last executing test programs: 29m39.574416511s ago: executing program 0 (id=160): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) flock(r0, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000300)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="400e160000003607bf44"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000000180)={{0x2000, 0x6000, 0x4, 0x49, 0x4, 0xc, 0x4, 0x4, 0x0, 0x2, 0x5, 0x4}, {0x1, 0x80a0000, 0xf, 0x0, 0xe, 0x0, 0x0, 0x4, 0x6, 0x2, 0x58, 0x6}, {0x8080000, 0x100000, 0xf, 0xa7, 0x5, 0xbb, 0xde, 0x1, 0x4, 0xf5, 0xb, 0x8}, {0xeeee0000, 0x40cebca605f4ee33, 0xc, 0xf8, 0x5, 0x2, 0x6, 0x40, 0x3f, 0x7, 0x82}, {0x8080000, 0xeeee3000, 0x4, 0x5, 0x53, 0x40, 0x88, 0x0, 0x78, 0x0, 0x10, 0x9}, {0x2000, 0xdddd1000, 0x0, 0x7, 0x1, 0xb, 0x3, 0x9, 0x3, 0x9, 0x0, 0x7}, {0x1000, 0x2000, 0xe, 0x7, 0x7f, 0x81, 0x0, 0x81, 0x4, 0x9, 0x8b, 0x6c}, {0x7000, 0x100000, 0x0, 0x3, 0x9, 0x8, 0x9, 0x4, 0x0, 0x7, 0x50, 0x85}, {0x6000, 0x2}, {0x2000, 0xd}, 0xe001000c, 0x0, 0x6000, 0x102128, 0xd, 0x800, 0xd5dd0000, 0x1, [0x200000005c, 0xffffffffffffff1a, 0x2100fffd, 0x5]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getnexthop={0x20, 0x6a, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_GROUPS={0x4}, @NHA_FDB={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x890) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x1, 0x3, 0x8000009, 0xfffffffffffffffc}) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121081, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) close(r8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000600)={0x4040100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) 29m37.250640421s ago: executing program 0 (id=167): syz_usb_connect(0x5, 0x255, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000670250404020014964680102030109024302010000000009042100021085d80009050402ff0300000007250180000500872266b8d895a718d2000000000000000000fe3c9ad0bc7dabdd92000000000070e9f36d"], 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{0xd000, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0xb, 0x3, 0x3, 0x2, 0x7, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0x10, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0xce}, {0x4, 0x7}, {0x6000, 0x5}, 0x80000035, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, &(0x7f0000000040)) 29m36.338501695s ago: executing program 0 (id=168): socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) (async) listen(r0, 0x50) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYBLOB="8735f9e2e84a8ad6180f5d932f4ee99505bc26222e3d00b797ab170dab9acf10b263d9", @ANYRES16=r0], 0x10}}, 0x6c014) r2 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x4, @mcast2}, 0x1c) (async) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r3, 0x540b, 0x0) (async) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e60, 0x800, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) (async) syz_emit_ethernet(0xbe, &(0x7f0000000280)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0xf, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x13}, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x7, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x2, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x2, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x6, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xfe33) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) 29m36.100327398s ago: executing program 0 (id=171): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = geteuid() quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, r1, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x72}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40840}, 0x20048000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x13, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_USERDATA={0x26, 0x8, "475ef797d28f0321a64b1a36181ca70611f80d770c1ada336833a312c63db6e5e45c"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x20000011) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x40801}, 0x24000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x4010) sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x140, r7, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3d}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1b000}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x308}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x409de60b04727fc7}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x10}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f00000007c0)={0xffffffffffffffff, 0x1}, 0xc) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), r6) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, r8, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x48040}, 0x20000880) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r6) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r9, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40028050}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r10, 0x0, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, r8, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0xc000) r11 = syz_open_dev$usbfs(&(0x7f0000000c00), 0xff9, 0x8200) ioctl$USBDEVFS_RELEASE_PORT(r11, 0x80045519, &(0x7f0000000c40)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000c80)="f1c1a0b9fa99383a12601fcf7e30916ac64d4a49101cf46b9b6f93c51987d616c96660504359853ea97318c36e9384caf376495e0bb0f22fc834b3aed371e90f79370974784eac9e52fae5dfe3a135cc664c6e4cfb471e4d608e3832c3022b8d43c31fb03e5bd0b7bc9e1af1c4ee14e4f6c9da1a2e38245152662abf65c731927e886bf823cf312379eb1b2ad51b46926014f8de1edcb0ef1f7950c07e0939b58fdda1ca6bc667541ab959146d42348c2ca0856cbd381912d31f985419e07f38b068fdf5f29f47e4bfd076b06536d0d99c2ffdfb1a72ed311aa36c930f74a182046d94", 0xe3, 0x24044090, &(0x7f0000000d80)={0xa, 0x4e21, 0xd77, @private1, 0x7fffffff}, 0x1c) sendmsg$inet(r9, &(0x7f00000023c0)={&(0x7f0000000dc0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000021c0)=[{&(0x7f0000000e00)="b6ec197771afa97d7f017eb0a3d7123fbbfb537bfd453e8041abb43aeb2be88f0820136395334787e87814d6ece16dc06528bf391dee775874d61e6a710a39d2cc7e24ecdf3f4ae1290f6761adfd5f2989bd2f6b763d851cfc7fb93995e907f4858cd8b6aa90b9bf406af248762f33d62e91ff5156ef4ea2746d3721005967b66f3928a69d95", 0x86}, {&(0x7f0000000ec0)="b30a6a6af24ae8a1a1c8e1a2378dc0d5bb7fd7cb5782c01cc18600e642b780d5f410571cda7a94307853473584011dc3982f933cbfebf285b3480449b87a078a485755cd8fe2a51d659980eb038b2b480d8a6e874d0261f6f2f2fe74a0c0026a61faa8dadc7c60f75e588feb97c4645183d83452da0277dffff40efe8727a94148d76e1a22869b43657bea106623c4ac57e31735f6e961afec700703bed2faa1db8fa5fc8ce4e329405b25c4b502c6b879e3db23372b7ddc5a935aa8b0b491e04bede8d0d25b7d2b51bdce5ff703b875aeda5ad7f75b6ad97cedf7a02aeb588de58e33719f5d7f43312a2bb1906f9d6176375895e47b2f", 0xf7}, {&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f0000001fc0)="753eb6aee04d76dc385152e1553412a89c3c3228b0ff7e6bbf011afb3b8d41639386ce9264e41ab6afa0", 0x2a}, {&(0x7f0000002000)="6bc2b687c76736b712d34e6a5f310d0ad09a7f553fb9eb5f4b66763f16fa7fce1e7c44f33e918b9b30ae0d2c06749922f025c18bc05bef258fad0d6be58cae91883c869f085a419194c2110d9c30161833e7a2d1c5c24360715294c2ebd686c71365fc97755f034f461996f954894550948506b4f37306ca5cc1ac646c21884bb5e5faeb3852446aa2d8006e2678d4547d3f2acbe046f1cb7f1b4242f9eab9444000c1fe1cec215916bb37d2ecf418a9571ab29437182a", 0xb7}, {&(0x7f00000020c0)="176292b47c3e7eaef665f784617e0ab631e1dc02dea0cc7d86af893ad6b75e6ac61d9b3e90dd23137ece03e1263917e6cd6b99b7d3a206c9c753c6c9ac548b5ebfba5a079318859f10979b4588ecd1fbbe392ebd18980b87d168218b6b235b8af2315aa1c58e8dd6991b0a778bf8251dc6289d82f2f44db270c31910c4b2637a93ef5f61a4f00cb36dbec0a942ac4b901662bd39b9d862d3550de18e33d59bec77a4227147bbb62d9fcebc73c47a3dff68b5478d3ba724896f53664e7191b3d791376e1bbaad67352ca2f2c6bf3e6dd7db7847d3b7991f946a8547087bcbe4dae9d40e4d53f76d5bcf1e4073264deded2ec6e26a04f0ab", 0xf7}], 0x6, &(0x7f0000002240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x68, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0xb, 0x1, 0x4, [{@loopback, 0x272}, {@private=0xa010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xc03}]}, @timestamp_addr={0x44, 0x3c, 0x50, 0x1, 0x5, [{@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@rand_addr=0x64010102, 0x4}, {@empty, 0x4}, {@multicast1}]}]}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@end, @end, @lsrr={0x83, 0xb, 0xc4, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @timestamp={0x44, 0x20, 0x50, 0x0, 0x8, [0xfffffff9, 0xa1, 0xdc7, 0xe76, 0xfffffffd, 0x5, 0x0]}, @generic={0x94, 0xd, "25bf68882270c8779392a7"}, @timestamp_prespec={0x44, 0x14, 0xdc, 0x3, 0x1, [{@remote, 0x9}, {@multicast2, 0x7}]}]}}}], 0x180}, 0xc050) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f0000002400)={0x0, 0x1, 0x6}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000002480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r13, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008801}, 0x8084) 29m35.7858094s ago: executing program 0 (id=174): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb8, 0xc0, 0x7d, 0x40, 0xc45, 0x8001, 0x900a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x80, 0x82, 0x99}}]}}]}}, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x3009}], 0x1, 0x0, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xd, 0x2, 0x2, 0x6, 0x1680, 0x1, 0x2e7, '\x00', 0x0, 0xffffffffffffffff, 0x403, 0x0, 0xffffffff}, 0x50) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@broadcast, @multicast1, 0x0}, &(0x7f0000000100)=0xc) (async, rerun: 32) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@struct={0x6, 0x2, 0x0, 0x4, 0x1, 0xd, [{0x0, 0x2, 0x9}, {0x5, 0x5, 0xbe90}]}]}, {0x0, [0x0, 0x30, 0x5f, 0x2e, 0x0]}}, &(0x7f00000001c0)=""/176, 0x43, 0xb0, 0x1, 0x1ff}, 0x28) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x3, 0x1, 0x5, 0x100, r1, 0x1, '\x00', r2, r3, 0x2, 0x0, 0x3, 0x7}, 0x50) 29m35.46917159s ago: executing program 0 (id=175): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @raw_data="3ba64ef20e50eaf75247423328a35f692073376e6e8bc64df6b2fdf24368fa0b5ca5da9b3b40ce034e4d726edecb8038508002d6dc31050bf092312cecc3e766a24bf3714949327f8e0379dacebe19e48c604788bd8b1bdc89e8c3c7fd5e68c8b32f43aa3b108968b10015c2ea5e42412355eaae0f5755b65af797317dfe3808f93c22105dc99e4043654b348631be6e3d7ceb3fc86c1244f4208a3eeee6adc5bffef7581d0b6f2e6a5332b9fe290bf91504ee974b1aa05e138386e55f5b1232d202642f573eb60e"}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x351a, 0x100, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 29m20.313499689s ago: executing program 32 (id=175): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @raw_data="3ba64ef20e50eaf75247423328a35f692073376e6e8bc64df6b2fdf24368fa0b5ca5da9b3b40ce034e4d726edecb8038508002d6dc31050bf092312cecc3e766a24bf3714949327f8e0379dacebe19e48c604788bd8b1bdc89e8c3c7fd5e68c8b32f43aa3b108968b10015c2ea5e42412355eaae0f5755b65af797317dfe3808f93c22105dc99e4043654b348631be6e3d7ceb3fc86c1244f4208a3eeee6adc5bffef7581d0b6f2e6a5332b9fe290bf91504ee974b1aa05e138386e55f5b1232d202642f573eb60e"}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x351a, 0x100, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 25m21.786714627s ago: executing program 5 (id=1008): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 25m21.701269518s ago: executing program 5 (id=1010): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24004800, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000200), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xa00965, 0x2}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d70300000000000000d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df6c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8a9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2a9e99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8be1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaa072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a3ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a98838156ff00000000000000cdbf91f7582ab314be3e67b8c9459564c856339a80919ecf839560c62e69df8667b274cc53f83f2086cfd2664252471fad9081824d60741d663ee258705c364e162b84a09870acd0a19399103474444f4fa12dcbd10b40195b6088513029b60a34e4161fe48c092693eb07dc8ddcba2eac2efe30b285a877c862c73ff8a60cf73f1b17da0000000000005664181c1f28cd2880e6872bae932eaf4b0000000000007b662c0fe22cfd6d4bd7b851ae928cebeec6375b16af342e93c39d97e5d74d5a8e96c15fdcde7526b0af54b145e61b042c1e600390590a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffd0}, 0x42) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x178, 0x8, 0xfa04, 0x178, 0x6c02, 0x278, 0x194, 0x194, 0x278, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x0, 0x74020000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x39d, 0x3, 0xfff, 'netbios-ns\x00', {0x2}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0xffffff00, 'macvlan1\x00', 'sit0\x00', {}, {}, 0x0, 0x0, 0x24}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xef, 0xa, {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r7 = bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r6, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup={0x0, r2}, 0x10}}, 0x20) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) syz_usb_connect(0x0, 0x52, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002598f110210494008e280102030109024000010000000009046d00000202ff400524060000052400b77f0d240f0104000000020008000905240600000524"], 0x0) sendmsg$FOU_CMD_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES16=r8, @ANYBLOB="010725bd7000fcdbdfb303003f316e527b3320eaafaf14594c5880a94509e5e92a67b19a8d396b5bdfbaa49b"], 0x14}, 0x1, 0x0, 0x0, 0x20045091}, 0x24048880) write(r7, &(0x7f0000000200)="240000001e005f80004000000000000003000000000000000000080008000100000000ff", 0x24) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0xb) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r9, @ANYBLOB="49fdb159f9f24f78d465531453dfea566c25231a5792cefbeb64951e1d644e6a4a84628c4a6117ddc9642480500eea902a8569d3bb1dd55f200a7a1d5c33a51b27b9f223", @ANYRES32=0x0], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) 25m18.598122164s ago: executing program 5 (id=1019): r0 = socket(0x22, 0x2, 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), 0x0, 0xfff, r1, 0x0, 0xa0028000}, 0x38) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x2) ioctl$SG_BLKTRACESTART(r2, 0x1274, 0x0) 25m18.210460399s ago: executing program 5 (id=1021): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1004e1e}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) gettid() r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x20040811, &(0x7f0000000100)={0xa, 0x4e23, 0x77, @loopback, 0x10000}, 0x1c) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x4, 0x10d, &(0x7f0000000d40)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfb, 0x2, 0x1, 0x4, 0x0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "358aa0"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xcd6, 0x3, 0x800, 0x6}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@mdlm_detail={0x80, 0x24, 0x13, 0x1, "09669da6bd8f5454c22845d8cb8eb83d37b0750ab7b1c365da5a2cbf7c0a8f319337020bbe660babe29832f40a6a5ac612f8f3c3d1f0b5403bdade445d6ca6f495fdeb9511621ec2fced8c3a819ccb87c303d15c4dcaacf913dea0c3275d7afda187482e414a259785dd0b1d4b167c2b70c8d8c3fb1465bffef108e0"}, @country_functional={0x10, 0x24, 0x7, 0x7f, 0x0, [0x800, 0x82, 0xb, 0x9, 0x9]}, @dmm={0x7, 0x24, 0x14, 0x6, 0x5}, @obex={0x5, 0x24, 0x15, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xe, 0x3, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x8, 0x3, 0x1}}}}}}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x200, 0x7, 0x4, 0xce, 0x8, 0x4}, 0x2f, &(0x7f0000000e80)={0x5, 0xf, 0x2f, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x400002, 0xf00, 0x7, [0xf, 0xc030, 0xff0000, 0x7e5f]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x92, 0x0, 0x7, 0x3, 0xff}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x1c09}}]}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb0000000000000000020007"], 0x88}}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000001580)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a5f92400905ad0aff03f70709090587"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x15b, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x149, 0x2, 0x1, 0xa, 0x0, 0xfb, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "7d656d6891"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7fb, 0x3, 0xfffd, 0x9}, {0x6, 0x24, 0x1a, 0x40}, [@mdlm_detail={0x38, 0x24, 0x13, 0x4, "0c9f025fa4115b5dccd89e1c97ae4c0245da722d700641873260e8ec01c5b6f10e1ca9f5dbeddedecb5b921858940c84e69eef9c"}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x7, 0x5, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x40}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x45, 0xf, 0x1}, @mdlm_detail={0x88, 0x24, 0x13, 0x4, "04578fcac0a62bf31574393c569d47d7879251b14680e1e4db13514e87e4fb8b58ae438cced1dc68c5c221f4d9724340133ad870c3da6610f06c9e47fbb226ab89efd53bba241fb3b220f810b5f3462dc65d3a7dd787878213a6721295197f236b15778842d0a0c19b7588216187d4a0df151dbb5960c79c33ad93543cdbe1015dc5992a"}, @mdlm={0x15, 0x24, 0x12, 0x10}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x81, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x4, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0xb, 0x4}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x3f, 0x6, 0x40, 0x4}, 0x33, &(0x7f0000000080)={0x5, 0xf, 0x33, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x4, 0x94, 0x3, 0x4}, @wireless={0xb, 0x10, 0x1, 0x2, 0x3, 0x6, 0xff, 0x6, 0x8}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x8, 0xf00, 0x7, [0xc0, 0xcf, 0x7f8030]}]}, 0x3, [{0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="620332ca3efed31852193e068270f1bf958b8233a34055fdf21ff1dc6d6ca45ba24734c26620a5e320212b685ed3e5ff94df2d5b313dec85280f829f685d048133d5a7d4023bf80e07313eff3997a8cfd7ad8e8442d266ac2f011b7a642470e816f5"]}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc09}}]}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x40000000, 0xffffffffffffffff) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000a80)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c100000000000224e0000", 0x58}], 0x1) 25m15.137142959s ago: executing program 5 (id=1033): r0 = syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000680)={0x14, &(0x7f0000000600)={0x20, 0xd, 0xd, {0xd, 0x22, "0dbe4e38082eff57e8a89a"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, &(0x7f0000000a00)={0x34, &(0x7f00000008c0)={0x20, 0x1d, 0xe4, "da0cfb638423b50bfc98d362750041f6368b830264bf94625ccb8f9964592ae0b92312450ee0d9a26876aa4c7008125d8fa3d695ec022b2472b9f1c6e5163b7f7ea07e1703cff2d3e8350505943b6cc4f7c9be254898a0ea2827c05bedeced264663fde9cda875a0cb59236096926cf38aba5e4026f81603ab244350f905f3eb50fe153ce6e6714f7ac399f4750d0e35a5f159f3c55cc07931dea63d1a98b528d2ab78ca6af84585f38979bb1f0a3e78d6d5cfc3cfe31a679942f396e3b924c4ad1d66663be284b1e91a1e2050629533f078dd623279d3168127791283dfdc26160ab2f3"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xb3}, &(0x7f0000000780)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f00000007c0)={0x40, 