querying part number failed [ 1303.025051][T14039] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1303.157882][T14039] usb 9-1: USB disconnect, device number 117 [ 1303.179495][T14039] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1303.190850][T14039] cp210x 9-1:0.79: device disconnected [ 1304.303511][T23253] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4465'. [ 1304.461519][T23157] usb 10-1: USB disconnect, device number 112 [ 1304.510267][T13960] udevd[13960]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1304.909344][T23266] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4469'. [ 1304.947677][T14039] usb 9-1: new high-speed USB device number 118 using dummy_hcd [ 1305.096900][T23271] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4471'. [ 1305.117273][T23271] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4471'. [ 1305.163180][T14039] usb 9-1: Using ep0 maxpacket: 16 [ 1305.283210][T14039] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.531642][T14039] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1305.581683][T14039] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1305.621054][T14039] usb 9-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1305.725016][T23280] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4472'. [ 1305.745881][T14039] usb 9-1: config 7 interface 0 has no altsetting 0 [ 1305.753544][T14039] usb 9-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1305.787373][T14039] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.261754][T23260] binder: 23258:23260 ioctl c0306201 2000000001c0 returned -14 [ 1306.273625][T14039] hid (null): unknown global tag 0xc [ 1306.285905][T14039] input: HID 0458:5010 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:7.0/0003:0458:5010.0034/input/input224 [ 1306.376376][T14039] kye 0003:0458:5010.0034: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.8-1/input0 [ 1306.479299][T14039] usb 9-1: USB disconnect, device number 118 [ 1306.594539][T23289] fido_id[23289]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1306.644236][T23297] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4477'. [ 1307.419733][T23305] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4479'. [ 1307.586369][T23314] bond4: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 1307.600623][T23314] bond4 (unregistering): Released all slaves [ 1307.690582][T23313] bond4: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 1307.704511][T23313] bond4 (unregistering): Released all slaves [ 1308.067654][T23157] usb 10-1: new high-speed USB device number 113 using dummy_hcd [ 1308.217734][T23157] usb 10-1: Using ep0 maxpacket: 16 [ 1308.227078][T23157] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1308.245185][T23157] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1308.254631][T23157] usb 10-1: can't read configurations, error -71 [ 1308.459467][T23332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4487'. [ 1308.474516][T23332] bridge0: port 3(macvlan3) entered blocking state [ 1308.481499][T23332] bridge0: port 3(macvlan3) entered disabled state [ 1308.488402][T23332] macvlan3: entered allmulticast mode [ 1308.493883][T23332] bridge0: entered allmulticast mode [ 1308.502812][T23332] macvlan3: left allmulticast mode [ 1308.508130][T23332] bridge0: left allmulticast mode [ 1308.777164][T23335] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4488'. [ 1308.786585][ T89] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1308.881432][T23341] input: syz0 as /devices/virtual/input/input225 [ 1308.959454][ T89] usb 1-1: Using ep0 maxpacket: 32 [ 1308.968906][ T89] usb 1-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 1308.969112][T23343] loop2: detected capacity change from 0 to 7 [ 1308.979453][ T89] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1308.989068][T23343] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 [ 1309.000567][ T89] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1309.000597][ T89] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.000616][ T89] usb 1-1: Product: syz [ 1309.000629][ T89] usb 1-1: Manufacturer: syz [ 1309.000643][ T89] usb 1-1: SerialNumber: syz [ 1309.003451][ T89] usb 1-1: config 0 descriptor?? [ 1309.018410][T23343] loop2: p1 start 48758784 is beyond EOD, truncated [ 1309.045499][T23343] loop2: p2 size 4294901760 extends beyond EOD, truncated [ 1309.054134][T23343] loop2: p3 start 4294962096 is beyond EOD, truncated [ 1309.062974][T23343] loop2: p4 start 1597073524 is beyond EOD, truncated [ 1309.069937][T23343] loop2: p5 start 11010048 is beyond EOD, truncated [ 1309.076734][T23343] loop2: p6 start 3670018 is beyond EOD, truncated [ 1309.083636][T23343] loop2: p7 size 197376 extends beyond EOD, truncated [ 1309.092234][T23343] loop2: p8 start 1680801792 is beyond EOD, truncated [ 1309.107666][T19270] usb 9-1: new high-speed USB device number 119 using dummy_hcd [ 1309.163267][T13975] udevd[13975]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 1309.177204][T13960] udevd[13960]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1309.290360][T19270] usb 9-1: config 0 has an invalid interface number: 216 but max is 0 [ 1309.304955][T19270] usb 9-1: config 0 has no interface number 0 [ 1309.311450][T19270] usb 9-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 1309.323940][T19270] usb 9-1: config 0 interface 216 has no altsetting 0 [ 1309.330895][T19270] usb 9-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 1309.340158][T19270] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.350925][T19270] usb 9-1: config 0 descriptor?? [ 1309.356811][T23339] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22 [ 1309.367735][T19270] usb 9-1: NFC: intf ffff8880294a0000 id ffffffff8e9086e0 [ 1309.566923][T23157] usb 9-1: USB disconnect, device number 119 [ 1309.741339][T19270] usb 1-1: USB disconnect, device number 13 [ 1309.852446][T23353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4495'. [ 1310.191190][T23362] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4496'. [ 1310.698708][T23157] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1310.708742][ T5923] usb 9-1: new high-speed USB device number 120 using dummy_hcd [ 1310.900702][ T5923] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.952645][T23157] usb 1-1: Using ep0 maxpacket: 32 [ 1310.959942][ T5923] usb 9-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9 [ 1310.969865][ T5923] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.978831][ T5923] usb 9-1: Product: syz [ 1311.010615][ T5923] usb 9-1: Manufacturer: syz [ 1311.025501][T23157] usb 1-1: config 0 has an invalid interface number: 79 but max is 0 [ 1311.037720][T23157] usb 1-1: config 0 has no interface number 0 [ 1311.066522][ T5923] usb 9-1: SerialNumber: syz [ 1311.074492][ T5923] usb 9-1: config 0 descriptor?? [ 1311.093164][T23157] usb 1-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 1311.102837][T23157] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.112975][T23157] usb 1-1: Product: syz [ 1311.118297][T23157] usb 1-1: Manufacturer: syz [ 1311.123152][T23157] usb 1-1: SerialNumber: syz [ 1311.230822][T23157] usb 1-1: config 0 descriptor?? [ 1311.290092][T23361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.300588][T23361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.326397][ T5923] usb 9-1: probing VID:PID(2201:012C) [ 1311.334526][ T5923] usb 9-1: Could not find two sets of bulk-in/out endpoint pairs [ 1311.383667][ T5923] vub300 9-1:0.0: probe with driver vub300 failed with error -22 [ 1311.439279][ T5923] usb 9-1: USB disconnect, device number 120 [ 1311.865997][T23373] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4500'. [ 1312.577098][T23383] loop2: detected capacity change from 0 to 7 [ 1312.588836][T23383] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 [ 1312.601539][T23383] loop2: p1 start 48758784 is beyond EOD, truncated [ 1312.614662][T23383] loop2: p2 size 4294901760 extends beyond EOD, truncated [ 1312.629709][T23383] loop2: p3 start 4294962096 is beyond EOD, truncated [ 1312.641871][T23383] loop2: p4 start 1597073524 is beyond EOD, truncated [ 1312.649215][T23383] loop2: p5 start 11010048 is beyond EOD, truncated [ 1312.655947][T23383] loop2: p6 start 3670018 is beyond EOD, truncated [ 1312.668940][T23383] loop2: p7 size 197376 extends beyond EOD, truncated [ 1312.678525][T23383] loop2: p8 start 1680801792 is beyond EOD, truncated [ 1312.707627][ T5923] usb 9-1: new high-speed USB device number 121 using dummy_hcd [ 1312.790960][T14350] udevd[14350]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 1312.798180][T13960] udevd[13960]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1312.870208][ T5923] usb 9-1: Using ep0 maxpacket: 16 [ 1312.982673][T23157] cp210x 1-1:0.79: cp210x converter detected [ 1313.009745][T23157] cp210x 1-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 1313.054179][T23157] cp210x 1-1:0.79: querying part number failed [ 1313.156672][T23157] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1313.172348][T23157] usb 1-1: USB disconnect, device number 14 [ 1313.449585][T23391] netlink: 'syz.0.4507': attribute type 29 has an invalid length. [ 1313.451536][T23157] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1313.507162][T23391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4507'. [ 1313.509273][T23157] cp210x 1-1:0.79: device disconnected [ 1313.549989][T23398] binder: BINDER_SET_CONTEXT_MGR already set [ 1313.556165][T23398] binder: 23390:23398 ioctl 4018620d 2000000002c0 returned -16 [ 1314.787631][T19270] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1314.843775][T23418] batadv0: entered promiscuous mode [ 1314.938142][T19270] usb 1-1: device descriptor read/64, error -71 [ 1315.000196][ T5923] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1315.016987][T23421] loop2: detected capacity change from 0 to 7 [ 1315.023658][ T5923] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1315.031567][ T5923] usb 9-1: can't read configurations, error -71 [ 1315.065813][T23421] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 [ 1315.157962][T23421] loop2: p1 start 48758784 is beyond EOD, truncated [ 1315.188406][T23421] loop2: p2 size 4294901760 extends beyond EOD, truncated [ 1315.228502][T23421] loop2: p3 start 4294962096 is beyond EOD, truncated [ 1315.244145][T23421] loop2: p4 start 1597073524 is beyond EOD, truncated [ 1315.251649][T23421] loop2: p5 start 11010048 is beyond EOD, truncated [ 1315.267216][T23421] loop2: p6 start 3670018 is beyond EOD, truncated [ 1315.305266][T23421] loop2: p7 size 197376 extends beyond EOD, truncated [ 1315.313523][T19270] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 1315.346198][T23421] loop2: p8 start 1680801792 is beyond EOD, truncated [ 1315.348541][T23425] loop7: detected capacity change from 0 to 7 [ 1315.364727][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1315.374027][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1315.394331][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1315.403528][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1315.417588][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1315.426750][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1315.434858][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1315.444202][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1315.453399][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1315.462723][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1315.471223][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1315.480515][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1315.491341][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1315.496149][T13960] udevd[13960]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1315.500565][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1315.500804][T13975] ldm_validate_partition_table(): Disk read failed. [ 1315.506632][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1315.511882][T19270] usb 1-1: device descriptor read/64, error -71 [ 1315.518823][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1315.529766][T14350] udevd[14350]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 1315.547613][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1315.567715][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1315.577613][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1315.586814][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1315.597706][T13975] Dev loop7: unable to read RDB block 0 [ 1315.626994][T13975] loop7: unable to read partition table [ 1315.640536][T13975] loop7: partition table beyond EOD, truncated [ 1315.683152][T19270] usb usb1-port1: attempt power cycle [ 1315.735295][T23426] loop7: detected capacity change from 7 to 0 [ 1315.762692][T23425] ldm_validate_partition_table(): Disk read failed. [ 1315.770101][T23425] Dev loop7: unable to read RDB block 0 [ 1315.775794][T23425] loop7: unable to read partition table [ 1315.785339][T23425] loop7: partition table beyond EOD, truncated [ 1315.791663][T23425] loop_reread_partitions: partition scan of loop7 (SJ_+]֋ S'(J^Z (633)eeDϫ?Ƣ4+) failed (rc=-5) [ 1315.923484][T23441] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4521'. [ 1316.037701][T19270] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 1316.058537][T19270] usb 1-1: device descriptor read/8, error -71 [ 1316.182533][T23450] netlink: 'syz.8.4524': attribute type 1 has an invalid length. [ 1316.229997][T23450] bond1: entered promiscuous mode [ 1316.235419][T23450] bond1: entered allmulticast mode [ 1316.241842][T23450] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1316.255771][T23450] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4524'. [ 1316.265069][T23450] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4524'. [ 1316.341080][T19270] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 1316.368284][T19270] usb 1-1: device descriptor read/8, error -71 [ 1316.477825][T19270] usb usb1-port1: unable to enumerate USB device [ 1317.128273][T19270] usb 9-1: new high-speed USB device number 123 using dummy_hcd [ 1317.287691][T19270] usb 9-1: Using ep0 maxpacket: 16 [ 1317.455120][T23472] loop2: detected capacity change from 0 to 7 [ 1317.465152][T23472] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 [ 1317.471570][T23472] loop2: p1 start 48758784 is beyond EOD, truncated [ 1317.481962][T23472] loop2: p2 size 4294901760 extends beyond EOD, truncated [ 1317.492206][T23472] loop2: p3 start 4294962096 is beyond EOD, truncated [ 1317.499143][T23472] loop2: p4 start 1597073524 is beyond EOD, truncated [ 1317.506154][T23472] loop2: p5 start 11010048 is beyond EOD, truncated [ 1317.512944][T23472] loop2: p6 start 3670018 is beyond EOD, truncated [ 1317.520159][T23472] loop2: p7 size 197376 extends beyond EOD, truncated [ 1317.528879][T23472] loop2: p8 start 1680801792 is beyond EOD, truncated [ 1317.649570][T13975] udevd[13975]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 1317.662195][T13960] udevd[13960]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1317.867673][T23159] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1318.019996][T23159] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1318.033943][T23159] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.33 [ 1318.052383][T23159] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.072029][T23159] usb 1-1: Product: syz [ 1318.083455][T23159] usb 1-1: Manufacturer: syz [ 1318.094036][T23159] usb 1-1: SerialNumber: syz [ 1318.167638][ T5923] usb 10-1: new high-speed USB device number 115 using dummy_hcd [ 1318.334196][ T5923] usb 10-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1318.344989][ T5923] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.372705][ T5923] usb 10-1: config 0 descriptor?? [ 1318.406227][T23159] cdc_ncm 1-1:1.0: bind() failure [ 1318.462516][T23159] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1318.484826][T23159] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1318.503205][T23159] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 1318.518533][T23159] usb 1-1: USB disconnect, device number 19 [ 1318.877638][T23159] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1319.155455][T23159] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1319.180858][T23159] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.197738][T23159] usb 1-1: Product: syz [ 1319.205555][T23159] usb 1-1: Manufacturer: syz [ 1319.207316][T23491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.214741][T23159] usb 1-1: SerialNumber: syz [ 1319.255920][T23159] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1319.288148][T23491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.309279][ T5922] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1319.377060][ T5923] pegasus 10-1:0.0: probe with driver pegasus failed with error -121 [ 1319.662135][ T89] usb 1-1: USB disconnect, device number 20 [ 1319.807490][T19270] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1319.828702][T19270] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1319.842872][T19270] usb 9-1: can't read configurations, error -71 [ 1320.340204][ T5922] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1320.408189][ T5922] ath9k_htc: Failed to initialize the device [ 1320.443157][ T89] usb 1-1: ath9k_htc: USB layer deinitialized [ 