0xa0, 0x4, 0x7}, &(0x7f00000009c0)={0xc0, 0xa2, 0x2f, "27fc6b96c6ba6a9e58a7554efe2c6fb703bf8b025ac1bccba06c1676fcf7960e9faea56055be977a07a7167aa36ec0"}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000001000), 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000fc0)={'#! ', '', [], 0xa, "3f630ce2c536b7de41ae7dc6c25472dbd216ab4a9d4cb75a76023434b95e41eb27"}, 0x25) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffffffff, 0x46) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000140)={0x0, 0x8, 0x8d, {0x8d, 0x3, "879f211e6ceae432877737335c0da41c8cd01b50d8e26e2cd1a6d121beea1f6eeb7dc999035ddf60598b7031a1c593fa6daa48d499426520d73571dd2687d48aa5e48dcbc14699a996f32f6d99ce9de9703cf1b15cd9eabb3f20cb25e388f3ffe8279a235f6ae484ecbda51061bac6343a2492b2ff8d008f65f698897da93c0043f93c343f4aeef0ca7861"}}, &(0x7f0000000200)=ANY=[@ANYBLOB="ff03049c4e82eadb4811"], &(0x7f0000000b00)=ANY=[@ANYBLOB="00b33700"/14], &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1f3, 0x9, 0x1, {0x22, 0x866}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00056500000005f1f4d110d9c8ce63bc70144f48ec1551b8411454ddc34dba01404cd9279d67cde344f7c86dc024fa6fcce4845050d88ea0e3aca345feabd0a6ed9dcef76899d736e87fa0f56b315b934555dc736a3fdb745d0806c796dd"], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000440)={0x20, 0x1, 0xfb, "9fd8132ba2fc9529341e3c177c164943dfe8fc2bd1042800609ee8c9fa1fc505d52bd240ff2ac539cdd76ec3f2fbb38427d8de3f273f3a513ab9de0c12899cbde519f482a3b000f2a5de24395ebbd69a1f4626b93f7f080cc5c7844b6d4d2ee90f61b2de9872732bf1367f20a2f600f74217bfd5b69ea8ea1714c9c20a15b606e9b86bb6290bccbeec9d28b4754905b949b13c74a23d1597903e4e677f1d7b548122fab1f05a7f4f7b90b817a8192e5ab3cb5d2e9e325a3ffcf420215e624f573121d22c70b9f960a2006f9a09b81140fda9bfad163e0fb4587e09054c8404c4f5fa007f5df785f3abaacd686b8398c888a3ed2883709d40f682e9"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0xe}}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0x82, &(0x7f0000000200)={0x7939, 0x2, 0x8000, 0x86, 0xe2, 0x0, 0xff, 0x3575}, &(0x7f0000000080)=0x20) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="ca2f0e72000000b095fef0d51cea178b37c274c2c50ebe663a9370072d3176aca05820b0fc55afb60ae725b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/91, 0x5b}], 0x1, &(0x7f0000000ac0)=""/32, 0x20}, 0x5}, {{&(0x7f0000000b40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000bc0)=""/85, 0x55}, {&(0x7f0000000c40)=""/193, 0xc1}, {&(0x7f0000000d40)=""/50, 0x32}], 0x3, &(0x7f0000000ec0)=""/100, 0x64}, 0xfffffffb}, {{&(0x7f0000001000)=@nfc, 0x80, &(0x7f0000001140)=[{&(0x7f0000001080)=""/4, 0x4}, {&(0x7f00000010c0)=""/83, 0x53}], 0x2, &(0x7f0000001180)=""/19, 0x13}, 0x9}], 0x3, 0x10060, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)=@RTM_NEWMDB={0xd8, 0x54, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x4, {@in6_addr=@remote, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x4, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x34}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x3, {@ip4=@loopback, 0xc00}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x3, {@in6_addr=@private2={0xfc, 0x2, '\x00', 0x1}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x3, {@ip4=@multicast1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@ip4=@loopback}}}]}, 0xd8}}, 0x20000000) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 25m14.259322047s ago: executing program 5 (id=1037): syz_emit_ethernet(0x2e, &(0x7f00000016c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote, {[@timestamp={0x44, 0x4}]}}, @echo={0x8, 0x0, 0x0, 0x0, 0x4}}}}}, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f000000d000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) syz_open_dev$usbfs(0x0, 0x77, 0x1501) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000600)={{0x6, 0x8}, 0x100, './file0\x00'}) socket$netlink(0x10, 0x3, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r2 = socket$inet6(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x40) preadv(r5, &(0x7f0000000300)=[{&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/78, 0x4e}, {&(0x7f0000000180)=""/20, 0x14}], 0x3, 0x91, 0x0) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000540)=@hci, 0x80, &(0x7f0000000380)=[{&(0x7f0000000400)=""/242, 0xf8}], 0x1, 0x0, 0x2, 0x200000}, 0x1f02) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000340)=0xcb, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 24m58.694319052s ago: executing program 33 (id=1037): syz_emit_ethernet(0x2e, &(0x7f00000016c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote, {[@timestamp={0x44, 0x4}]}}, @echo={0x8, 0x0, 0x0, 0x0, 0x4}}}}}, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f000000d000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) syz_open_dev$usbfs(0x0, 0x77, 0x1501) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000600)={{0x6, 0x8}, 0x100, './file0\x00'}) socket$netlink(0x10, 0x3, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r2 = socket$inet6(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x40) preadv(r5, &(0x7f0000000300)=[{&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/78, 0x4e}, {&(0x7f0000000180)=""/20, 0x14}], 0x3, 0x91, 0x0) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000540)=@hci, 0x80, &(0x7f0000000380)=[{&(0x7f0000000400)=""/242, 0xf8}], 0x1, 0x0, 0x2, 0x200000}, 0x1f02) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000340)=0xcb, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 24m12.862497899s ago: executing program 1 (id=1246): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = fanotify_init(0x200, 0x40000) write(r0, &(0x7f00000006c0)="ff000000010000a2", 0x8) 24m12.643234425s ago: executing program 1 (id=1248): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xbe7ba000) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}, 0x80) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) (async) r7 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) r8 = getpgid(0x0) process_vm_writev(r8, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r7, &(0x7f0000000080)={0x14, &(0x7f0000000140)={0x20, 0x22, 0xef, {0xef, 0x6, "65bd7a12150cf091e54e0aaae2e2ada95d1fd209f91ceeaee4e7f18055ea31818fb5dce73d73b6b892531cb2b46f1005b735dc77c2369ffe5beb8af70bd2c2108045e01076f6663ac463d95590ddde9aa9138aa0f38f0f6af5e1c270ec41dadcac34f184e103f45adf5e0a1ee8de002f0d851b58770ace697f3b921d7c868e71262045a5e6114f84ab3bbf6407f942c5c41d4d344a0394fad0c768d5508695b308d095f77ee9722792b2ede2950cbedd0fe2da6832f8427696847ccb07003c1bfbea806293e96373c0e7fc7c8d3c69052c7b0248a88c8fc2b2f01706ca0897806604ab053cd34361b107ac5fe2"}}, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003a2fc147029f13cea1a9c9d617066d94c6f494817f12d8648f864d5d33a4fda03ef7caf747405d054b49344c706662317ad95ff0ffee27e5ac9e27e37d1d53866cba8bbd8de7ba24ab3f79d799649c4afce403e"]}, &(0x7f0000000440)={0x34, &(0x7f0000000240)={0x40, 0x7, 0xdf, "865e76d9a54fe32f7c9d23816368bb53cbd41cb2126a976a0189c8d182d34fa468ec3873161f9372d79df91196cfcd33a306cbdfb094a9929bb8ef66627ff73e6be366f81b90dc0018d82b6b10e86f15c03dc4f6feeac926695bee7107eae7a7335d29fbbfe61b270c61297d22e6078a141a65895db8962f035730eab8ddc601f45e752f2ba960ed54849777f1e71c34b6394db968057a0d70780f64d3437fda2757073b994589dbae52138f62d19431b8bf4f70c00617b0a3ac6ceec4dd6901018d0defa8fab4b90b28a29a83fec1e544d5d6d05024a653f901da1622e8e8"}, &(0x7f00000000c0)={0x0, 0xa, 0x1, 0xbd}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000380)={0xc0, 0xa1, 0x4, 0x10001}, &(0x7f00000003c0)={0x40, 0xa0, 0x4}, &(0x7f0000000480)={0xc0, 0xa2, 0x2f, "725a8fbdcd99ee998c45c52bd84fcdf8fef2f72118b1f0115b3b3d38d6631d8dc79fb2f76758d0eda6e1444d15c12c"}}) getdents(r3, &(0x7f0000000880)=""/19, 0x13) (async) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000002, 0x10, r6, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x114, &(0x7f0000000540)=0x9c3, 0x0, 0x4) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_GET_DEBUGREGS(r11, 0x8080aea1, &(0x7f0000001340)) 24m12.010845397s ago: executing program 1 (id=1250): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @loopback}}, 0x80, 0x0}, 0x4004090) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x10, 0x8002, 0x0, 0x9, 0x0, 0x7, 0xfa11, 0x1}, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', '', [], 0xa, "cef6bdb1cf1d4c62efdc8974cba1f1786f9bcf9fa1f8e56a210f126062eac0eb70eb4d62db3118d0a78b8bbf0738793fe317800000000000000051a002e98dd21697e23ff2c620009ad706e0c77aa051a33e042e7e0e8b8afa5006690a29d2c91a9220706809ef037a533c5e8aed1d7b8fb5c246f79cd15ca6620000000000007fffffff000000004808fe00000007f6054f03e9a3d7a95b87363d992314a1e851b5943618fefb135fd45adbde9820f641bc8c587fafb55d3d2124f383421771f276e253c4ee496b2e99a4457c969386fbe4e7e72497b35f8c94efdb3b21f9bca26965f44762aa79360655d28b893103cc8210ad911da6a7"}, 0xfc) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = socket$inet6(0xa, 0x3, 0x3c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x40) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5000, 0x3, @private1, 0x1}, 0x1c) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="7b565a6166afaf467d8d765c35142f31373fcaa87f02c7c36968a57ec6b3982e0d59b637d043f5f9a2891cf0921c412807d4fa667bd7fc", 0x37}, {&(0x7f00000191c0)}, {&(0x7f0000000500)="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", 0x137}, {&(0x7f00000002c0)="d6fc372da922edba8b0030b07e560c32020b000000b434d33e0d57cad6bb02990567b3a5c5ca", 0x26}], 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000019080)={0x1, 0x1, 0x1}) 24m10.272905503s ago: executing program 1 (id=1254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x20001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3, 0x4) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000140)={@private0, 0x6b}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r4, 0x5420, 0x0) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) msgget$private(0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)=ANY=[@ANYBLOB="ec00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="181401000040000014001280090001007866726d0000000004000280b0001a8004000700180002801400018008000100fe0f000008001a000000000004001c000c000a800500b5c83fef3cabeec6b1f8fe474999fc08000200000004001c00300002802c000180080019000200000008000b00d7750000080001008d7f000008000f00fbffffff080001000400000014000a8005000800aa00000005000800040000000c000a80050008000900000004001d00280002802400018008001b0009000000080007001000000008000d0009000000080002000000000008001f00000400000b8a0a3757732be5b35795ec00d8f09ff537dbea7f82383088d8aaaf13b6bf1648fb87842a33f588c633908c67ed8f1edd1b345d6434aff419f297be265644d17399702b13fda775ab70bb85a74263d104919edbdd7c6783833d08a0d228e98a5f43b96169d36a286120becaf770"], 0xec}, 0x1, 0x0, 0x0, 0x8800}, 0x40880) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$SNDCTL_MIDI_PRETIME(r1, 0xc0046d00, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000050002000000000020000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140ff"], 0x90}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r8, 0x5411, 0x0) 24m8.114582198s ago: executing program 1 (id=1259): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f00000008c0)={0x90, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff1, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtclass={0x54, 0x28, 0x20, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x8, 0x2}, {0xe, 0xffe0}, {0x5, 0x10}}, [@tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x4}}, @tclass_kind_options=@c_htb={{0x8}, {0x14, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x6}, @TCA_HTB_OFFLOAD={0x4}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r9, @ANYBLOB="00001700000000001c0037800b0001086970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES64, @ANYRESOCT=r3], 0x44}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 24m6.390639053s ago: executing program 1 (id=1264): unshare(0x20000400) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) pread64(r1, &(0x7f0000001100)=""/139, 0x8b, 0xa) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x25, 0x0, 0x0) 23m51.133100434s ago: executing program 34 (id=1264): unshare(0x20000400) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) pread64(r1, &(0x7f0000001100)=""/139, 0x8b, 0xa) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x25, 0x0, 0x0) 48.644943566s ago: executing program 6 (id=6304): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffe, 0x80) clock_getres(0x8, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/132) add_key$keyring(&(0x7f000000f880), &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES16=r1, @ANYRESHEX=r1, @ANYRESOCT=r2], 0x0) 47.142217123s ago: executing program 6 (id=6312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net\x00') getdents(r3, 0xfffffffffffffffd, 0x3b) r4 = fsopen(&(0x7f0000000140)='qnx6\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='%(,:', 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xc, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000100)=""/18, 0x211000, 0x0, 0x100, 0x1}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4004000) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r7, 0x707, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) connect$inet(r6, 0x0, 0x0) sendto$inet(r6, &(0x7f00000003c0)='\x00', 0x1, 0x0, 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0x1, 0xa) 43.36281321s ago: executing program 4 (id=6315): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) (async) r9 = dup(r8) sendmsg$inet(r9, &(0x7f0000000780)={&(0x7f0000000280)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000dc0)="bbff", 0x2}], 0x1}, 0x20000000) (async) ioctl$KVM_CAP_X86_DISABLE_EXITS(r9, 0x4068aea3, &(0x7f0000000100)={0x8f, 0x0, 0xe}) (async) sendmsg$unix(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, &(0x7f0000000080)=[@rights={{0x18, 0x1, 0x1, [r6, r6]}}], 0x18, 0x800}, 0xc084) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0x0) (async) r10 = syz_io_uring_complete(r3) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x13f}}, 0x20) 43.098960775s ago: executing program 4 (id=6316): syz_usb_connect(0x0, 0x44, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc3, 0xcd, 0x46, 0x40, 0xbfd, 0x104, 0x3ee6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3b, 0x0, 0x0, 0xd0, 0x46, 0x79, 0x0, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "9f87"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x4, 0xffff, 0xce}, [@dmm={0x7, 0x24, 0x14, 0x40, 0x8}]}]}}]}}]}}, 0x0) 42.763361805s ago: executing program 6 (id=6320): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x1410, 0x10100, 0x0, 0x4, 0x0, r1}, 0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x54, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x21000, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$TIOCMIWAIT(r4, 0x545c, 0x300fff2) 41.834133798s ago: executing program 6 (id=6323): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x8710, 0x0) r1 = add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000000000001931bc64c7590d370066570e47602030405060708090a0b0c0d0e0f101dfcff291516171819"], 0x48, 0xffffffffffffffff) keyctl$set_timeout(0xf, r1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0305602, &(0x7f0000000100)={0x1, 0x300, {0x0, 0x40000000, 0x3006, 0x0, 0x0, 0x4}}) 41.692992376s ago: executing program 6 (id=6326): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000800)={0x3d3, 0x7d, 0x4, {{0x500, 0x1f1, 0x0, 0x0, {0x2, 0x0, 0x5}, 0x0, 0x0, 0x80, 0x9, 0x116, '\x04lodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00\xd37\x82n\x99|\xb14\xd0\xd3\xae$_{\xd1bT3\x9b\xf6\xa4|z\xc1n\xbb\"\xed\xdc\xa0\xe1\b\xdd\xe7\xfb\xfdn\xda}9\xd4\xdc7\a\xf1\xd9\x03]\xec\x8cs#\xf0\x13\xfbL\xe0\xb3_\x16\x87\xcb\xd4\xae\xb3\xfbH\x87Iv\xeb\xb0\b\xd1S\x1e4\x99\x13\x17#\n\xcc$\x80a\r\xea%\xe4\x1b\x05\f\x8d\xeb\xe4$a\xf2\x9d?\xcc\'\xf0\x1b\xbf\xa8\xac\xbfva\x87\xfc\n>\x104\x13\x12\x88\x00\x01\x00\x00\x00\x00\x00\x00[\xd2mMb\xf0+\xbc;\x92W\xc7\x1e\xef\xab%\x94K\xc53\x1ciGX\x9a\x81\x01Aa\xf7\x8a\xbf\xf6u\x8b\x8b\xf3pm\xe4-\x06=\x88\x8d\x0e\x18\x1dDp<\xc8\xaa\xd7\xaf\xa2#\n\x9a\x98]\xff\x98\xefN\x1f@\xab[\xc4\x05\x17\xd4t\vnn\x04.\xdc\x00\v\x8bj\xd5\xe3\x9d\xe9R\x17\x9cV\xf3/\x9d\xdc\x84}j\xf5+]\xdc\xdf\xb6\\\x00\x8b\x0e\x9e\x96\xe0\x88\xf4\x00\x00\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x13\xf6\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00', 0x5e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf6\x99\xfa\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xf6\xc6\x9ai\xd0\x17\xce\xc4Y\x06\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1a'}, 0x1cd, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\x1b\xaa\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+\x16\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc6\r\xfd\xaa\x86\xc5W\r\x94(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x90\xdf*\x15DM\x19\xae!s\xdc\x11\xa4~\x19\xe4\x89.>s\xa9\fO`\xfaR\xdfo.#\xe2\x1d\xad\xa4\xa1f\x1d\xe0\xdaw\xcf_\xd6!\x04z\xac\xc6\xf6X\xe3\x18n[\xef l\x1b\xfdrM\x05\x11\x89\xd7$D>\xf94\xc5\x17.\xb5\xb5y.\\\xc1u\x84\xa0\xd8\x851\xb7\'Ezc\\d\\\'K\xc0l\x17\x1cA\xc5\xeca\xa3\xa3\xcf\xafU\x1d\xd2\x0e\x91#sh\xc7F\xdb\xa3\x1d\xfd\x1eM\xcd\x0f\xfa`C\xe6\xce3\x1b\xc5\x89\xc5V\xef\xf6\x1c\xac\xac\xab\xb5M\x9a\x9d\\=\x8a\x95e\x18\xdc\xd9c.\xb2i\x8a\xe16'}}, 0x3d3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000000)=""/209) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = creat(0x0, 0x122) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91b058fbff98d619438ad5aaebb6ed6b54", 0xfffffffffffffe4f, 0x404c801, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="0216e8050a0000002dbd7000fc06d0e6dccadbdf250800120003000300b76b6e000400000006006c00030000000100000000000000000000000000000000000000000000000a01010000000000000000eb5e82ca35518a3ab8b264ff1b5e8ac6f2f1607f20f15c71520c22bb3ea76783603a2b54422235deb97a3556aa3ac6f7ec981529dea6f75b7b0971c6768c8cc09ca89b697967253328927b168355010d4450a409e1959e87de7b8c718c1161dc7424ab7acdefd03ddf8347bc84d788dd979a8772c4baf0609f4b06522d929d6d7f9ebf0ca8de35942cb115997a7419f87f3c6e0f8991f6dcae574c5194d354"], 0x50}}, 0x4004800) syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x47) 41.574755178s ago: executing program 4 (id=6328): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x80a0000, 0x1000, &(0x7f00001c8000/0x1000)=nil}) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (rerun: 32) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r2, r2, 0x1f, &(0x7f00000001c0)={0x28, 0xe2, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000440)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0], &(0x7f0000000280), 0x1, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r3], &(0x7f00000003c0)=[0x2], &(0x7f0000000100)=[r4], &(0x7f0000000180)=[0x31], 0x0, 0x8000000000009}) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}], r4, 0x0, '\x00', 0x2, 0x3}) (async) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464d0, &(0x7f0000000140)) (async) timer_settime(0x0, 0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000140)={@my=0x1}) (async) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0xffffec77, @my=0x1}, 0x10) (async) syz_usb_connect(0x2, 0x3d, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0xe2, 0x52, 0x64, 0x20, 0x129b, 0x160c, 0x1bd8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x2, 0x3, 0x40, 0x5, [{{0x9, 0x4, 0x6c, 0x9, 0x0, 0x1, 0x3, 0x65, 0xb3, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "8ed7"}, {0x5, 0x24, 0x0, 0xd571}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x3ff, 0x10}}]}}]}}]}}, 0x0) 41.379472868s ago: executing program 4 (id=6329): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f0000000500)={{r4}, "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"}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1, 0x767, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0xfc, 0x1, 0x0, 0x0, "35cf52530599b474"}}, 0x48}}, 0x11) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_GUEST_MEMFD(r11, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r12, 0x0) r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04) mmap$KVM_VCPU(&(0x7f0000007000/0x2000)=nil, r13, 0x3000003, 0x2011, r12, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0xfffffffe, 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) 40.899335057s ago: executing program 4 (id=6331): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="ed"], 0x20) 40.642460698s ago: executing program 4 (id=6332): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x3, 0x2, 0xa000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r1 = io_uring_setup(0x3c69, &(0x7f0000000180)={0x0, 0x44a9, 0x8000, 0x0, 0x35a}) prctl$PR_GET_IO_FLUSHER(0x3a) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r3 = dup(r2) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000040)) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg(r4, 0x0, 0x0, 0x8800) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x27, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ftruncate(r5, 0x10000) sendfile(r4, r5, 0x0, 0x7ffff004) fallocate(r3, 0x11, 0x0, 0x400000007a000) 40.330455339s ago: executing program 6 (id=6334): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000000)) timer_create(0x3, 0x0, &(0x7f00000001c0)) 27.667121601s ago: executing program 3 (id=6373): r0 = socket$netlink(0x10, 0x3, 0xe) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a00170000000004003700090003002e2e2564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) 27.314160066s ago: executing program 3 (id=6375): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xe7, 0x2) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000003c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@overlay={0x2, 0x2, 0x4, 0x70000, 0x6, {r1, r2/1000+10000}, {0x0, 0x8, 0x9, 0x4, 0x1, 0x8, "08c72987"}, 0x2, 0x3, {}, 0x23, 0x0, r3}) r4 = socket(0x2000000000000021, 0x2, 0x2) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x1cabe2) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/oops_count', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) sendto$inet6(r9, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}}], 0x1, 0x400c404) exit(0xfe) sendmmsg$inet6(r9, &(0x7f0000004740), 0x0, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000180)={'\x00', 0x4, 0x3, 0x4009c, 0x4de2, 0x1}) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000000)=0xffff) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x801) r11 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$hid(r11, &(0x7f00000002c0)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="202301"], 0x0, 0x0, 0x0}, 0x0) 25.338876762s ago: executing program 35 (id=6332): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x3, 0x2, 0xa000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r1 = io_uring_setup(0x3c69, &(0x7f0000000180)={0x0, 0x44a9, 0x8000, 0x0, 0x35a}) prctl$PR_GET_IO_FLUSHER(0x3a) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r3 = dup(r2) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000040)) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg(r4, 0x0, 0x0, 0x8800) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x27, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ftruncate(r5, 0x10000) sendfile(r4, r5, 0x0, 0x7ffff004) fallocate(r3, 0x11, 0x0, 0x400000007a000) 25.249491761s ago: executing program 36 (id=6334): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000000)) timer_create(0x3, 0x0, &(0x7f00000001c0)) 23.968613447s ago: executing program 3 (id=6382): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)=0x3) (async) close(r1) (async) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000040)) 23.225611555s ago: executing program 3 (id=6383): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$P9_RCREATE(r2, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x4, 0x3, 0x7}, 0x8}}, 0x18) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00000000000000000000000000000000000000004000", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}}) 22.790355978s ago: executing program 3 (id=6384): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="700100001a00000425bd7000fb"], 0x170}, 0x1, 0x0, 0x0, 0xceb53972e38eb1b5}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) 22.654201128s ago: executing program 3 (id=6385): socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x6f, 0x48014) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xec}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0xfc2a5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) syz_pidfd_open(r7, 0x0) syz_open_procfs$pagemap(r7, &(0x7f0000000300)) 9.796326696s ago: executing program 9 (id=6417): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) ptrace$getsig(0x4202, 0xffffffffffffffff, 0x7, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRESHEX=r4], 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x1, &(0x7f00000002c0)=[0xffffffffffffffff], &(0x7f0000000340)=[{0x1, 0x8000001, 0x7, 0x2}], 0x10, 0xab}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000040), 0x4) fsopen(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[@ANYBLOB="3c0000001000ffff25bd7000fbdbdf250000003b", @ANYRES32=0x0, @ANYBLOB="14140000212000001c001280090001007866726d000000000c0002800800020001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0) socket(0x3, 0x1, 0x8) setitimer(0x2, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x516f}, &(0x7f0000000180)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbfd, {0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10018}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) flock(r3, 0x8) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) linkat(r4, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f0000000300)='./mnt\x00', 0x400) 7.330599077s ago: executing program 37 (id=6385): socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x6f, 0x48014) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000100000a20000000000a01030000000000000000010080030900010073797a30000000002c000000030a01080000000000000000010000000900010073797a30000000000900030073797a320000000078000000060a010400000000000000000100001008000b400000000050000480200001800e000100636f6e6e6c696d69740000000c00028008000140000000d92c0001800c00010062697477697365001ce1d880080003400000000208000140000000140800027a3000000000140000001100010000000000000000000700000a0000000000000000003ba9aeb354b6c824d46260362bcd77a3fd86585bfa14ebe5bc81f821e5cbfd6b67500e81a6ce1e73d8b4e03a6deed7ee548ae32adf42389cb011daf158fe0af1b85967459fe7673791b171f299962c0f59c036f42d942e3b5efe92315731e92cf14d16ada37d4196356751b7848582a1576bf65740d22432790f2887ec184ca8374f68de7145723d6447daf841244e3a7e66188d73863219b25598415fdd0e8d56c8b4db5e51f196a19437e87d147dad49f7262c0321a73b3b1444f9498392e63a6c2f0d2754b3f5a6ccdf5051b5598fa58962d505467140"], 0xec}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0xfc2a5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) syz_pidfd_open(r7, 0x0) syz_open_procfs$pagemap(r7, &(0x7f0000000300)) 6.022623546s ago: executing program 9 (id=6428): r0 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x100000000) read$FUSE(r0, &(0x7f00000082c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000012400)={0x2020}, 0x2020) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r3, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) ioctl$TIOCSBRK(r0, 0x5427) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12010002ffd26f10cb060600eb9a010203010902240001000000000904df0102"], 0x0) syz_usb_connect$uac1(0x1, 0xaf, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x3, 0x1, 0x3d, 0x90, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x3, 0x2, 0x200, 0x85, 0x4}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0x40, "827d3098e8"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x202, 0x6, 0x4, 0x6, 0xe, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x202, 0x2, 0x0, 0x8, 0x1f, 0x5}, @mixer_unit={0x7, 0x24, 0x4, 0x2, 0x7f, "c142"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0x9, 0x77}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x4, 0x6, 0x2, {0x7, 0x25, 0x1, 0x0, 0xb2, 0x9c21}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x3, 0x4, {0x7, 0x25, 0x1, 0x0, 0x80, 0x2}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x8, 0x2, 0xdf, 0x10, 0x9}, 0x1a, &(0x7f0000000100)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0x1, 0x4, 0x0, 0x9a}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x4, 0x4, 0x8}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x80c}}]}) 5.962760715s ago: executing program 2 (id=6429): r0 = syz_io_uring_setup(0xec5, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4000, &(0x7f00000001c0), 0x1, 0x40}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x1af0, 0x100, 0x2, 0xbfdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2, 0x10a5, 0x3, 0x0, 0x0) 5.771477749s ago: executing program 8 (id=6431): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x70, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0x1b, 0x7e, @random="e5b81158fb6f226903dd1bade7b6127622d97aac588344"}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xf2}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x98}]}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2000, 0x0, 0x6, 0x0, {0x7, 0x1, 0x0, 0x6, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x3, 0x43}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x4800) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x20, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000048}, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r3) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2fea35ee5841979d}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1d8, r6, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc0f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x12}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "ea1a7aefc36aba3470369fa3d20e17e432af515ff07bb19d883cfa6d5d"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x79a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x79}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x53}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x32}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4010) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000180), 0x10) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r8, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000780)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000800)={r10, r3, 0x0, 0x17, &(0x7f00000007c0)='cgroup.subtree_control\x00'}, 0x30) lseek(r9, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000440)={'\x00', 0xff33, 0xe0000000, 0x1, 0x0, 0x3}) 4.674341647s ago: executing program 2 (id=6433): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400000000000000000000000000000000000000034a01"], 0x50) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) (async) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x79ce, 0xfffffffc}, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0xa) dup(r2) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0x0, @private2, 0x2}}}, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000001c0)={0x7, 0x200}) close(r4) (async) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x5c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x44e880, 0x0) (async) ftruncate(r5, 0x200004) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000900000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) sched_getattr(0x0, &(0x7f0000000300)={0x38}, 0x38, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014120000b7030000000000008500000083000000bf090000000000005509010000000000950082000000000000181100", @ANYRES32=r6, @ANYBLOB="fcff000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703080000000200b704000001000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfffffff}, 0x94) (async) ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000180)) (async) r7 = socket$inet6(0xa, 0x80802, 0x2008401) sendmmsg$inet6(r7, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000140)=[{r7, 0x5}], 0x1, 0x0, 0x0, 0x0) (async) shutdown(r7, 0x0) 4.61506406s ago: executing program 8 (id=6434): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000000000)="9d", 0x1}, {&(0x7f00000000c0)="45e2e375c612cd56c879c19390c32fb5b1a468d997419b73a78356f5ae292f6ea69523495d0bdb409eb58fcf801f877ac723c7cffbb5", 0x36}, {&(0x7f0000000180)="5d92e725193b8eb046a624a503d8054ce7aea4d94a0b69f8eec58f92cd1de0de4e08", 0x22}], 0x4}, 0x0) r7 = socket(0x10, 0x3, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="f30f1ecd65f3ff9dd4a7260f01c9f3360f30670f01ca0f01fa8146051900baf80c66b8fa8ecd8c66efbafc0cb8f64aefdbe03e26660f38825f47", 0x3a}], 0x1, 0x5b, 0x0, 0x0) r8 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0x80000002, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1003, 0x45c5, 0xc595, 0x7, 0x102, 0x3, 0x2000000000000000, 0x80000004000000, 0xfff], 0xeeee0000, 0x12d7}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000100)={[0x7, 0x8000000000000000, 0x7, 0x449c, 0x401, 0xa, 0x3, 0x2000000000001, 0x10000000000009, 0x4, 0xffffffffffffff81, 0xb218, 0xfffffffffbfffff9, 0x0, 0x8000000000000000, 0x7], 0xd000, 0x200800}) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {0xffff, 0xffff}, {0xffe3, 0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x800, 0x0, 0x3dc, 0x0, 0x3], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) recvmmsg(r11, &(0x7f0000005ac0)=[{{&(0x7f00000003c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/78, 0x4e}], 0x2, &(0x7f00000014c0)=""/212, 0xd4}, 0x7fffffff}, {{&(0x7f00000015c0)=@qipcrtr, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001640)=""/199, 0xc7}, {&(0x7f00000002c0)=""/15, 0xf}, {&(0x7f0000001740)=""/94, 0x5e}, {&(0x7f00000017c0)=""/247, 0xf7}], 0x4, &(0x7f0000001900)=""/183, 0xb7}, 0x10}, {{&(0x7f00000019c0)=@pppol2tp, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/249, 0xf9}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/111, 0x6f}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x6, &(0x7f0000003d40)=""/242, 0xf2}, 0x3}, {{&(0x7f0000003e40)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000003ec0)=""/220, 0xdc}], 0x1, &(0x7f0000004000)=""/144, 0x90}, 0xffff}, {{&(0x7f00000040c0)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000005300)=[{&(0x7f0000004140)=""/135, 0x87}, {&(0x7f0000004200)=""/4096, 0x1000}, {&(0x7f0000005200)=""/66, 0x42}, {&(0x7f0000005280)=""/99, 0x63}], 0x4, &(0x7f0000005340)=""/119, 0x77}, 0x7}, {{&(0x7f00000053c0)=@ethernet={0x0, @random}, 0x80, &(0x7f00000055c0)=[{&(0x7f0000005440)=""/149, 0x95}, {&(0x7f0000005500)=""/178, 0xb2}], 0x2}, 0xd5d3}, {{&(0x7f0000005600)=@tipc=@name, 0x80, &(0x7f0000005740)=[{&(0x7f0000005680)=""/182, 0xb6}], 0x1}, 0x5}, {{&(0x7f0000005780)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000005980)=[{&(0x7f0000005800)=""/113, 0x71}, {&(0x7f0000005880)=""/240, 0xf0}], 0x2, &(0x7f00000059c0)=""/198, 0xc6}, 0x6}], 0x8, 0x2, 0x0) 4.591225068s ago: executing program 7 (id=6435): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') timer_create(0xfffffffffffffffd, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xc0002009}) epoll_pwait(r3, 0x0, 0x0, 0x4000a, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) (fail_nth: 4) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) unshare(0x4020400) socket$inet_tcp(0x2, 0x1, 0x0) 3.85456438s ago: executing program 7 (id=6436): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x8c0}], 0x1}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB=',rootmode=000000000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id='], 0x0, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r7 = syz_io_uring_setup(0x800bdf, &(0x7f0000000000)={0x0, 0xce90, 0x4000, 0x2, 0x44004332}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000300)=@isdn={0x22, 0x1b, 0x4, 0x1, 0x6}, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e20, 0x3, 'lc\x00', 0x2, 0x81, 0x1d}, {@broadcast, 0x4e1d, 0x4, 0x2, 0x12d5c, 0x12d5c}}, 0x44) (async) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x20000, 0x38, 0x24}, 0x18) (async) r12 = open_tree(r10, &(0x7f0000000400)='./file0\x00', 0x89901) mount_setattr(r12, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) 3.394054563s ago: executing program 9 (id=6437): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800008080b634280100"/20, @ANYRES32, @ANYRESDEC=r1], 0x0, 0x7, 0xffffffffffffffd2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg(r4, 0x0, 0x0, 0x8800) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x10000) sendfile(r4, r5, 0x0, 0x7ffff004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000085}, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) ioctl$TIOCGPTPEER(r6, 0x5441, 0x6f0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000200)={0x48}) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) chroot(&(0x7f0000000180)='./file0\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xd2a727af3cb3995f, &(0x7f0000000900)}, 0x10) ioctl$FBIO_WAITFORVSYNC(r8, 0x40044620, 0x0) lstat(&(0x7f0000000300)='./file0\x00', 0x0) 3.261478312s ago: executing program 8 (id=6438): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000611018000000000066000000010000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x4, 0x1, 0x4, 0x2000, 0x0, {}, {0x2, 0x2, 0xe, 0x4c, 0x0, 0x3, "203edaa6"}, 0x7, 0x4, {0xffffffffffffffff}, 0x8}) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(des3_ede))\x00'}, 0x58) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x1e, 0x4, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) close(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280), &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000280)={r7, 0x6, 0x20}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000480)={r7, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x8, @local, 0x101}, @in={0x2, 0x4e20, @local}]}, &(0x7f00000004c0)=0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r8], 0xc4}, 0x1, 0x0, 0x0, 