1320.592450][T23503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1320.837886][T14039] usb 10-1: USB disconnect, device number 115 [ 1320.977839][ T89] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1321.156478][ T89] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1321.258313][ T89] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1321.284994][ T89] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1321.333361][ T89] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1321.475897][ T89] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1321.513833][ T89] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1321.523681][ T89] usb 1-1: Manufacturer: syz [ 1321.571476][ T89] usb 1-1: config 0 descriptor?? [ 1321.667661][T14039] usb 9-1: new high-speed USB device number 125 using dummy_hcd [ 1322.102568][ T89] appleir 0003:05AC:8243.0035: unknown main item tag 0x0 [ 1322.134967][ T89] appleir 0003:05AC:8243.0035: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1322.729093][T23530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.745958][T23530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.961906][T23529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4540'. [ 1322.973299][T23529] netlink: 'syz.0.4540': attribute type 27 has an invalid length. [ 1323.081710][T23522] delete_channel: no stack [ 1323.638290][ T89] usb 1-1: reset high-speed USB device number 21 using dummy_hcd [ 1324.207644][ T89] usb 1-1: device descriptor read/64, error -32 [ 1324.527677][ T89] usb 1-1: reset high-speed USB device number 21 using dummy_hcd [ 1324.670165][ T89] usb 1-1: device descriptor read/64, error -32 [ 1324.907673][ T89] usb 1-1: reset high-speed USB device number 21 using dummy_hcd [ 1324.927921][ T89] usb 1-1: device descriptor read/8, error -32 [ 1325.137703][ T5835] usb 10-1: new high-speed USB device number 116 using dummy_hcd [ 1325.167834][ T89] usb 1-1: reset high-speed USB device number 21 using dummy_hcd [ 1325.187948][ T89] usb 1-1: device descriptor read/8, error -32 [ 1325.308017][ T89] raw-gadget.4 gadget.0: failed to queue suspend event [ 1325.321215][ T5835] usb 10-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 1325.340002][T19270] usb 1-1: USB disconnect, device number 21 [ 1325.347472][ T5835] usb 10-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1325.369435][T19270] raw-gadget.4 gadget.0: failed to queue reset event [ 1325.385748][ T5835] usb 10-1: config 3 has no interfaces? [ 1325.397712][T23511] raw-gadget.4 gadget.0: failed to queue disconnect event [ 1325.559167][ T5835] usb 10-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 1325.571602][ T5835] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.596040][ T5835] usb 10-1: Product: syz [ 1325.609349][ T5835] usb 10-1: Manufacturer: syz [ 1325.632670][ T5835] usb 10-1: SerialNumber: syz [ 1325.874721][ T5835] usb 10-1: USB disconnect, device number 116 [ 1325.947951][ T5923] usb 9-1: new full-speed USB device number 126 using dummy_hcd [ 1326.129282][T23571] x_tables: duplicate underflow at hook 3 [ 1326.160688][ T5923] usb 9-1: config index 0 descriptor too short (expected 23244, got 18) [ 1326.172000][ T5923] usb 9-1: config 36 has too many interfaces: 72, using maximum allowed: 32 [ 1326.186936][ T5923] usb 9-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.197896][ T5923] usb 9-1: config 36 has 0 interfaces, different from the descriptor's value: 72 [ 1326.273899][ T5923] usb 9-1: New USB device found, idVendor=a168, idProduct=0611, bcdDevice=81.2f [ 1326.283361][ T5923] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.291847][ T5923] usb 9-1: Product: syz [ 1326.296157][ T5923] usb 9-1: Manufacturer: syz [ 1326.300906][ T5923] usb 9-1: SerialNumber: syz [ 1326.522777][T23559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1326.585937][T23559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1326.626333][T23559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1326.645769][T23559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1326.762336][T23559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1326.977234][T23559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1326.990046][T23559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1327.018015][T23559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1327.027752][T19270] usb 10-1: new high-speed USB device number 117 using dummy_hcd [ 1327.028206][T23559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1327.045602][T23559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1327.362967][ T5835] usb 9-1: USB disconnect, device number 126 [ 1327.761210][T23588] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4562'. [ 1329.161631][T23600] netdevsim netdevsim6: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 1329.456827][T23605] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1330.017776][ T5923] usb 9-1: new full-speed USB device number 127 using dummy_hcd [ 1330.180342][ T5923] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1330.197633][ T5923] usb 9-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 1330.217160][ T5923] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.248397][ T5923] usb 9-1: config 0 descriptor?? [ 1330.546047][T23632] FAULT_INJECTION: forcing a failure. [ 1330.546047][T23632] name failslab, interval 1, probability 0, space 0, times 0 [ 1330.559018][T23632] CPU: 0 UID: 0 PID: 23632 Comm: syz.9.4576 Not tainted syzkaller #0 PREEMPT(full) [ 1330.559055][T23632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1330.559068][T23632] Call Trace: [ 1330.559076][T23632] [ 1330.559084][T23632] dump_stack_lvl+0x189/0x250 [ 1330.559115][T23632] ? __pfx____ratelimit+0x10/0x10 [ 1330.559139][T23632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1330.559165][T23632] ? __pfx__printk+0x10/0x10 [ 1330.559190][T23632] ? __pfx___might_resched+0x10/0x10 [ 1330.559210][T23632] ? fs_reclaim_acquire+0x7d/0x100 [ 1330.559243][T23632] should_fail_ex+0x414/0x560 [ 1330.559272][T23632] should_failslab+0xa8/0x100 [ 1330.559294][T23632] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1330.559319][T23632] ? l3mdev_update_flow+0x29/0x640 [ 1330.559344][T23632] ? __alloc_skb+0x112/0x2d0 [ 1330.559370][T23632] ? l3mdev_update_flow+0x4d1/0x640 [ 1330.559400][T23632] __alloc_skb+0x112/0x2d0 [ 1330.559432][T23632] __ip6_append_data+0x2c16/0x3f30 [ 1330.559460][T23632] ? __lock_acquire+0xab9/0xd20 [ 1330.559499][T23632] ? __pfx_raw6_getfrag+0x10/0x10 [ 1330.559536][T23632] ? __pfx___ip6_append_data+0x10/0x10 [ 1330.559562][T23632] ? __pfx_ip6_mtu+0x10/0x10 [ 1330.559596][T23632] ip6_append_data+0x1c1/0x380 [ 1330.559627][T23632] ? __pfx_raw6_getfrag+0x10/0x10 [ 1330.559648][T23632] rawv6_sendmsg+0x1286/0x1830 [ 1330.559684][T23632] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1330.559727][T23632] ? __pfx_aa_sk_perm+0x10/0x10 [ 1330.559757][T23632] ? sock_rps_record_flow+0x19/0x410 [ 1330.559788][T23632] ? inet_sendmsg+0x2f4/0x370 [ 1330.559814][T23632] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1330.559838][T23632] __sock_sendmsg+0x19c/0x270 [ 1330.559866][T23632] ____sys_sendmsg+0x52d/0x830 [ 1330.559890][T23632] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1330.559917][T23632] ? import_iovec+0x74/0xa0 [ 1330.559941][T23632] ___sys_sendmsg+0x21f/0x2a0 [ 1330.559962][T23632] ? __pfx____sys_sendmsg+0x10/0x10 [ 1330.560018][T23632] ? __fget_files+0x2a/0x420 [ 1330.560045][T23632] ? __fget_files+0x3a0/0x420 [ 1330.560073][T23632] __sys_sendmmsg+0x227/0x430 [ 1330.560100][T23632] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1330.560130][T23632] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1330.560175][T23632] ? ksys_write+0x22a/0x250 [ 1330.560205][T23632] ? __pfx_ksys_write+0x10/0x10 [ 1330.560236][T23632] __x64_sys_sendmmsg+0xa0/0xc0 [ 1330.560260][T23632] do_syscall_64+0xfa/0xfa0 [ 1330.560281][T23632] ? lockdep_hardirqs_on+0x9c/0x150 [ 1330.560304][T23632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.560323][T23632] ? clear_bhb_loop+0x60/0xb0 [ 1330.560347][T23632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.560367][T23632] RIP: 0033:0x7f682fd8efc9 [ 1330.560385][T23632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1330.560402][T23632] RSP: 002b:00007f6830c6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1330.560423][T23632] RAX: ffffffffffffffda RBX: 00007f682ffe5fa0 RCX: 00007f682fd8efc9 [ 1330.560438][T23632] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000003 [ 1330.560451][T23632] RBP: 00007f6830c6a090 R08: 0000000000000000 R09: 0000000000000000 [ 1330.560464][T23632] R10: 000000000000ffe0 R11: 0000000000000246 R12: 0000000000000001 [ 1330.560477][T23632] R13: 00007f682ffe6038 R14: 00007f682ffe5fa0 R15: 