0xc000}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r2, &(0x7f0000000d80)="84d183ae9ec06712563a3ec9c2f3e82fceba1ea4b0562fd57326682d5748e7876c0b0da30095b3b8835a912c7d82134954c6a0c331d79fe885dc7a728844ed0ada9b488143f17dc1e12cca4bb02d7c91df0ce7ddd81091e55f01b3247275ba27725c9e660b82553613e9b498b91a0ce95b38dac6cb41094d11f0766f827ebfa81a929fb1ac0d2a1707b7d658324de0be833dee6f91f0f05d672bde0413551fb4b6a0bc0a38d15c33d1c9ea217872308aa5595b2738df5303e19062d181ffef2121060b13d42a575b26411d469c4e551c551267b0c50b5e27528f9afa67e06589dc0433af4fa6e55c4d8431dec79f1786cb800cebf1ec571959d00c86bae668a63a505a51c7e77974b24f7fa573e9098e35b92532151673b5110cc067aeedd6220a3e45efd0118e3de761856e29ccb00f3832cbfbbe76b3cbf834b924f56a90c3ec463c15754db6c710b507588d259f0388d6bc865ceacf27ed22e52586f71bee4412b475de1bd06b671464cd61d9c84f1a02de8572cf20c5e648a3e663935c88cc40a6822e9b43c2bd0cc81985da98734378c8fb880f8d7f74e820d23f4efe0cecc0557fddce32ac563d3f2cb3529b06cc4bb968a1c02b5d932ca4cfff192d5406dfb1c5f1366e7820803abaa57af96258139056fed8f2ccb72b5b02e4f5585738ccbc2090050a28080a5a65c39d560e2627218bc905efc4563a1f37747bb14e39ea8a733f9df3b6fb5deb6bee8b80e7282267e4588e3f9c3539f40bb1639020a25938cdac2448d4c4616ab6d1cdb0139e41b80a1b2ec259737f924b1c8fe678dcf9b1b184f4a17f480d8dcd587ba603cd30dda5778ea32ee711862e6721af23d40b845a47c3fc25622ceca8186f27e9a863b764cb0df04491d042bc154960355b28a6df1b2688a4207774216977ddb04f6c04d859cd84c99e387e515e72e4720e8cfa0cec06d16eac3f33d1ffbcdfde18d49d2d906fb391ad0a61b2a16e7a0e636ab1c4eaf6f63f4647c45dea0c03898ce1a57c07fa84806896f0bc39652213f5f7c53d6328f0f9848d848d4fc5b3dc94263c4d1081627253e70f6ebae2520dafe2315a5d2638c18d405c98a9a40657a89411c25392a0d4465d2f6d6addaca1ed34363b0fafea66de538090590780e6330a0afdd80b4c9b635e5cd29737568d17d1f008b0018b0fdda45d59ea3316b2f8e8e5a29edb0efb50549348b4c021e0532781a58df103567d67b6f91870afe5dcfa3e9a70ba790e3223949a96ee913127ed5287755a4bd7a6173f6c88c659986727246455cef281d8d99b6a8bf93acaf68b817a261095957fa6910c76fe756d49ca1356f7bc2ebe919264bac81aaa24f1cc4a7b4961da1ba612d7c38b6abd941141f024940bbcdc87ea2d28f14694cfca3363d4184abd428c31b07596d1d8668cbdf34e4cf1a864e1a45fc3dc4ed1a09ce9a6191b432db9af9314c3c056e91e59684bd21a8883cbed31105bb1d7f90d36595902f9c10ac1558018d4e7643f04b57d8a3414017ba1913a556485b15eb8b3ef2a9b02e33355a5bec31f70ee457cb4395db90da0c5e24afddcd1d59c814f9c835c243f91920a583cc082d435a74a03bb0cda33cd8d388f7272685da991523e14c7ebbeb88e3e709dda666847022f73e0f76eb638b3be5639625bfb6f3e359219d8a859f64e3a8e66a7f4e532fc07fad431f908ca3f7da605d5f82d26214a79ce255a1af3e290eb7d3b7c29ef045288a831168939a66cebe9ceec0dec9f19bdb7200b4b1cafdd54fc0b979fcef6e33bce0bbda19c145b7a0a830fe77b44e7f286cadf551d5f54a315755f7fbb2cea7539173789cfd5dbc31146b5313b644c890a2d36c910c8c913b28ffa67b46085eedcd661fd7e427357453d523a0a7834fc7bbaee5d04faff2e15c8a429398ef3dfef3d3b1c6555873cb52c7e01c2fbf55fe593bbdf45615322a6958676dcf32ae3ae46afb7e066d96787a92b5f80d6957e39f61b891d336c8b0f02cc6fdd90c45d4912a0f60a53f19ccc6f719dbfd41a0163e8a86f41479062b3924d8e1121371e77bc778468f29f8f22ae5bb40712502e7c79beea0c20bde45dffed69dd0bfe44b7689514930114b47f18d16bbb212b40da2fa670d4104c832a5557b266840741e11c76da3e9e88b6f0679790d999ed6fbd4931ce373193020c17f90d5de88db205ddc19b83dcf0e707cf3e7a29e01eb7bfb5609864ea7bed9bd5d11fefd0768d7a2fc14286ed50b441db8041fb832ab851b0efabbac0cea508bbd423127004f2efc907df0569dca48ed9a4f2fbd92adc8609587f4a1f051a5078edd5ebe1545dabb8ae4463114f853302475d6fe92a843db14071c2a1bc59805c908f9f858c13086d0a1c05bfc4a6e174887ecd9643b488e514832a5ff9b060ecdf5fe33c88535f1df5483524928e3f8568ea1061bebb7a9cfc0816724adb50a583905c51160b3a56ad8b7844af2f57c65d97fa304a130ca3264ea3d171b18ee581186dea940c3849e6df23926785e68651c6f19c17211a89756d28782dee5de44cc98de193c1a0b752fb0db4d899d70444202ea7615bd75ff7b57e14c76e2284f92e7e7c68c6e8d63e9a3ed0d665bb88e2bdbf098d2dae857bdef163414cbfd87a4f38dfbff9c30f528bc0163bd92817a24f67fa638bbdcf1f253e5a0cf11aee595f1fe64e64f4bd92285425e3176006a9283a376a5f8be282be0c2d2502142d69fcbdf4d7065b9eaebeb336f90197d2969a07d48208cdf6ca0f1705eeda6e859ec10cc07632f1c3017ad9b19caedcdfeea25bd89c6ee71afd3ba988463924c5fb44de3a446c012954dc6fefdad2847c040467f1cf4f0255e0cbbfe4d0bf3124353a27bf8d9425ac9930a1946e3e20ff8340ed88ecf8f4e0b92826b4f51b18341462e829ba8edd910ddd5fc8084f9db99853dcde0f0f3b5fa25e1bcb993699c56e222c2dec19c36d748ab692c84786f3f0b44faabd43f68f4613aa8b5301ba123b4942c74a6e492460b97c791a31b4566954e8254e7d42f5dd89bd541847f022250038f5ad68687f6ba2022f4114c1586883403d9d0e195556f612d0127eec322699f9b0c5e48f4d2408ab5ce166dd956e6580e8ad29b74a4a697f81dc02bc6bf6a90b0cc772d1d5d6d078f4aa7cb41278999a379dfc3b49434b99dfcced27cab4d983b0364727955e604df90e793b6b236a2e08bf821d429a167e2b495a2e150ba489f404d8bc0d72e58a848ab133b9a303d06a7315793a30c3909b45ce2a005f667c76db4b16ea28ee4cb94334a0811e25c3a6e4352bd9992450aaa359f5204af5a5f2ea4966e8ea1aa2cbfaf1fcf65c68527740f8bceabc175c2843572c080c5e9fe4b6f58ddc6e6aa512103a870bd92ce559e864f8bf918932aa6877150020f6357ce7ee3495f1eb3d95edf04c354354a7995185c86034e9b7ca9e6499bb87e7ffa90485e458ef95c6e835ce06cef0e6a286de746a0a2b156ceda9a03f58e4a7443fe1713809d50b7fba5b05195fba5ea36e988441f1fb142b85e6c46b0d729880e99b92bace7197717cf62df3d1f3ef11ee10c229a9546a8d73fb22a7a467e15f050f1a21cc004e4d782de02dc4af13780cfcd2cf871c8aea785ef837d17aafc4479d64d97bb40a742c4a21ae18a2bb3f18e5c3651326d27792f267fa9cc6fd600812e65e7fb609142a7c27d5f924b1e77442ec9f46b3a9ff738a2c1532308327df0b65a4561b5dacca666457b048fae68bdcaad54604951f9b2d296e9c6ec155a0e8c6f5059df1513afa0531ae54fcd5448b224dd6f30cb6d7cb86b6ba58708194b314f33debea7b801125588970d691bdedfa142b6b9a201aeaefe1411833adecf52799cac3a88f861e5df6a8accdcc92bd24661692925f98024c273f5ff25351d70003ad93fd446d99a81dd390b2d61df7b5e710c4846784fbe25f1a6aec9fd7d29f0f4eb2ffc76ed9d9b71609e8c90c2fc6646c357fd0297aea4b236ebb203f7ecea8a557957e94f5130baf6b15e76243d8ae1cc74ee9411971eb63f1266b76600c59c47473cb860c2dd31d07f4061f8b3028f99634355e85aa3ce09eaea6ec4dfffa122b3e2e8924bde5b83601ee9af5859fd519abf9f1989065b717c470c1d7f295fe35504e63d0ceaa8dc132683ad5149f8f2aed9bf493ef267ba3faefbf8ef20a38f196d7b0c8c87d1223aae7c18c70feaf554712bfd73e2d64e710bb47b27ad6839611ac315571fbba6efd8d9650ede72b53f553f8fe335e169fe249b481f2ba5701d0284c894e826b93078ca4d6a06137964ac7e2d13263a4bb905bdaa3dc0ed6a58b6d9c5202b150000c727e4b3da93b641eec700f18319cbd4e28ab7e67cf3a77b53a2b2e94490681122ab8c4c0bfa3ba831a655960207d48ebfe82f4fea71fb338cbdf6e0d43de5202147b388ab6ad2f02e6c7a8b4d23bfe66fa1639adfc2947e3ac623eb36fecf417bba2be1c86179d16b68c825c8e6068fa488bffce0154df8ed8441347a8077256dd56853c06bbd0ade341caca6a708b213b7a20349355983e18181c69e94b2d8b6f31ac2e38bee2f00a62dcdefaae964a8af32731c6190d011179242fee755fcd9c97f288c0da18b6acd95ac40d6a7cc49e765c46f2841ca4304dfe2fe2b2137427d5d6cec8ad64b7a7f4d33f08dadb149c40b9cadd4c2212cbd80729bbd47b4c4d48d4b7087a70c6a6578c3443c983aef867a6e4076de3f3a50bcd06c1de698ae0e5d0e47d62cdd64e3c7756d3a9f9d56301b9c86d52a0fef0b30d7634b12f1e08f538dc0e6ba41bbdc6c2cd27adcaf2dae71a47d869adf671c0a060cadc23c87329dc9e1931a9170c274c8ad6dda815573a7067c1deac1cababa08d0cfa754f5d8c63adebc8a2c8cff1b6ffaa9a2dddcd3d62de017b2f9c33ef6e9ee871649140c7ab492e298acd9c9ec3594a87fad377bc30a64164fc107a2e1fc29730b084e57f79c607e0c506f3aa0989e6053ad08f738a8886f62b66197ca80551cf9de4fe748afcd51d71b899c43c24aa86ad0234b6c7e107ba443c6870bc51522c85c3d628b1b879339335d2a217358ea2e4369400c3ab3a9f8b1cf8fbc888eeb2c7104449548d0f5b6336eca33f2b1d60c0b23e61d78a3c7f32f523d78bf9c166b186793aa21a00049d67e1c1e6711bef428bf8abd247b2b4f711b710c8741e28ba3d702524c4823c879a6680d9d2fc882a4b73f191acd891e7e4433abb969158efd2cd1bfb2f0a7b61c681040cc00b54e574d2518a0bcd9e016da83dfff9ddfc9d415905c7198c307d1564dca441d9e7d85ea77a74a773760c3730db5133453e9eb57536d8b6bdde7ab29dfc8bae23ff2bf80fe44e7a1ae66f9d4a06f1b291585c172614b0914357a40ea7e4471275dcf0d95f1fa91d516e5c8ad0b52d256fd7111c33e0e4ff9feaaa4e9e454fb7ffe8760fb7fd5a77d28634a4aff6d105aaed7080ce87888486535538f652bfd6f36a766686a18f47112c009384ead321de30d5e8871430a038a036dae9f71694d49d7a4dc63304806722166940e9eaa245963b90d4cd63dbc1227b9d6944440c3da1d6b2a5160a2c3166302da534869ab165120a3144d60e0ea5673520bb908e408a2d53d487e36882aa7a517a8e7b40723a72ed6a0b2e997671b9be336b0b27a6a8ef7728744da0823926eed6053c6f1dfdaf4b8884198dd91d8e195e7d662810ee53f6efe59d9a9569fa255e3d8a97a8994f888573923943bcaf3e8f00069b4dbe36295488f3b10c72f4d7fe16832f84da6e31a00a69"}, 0x20) bind$alg(r2, &(0x7f0000000d00)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x114, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x77}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8ee1}]}, @CTA_TUPLE_REPLY={0xbc, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x2, 0x3, 0x6, 0x1]}]}, 0x114}}, 0x0) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000180), &(0x7f0000000280)=0x8) 3.141230121s ago: executing program 7 (id=6439): landlock_restrict_self(0xffffffffffffffff, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYRES32=r2, @ANYBLOB="0500330041"], 0x2c}}, 0x80) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) landlock_restrict_self(r3, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) alarm(0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000004c0)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r8, @ANYRES64=r7], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r8, 0x91412000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r9, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r10 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r10, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xffff, {0x0, 0x1}, {0x52, 0x2}, @cond=[{0x2, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r10, &(0x7f0000000040)="e2", 0x2250) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@void, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="100029bd7000fedbdf2501000000080001005800000008000300", @ANYRES32=0x0, @ANYBLOB="e3eafef88cce52dfce080a4b748d074822c757a0874d369a1985246daba63f64d69609a88fd23c342b053ee794c16933a0556e0ab9ca644d8562e7b324b4787b4cda92699e179dc96c1df82f9aadede5ff39c11901ce4c55a48e403d1d1d041e781751a7bc986ea5f19b72c9b40a3241160733cc510504f8afb95f6cb9b157"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x80) socket$inet_sctp(0x2, 0x1, 0x84) 2.964621834s ago: executing program 7 (id=6440): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000f80)={0x18, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x2, @in={0x2, 0x0, @broadcast}}}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000001080)={0x2, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e1f, @multicast1}}}, 0x108) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000c740)=ANY=[@ANYBLOB="bbbbbbbb08bbaaaaaaaaaa1e08004500001cfffd000000119078ac1414234e2000089078"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000002, 0x0, 0x800006}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x11, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000005400000083000000bf090000000000005509010000000000950000000000000018000000000000000000000001000000bf91000000000000b7020000010000008500000000000010b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r7, r8, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0xb, {0x0, 0x100000000000, 0x6, 0x2, 0x7, 0x3881fffc, {0x5, 0xffa, 0x47fffb, 0x1fffc, 0x3, 0x3fe, 0x0, 0x0, 0x10000, 0x4000, 0x80000000, r9, r10, 0x8000004, 0x8019}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getegid() r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r12}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r12, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r12, &(0x7f0000000080)={0x50, 0x0, r13, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r12, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r12, &(0x7f000000a300)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x150, 0x0, 0xfffffffffffffff9, [{{0x2, 0x1, 0x6, 0x800, 0x6, 0x8, {0x3, 0x56541a3c, 0x7, 0x8, 0x1, 0x1ff, 0xb28d, 0x0, 0xffff, 0x8000, 0x0, r14, r15, 0x8, 0x6}}, {0x4, 0x7, 0x2, 0x0, '.%'}}, {{0x3, 0x0, 0x8, 0x7, 0x4, 0x0, {0x6, 0x7f, 0x1a, 0x0, 0x5, 0xffffffffffffffff, 0x1, 0x8007, 0x5, 0x1000, 0x4, r14, r15, 0x5, 0x5}}, {0x2, 0x2ba3, 0x2, 0x2, '.%'}}]}, 0x0, 0x0, 0x0}) statx(r4, &(0x7f0000000140)='./file0\x00', 0x800, 0x100, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000500)={{}, {0x1, 0x4}, [{0x2, 0x2, r7}, {0x2, 0x6, r9}], {0x4, 0x7}, [{0x8, 0x1, r11}, {0x8, 0x2, r15}, {0x8, 0x5, r16}, {0x8, 0x0, r17}], {0x10, 0x2}}, 0x54, 0x1) 2.666368601s ago: executing program 2 (id=6441): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12015ddf3a4c8bddbd2200010500000000000000240001050590010904d7a8530302ff0304043735134709d7489cf2e20f09050f8300"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x8, 0xdffffffe, 0x80, 0x2, 0x0, "8100e1c8e80b598c36ff000800"}) (rerun: 32) lseek(r0, 0x7fc2, 0x4) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) open_by_handle_at(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="00010000000b0000006a02000006000000000000"], 0x32b41) (async) r2 = syz_open_pts(r0, 0x3c5601) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) (async) syz_emit_ethernet(0x9a, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x64, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, {[], {0x0, 0x4f22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x3, "8a8bebc4b04ccb77e7f3a5ca93d7c73e6c0c42d91e27fb2f15030dcafcdaca76", "e24fcb751eeaa8add0b2f075633f64c7", {"249908bc00000000000000002000", "51f3b6750c654f5d43fbb564be51ddae"}}}}}}}}, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x84880) openat$cgroup_freezer_state(r4, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 32) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (rerun: 32) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x9}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000300)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x8, 0x1}, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000280)={0x223, @tick=0x7, 0x0, {0x5, 0xfc}, 0xff, 0x1}) (async) ioctl$UI_DEV_CREATE(r5, 0x5501) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/igmp6\x00') preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000080)=""/71, 0x47}], 0x1, 0x47, 0x0) (async, rerun: 32) r8 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) (rerun: 32) close_range(r4, 0xffffffffffffffff, 0x0) (async) ioctl$EVIOCGID(r8, 0x80084502, &(0x7f00000003c0)=""/203) (async) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) 2.365707517s ago: executing program 7 (id=6442): r0 = syz_io_uring_setup(0xec5, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4000, &(0x7f00000001c0), 0x1, 0x40}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x1af0, 0x100, 0x2, 0xbfdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2, 0x10a5, 0x3, 0x0, 0x0) 2.348553159s ago: executing program 2 (id=6443): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69000000001406ff0df9d869dcb53d800000000000000000000000000039fe8000"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1d, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd0000000000000000000000080000000000000000000000ffffab5600", [0x0, 0x2000000000002]}}) 2.030555904s ago: executing program 8 (id=6444): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x283a2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x12) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) syz_open_pts(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000654d970008"], 0x0, 0x6, 0x1d, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8918, &(0x7f0000000000)={r2}) 1.751542788s ago: executing program 2 (id=6445): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xffffffff, "030000000000000023000000debd12ffff00000000000000000020000400", 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x2}) 1.717035199s ago: executing program 8 (id=6446): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x1, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x13, r3, 0x40000) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="b40000001800dd8d00000000000000000200000000000006000000000600150004000000900016808c0008808800018082"], 0xb4}}, 0x0) r6 = io_uring_setup(0x1393, &(0x7f0000000d40)={0x0, 0xf2fa, 0x4, 0x0, 0x1d9}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x18638000) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) io_uring_register$IORING_UNREGISTER_NAPI(r6, 0x1c, &(0x7f0000001000), 0x1) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r9, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010101, @private=0xa010101}, 0x10) 1.415900175s ago: executing program 2 (id=6447): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r2 = open(&(0x7f0000002280)='./file1\x00', 0x400, 0x10) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000140000080000899078ac14142aef1414aa"], 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r5 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000019340)=[{0x0, 0x80000000, 0x0, {0x0}}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000000)={{r6, r7, 0x0, [0x1414b6b9, 0x10000]}, {r8, r9, 0x4, [0xff, 0xfc000000]}, 0x2, [0x4, 0x8]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000002b80)={0x0, 0x6, 0x0, &(0x7f0000002480)=[{}, {}, {}, {}, {0x80000000}, {}], 0x6, 0x0, &(0x7f00000026c0)=[{}, {}, {}, {}, {}, {}], 0x800000000000149, 0x0, &(0x7f0000002c00)=[{}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000002a00)=[{}, {}]}) r11 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x20001, 0x8) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000002980)}) pread64(r11, 0x0, 0x0, 0xe) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000400)={0x80000000, 0x0, &(0x7f0000000100)=[{}, {{}, {0x80000000, 0x0}}]}) r13 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r13, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000480)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r13, 0xc0347c03, &(0x7f0000000400)={{0x80000000, r12, 0x6, [0x0, 0x80000000]}, {0x80000000, r14, 0x2, [0x4, 0xe4c]}, 0x4, [0xffffffe]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000022c0)={0x80000000, &(0x7f00000000c0), &(0x7f0000002b00)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r11, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000940)}) ioctl$MEDIA_IOC_SETUP_LINK(r11, 0xc0347c03, &(0x7f0000000300)={{0x80000000, r14, 0x4, [0x6c2, 0x2]}, {r15, 0x0, 0x3, [0x1, 0x7]}, 0x1, [0xd, 0x7e16]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000000)={{0x80000000, r9, 0x6, [0x0, 0x1]}, {r10, r14, 0x0, [0x4, 0x10]}, 0x10000000, [0x9, 0x2]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.046771449s ago: executing program 7 (id=6448): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001380), 0xffffffffffffffff) r3 = landlock_create_ruleset(&(0x7f0000000200)={0x6053, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x4) syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b7ab7340da0b5380dfd071010203010902090000080000"], 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100a", 0x51) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) socketpair(0x22, 0x800, 0x7, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000001c0)=0x101, 