00007f683010fa28 [ 1330.560509][T23632] [ 1331.033851][T23641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.044790][T23641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.054040][T23641] program syz.9.4579 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1331.104447][ T5923] usb 9-1: string descriptor 0 read error: -71 [ 1331.117044][ T5923] uclogic 0003:5543:0081.0036: failed retrieving string descriptor #200: -71 [ 1331.128226][ T5923] uclogic 0003:5543:0081.0036: failed retrieving pen parameters: -71 [ 1331.136366][ T5923] uclogic 0003:5543:0081.0036: failed probing pen v2 parameters: -71 [ 1331.145921][ T5923] uclogic 0003:5543:0081.0036: failed probing parameters: -71 [ 1331.158653][ T5923] uclogic 0003:5543:0081.0036: probe with driver uclogic failed with error -71 [ 1331.256103][ T5923] usb 9-1: USB disconnect, device number 127 [ 1331.267782][T19270] usb 10-1: new high-speed USB device number 118 using dummy_hcd [ 1331.662366][T23664] x_tables: unsorted underflow at hook 2 [ 1331.682729][T23664] bond0: entered promiscuous mode [ 1331.688578][T23664] bond_slave_0: entered promiscuous mode [ 1331.695843][T23664] bond_slave_1: entered promiscuous mode [ 1331.704127][T23664] batadv0: entered promiscuous mode [ 1331.712709][T23664] debugfs: 'hsr1' already exists in 'hsr' [ 1331.719314][T23664] Cannot create hsr debugfs directory [ 1331.725093][T23664] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1331.735372][T23664] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1331.746102][T23664] hsr1: entered allmulticast mode [ 1331.751420][T23664] bond0: entered allmulticast mode [ 1331.756908][T23664] bond_slave_0: entered allmulticast mode [ 1331.762807][T23664] bond_slave_1: entered allmulticast mode [ 1331.770225][T23664] batadv0: entered allmulticast mode [ 1331.776224][T23664] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1331.786957][T23664] bond0: left promiscuous mode [ 1331.793653][T23664] bond_slave_0: left promiscuous mode [ 1331.800168][T23664] bond_slave_1: left promiscuous mode [ 1331.807492][T23664] batadv0: left promiscuous mode [ 1332.117863][T19270] usb 10-1: device descriptor read/64, error -71 [ 1332.287668][ T5835] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1332.429514][T19270] usb 10-1: new high-speed USB device number 119 using dummy_hcd [ 1332.447696][ T5835] usb 9-1: Using ep0 maxpacket: 8 [ 1332.572252][ T5835] usb 9-1: config 0 has an invalid interface number: 151 but max is 1 [ 1332.584767][ T5835] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.617730][ T5835] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1332.653222][ T5835] usb 9-1: config 0 has no interface number 0 [ 1332.674059][ T5835] usb 9-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1332.731668][ T5835] usb 9-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1332.831010][ T5835] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.881403][ T5835] usb 9-1: Product: syz [ 1332.916661][ T5835] usb 9-1: Manufacturer: syz [ 1332.942680][ T5835] usb 9-1: SerialNumber: syz [ 1333.045835][ T5835] usb 9-1: config 0 descriptor?? [ 1333.212432][ T5835] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1333.224504][T23682] input: syz0 as /devices/virtual/input/input226 [ 1333.506970][ T5835] snd-usb-audio 9-1:0.151: probe with driver snd-usb-audio failed with error -2 [ 1333.968707][T13960] udevd[13960]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1334.801693][T23694] input: syz0 as /devices/virtual/input/input227 [ 1335.103842][ T5835] usb 9-1: USB disconnect, device number 2 [ 1335.617287][T23705] fuse: Bad value for 'fd' [ 1336.220849][T23710] netlink: 168 bytes leftover after parsing attributes in process `syz.8.4597'. [ 1336.291314][T23725] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1336.299739][T23725] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4600'. [ 1337.313202][T23737] loop2: detected capacity change from 0 to 7 [ 1337.321241][T23737] Dev loop2: unable to read RDB block 7 [ 1337.326999][T23737] loop2: unable to read partition table [ 1337.335133][T23737] loop2: partition table beyond EOD, truncated [ 1337.342136][T23737] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1337.389236][T23739] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4605'. [ 1337.827870][ T5923] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1337.851523][T23747] ip6t_rpfilter: unknown options [ 1338.000379][ T5923] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1338.015535][ T5923] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1338.026807][ T5923] usb 9-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 1338.036308][ T5923] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.049907][ T5923] usb 9-1: config 0 descriptor?? [ 1338.211234][T23751] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4608'. [ 1338.516825][ T5923] uclogic 0003:2179:0077.0037: interface is invalid, ignoring [ 1338.869132][T19270] usb 9-1: USB disconnect, device number 3 [ 1339.152707][T23765] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4612'. [ 1339.219980][T23767] input: syz0 as /devices/virtual/input/input228 [ 1339.302150][T13975] udevd[13975]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1339.513708][T23776] loop2: detected capacity change from 0 to 7 [ 1339.521140][T23776] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 [ 1339.529210][T23776] loop2: p1 start 48758784 is beyond EOD, truncated [ 1339.536002][T23776] loop2: p2 size 4294901760 extends beyond EOD, truncated [ 1339.563783][T23776] loop2: p3 start 4294962096 is beyond EOD, truncated [ 1339.573575][T23776] loop2: p4 start 1597073524 is beyond EOD, truncated [ 1339.591301][T23776] loop2: p5 start 11010048 is beyond EOD, truncated [ 1339.607682][T23776] loop2: p6 start 3670018 is beyond EOD, truncated [ 1339.619479][T23776] loop2: p7 size 197376 extends beyond EOD, truncated [ 1339.648914][T23776] loop2: p8 start 1680801792 is beyond EOD, truncated [ 1339.805384][T13975] udevd[13975]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 1339.819895][T13960] udevd[13960]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1340.107646][ T5923] usb 10-1: new full-speed USB device number 120 using dummy_hcd [ 1340.126318][T23789] FAULT_INJECTION: forcing a failure. [ 1340.126318][T23789] name failslab, interval 1, probability 0, space 0, times 0 [ 1340.148282][T23789] CPU: 0 UID: 0 PID: 23789 Comm: syz.8.4620 Not tainted syzkaller #0 PREEMPT(full) [ 1340.148311][T23789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1340.148323][T23789] Call Trace: [ 1340.148331][T23789] [ 1340.148340][T23789] dump_stack_lvl+0x189/0x250 [ 1340.148372][T23789] ? __pfx____ratelimit+0x10/0x10 [ 1340.148394][T23789] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1340.148420][T23789] ? __pfx__printk+0x10/0x10 [ 1340.148444][T23789] ? __pfx___might_resched+0x10/0x10 [ 1340.148464][T23789] ? fs_reclaim_acquire+0x7d/0x100 [ 1340.148498][T23789] should_fail_ex+0x414/0x560 [ 1340.148533][T23789] should_failslab+0xa8/0x100 [ 1340.148555][T23789] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 1340.148581][T23789] ? simple_xattr_set+0xda/0x380 [ 1340.148602][T23789] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 1340.148626][T23789] ? do_raw_spin_lock+0x121/0x290 [ 1340.148651][T23789] kstrdup+0x42/0x100 [ 1340.148673][T23789] simple_xattr_set+0xda/0x380 [ 1340.148698][T23789] shmem_xattr_handler_set+0x1a0/0x2d0 [ 1340.148719][T23789] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 1340.148737][T23789] __vfs_setxattr+0x43c/0x480 [ 1340.148774][T23789] __vfs_setxattr_noperm+0x12d/0x660 [ 1340.148810][T23789] vfs_setxattr+0x16b/0x2f0 [ 1340.148834][T23789] ? __pfx_vfs_setxattr+0x10/0x10 [ 1340.148860][T23789] ? sb_start_write+0x114/0x1c0 [ 1340.148883][T23789] ? mnt_want_write_file+0x164/0x200 [ 1340.148908][T23789] file_setxattr+0x1da/0x2b0 [ 1340.148932][T23789] path_setxattrat+0x327/0x3a0 [ 1340.148964][T23789] ? __pfx_path_setxattrat+0x10/0x10 [ 1340.148984][T23789] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1340.149036][T23789] ? ksys_write+0x22a/0x250 [ 1340.149073][T23789] __x64_sys_fsetxattr+0xbc/0xe0 [ 1340.149096][T23789] do_syscall_64+0xfa/0xfa0 [ 1340.149117][T23789] ? lockdep_hardirqs_on+0x9c/0x150 [ 1340.149140][T23789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1340.149159][T23789] ? clear_bhb_loop+0x60/0xb0 [ 1340.149180][T23789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1340.149209][T23789] RIP: 0033:0x7f44aaf8efc9 [ 1340.149226][T23789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1340.149242][T23789] RSP: 002b:00007f44abf07038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 1340.149263][T23789] RAX: ffffffffffffffda RBX: 00007f44ab1e5fa0 RCX: 00007f44aaf8efc9 [ 1340.149278][T23789] RDX: 0000000000000000 RSI: 0000200000001cc0 RDI: 0000000000000003 [ 1340.149289][T23789] RBP: 00007f44abf07090 R08: 0000000000000001 R09: 0000000000000000 [ 1340.149301][T23789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1340.149312][T23789] R13: 00007f44ab1e6038 R14: 00007f44ab1e5fa0 R15: 00007f44ab30fa28 [ 1340.149342][T23789] [ 1340.269192][ T5923] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1340.443080][ T5923] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1340.454287][ T5923] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1340.467366][ T5923] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1340.486203][ T5923] usb 10-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 1340.502421][ T5923] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.514333][ T5923] usb 10-1: config 0 descriptor?? [ 1340.567879][T23159] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1340.607953][T19270] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1340.727660][T23159] usb 1-1: Using ep0 maxpacket: 16 [ 1340.733973][T23787] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4619'. [ 1340.747650][T19270] usb 9-1: device descriptor read/64, error -71 [ 1340.754190][T23159] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1340.759443][T23787] Unknown options in mask b7f2 [ 1340.763439][T23159] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.776701][T23159] usb 1-1: Product: syz [ 1340.781133][T23159] usb 1-1: Manufacturer: syz [ 1340.785768][T23159] usb 1-1: SerialNumber: syz [ 1340.797486][T23159] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1340.803930][T23159] r8152-cfgselector 1-1: config 0 descriptor?? [ 1340.994238][T19270] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1341.127656][T19270] usb 9-1: device descriptor read/64, error -71 [ 1341.231290][ T5835] r8152-cfgselector 1-1: USB disconnect, device number 23 [ 1341.240269][T19270] usb usb9-port1: attempt power cycle [ 1341.509843][T23809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4626'. [ 1341.587612][T19270] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1341.618368][T19270] usb 9-1: device descriptor read/8, error -71 [ 1341.857783][T19270] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1341.882446][T19270] usb 9-1: device descriptor read/8, error -71 [ 1342.093446][T19270] usb usb9-port1: unable to enumerate USB device [ 1342.881540][ T5923] usbhid 10-1:0.0: can't add hid device: -71 [ 1342.896627][ T5923] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1342.916046][ T5923] usb 10-1: USB disconnect, device number 120 [ 1343.063006][T23827] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4632'. [ 1343.414564][T23833] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1343.415314][T23832] FAULT_INJECTION: forcing a failure. [ 1343.415314][T23832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1343.433846][T23833] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1343.450253][T23833] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1343.462987][T23833] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1343.497638][T23833] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1343.497643][T23832] CPU: 0 UID: 0 PID: 23832 Comm: syz.9.4634 Not tainted syzkaller #0 PREEMPT(full) [ 1343.497666][T23832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1343.497676][T23832] Call Trace: [ 1343.497683][T23832] [ 1343.497689][T23832] dump_stack_lvl+0x189/0x250 [ 1343.497717][T23832] ? __pfx____ratelimit+0x10/0x10 [ 1343.497741][T23832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1343.497767][T23832] ? __pfx__printk+0x10/0x10 [ 1343.497798][T23832] should_fail_ex+0x414/0x560 [ 1343.497831][T23832] _copy_to_user+0x31/0xb0 [ 1343.497857][T23832] simple_read_from_buffer+0xe1/0x170 [ 1343.497889][T23832] proc_fail_nth_read+0x1b3/0x220 [ 1343.497915][T23832] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1343.497942][T23832] ? rw_verify_area+0x2a6/0x4d0 [ 1343.497967][T23832] ? __lock_acquire+0xab9/0xd20 [ 1343.497984][T23832] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1343.498010][T23832] vfs_read+0x200/0xa30 [ 1343.498034][T23832] ? fdget_pos+0x247/0x320 [ 1343.498056][T23832] ? __pfx___mutex_lock+0x10/0x10 [ 1343.498082][T23832] ? __pfx_vfs_read+0x10/0x10 [ 1343.498110][T23832] ? __fget_files+0x2a/0x420 [ 1343.498138][T23832] ? __fget_files+0x3a0/0x420 [ 1343.498155][T23832] ? __fget_files+0x2a/0x420 [ 1343.498181][T23832] ksys_read+0x145/0x250 [ 1343.498209][T23832] ? __pfx_ksys_read+0x10/0x10 [ 1343.498234][T23832] ? __secure_computing+0xe2/0x2a0 [ 1343.498265][T23832] do_syscall_64+0xfa/0xfa0 [ 1343.498288][T23832] ? lockdep_hardirqs_on+0x9c/0x150 [ 1343.498312][T23832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1343.498331][T23832] ? clear_bhb_loop+0x60/0xb0 [ 1343.498354][T23832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1343.498372][T23832] RIP: 0033:0x7f682fd8d9dc [ 1343.498389][T23832] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1343.498406][T23832] RSP: 002b:00007f6830c6a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1343.498427][T23832] RAX: ffffffffffffffda RBX: 00007f682ffe5fa0 RCX: 00007f682fd8d9dc [ 1343.498442][T23832] RDX: 000000000000000f RSI: 00007f6830c6a0a0 RDI: 0000000000000004 [ 1343.498455][T23832] RBP: 00007f6830c6a090 R08: 0000000000000000 R09: 0000000000000000 [ 1343.498467][T23832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1343.498479][T23832] R13: 00007f682ffe6038 R14: 00007f682ffe5fa0 R15: 00007f683010fa28 [ 1343.498512][T23832] [ 1343.751670][T23833] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1343.761567][T23833] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1343.771883][T23833] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1343.809628][T23833] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1343.820308][T23833] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1343.830857][T23833] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1343.841023][T23833] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1343.854604][T23833] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1343.866296][T23833] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1343.877201][T23833] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1343.877917][T19270] usb 10-1: new high-speed USB device number 121 using dummy_hcd [ 1343.887233][T23833] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1343.904487][T23833] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1343.973555][T23833] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1344.003426][T23845] xt_TCPMSS: Only works on TCP SYN packets [ 1344.019044][T23833] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1344.038770][T23833] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1344.049880][T23833] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1344.060499][T23833] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1344.120324][T23833] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1344.130477][T23833] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1344.142132][T23833] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1344.222274][T23833] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1344.233980][T19270] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1344.249025][T19270] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1344.261748][T23833] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1344.271559][T19270] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1344.296805][T19270] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1344.320513][T19270] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.376501][T19270] usb 10-1: config 0 descriptor?? [ 1344.691230][ T5835] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1344.861598][ T5835] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.892268][ T5835] usb 9-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1344.935902][T19270] usbhid 10-1:0.0: can't add hid device: -71 [ 1344.945728][T19270] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1344.969467][ T5835] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.069226][T19270] usb 10-1: USB disconnect, device number 121 [ 1345.089759][T23856] netlink: 'syz.9.4640': attribute type 5 has an invalid length. [ 1345.108089][T23856] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4640'. [ 1345.111742][ T5835] usb 9-1: config 0 descriptor?? [ 1345.118430][ T5923] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1345.153852][ T5923] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1345.298939][T23857] fido_id[23857]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1345.574909][ T5835] usb 9-1: USB disconnect, device number 8 [ 1345.684084][T23878] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4645'. [ 1345.740173][T23873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4643'. [ 1345.752792][T23873] input: syz0 as /devices/virtual/input/input231 [ 1345.766450][T23883] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4645'. [ 1345.819594][T23878] gretap1: entered promiscuous mode [ 1345.982162][T23889] binder: 23885:23889 ioctl 5429 200000000480 returned -22 [ 1347.485299][ T5923] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1347.512652][T23924] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1347.658525][ T5923] usb 9-1: no configurations [ 1347.663312][ T5923] usb 9-1: can't read configurations, error -22 [ 1347.808090][ T5923] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1347.968536][ T5923] usb 9-1: no configurations [ 1347.979770][ T5923] usb 9-1: can't read configurations, error -22 [ 1347.992278][ T5923] usb usb9-port1: attempt power cycle [ 1348.019479][T19270] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1348.217859][T19270] usb 1-1: device descriptor read/64, error -71 [ 1348.347629][ T5923] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1348.379741][ T5923] usb 9-1: no configurations [ 1348.384912][ T5923] usb 9-1: can't read configurations, error -22 [ 1348.467690][T19270] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1348.557644][ T5923] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1348.567631][ T5922] usb 10-1: new full-speed USB device number 122 using dummy_hcd [ 1348.606255][ T5923] usb 9-1: no configurations [ 1348.607645][T19270] usb 1-1: device descriptor read/64, error -71 [ 1348.611324][ T5923] usb 9-1: can't read configurations, error -22 [ 1348.699056][ T5923] usb usb9-port1: unable to enumerate USB device [ 1348.779275][ T5922] usb 10-1: invalid descriptor for config index 0: type = 0x2, length = 4 [ 1348.788649][ T5922] usb 10-1: can't read configurations, error -22 [ 1348.872179][T19270] usb usb1-port1: attempt power cycle [ 1348.917918][ T5922] usb 10-1: new full-speed USB device number 123 using dummy_hcd [ 1349.098326][ T5922] usb 10-1: invalid descriptor for config index 0: type = 0x2, length = 4 [ 1349.110509][T23940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4662'. [ 1349.147978][ T5922] usb 10-1: can't read configurations, error -22 [ 1349.154709][ T5922] usb usb10-port1: attempt power cycle [ 1349.218365][T19270] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1349.257385][T19270] usb 1-1: device descriptor read/8, error -71 [ 1349.527635][ T5922] usb 10-1: new full-speed USB device number 124 using dummy_hcd [ 1349.537762][T19270] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1349.568268][T19270] usb 1-1: device descriptor read/8, error -71 [ 1349.579541][ T5922] usb 10-1: invalid descriptor for config index 0: type = 0x2, length = 4 [ 1349.597636][ T5922] usb 10-1: can't read configurations, error -22 [ 1349.677900][T19270] usb usb1-port1: unable to enumerate USB device [ 1349.738036][ T5922] usb 10-1: new full-speed USB device number 125 using dummy_hcd [ 1349.760537][ T5922] usb 10-1: invalid descriptor for config index 0: type = 0x2, length = 4 [ 1349.771756][ T5922] usb 10-1: can't read configurations, error -22 [ 1349.779232][ T5922] usb usb10-port1: unable to enumerate USB device [ 1350.281611][T23958] binder: 23957:23958 ioctl 3309 0 returned -22 [ 1350.473996][T19270] IPVS: starting estimator thread 0... [ 1350.577883][T23966] IPVS: using max 29 ests per chain, 69600 per kthread [ 1350.882365][T23981] netlink: 76 bytes leftover after parsing attributes in process `syz.8.4675'. [ 1350.922066][T23984] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4676'. [ 1351.023579][T23991] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4679'. [ 1351.137704][T19270] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1351.297707][T19270] usb 1-1: Using ep0 maxpacket: 16 [ 1351.305338][T19270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1351.316591][T19270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1351.326751][T19270] usb 1-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 1351.335871][T19270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.346981][T19270] usb 1-1: config 0 descriptor?? [ 1351.573393][T23979] tipc: Started in network mode [ 1351.578533][T23979] tipc: Node identity 229acf07a8f8, cluster identity 4711 [ 1351.585815][T23979] tipc: Enabled bearer , priority 0 [ 1351.593926][T23979] syzkaller0: entered promiscuous mode [ 1351.599626][T23979] syzkaller0: entered allmulticast mode [ 1351.610067][T23979] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1351.849463][T19270] asus 0003:0B05:17E0.0039: unknown main item tag 0x0 [ 1351.877821][T19270] asus 0003:0B05:17E0.0039: unknown main item tag 0x0 [ 1351.893693][T19270] asus 0003:0B05:17E0.0039: unknown main item tag 0x0 [ 1351.922574][T19270] asus 0003:0B05:17E0.0039: unknown main item tag 0x0 [ 1351.948878][T19270] asus 0003:0B05:17E0.0039: unknown main item tag 0x0 [ 1352.061845][T24008] fuse: Bad value for 'fd' [ 1352.068204][T24007] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4684'. [ 1352.079329][T19270] asus 0003:0B05:17E0.0039: hidraw0: USB HID v0.00 Device [HID 0b05:17e0] on usb-dummy_hcd.0-1/input0 [ 1352.105182][T19270] asus 0003:0B05:17E0.0039: Asus input not registered [ 1352.129722][T19270] asus 0003:0B05:17E0.0039: probe with driver asus failed with error -12 [ 1352.434833][T24011] netlink: 312 bytes leftover after parsing attributes in process `syz.7.4686'. [ 1352.567817][T23978] tipc: Resetting bearer [ 1352.648287][T23978] tipc: Disabling bearer [ 1352.776178][T19270] usb 1-1: USB disconnect, device number 28 [ 1353.818518][T24035] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1353.825070][T24035] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1353.867124][T24035] vhci_hcd vhci_hcd.0: Device attached [ 1353.874007][T24038] vhci_hcd: connection closed [ 1353.875824][T16510] vhci_hcd: stop threads [ 1353.887430][T16510] vhci_hcd: release socket [ 1353.892872][T16510] vhci_hcd: disconnect device [ 1353.977645][ T5923] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1354.047816][ T5922] usb 10-1: new high-speed USB device number 126 using dummy_hcd [ 1354.137655][ T5923] usb 1-1: Using ep0 maxpacket: 32 [ 1354.144986][ T5923] usb 1-1: config 0 has an invalid descriptor of length 187, skipping remainder of the config [ 1354.156327][ T5923] usb 1-1: config 0 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 24 [ 1354.172358][ T5923] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1354.179829][ T5923] usb 1-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 1354.189362][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.197682][ T5922] usb 10-1: Using ep0 maxpacket: 32 [ 1354.210094][ T5922] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1354.222696][ T5923] usb 1-1: config 0 descriptor?? [ 1354.228107][ T5922] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1354.241620][ T5922] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1354.259031][ T5922] usb 10-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1354.268496][ T5922] usb 10-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1354.277066][ T5922] usb 10-1: Product: syz [ 1354.282196][ T5922] usb 10-1: Manufacturer: syz [ 1354.287045][ T5922] usb 10-1: SerialNumber: syz [ 1354.306857][ T5922] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input232 [ 1354.317787][T19270] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1354.458667][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 1354.466234][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 1354.475103][ T5923] usb 1-1: string descriptor 0 read error: -71 [ 1354.487677][T19270] usb 9-1: Using ep0 maxpacket: 16 [ 1354.488490][ T5923] usb 1-1: USB disconnect, device number 29 [ 1354.501684][T19270] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 1354.503589][ T5922] usb 10-1: USB disconnect, device number 126 [ 1354.511885][ C1] appletouch 10-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 1354.565205][T19270] usb 9-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1354.595332][T19270] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.606050][T19270] usb 9-1: Product: syz [ 1354.608328][ T5922] appletouch 10-1:1.0: input: appletouch disconnected [ 1354.621716][T19270] usb 9-1: Manufacturer: syz [ 1354.628840][T19270] usb 9-1: SerialNumber: syz [ 1354.638563][T19270] usb 9-1: config 0 descriptor?? [ 1354.648794][T24045] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 1354.704464][T19270] mcba_usb 