0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={0x0, 0xb4ab}, 0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) dup2(r9, r9) sendmsg$nl_route(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3001a}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x44}}, 0x40000) 826.806941ms ago: executing program 9 (id=6449): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='][', 0x2, 0xfffffffffffffffb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) keyctl$set_timeout(0xf, r1, 0x6) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000340)={{0x32, @empty, 0x4e20, 0x3, 'lblc\x00', 0x31, 0x2, 0x2a}, {@remote, 0x4e20, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) 646.110625ms ago: executing program 8 (id=6450): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x4, 0x5, 0x800000000, 0x7fc0000000000000, 0x1, 0x100f, 0x100000001, 0x3}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) socket$kcm(0xa, 0x3, 0x87) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) pselect6(0x40, &(0x7f0000000040)={0x4, 0x5, 0x800000000, 0x7fc0000000000000, 0x1, 0x100f, 0x100000001, 0x3}, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async) 542.168848ms ago: executing program 9 (id=6451): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1002, 0xffffffffffffffff, 0x4}, 0x38) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000080)={0x1f7}) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x3, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) (async) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000280)={@private=0xa010102, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x0, 0x0, 0xfffffffd, 0x4}, 0x3c) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 9 (id=6452): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x842, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x88000) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x2bf842) syz_open_dev$loop(&(0x7f0000000140), 0xffffffffffffffff, 0x40) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) kernel console output (not intermixed with test programs): 815.366389][T22595] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 1815.374272][T31098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1815.401289][T31098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1815.471108][T31098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1815.479319][T31098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1815.506209][T31098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1815.524567][T22595] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1815.544287][T22595] usb 3-1: not running at top speed; connect to a high speed hub [ 1815.565083][T22595] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1815.576885][T22595] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1815.585868][T22595] usb 3-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.40 [ 1815.595735][T22595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.604107][T22595] usb 3-1: Product: syz [ 1815.617616][T22595] usb 3-1: Manufacturer: syz [ 1815.622276][T22595] usb 3-1: SerialNumber: syz [ 1815.647643][T31114] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1815.662029][T17978] macsec1: left allmulticast mode [ 1815.667314][T17978] geneve1: left allmulticast mode [ 1815.672801][T17978] macsec1: left promiscuous mode [ 1815.677903][T17978] geneve1: left promiscuous mode [ 1815.683363][T17978] bridge0: port 1(macsec1) entered disabled state [ 1815.691740][T17978] bridge_slave_1: left allmulticast mode [ 1815.697635][T17978] bridge_slave_1: left promiscuous mode [ 1815.703372][T17978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1815.876232][T22595] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input254 [ 1815.889098][ T5183] bcm5974 3-1:1.0: could not read from device [ 1815.926033][ T5183] bcm5974 3-1:1.0: could not read from device [ 1815.944131][T22595] usb 3-1: USB disconnect, device number 81 [ 1815.955310][ T5183] bcm5974 3-1:1.0: could not read from device [ 1816.284131][ T5826] Bluetooth: hci1: command tx timeout [ 1816.336203][T31136] netlink: 'syz.4.6125': attribute type 10 has an invalid length. [ 1816.493387][T17978] bond1 (unregistering): Released all slaves [ 1816.524431][ T9] usb 8-1: USB disconnect, device number 112 [ 1816.706382][T30539] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1816.730602][T31140] input: syz1 as /devices/virtual/input/input255 [ 1816.870858][T30539] usb 5-1: Using ep0 maxpacket: 32 [ 1816.913324][T30539] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 1816.922320][T30539] usb 5-1: config 0 has no interface number 0 [ 1816.932593][T30539] usb 5-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 1816.946213][T30539] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.954994][T30539] usb 5-1: Product: syz [ 1816.959614][T30539] usb 5-1: Manufacturer: syz [ 1816.964332][T30539] usb 5-1: SerialNumber: syz [ 1816.977467][T30539] usb 5-1: config 0 descriptor?? [ 1817.003330][T30539] ftdi_sio 5-1:0.217: FTDI USB Serial Device converter detected [ 1817.015283][T30539] usb 5-1: Detected SIO [ 1817.025730][T30539] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1817.048389][ T9] usb 8-1: new high-speed USB device number 113 using dummy_hcd [ 1817.091742][T17978] bond0 (unregistering): (slave veth3): Releasing active interface [ 1817.105266][T17978] batadv1: entered promiscuous mode [ 1817.118252][T17978] bond0 (unregistering): (slave batadv1): Releasing active interface [ 1817.133349][T17978] bond0 (unregistering): Released all slaves [ 1817.154312][T17978] bond2 (unregistering): Released all slaves [ 1817.177435][T17978] bond3 (unregistering): Released all slaves [ 1817.209649][ T9] usb 8-1: New USB device found, idVendor=14cd, idProduct=6116, bcdDevice= 1.60 [ 1817.219401][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.240837][ T9] usb 8-1: config 0 descriptor?? [ 1817.248257][ T9] ums-cypress 8-1:0.0: USB Mass Storage device detected [ 1817.268579][T31098] hsr_slave_0: entered promiscuous mode [ 1817.280726][T31098] hsr_slave_1: entered promiscuous mode [ 1817.287926][T31098] debugfs: 'hsr0' already exists in 'hsr' [ 1817.293750][T31098] Cannot create hsr debugfs directory [ 1817.384202][T31136] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1817.400223][T31137] wg1: entered promiscuous mode [ 1817.447494][T31137] wg1: entered allmulticast mode [ 1817.508765][ T9] usb 8-1: USB disconnect, device number 113 [ 1817.539760][T17978] : left promiscuous mode [ 1817.664349][T17978] tipc: Left network mode [ 1817.726518][T31149] netlink: 'syz.6.6128': attribute type 1 has an invalid length. [ 1818.408998][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1818.409015][ T30] audit: type=1326 audit(1765080604.097:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31159 comm="syz.2.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb2d8f749 code=0x7ffc0000 [ 1818.438963][ T9] usb 8-1: new high-speed USB device number 114 using dummy_hcd [ 1818.446753][ T5826] Bluetooth: hci1: command tx timeout [ 1818.483579][ T30] audit: type=1326 audit(1765080604.097:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31159 comm="syz.2.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efeb2d8f749 code=0x7ffc0000 [ 1818.508543][ T30] audit: type=1326 audit(1765080604.097:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31159 comm="syz.2.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb2d8f749 code=0x7ffc0000 [ 1818.578184][ T30] audit: type=1326 audit(1765080604.107:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31159 comm="syz.2.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7efeb2d8f749 code=0x7ffc0000 [ 1818.606198][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 1818.613418][ T9] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1818.622219][ T9] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1818.665454][ T30] audit: type=1326 audit(1765080604.107:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31159 comm="syz.2.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb2d8f749 code=0x7ffc0000 [ 1818.666174][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1818.809398][ T30] audit: type=1326 audit(1765080604.107:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31159 comm="syz.2.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7efeb2d8f749 code=0x7ffc0000 [ 1818.853746][ T9] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1818.871529][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.924904][ T9] usb 8-1: Product: syz [ 1818.986488][ T30] audit: type=1326 audit(1765080604.107:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31159 comm="syz.2.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb2d8f749 code=0x7ffc0000 [ 1819.019212][T17978] hsr_slave_0: left promiscuous mode [ 1819.019835][ T30] audit: type=1326 audit(1765080604.107:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31159 comm="syz.2.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7efeb2d8f749 code=0x7ffc0000 [ 1819.026387][ T5890] IPVS: starting estimator thread 0... [ 1819.053311][ T30] audit: type=1326 audit(1765080604.107:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31159 comm="syz.2.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb2d8f749 code=0x7ffc0000 [ 1819.076486][ T9] usb 8-1: Manufacturer: 󁤹 [ 1819.087021][ T9] usb 8-1: SerialNumber: syz [ 1819.091705][T17978] hsr_slave_1: left promiscuous mode [ 1819.102724][T17978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1819.130561][ T30] audit: type=1326 audit(1765080604.117:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31159 comm="syz.2.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7efeb2d8f749 code=0x7ffc0000 [ 1819.218690][T31173] IPVS: using max 51 ests per chain, 122400 per kthread [ 1819.239499][T17978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1819.336898][ T5831] usb 5-1: USB disconnect, device number 77 [ 1819.360503][ T5831] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1819.390766][ T5831] ftdi_sio 5-1:0.217: device disconnected [ 1819.419648][ T9] usb 8-1: 0:2 : does not exist [ 1819.517242][T31180] loop3: detected capacity change from 0 to 7 [ 1819.524447][T31180] Dev loop3: unable to read RDB block 7 [ 1819.541773][T31180] loop3: unable to read partition table [ 1819.550929][ T9] usb 8-1: USB disconnect, device number 114 [ 1819.558701][T31180] loop3: partition table beyond EOD, truncated [ 1819.580112][T31180] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1819.842264][T17978] pim6reg (unregistering): left allmulticast mode [ 1820.046368][ T9] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1820.200212][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1820.230337][ T9] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1820.240118][ T9] usb 5-1: config 0 has no interface number 0 [ 1820.246399][ T5890] usb 8-1: new high-speed USB device number 115 using dummy_hcd [ 1820.261392][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1820.271211][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.284591][ T9] usb 5-1: Product: syz [ 1820.289252][ T9] usb 5-1: Manufacturer: syz [ 1820.295619][ T9] usb 5-1: SerialNumber: syz [ 1820.326733][ T9] usb 5-1: config 0 descriptor?? [ 1820.337817][ T9] smsc95xx v2.0.0 [ 1820.409054][ T5890] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1820.434694][ T5890] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1820.445558][ T5890] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1820.455118][ T5890] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1820.463497][ T5890] usb 8-1: Product: syz [ 1820.470243][ T5890] usb 8-1: Manufacturer: syz [ 1820.474902][ T5890] usb 8-1: SerialNumber: syz [ 1820.500859][ T5890] usb 8-1: config 0 descriptor?? [ 1820.513594][ T5890] usb 8-1: selecting invalid altsetting 0 [ 1820.533585][ T5826] Bluetooth: hci1: command tx timeout [ 1820.725663][ T5890] usb 8-1: USB disconnect, device number 115 [ 1820.741593][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1820.764202][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1821.816225][ T5890] usb 7-1: new full-speed USB device number 79 using dummy_hcd [ 1821.855080][T31098] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1821.951794][T31098] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1821.974639][ T5890] usb 7-1: device descriptor read/64, error -71 [ 1822.048029][T31098] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1822.075726][T31098] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1822.152046][T17978] IPVS: stop unused estimator thread 0... [ 1822.236302][ T5890] usb 7-1: new full-speed USB device number 80 using dummy_hcd [ 1822.396244][ T5890] usb 7-1: device descriptor read/64, error -71 [ 1822.516696][ T5890] usb usb7-port1: attempt power cycle [ 1822.574706][T31201] netlink: 'syz.2.6138': attribute type 11 has an invalid length. [ 1822.597063][ T5826] Bluetooth: hci1: command tx timeout [ 1822.607170][T31198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1822.750963][T31098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1822.779524][T31098] 8021q: adding VLAN 0 to HW filter on device team0 [ 1822.799060][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1822.806272][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1822.821162][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1822.828370][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1822.906512][ T5890] usb 7-1: new full-speed USB device number 81 using dummy_hcd [ 1822.945034][T31098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1822.947563][ T5890] usb 7-1: device descriptor read/8, error -71 [ 1822.996068][T31098] veth0_vlan: entered promiscuous mode [ 1823.009168][T31098] veth1_vlan: entered promiscuous mode [ 1823.015848][T31184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1823.032357][T31184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1823.059264][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1823.071276][T31098] veth0_macvtap: entered promiscuous mode [ 1823.085660][ T9] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 1823.102211][T31098] veth1_macvtap: entered promiscuous mode [ 1823.112029][ T9] usb 5-1: USB disconnect, device number 78 [ 1823.133421][T31098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1823.158830][T31098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1823.175759][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1823.177854][T31236] fuse: Bad value for 'user_id' [ 1823.208200][ T5890] usb 7-1: new full-speed USB device number 82 using dummy_hcd [ 1823.217324][T31236] fuse: Bad value for 'user_id' [ 1823.240473][ T5890] usb 7-1: device descriptor read/8, error -71 [ 1823.282878][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1823.293813][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1823.305038][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1823.356993][ T5890] usb usb7-port1: unable to enumerate USB device [ 1823.474064][T31240] loop3: detected capacity change from 0 to 7 [ 1823.504742][T29992] Dev loop3: unable to read RDB block 7 [ 1823.513856][T29992] loop3: unable to read partition table [ 1823.522260][ T5949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1823.543716][ T5949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1823.545044][T29992] loop3: partition table beyond EOD, truncated [ 1823.580458][T31240] Dev loop3: unable to read RDB block 7 [ 1823.588547][T31240] loop3: unable to read partition table [ 1823.594512][T31240] loop3: partition table beyond EOD, truncated [ 1823.601848][ T9] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1823.610588][ T331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1823.620035][ T331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1823.628724][T31240] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1823.776791][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1823.784142][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1823.793338][ T9] usb 5-1: config 179 has no interface number 0 [ 1823.808834][T30539] usb 8-1: new high-speed USB device number 116 using dummy_hcd [ 1823.813479][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1823.843433][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1823.855074][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1823.877759][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1823.895649][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1823.909336][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1823.918476][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.938259][T31236] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1824.000237][T30539] usb 8-1: Using ep0 maxpacket: 32 [ 1824.020480][T30539] usb 8-1: config 0 has an invalid interface number: 38 but max is 0 [ 1824.032315][T30539] usb 8-1: config 0 has no interface number 0 [ 1824.043641][T30539] usb 8-1: config 0 interface 38 altsetting 157 endpoint 0x82 has invalid maxpacket 16333, setting to 1024 [ 1824.062087][T30539] usb 8-1: config 0 interface 38 altsetting 157 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1824.090326][T30539] usb 8-1: config 0 interface 38 has no altsetting 0 [ 1824.101053][T30539] usb 8-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=7f.b3 [ 1824.111260][T30539] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.124073][T30539] usb 8-1: Product: syz [ 1824.137150][T30539] usb 8-1: Manufacturer: syz [ 1824.142029][T30539] usb 8-1: SerialNumber: syz [ 1824.153372][T30539] usb 8-1: config 0 descriptor?? [ 1824.160068][T31242] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1824.175091][T30539] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1824.520188][ T5831] usb 5-1: USB disconnect, device number 79 [ 1824.520300][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1824.536168][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 1824.856600][T31260] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.6147'. [ 1824.865860][T31260] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1824.894473][T31260] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.6147'. [ 1824.924003][T31260] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1825.084998][T30539] input: gspca_pac7302 as /devices/platform/dummy_hcd.7/usb8/8-1/input/input256 [ 1825.279457][ T5824] usb 8-1: USB disconnect, device number 116 [ 1825.652931][T31284] fuse: Unknown parameter 'ma' [ 1825.896224][T30539] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1826.007778][T31294] loop3: detected capacity change from 0 to 7 [ 1826.019056][T29992] Dev loop3: unable to read RDB block 7 [ 1826.026961][T29992] loop3: unable to read partition table [ 1826.041872][T29992] loop3: partition table beyond EOD, truncated [ 1826.057173][T30539] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 1826.069672][T31294] Dev loop3: unable to read RDB block 7 [ 1826.081212][T30539] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1826.092535][T31294] loop3: unable to read partition table [ 1826.099215][T30539] usb 3-1: config 1 has no interfaces? [ 1826.105580][T31294] loop3: partition table beyond EOD, truncated [ 1826.112636][T30539] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1826.129792][T31294] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1826.141441][T30539] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.443013][T30539] usb 3-1: string descriptor 0 read error: -71 [ 1826.498913][T30539] usb 3-1: USB disconnect, device number 82 [ 1826.566354][T30538] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1826.706312][ T5831] usb 8-1: new low-speed USB device number 117 using dummy_hcd [ 1826.756305][T30538] usb 4-1: Using ep0 maxpacket: 16 [ 1826.771969][T30538] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1826.781530][T30538] usb 4-1: config 0 has no interface number 0 [ 1826.793955][T30538] usb 4-1: config 0 interface 8 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1826.806526][T30538] usb 4-1: config 0 interface 8 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1826.818895][T30538] usb 4-1: config 0 interface 8 has no altsetting 0 [ 1826.825598][T30538] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1826.835720][T30538] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.858468][T30538] usb 4-1: config 0 descriptor?? [ 1826.899342][ T5831] usb 8-1: config 1 interface 0 altsetting 5 endpoint 0x1 is Bulk; changing to Interrupt [ 1826.911081][ T5831] usb 8-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1826.926455][ T5831] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1827.036520][ T5824] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1827.190440][ T5824] usb 7-1: Using ep0 maxpacket: 8 [ 1827.198219][ T5824] usb 7-1: config 0 has an invalid interface number: 185 but max is 0 [ 1827.212471][ T5824] usb 7-1: config 0 has no interface number 0 [ 1827.233579][ T5824] usb 7-1: config 0 interface 185 has no altsetting 0 [ 1827.275693][ T5824] usb 7-1: New USB device found, idVendor=1435, idProduct=0828, bcdDevice=e1.b0 [ 1827.293361][T30538] usbhid 4-1:0.8: can't add hid device: -71 [ 1827.304729][T30538] usbhid 4-1:0.8: probe with driver usbhid failed with error -71 [ 1827.313204][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.340448][T30538] usb 4-1: USB disconnect, device number 82 [ 1827.347027][ T5824] usb 7-1: Product: syz [ 1827.356266][ T5824] usb 7-1: Manufacturer: syz [ 1827.372720][ T5824] usb 7-1: SerialNumber: syz [ 1827.382402][ T5824] usb 7-1: config 0 descriptor?? [ 1827.436522][ T5890] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1827.596364][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 1827.603708][ T5890] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1827.612917][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1827.645258][ T5890] usb 3-1: config 0 has no interface number 0 [ 1827.652107][ T5824] usb 7-1: Could not find all expected endpoints [ 1827.663499][ T5890] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 1827.686345][ T5824] usb 7-1: USB disconnect, device number 83 [ 1827.694254][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.723350][ T5890] usb 3-1: config 0 descriptor?? [ 1827.749271][ T5890] uvcvideo 3-1:0.64: probe with driver uvcvideo failed with error -22 [ 1828.007044][T30539] usb 3-1: USB disconnect, device number 83 [ 1828.296535][T30350] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 1828.457671][T30350] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 18432, setting to 64 [ 1828.482605][T30350] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1828.543044][T30350] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1828.630558][T30350] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1828.650132][T30350] usb 4-1: Product: syz [ 1828.660627][T30350] usb 4-1: Manufacturer: syz [ 1828.683274][T30350] usb 4-1: SerialNumber: syz [ 1828.704850][T30350] usb 4-1: config 0 descriptor?? [ 1828.749226][T30350] usb 4-1: selecting invalid altsetting 0 [ 1828.939889][T31316] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1829.410443][ T5831] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1829.425924][ T5831] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.434748][ T5831] usb 8-1: Product: 躰෥㡘⬵⼖랄鉻翇Ҏ燵䏗弟肏荳ᬤ촹ョᄿ᳂旇뢠繳恮୎ꁊ椤⇨⮳뛕渆饩鮵ꡙ෿ཏ㕮輻瀅䊸៥ᒟ஍靌᭰ᠡ㭆宭峔 [ 1829.497844][ T5831] usb 8-1: Manufacturer: 殉颙뫇紪玽퀷뀢춳졟纚ғ탭쩗䐕簿딯ᇋѧ⫎甗㛭寎曣䆗珙磂ᬋ狽僩櫏᷅ං홬赌꒕靿蕞皗艥ﻅﶏ퓿〛ⱀ꼋䨛囫홂韰瘷倸쐫䯥ꏦ툗꟔㥣ꍀ뾚Ꞔ漺᢯窃餤觋氙䜵ꪦ덮信浆錵⟾ꡘį䜩⭀蘾ᡬ苉 [ 1829.574970][ T5831] usb 8-1: can't set config #1, error -71 [ 1829.584843][ T5831] usb 8-1: USB disconnect, device number 117 [ 1829.678802][T31338] ptrace attach of "./syz-executor exec"[23381] was attempted by "./syz-executor exec"[31338] [ 1829.782841][T31337] loop3: detected capacity change from 0 to 7 [ 1829.792661][T31340] openvswitch: netlink: IP tunnel dst address not specified [ 1829.802785][T31337] Dev loop3: unable to read RDB block 7 [ 1829.810833][T31337] loop3: unable to read partition table [ 1829.817107][T31337] loop3: partition table beyond EOD, truncated [ 1829.831506][T31338] netlink: 'syz.7.6166': attribute type 21 has an invalid length. [ 1829.839506][T31338] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6166'. [ 1829.849426][T31338] netlink: 'syz.7.6166': attribute type 4 has an invalid length. [ 1829.857984][T31338] netlink: 3 bytes leftover after parsing attributes in process `syz.7.6166'. [ 1829.904872][T31337] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1831.082608][T31373] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1831.094439][T31373] block device autoloading is deprecated and will be removed. [ 1831.465162][ T5824] usb 4-1: USB disconnect, device number 83 [ 1831.650773][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1831.650785][ T30] audit: type=1400 audit(1765080617.367:1758): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D28 pid=31377 comm="syz.4.6177" [ 1831.687563][T31380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6177'. [ 1831.892515][T31382] loop9: detected capacity change from 0 to 7 [ 1831.940625][T31382] Dev loop9: unable to read RDB block 7 [ 1831.982940][T31382] loop9: unable to read partition table [ 1832.013423][T31382] loop9: partition table beyond EOD, truncated [ 1832.054256][T31382] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1832.339400][T31386] loop3: detected capacity change from 0 to 7 [ 1832.353502][T29992] Dev loop3: unable to read RDB block 7 [ 1832.366193][T29992] loop3: unable to read partition table [ 1832.394840][T29992] loop3: partition table beyond EOD, truncated [ 1832.555552][T31386] Dev loop3: unable to read RDB block 7 [ 1832.626633][ T5824] usb 8-1: new high-speed USB device number 118 using dummy_hcd [ 1832.656307][T31386] loop3: unable to read partition table [ 1832.662333][T31386] loop3: partition table beyond EOD, truncated [ 1832.672353][T31386] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1832.883869][ T5824] usb 8-1: Using ep0 maxpacket: 16 [ 1832.894432][ T5824] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1833.009046][T31393] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1833.017311][ T5824] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1833.046403][T31393] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1833.052703][T31393] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1833.086349][T31393] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1833.146979][T31403] netlink: 'syz.2.6183': attribute type 4 has an invalid length. [ 1833.225794][ T5824] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1833.396361][ T5824] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.425544][T31393] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1833.437081][ T5824] usb 8-1: Product: syz [ 1833.441290][ T5824] usb 8-1: Manufacturer: syz [ 1833.445963][ T5824] usb 8-1: SerialNumber: syz [ 1833.453875][ T5824] usb 8-1: config 0 descriptor?? [ 1833.480651][T31393] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1833.489705][ T5824] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1833.499315][ T5824] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 1833.507069][T31393] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1833.694832][T31393] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1833.834191][T31393] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1833.847026][T31393] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1833.859272][T31393] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1834.016861][T31412] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6182'. [ 1834.226300][T29121] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1834.348686][ T5824] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1834.357207][ T5824] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 1834.386197][T29121] usb 3-1: Using ep0 maxpacket: 16 [ 1834.397204][T29121] usb 3-1: config 0 has no interfaces? [ 1834.406577][T29121] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1834.418761][T29121] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1834.427059][T29121] usb 3-1: Manufacturer: syz [ 1834.434066][T29121] usb 3-1: config 0 descriptor?? [ 1834.565194][ T5824] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 1834.573262][ T5824] em28xx 8-1:0.0: No AC97 audio processor [ 1834.678059][T31422] ptrace attach of "./syz-executor exec"[29991] was attempted by "./syz-executor exec"[31422] [ 1834.804119][T31422] netlink: 'syz.4.6188': attribute type 21 has an invalid length. [ 1834.836163][T31422] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6188'. [ 1834.886010][T31422] netlink: 'syz.4.6188': attribute type 4 has an invalid length. [ 1834.930378][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 1834.944029][T31422] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6188'. [ 1835.156802][T18991] Bluetooth: hci5: command 0x0c1a tx timeout [ 1835.162979][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 1835.560673][T18991] Bluetooth: hci0: command 0x0c1a tx timeout [ 1835.673182][ T5824] usb 8-1: USB disconnect, device number 118 [ 1835.689195][ T5824] em28xx 8-1:0.0: Disconnecting em28xx [ 1835.709182][ T5824] em28xx 8-1:0.0: Freeing device [ 1835.713610][T31434] loop9: detected capacity change from 0 to 7 [ 1835.722224][T31434] Dev loop9: unable to read RDB block 7 [ 1835.730735][T31434] loop9: unable to read partition table [ 1835.746693][T31434] loop9: partition table beyond EOD, truncated [ 1835.757394][T31434] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1835.876750][T18991] Bluetooth: hci1: command 0x0c1a tx timeout [ 1836.053426][T31438] loop3: detected capacity change from 0 to 7 [ 1836.090027][T29992] Dev loop3: unable to read RDB block 7 [ 1836.095618][T29992] loop3: unable to read partition table [ 1836.151951][T29992] loop3: partition table beyond EOD, truncated [ 1836.223017][T31438] Dev loop3: unable to read RDB block 7 [ 1836.237989][T31438] loop3: unable to read partition table [ 1836.250412][T31438] loop3: partition table beyond EOD, truncated [ 1836.275897][T31438] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1836.321738][T30539] usb 3-1: USB disconnect, device number 84 [ 1836.575447][T31452] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6195'. [ 1836.590101][T31452] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6195'. [ 1836.823223][ T5890] IPVS: starting estimator thread 0... [ 1836.828936][T29121] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1836.998166][T31458] IPVS: using max 51 ests per chain, 122400 per kthread [ 1837.026225][T29121] usb 5-1: device descriptor read/64, error -71 [ 1837.241362][T18991] Bluetooth: hci5: command 0x0c1a tx timeout [ 1837.281791][T29121] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1837.426657][T29121] usb 5-1: device descriptor read/64, error -71 [ 1837.466210][ T5890] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 1837.537132][T29121] usb usb5-port1: attempt power cycle [ 1837.619976][ T5890] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1837.646551][T18991] Bluetooth: hci0: command 0x0c1a tx timeout [ 1837.656236][ T5890] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1837.665999][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1837.716232][ T5890] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1837.779927][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.871658][ T5890] usb 4-1: config 0 descriptor?? [ 1837.916598][T29121] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1837.948483][T29121] usb 5-1: device descriptor read/8, error -71 [ 1837.958611][T18991] Bluetooth: hci1: command 0x0c1a tx timeout [ 1838.059718][T31468] loop9: detected capacity change from 0 to 7 [ 1838.148677][ T5890] hid-steam 0003:28DE:1102.0083: unknown main item tag 0x0 [ 1838.172112][T29992] Dev loop9: unable to read RDB block 7 [ 1838.180566][T29992] loop9: unable to read partition table [ 1838.190359][T29992] loop9: partition table beyond EOD, truncated [ 1838.205691][ T5890] hid-steam 0003:28DE:1102.0083: unknown main item tag 0x0 [ 1838.216739][T31468] Dev loop9: unable to read RDB block 7 [ 1838.222549][T31468] loop9: unable to read partition table [ 1838.239885][T31468] loop9: partition table beyond EOD, truncated [ 1838.247184][ T5890] hid-steam 0003:28DE:1102.0083: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 1838.257043][T31468] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1838.286592][T29121] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1838.338108][T29121] usb 5-1: device descriptor read/8, error -71 [ 1838.369243][ T5890] hid-steam 0003:28DE:1102.0083: Steam Controller 'XXXXXXXXXX' connected [ 1838.429890][ T5890] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.0083/input/input258 [ 1838.463053][T29121] usb usb5-port1: unable to enumerate USB device [ 1838.530971][ T5890] hid-steam 0003:28DE:1102.0084: unknown main item tag 0x0 [ 1838.616196][ T5890] hid-steam 0003:28DE:1102.0084: unknown main item tag 0x0 [ 1838.692314][ T5890] hid-steam 0003:28DE:1102.0084: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 1838.758448][ T5890] usb 4-1: USB disconnect, device number 84 [ 1838.880215][T31485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1838.908032][T31479] fido_id[31479]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1838.966072][T31483] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6207'. [ 1838.977111][ T5890] hid-steam 0003:28DE:1102.0083: Steam Controller 'XXXXXXXXXX' disconnected [ 1839.192206][T31489] ptrace attach of "./syz-executor exec"[22419] was attempted by "./syz-executor exec"[31489] [ 1839.228450][T31489] netlink: 'syz.6.6208': attribute type 21 has an invalid length. [ 1839.238214][T31489] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6208'. [ 1839.247395][T31489] netlink: 'syz.6.6208': attribute type 4 has an invalid length. [ 1839.255177][T31489] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6208'. [ 1839.316595][T18991] Bluetooth: hci5: command 0x0c1a tx timeout [ 1839.730361][T18991] Bluetooth: hci0: command 0x0c1a tx timeout [ 1840.036319][T18991] Bluetooth: hci1: command 0x0c1a tx timeout [ 1841.031747][T31526] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6217'. [ 1841.068303][T31531] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1841.736302][T29121] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1841.886240][T29121] usb 4-1: device descriptor read/64, error -71 [ 1842.126275][T29121] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1842.286276][T29121] usb 4-1: device descriptor read/64, error -71 [ 1842.397513][T29121] usb usb4-port1: attempt power cycle [ 1842.455586][T31554] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6225'. [ 1842.486008][T31554] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6225'. [ 1842.502289][T31554] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6225'. [ 1842.748760][T29121] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1842.776401][ T5890] usb 8-1: new high-speed USB device number 119 using dummy_hcd [ 1842.795715][T29121] usb 4-1: device descriptor read/8, error -71 [ 1842.806912][T31563] ptrace attach of "./syz-executor exec"[22419] was attempted by "./syz-executor exec"[31563] [ 1842.822184][T31563] netlink: 'syz.6.6227': attribute type 21 has an invalid length. [ 1842.830244][T31563] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6227'. [ 1842.839477][T31563] netlink: 'syz.6.6227': attribute type 4 has an invalid length. [ 1842.847456][T31563] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6227'. [ 1842.986839][ T5890] usb 8-1: device descriptor read/64, error -71 [ 1843.056401][T29121] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1843.086974][T29121] usb 4-1: device descriptor read/8, error -71 [ 1843.206562][T29121] usb usb4-port1: unable to enumerate USB device [ 1843.236365][ T5890] usb 8-1: new high-speed USB device number 120 using dummy_hcd [ 1843.366268][ T5890] usb 8-1: device descriptor read/64, error -71 [ 1843.421496][T31573] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6230'. [ 1843.488386][ T5890] usb usb8-port1: attempt power cycle [ 1843.923852][ T5890] usb 8-1: new high-speed USB device number 121 using dummy_hcd [ 1843.995496][ T5890] usb 8-1: device descriptor read/8, error -71 [ 1844.057639][T31583] mmap: syz.6.6234 (31583): VmData 37576704 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data. [ 1844.246239][ T5890] usb 8-1: new high-speed USB device number 122 using dummy_hcd [ 1844.497147][ T5890] usb 8-1: device descriptor read/8, error -71 [ 1844.626663][ T5890] usb usb8-port1: unable to enumerate USB device [ 1844.858580][T31600] : renamed from team_slave_1 (while UP) [ 1845.588199][T31615] fuse: Unknown parameter '0x0000000000000007' [ 1845.846410][T30350] usb 8-1: new full-speed USB device number 123 using dummy_hcd [ 1846.256309][T31621] __nla_validate_parse: 1 callbacks suppressed [ 1846.256329][T31621] netlink: 203340 bytes leftover after parsing attributes in process `syz.4.6239'. [ 1846.326847][T31623] ptrace attach of "./syz-executor exec"[31098] was attempted by "./syz-executor exec"[31623] [ 1846.515227][T30350] usb 8-1: config 0 has an invalid interface number: 139 but max is 0 [ 1846.615575][T30350] usb 8-1: config 0 has no interface number 0 [ 1846.629236][T30350] usb 8-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1846.648907][T31623] netlink: 'syz.3.6244': attribute type 21 has an invalid length. [ 1846.656958][T31623] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6244'. [ 1846.666075][T31623] netlink: 'syz.3.6244': attribute type 4 has an invalid length. [ 1846.679426][T30350] usb 8-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 1846.818653][T31623] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6244'. [ 1846.867798][T30350] usb 8-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 8014, setting to 64 [ 1846.912441][ T5831] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1846.985183][T30350] usb 