9-1:0.0: Microchip CAN BUS Analyzer connected [ 1354.872273][ C0] mcba_usb 9-1:0.0 can0: Tx URB aborted (-71) [ 1354.873694][ T5923] usb 9-1: USB disconnect, device number 13 [ 1354.878490][ C0] mcba_usb 9-1:0.0 can0: Tx URB aborted (-71) [ 1354.913368][T24062] ipip0: entered promiscuous mode [ 1354.922084][T24062] ipip0: entered allmulticast mode [ 1354.934547][ T5923] mcba_usb 9-1:0.0 can0: device disconnected [ 1354.972179][T24066] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4698'. [ 1356.242731][T24092] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4702'. [ 1356.329491][T24092] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4702'. [ 1356.731869][T24103] input: syz0 as /devices/virtual/input/input233 [ 1357.573020][T24137] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1357.618511][T24139] No buffer was provided with the request [ 1359.032898][T24158] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4712'. [ 1359.042124][T24158] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4712'. [ 1359.221839][T24158] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1359.300204][T24161] netlink: 'syz.9.4714': attribute type 13 has an invalid length. [ 1359.315794][T24161] gretap0: refused to change device tx_queue_len [ 1359.347972][T24161] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1360.143206][T24167] input: syz0 as /devices/virtual/input/input234 [ 1360.507789][T24180] trusted_key: encrypted_key: insufficient parameters specified [ 1360.568020][ T89] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1360.967636][ T89] usb 9-1: device descriptor read/64, error -71 [ 1361.248154][ T89] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1361.377619][ T89] usb 9-1: device descriptor read/64, error -71 [ 1361.571652][ T89] usb usb9-port1: attempt power cycle [ 1361.667820][T24188] loop2: detected capacity change from 0 to 7 [ 1361.675271][T13960] Dev loop2: unable to read RDB block 7 [ 1361.681887][T13960] loop2: unable to read partition table [ 1361.691750][T13960] loop2: partition table beyond EOD, truncated [ 1361.707299][T24188] Dev loop2: unable to read RDB block 7 [ 1361.728258][T24188] loop2: unable to read partition table [ 1361.734216][T24188] loop2: partition table beyond EOD, truncated [ 1361.740756][T24188] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1361.790929][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.791982][ T31] INFO: task kworker/1:1:44 blocked for more than 143 seconds. [ 1361.797260][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.837171][ T31] Not tainted syzkaller #0 [ 1361.862596][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1361.897919][ T31] task:kworker/1:1 state:D stack:20168 pid:44 tgid:44 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1361.925337][ T31] Workqueue: usb_hub_wq hub_event [ 1361.938453][ T31] Call Trace: [ 1361.947354][ T31] [ 1361.957329][ T31] __schedule+0x1798/0x4cc0 [ 1361.967627][ T89] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1361.977249][ T31] ? __lock_acquire+0xab9/0xd20 [ 1361.988008][ T89] usb 9-1: device descriptor read/8, error -71 [ 1362.000431][ T31] ? __pfx___schedule+0x10/0x10 [ 1362.024351][ T31] ? schedule+0x91/0x360 [ 1362.034479][ T31] schedule+0x165/0x360 [ 1362.040885][ T31] schedule_timeout+0x9a/0x270 [ 1362.097056][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1362.116008][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1362.127603][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1362.132863][ T31] ? wait_for_completion+0x267/0x5d0 [ 1362.146997][ T31] wait_for_completion+0x2bf/0x5d0 [ 1362.157642][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1362.163349][ T31] i2c_del_adapter+0x581/0x6e0 [ 1362.187725][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1362.193080][ T31] ? dvb_usbv2_exit+0x85a/0x9e0 [ 1362.207596][ T31] dvb_usbv2_probe+0x4ae/0x41a0 [ 1362.212565][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 1362.227613][ T89] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1362.235450][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 1362.241339][ T31] usb_probe_interface+0x668/0xc30 [ 1362.246493][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 1362.271616][ T89] usb 9-1: device descriptor read/8, error -71 [ 1362.276663][ T31] really_probe+0x26d/0x9e0 [ 1362.289375][ T31] __driver_probe_device+0x18c/0x2f0 [ 1362.300393][ T31] driver_probe_device+0x4f/0x430 [ 1362.311506][ T31] __device_attach_driver+0x2ce/0x530 [ 1362.323728][ T31] bus_for_each_drv+0x251/0x2e0 [ 1362.334367][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1362.347178][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1362.359444][ T31] __device_attach+0x2b8/0x400 [ 1362.368849][ T31] ? __pfx___device_attach+0x10/0x10 [ 1362.379797][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1362.389645][ T89] usb usb9-port1: unable to enumerate USB device [ 1362.391303][ T31] bus_probe_device+0x185/0x260 [ 1362.411259][ T31] device_add+0x7b6/0xb50 [ 1362.415658][ T31] usb_set_configuration+0x1a87/0x20e0 [ 1362.425197][ T31] usb_generic_driver_probe+0x8d/0x150 [ 1362.430831][ T31] usb_probe_device+0x1c4/0x390 [ 1362.435823][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 1362.441365][ T31] really_probe+0x26d/0x9e0 [ 1362.446014][ T31] __driver_probe_device+0x18c/0x2f0 [ 1362.451408][ T31] driver_probe_device+0x4f/0x430 [ 1362.456538][ T31] __device_attach_driver+0x2ce/0x530 [ 1362.461990][ T31] bus_for_each_drv+0x251/0x2e0 [ 1362.466931][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1362.472933][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1362.478608][ T31] __device_attach+0x2b8/0x400 [ 1362.483403][ T31] ? __pfx___device_attach+0x10/0x10 [ 1362.488813][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1362.494057][ T31] bus_probe_device+0x185/0x260 [ 1362.499440][ T31] device_add+0x7b6/0xb50 [ 1362.503898][ T31] usb_new_device+0xa39/0x16f0 [ 1362.508769][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 1362.513995][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1362.519379][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1362.524703][ T31] hub_event+0x2958/0x4a20 [ 1362.529270][ T31] ? __pfx_hub_event+0x10/0x10 [ 1362.534221][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1362.540180][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1362.545403][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1362.551191][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1362.556924][ T31] process_scheduled_works+0xae1/0x17b0 [ 1362.562704][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1362.568764][ T31] worker_thread+0x8a0/0xda0 [ 1362.573376][ T31] kthread+0x711/0x8a0 [ 1362.577445][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1362.583046][ T31] ? __pfx_kthread+0x10/0x10 [ 1362.587745][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1362.592963][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1362.598470][ T31] ? __pfx_kthread+0x10/0x10 [ 1362.603101][ T31] ret_from_fork+0x4bc/0x870 [ 1362.608071][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1362.613191][ T31] ? __switch_to_asm+0x39/0x70 [ 1362.618054][ T31] ? __switch_to_asm+0x33/0x70 [ 1362.622850][ T31] ? __pfx_kthread+0x10/0x10 [ 1362.627435][ T31] ret_from_fork_asm+0x1a/0x30 [ 1362.632260][ T31] [ 1362.635577][ T31] INFO: task syz.1.4073:21683 blocked for more than 144 seconds. [ 1362.643817][ T31] Not tainted syzkaller #0 [ 1362.649735][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1362.658862][ T31] task:syz.1.4073 state:D stack:26056 pid:21683 tgid:21669 ppid:19947 task_flags:0x400140 flags:0x00080002 [ 1362.671141][ T31] Call Trace: [ 1362.674435][ T31] [ 1362.677359][ T31] __schedule+0x1798/0x4cc0 [ 1362.682120][ T31] ? __pfx___schedule+0x10/0x10 [ 1362.687069][ T31] ? schedule+0x91/0x360 [ 1362.691432][ T31] schedule+0x165/0x360 [ 1362.695816][ T31] schedule_preempt_disabled+0x13/0x30 [ 1362.701390][ T31] __mutex_lock+0x7e6/0x1350 [ 1362.706077][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1362.711217][ T31] ? usbdev_open+0x16e/0x760 [ 1362.715840][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1362.720962][ T31] ? bus_find_device+0x273/0x2b0 [ 1362.725918][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 1362.731356][ T31] ? __lock_acquire+0xab9/0xd20 [ 1362.736229][ T31] usbdev_open+0x16e/0x760 [ 1362.740745][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1362.745699][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1362.750964][ T31] chrdev_open+0x4cc/0x5e0 [ 1362.755408][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1362.760415][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1362.766771][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1362.771831][ T31] do_dentry_open+0x953/0x13f0 [ 1362.776646][ T31] vfs_open+0x3b/0x340 [ 1362.780839][ T31] ? path_openat+0x2ecd/0x3830 [ 1362.785628][ T31] path_openat+0x2ee5/0x3830 [ 1362.790309][ T31] ? __pfx_path_openat+0x10/0x10 [ 1362.795272][ T31] do_filp_open+0x1fa/0x410 [ 1362.799829][ T31] ? __lock_acquire+0xab9/0xd20 [ 1362.804693][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1362.809819][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1362.814683][ T31] ? alloc_fd+0x64c/0x6c0 [ 1362.819140][ T31] do_sys_openat2+0x121/0x1c0 [ 1362.823840][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1362.829125][ T31] ? rcu_is_watching+0x15/0xb0 [ 1362.833912][ T31] __x64_sys_openat+0x138/0x170 [ 1362.838994][ T31] do_syscall_64+0xfa/0xfa0 [ 1362.843527][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.849681][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1362.855845][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1362.860701][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.866614][ T31] RIP: 0033:0x7f804ad8d810 [ 1362.871080][ T31] RSP: 002b:00007f804bb5ab70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1362.879573][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f804ad8d810 [ 1362.887666][ T31] RDX: 0000000000000002 RSI: 00007f804bb5ac10 RDI: 00000000ffffff9c [ 1362.895653][ T31] RBP: 00007f804bb5ac10 R08: 0000000000000000 R09: 0000000000000000 [ 1362.903917][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1362.911979][ T31] R13: 00007f804afe6308 R14: 00007f804afe6270 R15: 00007f804b10fa28 [ 1362.920047][ T31] [ 1362.923129][ T31] [ 1362.923129][ T31] Showing all locks held in the system: [ 1362.930982][ T31] 2 locks held by kworker/u8:1/13: [ 1362.936219][ T31] 1 lock held by khungtaskd/31: [ 1362.941209][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1362.951136][ T31] 5 locks held by kworker/1:1/44: [ 1362.956174][ T31] #0: ffff888144680148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1362.967636][ T31] #1: ffffc90000b47ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1363.003202][ T31] #2: ffff88814473e198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1363.025887][ T31] #3: ffff88804df81198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1363.039182][ T31] #4: ffff888028d92160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1363.048832][ T31] 2 locks held by getty/5590: [ 1363.053520][ T31] #0: ffff88814de600a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1363.065462][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1363.076038][ T31] 5 locks held by kworker/u8:11/16510: [ 1363.081679][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1363.092734][ T31] #1: ffffc900042f7ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1363.106097][ T31] #2: ffffffff8f2be2b0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 1363.115542][ T31] #3: ffffffff8f2cb148 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 1363.124807][ T31] #4: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 1363.135820][ T31] 1 lock held by syz.1.4073/21683: [ 1363.141042][ T31] #0: ffff88814473e198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 1363.150111][ T31] 1 lock held by syz.6.4697/24057: [ 1363.155228][ T31] #0: ffff88814473e198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 1363.164359][ T31] [ 1363.166694][ T31] ============================================= [ 1363.166694][ T31] [ 1363.175696][ T31] NMI backtrace for cpu 1 [ 1363.175712][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1363.175735][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1363.175747][ T31] Call Trace: [ 1363.175755][ T31] [ 1363.175763][ T31] dump_stack_lvl+0x189/0x250 [ 1363.175797][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1363.175824][ T31] ? __pfx__printk+0x10/0x10 [ 1363.175856][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1363.175879][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1363.175902][ T31] ? __pfx__printk+0x10/0x10 [ 1363.175938][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1363.175971][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1363.175995][ T31] watchdog+0xf60/0xfa0 [ 1363.176019][ T31] ? watchdog+0x1e2/0xfa0 [ 1363.176044][ T31] kthread+0x711/0x8a0 [ 1363.176073][ T31] ? __pfx_watchdog+0x10/0x10 [ 1363.176091][ T31] ? __pfx_kthread+0x10/0x10 [ 1363.176118][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1363.176141][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1363.176164][ T31] ? __pfx_kthread+0x10/0x10 [ 1363.176188][ T31] ret_from_fork+0x4bc/0x870 [ 1363.176211][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1363.176238][ T31] ? __switch_to_asm+0x39/0x70 [ 1363.176253][ T31] ? __switch_to_asm+0x33/0x70 [ 1363.176269][ T31] ? __pfx_kthread+0x10/0x10 [ 1363.176295][ T31] ret_from_fork_asm+0x1a/0x30 [ 1363.176328][ T31] [ 1363.176336][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1363.322787][ C0] NMI backtrace for cpu 0 [ 1363.322807][ C0] CPU: 0 UID: 0 PID: 1340 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 1363.322828][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1363.322841][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1363.322867][ C0] RIP: 0010:lock_acquire+0x58/0x360 [ 1363.322888][ C0] Code: 8b 05 4c ce d0 10 48 89 44 24 58 0f 1f 44 00 00 65 8b 05 4f ce d0 10 83 f8 08 0f 83 b8 01 00 00 89 c0 48 0f a3 05 78 82 df 0d <73> 16 e8 c1 fb 08 00 84 c0 75 0d f6 05 b5 8e c9 0d 01 0f 84 d7 01 [ 1363.322904][ C0] RSP: 0018:ffffc900044a7398 EFLAGS: 00000293 [ 1363.322919][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 1363.322931][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8df3d2e0 [ 1363.322950][ C0] RBP: ffffffff81738d25 R08: 0000000000000000 R09: 0000000000000000 [ 1363.322962][ C0] R10: ffffc900044a7558 R11: ffffffff81ac2cc0 R12: 0000000000000002 [ 1363.322975][ C0] R13: ffffffff8df3d2e0 R14: 0000000000000000 R15: 0000000000000000 [ 1363.322988][ C0] FS: 0000000000000000(0000) GS:ffff88812613e000(0000) knlGS:0000000000000000 [ 1363.323002][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1363.323015][ C0] CR2: 00007fd7cb5b6358 CR3: 000000007cc14000 CR4: 00000000003526f0 [ 1363.323032][ C0] Call Trace: [ 1363.323038][ C0] [ 1363.323050][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1363.323072][ C0] ? nsim_dev_trap_report_work+0x29a/0xb80 [ 1363.323092][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1363.323111][ C0] unwind_next_frame+0xc2/0x2390 [ 1363.323130][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1363.323151][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1363.323171][ C0] ? __alloc_skb+0x112/0x2d0 [ 1363.323198][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1363.323222][ C0] arch_stack_walk+0x11c/0x150 [ 1363.323245][ C0] ? nsim_dev_trap_report_work+0x29a/0xb80 [ 1363.323266][ C0] stack_trace_save+0x9c/0xe0 [ 1363.323288][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1363.323312][ C0] ? stack_trace_save+0x9c/0xe0 [ 1363.323335][ C0] kasan_save_track+0x3e/0x80 [ 1363.323359][ C0] ? kasan_save_track+0x3e/0x80 [ 1363.323382][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1363.323406][ C0] ? kmem_cache_alloc_node_noprof+0x433/0x710 [ 1363.323429][ C0] ? __alloc_skb+0x112/0x2d0 [ 1363.323451][ C0] ? nsim_dev_trap_report_work+0x29a/0xb80 [ 1363.323491][ C0] ? kmem_cache_alloc_node_noprof+0x8c/0x710 [ 1363.323515][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1363.323540][ C0] kmem_cache_alloc_node_noprof+0x433/0x710 [ 1363.323564][ C0] ? __alloc_skb+0x112/0x2d0 [ 1363.323590][ C0] __alloc_skb+0x112/0x2d0 [ 1363.323616][ C0] nsim_dev_trap_report_work+0x29a/0xb80 [ 1363.323643][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1363.323662][ C0] process_scheduled_works+0xae1/0x17b0 [ 1363.323693][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1363.323718][ C0] worker_thread+0x8a0/0xda0 [ 1363.323738][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1363.323763][ C0] ? __kthread_parkme+0x7b/0x200 [ 1363.323786][ C0] kthread+0x711/0x8a0 [ 1363.323809][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1363.323827][ C0] ? __pfx_kthread+0x10/0x10 [ 1363.323849][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1363.323868][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1363.323889][ C0] ? __pfx_kthread+0x10/0x10 [ 1363.323911][ C0] ret_from_fork+0x4bc/0x870 [ 1363.323929][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1363.323955][ C0] ? __switch_to_asm+0x39/0x70 [ 1363.323970][ C0] ? __switch_to_asm+0x33/0x70 [ 1363.323984][ C0] ? __pfx_kthread+0x10/0x10 [ 1363.324006][ C0] ret_from_fork_asm+0x1a/0x30 [ 1363.324029][ C0]