8-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1847.048441][T30350] usb 8-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 1847.088734][T30350] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.118740][ T5831] usb 3-1: config 0 has an invalid interface number: 162 but max is 0 [ 1847.126999][ T5831] usb 3-1: config 0 has no interface number 0 [ 1847.168493][T30350] usb 8-1: Product: syz [ 1847.172720][ T5831] usb 3-1: config 0 interface 162 has no altsetting 0 [ 1847.186408][T30350] usb 8-1: Manufacturer: syz [ 1847.191163][ T5831] usb 3-1: New USB device found, idVendor=8086, idProduct=07d3, bcdDevice=24.3d [ 1847.207129][T30350] usb 8-1: SerialNumber: syz [ 1847.236902][T30350] usb 8-1: config 0 descriptor?? [ 1847.241928][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1847.256958][T31614] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1847.264394][T31614] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1847.288354][T31629] loop9: detected capacity change from 0 to 7 [ 1847.291580][ T5831] usb 3-1: config 0 descriptor?? [ 1847.315184][T31629] Dev loop9: unable to read RDB block 7 [ 1847.332020][T31629] loop9: unable to read partition table [ 1847.348204][T31629] loop9: partition table beyond EOD, truncated [ 1847.366347][T31629] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1847.503083][T30350] mct_u232 8-1:0.139: MCT U232 converter detected [ 1847.513910][T30350] usb 8-1: MCT U232 converter now attached to ttyUSB0 [ 1847.525399][ T5831] usb 3-1: string descriptor 0 read error: -71 [ 1847.538957][T30350] usb 8-1: USB disconnect, device number 123 [ 1847.558390][ T5831] cdc_subset 3-1:0.162: probe with driver cdc_subset failed with error -22 [ 1847.612112][ T5831] usb 3-1: USB disconnect, device number 85 [ 1847.623355][T30350] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 1847.699153][T30350] mct_u232 8-1:0.139: device disconnected [ 1847.830785][T31637] FAULT_INJECTION: forcing a failure. [ 1847.830785][T31637] name failslab, interval 1, probability 0, space 0, times 0 [ 1847.844692][T31637] CPU: 0 UID: 0 PID: 31637 Comm: syz.3.6250 Tainted: G L syzkaller #0 PREEMPT(full) [ 1847.844723][T31637] Tainted: [L]=SOFTLOCKUP [ 1847.844730][T31637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1847.844748][T31637] Call Trace: [ 1847.844757][T31637] [ 1847.844765][T31637] dump_stack_lvl+0x189/0x250 [ 1847.844791][T31637] ? __pfx____ratelimit+0x10/0x10 [ 1847.844813][T31637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1847.844833][T31637] ? __pfx__printk+0x10/0x10 [ 1847.844863][T31637] ? __pfx___might_resched+0x10/0x10 [ 1847.844887][T31637] should_fail_ex+0x414/0x560 [ 1847.844913][T31637] should_failslab+0xa8/0x100 [ 1847.844935][T31637] __kmalloc_noprof+0xdf/0x800 [ 1847.844952][T31637] ? io_cache_alloc_new+0x40/0x100 [ 1847.844970][T31637] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 1847.844996][T31637] io_cache_alloc_new+0x40/0x100 [ 1847.845017][T31637] io_uring_cmd_prep+0x361/0x550 [ 1847.845042][T31637] io_submit_sqes+0xad3/0x2140 [ 1847.845098][T31637] __se_sys_io_uring_enter+0x2e0/0x2b60 [ 1847.845121][T31637] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1847.845146][T31637] ? vfs_write+0x956/0xb30 [ 1847.845173][T31637] ? ksys_write+0x1cb/0x250 [ 1847.845194][T31637] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1847.845216][T31637] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1847.845239][T31637] ? __pfx_vfs_write+0x10/0x10 [ 1847.845258][T31637] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1847.845284][T31637] ? __fget_files+0x3a0/0x420 [ 1847.845312][T31637] ? fput+0xa0/0xd0 [ 1847.845333][T31637] ? ksys_write+0x22a/0x250 [ 1847.845353][T31637] ? __pfx_ksys_write+0x10/0x10 [ 1847.845373][T31637] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1847.845399][T31637] do_syscall_64+0xfa/0xf80 [ 1847.845422][T31637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1847.845440][T31637] ? clear_bhb_loop+0x60/0xb0 [ 1847.845461][T31637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1847.845478][T31637] RIP: 0033:0x7fb89e18f749 [ 1847.845495][T31637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1847.845510][T31637] RSP: 002b:00007fb89efc4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1847.845529][T31637] RAX: ffffffffffffffda RBX: 00007fb89e3e5fa0 RCX: 00007fb89e18f749 [ 1847.845542][T31637] RDX: 0000000000000000 RSI: 00000000000047bc RDI: 0000000000000003 [ 1847.845553][T31637] RBP: 00007fb89efc4090 R08: 0000000000000000 R09: 0000000000000000 [ 1847.845565][T31637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1847.845575][T31637] R13: 00007fb89e3e6038 R14: 00007fb89e3e5fa0 R15: 00007fb89e50fa28 [ 1847.845606][T31637] [ 1848.228731][ T5831] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1848.299780][ T5890] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1848.347079][T31642] loop3: detected capacity change from 0 to 7 [ 1848.354962][T31642] Dev loop3: unable to read RDB block 7 [ 1848.361569][T31642] loop3: unable to read partition table [ 1848.367910][T31642] loop3: partition table beyond EOD, truncated [ 1848.374198][T31642] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1848.426326][ T5831] usb 7-1: Using ep0 maxpacket: 32 [ 1848.434931][ T5831] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1848.466217][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 1848.473476][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1848.548845][ T5890] usb 5-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1848.550423][ T5831] usb 7-1: config 0 has no interface number 0 [ 1848.608642][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1848.626652][ T5831] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1848.647611][ T5831] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.655641][ T5831] usb 7-1: Product: syz [ 1848.657077][ T5890] usb 5-1: config 0 descriptor?? [ 1848.714377][ T5831] usb 7-1: Manufacturer: syz [ 1848.722434][T31653] fuse: Bad value for 'fd' [ 1848.737817][ T5831] usb 7-1: SerialNumber: syz [ 1848.854862][ T5831] usb 7-1: config 0 descriptor?? [ 1848.876049][ T5831] smsc95xx v2.0.0 [ 1848.952965][ T5890] usbhid 5-1:0.0: can't add hid device: -71 [ 1848.973307][T31659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6256'. [ 1848.990879][ T5890] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1849.006992][T29121] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1849.032060][ T5890] usb 5-1: USB disconnect, device number 84 [ 1849.081482][T31663] loop9: detected capacity change from 0 to 7 [ 1849.095838][T31663] Dev loop9: unable to read RDB block 7 [ 1849.160086][T31663] loop9: unable to read partition table [ 1849.180018][T31663] loop9: partition table beyond EOD, truncated [ 1849.196850][T31663] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1849.207853][T29121] usb 3-1: Using ep0 maxpacket: 32 [ 1849.225168][T29121] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1849.251111][T29121] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 1849.285478][T29121] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1849.289946][ T5831] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1849.347378][T29121] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1849.366504][ T5831] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1849.406199][T29121] usb 3-1: config 128 has no interface number 0 [ 1849.412644][T29121] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 1849.451278][T29121] usb 3-1: config 128 interface 127 has no altsetting 0 [ 1849.470884][T29121] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1849.484627][T29121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.493236][T29121] usb 3-1: Product: syz [ 1849.498123][T29121] usb 3-1: Manufacturer: syz [ 1849.502743][T29121] usb 3-1: SerialNumber: syz [ 1849.527649][T31649] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1849.776401][T30539] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1849.841558][T29121] usb 3-1: USB disconnect, device number 86 [ 1849.868127][T29969] udevd[29969]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1849.938079][T30539] usb 5-1: Using ep0 maxpacket: 16 [ 1849.959183][T30539] usb 5-1: config 6 has an invalid interface number: 152 but max is 3 [ 1849.978623][T30539] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1850.004858][T30539] usb 5-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 1850.028447][T30539] usb 5-1: config 6 has no interface number 0 [ 1850.045880][T30539] usb 5-1: config 6 interface 152 altsetting 253 endpoint 0xB has invalid wMaxPacketSize 0 [ 1850.069355][T30539] usb 5-1: config 6 interface 152 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1850.099627][T30539] usb 5-1: config 6 interface 152 has no altsetting 0 [ 1850.118906][T30539] usb 5-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa [ 1850.133826][T30539] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.152562][T30539] usb 5-1: Product: syz [ 1850.160974][T30539] usb 5-1: Manufacturer: syz [ 1850.174343][T30539] usb 5-1: SerialNumber: syz [ 1850.268827][ T5831] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1850.289043][ T5831] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -32 [ 1850.361736][ T5831] usb 7-1: USB disconnect, device number 84 [ 1850.385348][T31676] ptrace attach of "./syz-executor exec"[23381] was attempted by "./syz-executor exec"[31676] [ 1850.421624][T30539] ushc 5-1:6.152: probe with driver ushc failed with error -71 [ 1850.465300][T31676] netlink: 'syz.7.6260': attribute type 21 has an invalid length. [ 1850.473637][T31676] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6260'. [ 1850.497586][T31676] netlink: 'syz.7.6260': attribute type 4 has an invalid length. [ 1850.505777][T31676] netlink: 3 bytes leftover after parsing attributes in process `syz.7.6260'. [ 1850.546517][T30539] usb 5-1: USB disconnect, device number 85 [ 1850.684297][T29121] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1850.890747][T29121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1850.926077][T29121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1850.959288][T29121] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1851.007853][T29121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1851.074295][T29121] usb 3-1: config 0 descriptor?? [ 1851.130053][T31685] loop3: detected capacity change from 0 to 7 [ 1851.145009][T29992] Dev loop3: unable to read RDB block 7 [ 1851.161820][T29992] loop3: unable to read partition table [ 1851.171505][T29992] loop3: partition table beyond EOD, truncated [ 1851.180311][T31685] Dev loop3: unable to read RDB block 7 [ 1851.185994][T31685] loop3: unable to read partition table [ 1851.204194][T31685] loop3: partition table beyond EOD, truncated [ 1851.233340][T31685] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1851.422305][T31691] netlink: 'syz.3.6266': attribute type 3 has an invalid length. [ 1851.561141][T29121] keytouch 0003:0926:3333.0085: fixing up Keytouch IEC report descriptor [ 1851.581453][T29121] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0085/input/input259 [ 1851.806426][T29121] keytouch 0003:0926:3333.0085: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1852.033551][T31700] loop9: detected capacity change from 0 to 7 [ 1852.059254][T31700] Dev loop9: unable to read RDB block 7 [ 1852.059305][T31700] loop9: unable to read partition table [ 1852.059553][T31700] loop9: partition table beyond EOD, truncated [ 1852.060730][T31700] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1852.682951][T31703] veth0_to_team: entered promiscuous mode [ 1852.876259][T17096] usb 3-1: reset high-speed USB device number 87 using dummy_hcd [ 1852.938818][ T5824] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1853.018505][T17096] usb 3-1: device descriptor read/64, error -32 [ 1853.170498][ T5824] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1853.225834][ T5824] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1853.245512][ T5824] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.329858][T17096] usb 3-1: reset high-speed USB device number 87 using dummy_hcd [ 1853.338826][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.372568][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.464336][ T5824] usb 7-1: config 0 descriptor?? [ 1853.489554][ T5824] pwc: Askey VC010 type 2 USB webcam detected. [ 1853.526208][T17096] usb 3-1: device descriptor read/64, error -32 [ 1853.786447][T17096] usb 3-1: reset high-speed USB device number 87 using dummy_hcd [ 1853.816585][T17096] usb 3-1: device descriptor read/8, error -32 [ 1853.898049][ T5824] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1854.117311][ T5824] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1854.128868][ T5824] pwc: recv_control_msg error -32 req 04 val 1000 [ 1854.179286][ T5824] pwc: recv_control_msg error -32 req 04 val 1300 [ 1854.235905][ T5824] pwc: recv_control_msg error -32 req 04 val 1400 [ 1854.246884][ T5824] pwc: recv_control_msg error -32 req 02 val 2000 [ 1854.260947][ T5824] pwc: recv_control_msg error -32 req 02 val 2100 [ 1854.271989][T31703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1854.288051][ T5824] pwc: recv_control_msg error -32 req 04 val 1500 [ 1854.294852][T31703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1854.307443][ T5824] pwc: recv_control_msg error -32 req 02 val 2500 [ 1854.538514][ T5824] pwc: recv_control_msg error -71 req 02 val 2600 [ 1854.545830][ T5824] pwc: recv_control_msg error -71 req 02 val 2900 [ 1854.561079][ T5824] pwc: recv_control_msg error -71 req 02 val 2800 [ 1854.578023][ T5824] pwc: recv_control_msg error -71 req 04 val 1100 [ 1854.596571][ T5824] pwc: recv_control_msg error -71 req 04 val 1200 [ 1854.600402][ T30] audit: type=1326 audit(1765080640.317:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31721 comm="syz.2.6274" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efeb2d8f749 code=0x0 [ 1854.696508][ T5824] pwc: Registered as video103. [ 1854.703457][ T5824] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input260 [ 1854.757356][T31728] loop9: detected capacity change from 0 to 7 [ 1854.767915][T31728] Dev loop9: unable to read RDB block 7 [ 1854.774136][T31728] loop9: unable to read partition table [ 1854.781111][ T5890] usb 3-1: USB disconnect, device number 87 [ 1854.827063][T31728] loop9: partition table beyond EOD, truncated [ 1854.856727][ T5824] usb 7-1: USB disconnect, device number 85 [ 1854.864466][T31728] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1855.559604][T31744] loop9: detected capacity change from 0 to 7 [ 1855.578891][T31744] Dev loop9: unable to read RDB block 7 [ 1855.608639][T31744] loop9: unable to read partition table [ 1855.631218][T31744] loop9: partition table beyond EOD, truncated [ 1855.647894][T31744] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1855.746616][ T5824] usb 8-1: new high-speed USB device number 124 using dummy_hcd [ 1855.926204][ T5824] usb 8-1: Using ep0 maxpacket: 32 [ 1855.940841][ T5824] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1855.979482][ T5824] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1856.003541][ T5824] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1856.038053][ T5824] usb 8-1: Product: syz [ 1856.052602][ T5824] usb 8-1: Manufacturer: syz [ 1856.065149][ T5824] usb 8-1: SerialNumber: syz [ 1856.097179][ T5824] usb 8-1: config 0 descriptor?? [ 1856.144408][ T5824] gs_usb 8-1:0.0: Required endpoints not found [ 1856.345202][ T5831] usb 8-1: USB disconnect, device number 124 [ 1856.408316][T31752] ptrace attach of "./syz-executor exec"[22419] was attempted by "./syz-executor exec"[31752] [ 1856.436364][T30539] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1856.492021][T31752] netlink: 'syz.6.6281': attribute type 21 has an invalid length. [ 1856.500220][T31752] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6281'. [ 1856.509489][T31752] netlink: 'syz.6.6281': attribute type 4 has an invalid length. [ 1856.517502][T31752] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6281'. [ 1856.630056][T30539] usb 4-1: device descriptor read/64, error -71 [ 1856.747293][ T30] audit: type=1326 audit(1765080642.467:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31754 comm="syz.2.6282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb2d8f749 code=0x7ffc0000 [ 1856.826358][ T30] audit: type=1326 audit(1765080642.467:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31754 comm="syz.2.6282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7efeb2d8f749 code=0x7ffc0000 [ 1856.880614][ T30] audit: type=1326 audit(1765080642.467:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31754 comm="syz.2.6282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb2d8f749 code=0x7ffc0000 [ 1856.917518][T30539] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1857.035596][ T30] audit: type=1326 audit(1765080642.467:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31754 comm="syz.2.6282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efeb2d8f749 code=0x7ffc0000 [ 1857.089484][ T30] audit: type=1326 audit(1765080642.467:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31754 comm="syz.2.6282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb2d8f749 code=0x7ffc0000 [ 1857.116241][T30539] usb 4-1: device descriptor read/64, error -71 [ 1857.188491][ T30] audit: type=1326 audit(1765080642.467:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31754 comm="syz.2.6282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efeb2d8df90 code=0x7ffc0000 [ 1857.226429][T30539] usb usb4-port1: attempt power cycle [ 1857.241217][ T30] audit: type=1326 audit(1765080642.467:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31754 comm="syz.2.6282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb2d8f749 code=0x7ffc0000 [ 1857.294285][ T30] audit: type=1326 audit(1765080642.467:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31754 comm="syz.2.6282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efeb2d8f749 code=0x7ffc0000 [ 1857.347797][ T30] audit: type=1326 audit(1765080642.467:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31754 comm="syz.2.6282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb2d8f749 code=0x7ffc0000 [ 1857.396242][ T5831] usb 8-1: new high-speed USB device number 125 using dummy_hcd [ 1857.561631][T31762] kvm: kvm [31760]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20000800 [ 1857.563235][ T5831] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1857.602003][ T5831] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1857.615842][T30539] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1857.635448][ T5831] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1857.651239][T30539] usb 4-1: device descriptor read/8, error -71 [ 1857.673439][ T5831] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1857.692810][ T5831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.727183][ T5831] usb 8-1: config 0 descriptor?? [ 1857.906724][T30539] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1857.939164][T30539] usb 4-1: device descriptor read/8, error -71 [ 1858.076585][T30539] usb usb4-port1: unable to enumerate USB device [ 1858.150661][ T5831] plantronics 0003:047F:FFFF.0086: reserved main item tag 0xd [ 1858.172973][ T5831] plantronics 0003:047F:FFFF.0086: item fetching failed at offset 13/15 [ 1858.194275][ T5831] plantronics 0003:047F:FFFF.0086: parse failed [ 1858.202631][ T5831] plantronics 0003:047F:FFFF.0086: probe with driver plantronics failed with error -22 [ 1858.256546][T30539] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1858.377218][ T5890] usb 8-1: USB disconnect, device number 125 [ 1858.426534][T30539] usb 7-1: Using ep0 maxpacket: 16 [ 1858.449601][T30539] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1858.473196][T30539] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1858.503819][T30539] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1858.536248][T30539] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1858.565727][T30539] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.611988][T30539] usb 7-1: config 0 descriptor?? [ 1859.159384][T30539] input: HID 0955:7214 Haptics as /devices/virtual/input/input261 [ 1859.257174][T31770] random: crng reseeded on system resumption [ 1859.360500][T30539] shield 0003:0955:7214.0087: Registered Thunderstrike controller [ 1859.408851][T30539] shield 0003:0955:7214.0087: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 1859.427525][ T5890] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1859.514412][ T5831] shield 0003:0955:7214.0087: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1859.531619][T30539] usb 7-1: USB disconnect, device number 86 [ 1859.550791][ T5831] shield 0003:0955:7214.0087: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1859.606007][ T5831] shield 0003:0955:7214.0087: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1859.618567][ T5831] shield 0003:0955:7214.0087: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1859.619207][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 1859.657250][ T5890] usb 5-1: config index 0 descriptor too short (expected 1316, got 36) [ 1859.755099][ T5890] usb 5-1: config 0 has an invalid interface number: 157 but max is -1 [ 1859.806428][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1859.830741][ T5890] usb 5-1: config 0 has no interface number 0 [ 1859.836935][ T5890] usb 5-1: config 0 interface 157 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 16 [ 1859.945693][ T5890] usb 5-1: config 0 interface 157 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 5 [ 1859.967497][ T5890] usb 5-1: New USB device found, idVendor=0483, idProduct=3746, bcdDevice=94.86 [ 1859.980150][T31802] geneve2: entered allmulticast mode [ 1860.022819][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.031778][ T5890] usb 5-1: Product: syz [ 1860.036039][ T5890] usb 5-1: Manufacturer: syz [ 1860.042725][ T5890] usb 5-1: SerialNumber: syz [ 1860.055334][ T5890] usb 5-1: config 0 descriptor?? [ 1860.156030][T31808] ptrace attach of "./syz-executor exec"[22419] was attempted by "./syz-executor exec"[31808] [ 1860.173500][T31808] netlink: 'syz.6.6297': attribute type 21 has an invalid length. [ 1860.182073][T31808] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6297'. [ 1860.201803][T31808] netlink: 'syz.6.6297': attribute type 4 has an invalid length. [ 1860.336566][T31808] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6297'. [ 1860.378744][T31783] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1860.422470][T31783] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1860.830127][T31783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6292'. [ 1860.854290][ T5890] ftdi_sio 5-1:0.157: FTDI USB Serial Device converter detected [ 1860.952922][ T5890] ftdi_sio ttyUSB0: unknown device type: 0x9486 [ 1860.989123][ T5890] usb 5-1: USB disconnect, device number 86 [ 1861.052878][ T5890] ftdi_sio 5-1:0.157: device disconnected [ 1861.408471][T31818] netlink: 658 bytes leftover after parsing attributes in process `syz.2.6299'. [ 1861.618916][T31824] loop3: detected capacity change from 0 to 7 [ 1861.643634][T31824] Dev loop3: unable to read RDB block 7 [ 1861.657621][T31824] loop3: unable to read partition table [ 1861.674947][T31824] loop3: partition table beyond EOD, truncated [ 1861.706172][T31824] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1862.216231][ T5890] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1862.395541][ T5890] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1862.421247][ T5890] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1862.453947][ T5890] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1862.469014][ T5890] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1862.491376][ T5890] usb 4-1: Manufacturer: syz [ 1862.531145][ T5890] usb 4-1: config 0 descriptor?? [ 1862.581268][ T5890] igorplugusb 4-1:0.0: incorrect number of endpoints [ 1862.656314][T17096] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1862.971580][T17096] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1862.983830][T17096] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1863.004879][T17096] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1863.015507][T17096] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.034514][T30539] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 1863.060144][T17096] usb 5-1: config 0 descriptor?? [ 1863.073984][T17096] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1863.384036][T31859] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6311'. [ 1863.552226][T30539] usb 3-1: config 0 has an invalid interface number: 25 but max is 0 [ 1863.576375][T30539] usb 3-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 1863.587232][T30539] usb 3-1: config 0 has no interface number 0 [ 1863.594685][T30539] usb 3-1: too many endpoints for config 0 interface 25 altsetting 230: 45, using maximum allowed: 30 [ 1863.649604][T30539] usb 3-1: config 0 interface 25 altsetting 230 has 0 endpoint descriptors, different from the interface descriptor's value: 45 [ 1863.745604][T30539] usb 3-1: config 0 interface 25 has no altsetting 0 [ 1863.765530][T30539] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 1863.791975][T30539] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.867814][T30539] usb 3-1: config 0 descriptor?? [ 1866.811506][T30539] usb 3-1: string descriptor 0 read error: -71 [ 1866.851819][T30539] usb 3-1: USB disconnect, device number 88 [ 1867.059830][ T5824] usb 5-1: USB disconnect, device number 87 [ 1867.175508][T31870] loop3: detected capacity change from 0 to 7 [ 1867.192795][T31870] Dev loop3: unable to read RDB block 7 [ 1867.236355][T31870] loop3: unable to read partition table [ 1867.264898][T31870] loop3: partition table beyond EOD, truncated [ 1867.301743][T31870] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1867.353458][T30538] usb 4-1: USB disconnect, device number 93 [ 1867.516882][ T5824] usb 8-1: new high-speed USB device number 126 using dummy_hcd [ 1867.686478][T18638] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1867.716379][ T5824] usb 8-1: Using ep0 maxpacket: 16 [ 1867.733660][ T5824] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1867.752794][ T5824] usb 8-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 1867.775459][ T5824] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1867.798798][ T5824] usb 8-1: config 1 has no interface number 1 [ 1867.811375][ T5824] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1867.841386][ T5824] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 26232, setting to 64 [ 1867.878517][T18638] usb 5-1: config 0 has an invalid interface number: 59 but max is 0 [ 1867.896049][T18638] usb 5-1: config 0 has no interface number 0 [ 1867.906229][ T5824] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1867.930577][T18638] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0104, bcdDevice=3e.e6 [ 1867.945457][ T5824] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.962774][T18638] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.971638][ T5824] usb 8-1: Product: syz [ 1867.981931][ T5824] usb 8-1: Manufacturer: syz [ 1867.995792][T18638] usb 5-1: Product: syz [ 1868.000088][ T5824] usb 8-1: SerialNumber: syz [ 1868.005688][T18638] usb 5-1: Manufacturer: syz [ 1868.039681][T18638] usb 5-1: SerialNumber: syz [ 1868.062601][T18638] usb 5-1: config 0 descriptor?? [ 1868.079767][T18638] kvaser_usb 5-1:0.59: error -ENODEV: Cannot get usb endpoint(s) [ 1868.234075][ T5824] usb 8-1: USB disconnect, device number 126 [ 1868.305684][T30539] usb 5-1: USB disconnect, device number 88 [ 1868.459478][T31901] dlm: Unknown command passed to DLM device : 33 [ 1868.459478][T31901] [ 1869.106192][T30539] usb 8-1: new high-speed USB device number 127 using dummy_hcd [ 1869.256206][T30539] usb 8-1: Using ep0 maxpacket: 8 [ 1869.258787][T30539] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1869.258827][T30539] usb 8-1: can't read configurations, error -61 [ 1869.405294][T30539] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1869.596677][T30539] usb 8-1: Using ep0 maxpacket: 8 [ 1869.609005][T30539] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1869.609030][T30539] usb 8-1: can't read configurations, error -61 [ 1869.609694][T30539] usb usb8-port1: attempt power cycle [ 1869.946858][T30539] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1869.967204][T30539] usb 8-1: Using ep0 maxpacket: 8 [ 1869.986209][T30539] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1869.986239][T30539] usb 8-1: can't read configurations, error -61 [ 1870.116358][T30539] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1870.159614][T30539] usb 8-1: Using ep0 maxpacket: 8 [ 1870.184569][T30539] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1870.202970][T30539] usb 8-1: can't read configurations, error -61 [ 1870.246763][T30539] usb usb8-port1: unable to enumerate USB device [ 1870.486346][ T5824] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1870.676852][ T5824] usb 3-1: Using ep0 maxpacket: 8 [ 1870.684598][ T5824] usb 3-1: config 252 has an invalid interface number: 247 but max is 0 [ 1870.699673][ T5824] usb 3-1: config 252 has no interface number 0 [ 1870.722647][ T5824] usb 3-1: config 252 interface 247 has no altsetting 0 [ 1870.749650][ T5824] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1870.777258][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1872.143841][T31953] fuse: Unknown parameter '000000000000000000030x00000000000000030x000000000000000300000000000000000000' [ 1872.790484][T31972] xfrm0: entered promiscuous mode [ 1872.802327][T31972] xfrm0: entered allmulticast mode [ 1873.369943][T31982] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6347'. [ 1873.442596][ T5824] usb 3-1: string descriptor 0 read error: -71 [ 1873.469569][T31982] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6347'. [ 1873.469595][ T5824] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1873.505168][ T5824] pvrusb2: ********** [ 1873.509555][ T5824] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1873.519931][ T5824] pvrusb2: Important functionality might not be entirely working. [ 1873.538034][ T5824] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1873.550978][ T5824] pvrusb2: ********** [ 1873.555499][ T5824] usb 3-1: selecting invalid altsetting 0 [ 1873.561742][ T2344] pvrusb2: Invalid write control endpoint [ 1873.575012][ T5824] usb 3-1: USB disconnect, device number 89 [ 1873.700269][ T2344] pvrusb2: Invalid write control endpoint [ 1873.742977][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1873.975989][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1873.997398][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1874.010893][ T2344] pvrusb2: Device being rendered inoperable [ 1874.041024][ T2344] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 1874.094789][ T2344] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1874.105461][ T2344] pvrusb2: Attached sub-driver cx25840 [ 1874.111563][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1874.126977][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1875.079765][T32004] tipc: Started in network mode [ 1875.085538][T32004] tipc: Node identity 3e5775554b48, cluster identity 4711 [ 1875.102766][T32004] tipc: Enabled bearer , priority 0 [ 1875.119213][T32004] syzkaller0: entered promiscuous mode [ 1875.125214][T32004] syzkaller0: entered allmulticast mode [ 1875.150998][T32004] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1875.200176][T32004] tipc: Resetting bearer [ 1875.223556][T32004] netlink: 'syz.7.6352': attribute type 3 has an invalid length. [ 1875.285380][T32003] tipc: Resetting bearer [ 1875.361195][T32003] tipc: Disabling bearer [ 1875.386407][ T5831] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1875.507878][T32007] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6353'. [ 1875.547139][ T5831] usb 4-1: Using ep0 maxpacket: 32 [ 1875.565302][ T5831] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1875.574623][ T5831] usb 4-1: config 0 has no interface number 0 [ 1875.582583][ T5831] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1875.597375][ T5831] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1875.641609][ T5831] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1875.650738][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.661229][ T5831] usb 4-1: Product: syz [ 1875.665455][ T5831] usb 4-1: Manufacturer: syz [ 1875.671011][ T5831] usb 4-1: SerialNumber: syz [ 1875.708115][ T5831] usb 4-1: config 0 descriptor?? [ 1875.835872][T32011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6355'. [ 1875.852587][T32011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6355'. [ 1875.911867][T32012] loop7: detected capacity change from 0 to 7 [ 1875.934247][ C1] blk_print_req_error: 10 callbacks suppressed [ 1875.934261][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1875.949634][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1875.960006][T30539] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1875.968844][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1875.978017][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1875.986969][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1875.996156][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1876.004745][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1876.014008][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1876.325213][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1876.333705][T30539] usb 8-1: Using ep0 maxpacket: 32 [ 1876.334431][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1876.348871][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1876.358093][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1876.369997][T30539] usb 8-1: config 8 has an invalid interface number: 183 but max is 0 [ 1876.372743][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1876.386305][T30539] usb 8-1: config 8 has an invalid interface descriptor of length 5, skipping [ 1876.387407][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1876.397385][T30539] usb 8-1: config 8 has an invalid interface descriptor of length 5, skipping [ 1876.406002][T29992] ldm_validate_partition_table(): Disk read failed. [ 1876.412972][T30539] usb 8-1: config 8 has an invalid descriptor of length 1, skipping remainder of the config [ 1876.412995][T30539] usb 8-1: config 8 has no interface number 0 [ 1876.413041][T30539] usb 8-1: config 8 interface 183 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1876.413067][T30539] usb 8-1: config 8 interface 183 has no altsetting 0 [ 1876.415939][T30539] usb 8-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=69.50 [ 1876.468041][T30539] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.477753][T30539] usb 8-1: Product: syz [ 1876.483401][T30539] usb 8-1: Manufacturer: syz [ 1876.486354][T32011] support for cryptoloop has been removed. Use dm-crypt instead. [ 1876.490297][T30539] usb 8-1: SerialNumber: syz [ 1876.512456][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1876.521670][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1876.530246][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1876.539429][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1876.548053][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1876.557234][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1876.566867][T29992] Dev loop7: unable to read RDB block 0 [ 1876.573838][T29992] loop7: unable to read partition table [ 1876.583143][T29992] loop7: partition table beyond EOD, truncated [ 1876.608737][T32012] ldm_validate_partition_table(): Disk read failed. [ 1877.532320][T32012] Dev loop7: unable to read RDB block 0 [ 1877.540458][T32012] loop7: unable to read partition table [ 1877.550088][T32012] loop7: partition table beyond EOD, truncated [ 1877.586442][T32012] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1878.669430][ T5831] appletouch 4-1:0.85: Failed to read mode from device. [ 1878.684535][ T5831] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 1878.771576][ T5831] usb 4-1: USB disconnect, device number 94 [ 1878.858883][T32031] loop3: detected capacity change from 0 to 7 [ 1878.867270][T32031] Dev loop3: unable to read RDB block 7 [ 1878.874897][T32031] loop3: unable to read partition table [ 1878.890182][T32031] loop3: partition table beyond EOD, truncated [ 1878.900059][T32031] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1878.966976][T30539] gspca_main: tv8532-2.14.0 probing 0545:808b [ 1879.032656][T30539] usb 8-1: USB disconnect, device number 5 [ 1879.181565][T32036] hub 9-0:1.0: USB hub found [ 1879.211488][T32036] hub 9-0:1.0: 1 port detected [ 1879.309276][T32036] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6361'. [ 1879.323319][T32036] erspan0: entered promiscuous mode [ 1881.476486][T18638] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1881.679359][T18638] usb 3-1: Using ep0 maxpacket: 16 [ 1881.697157][T18638] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1881.710051][T18638] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1881.730291][T18638] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1881.754366][T18638] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1881.764233][T18638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.811529][T18638] usb 3-1: config 0 descriptor?? [ 1881.849771][T17096] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1882.022333][T17096] usb 8-1: Using ep0 maxpacket: 8 [ 1882.037433][T17096] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1882.067563][T17096] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1882.097661][T17096] usb 8-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1882.124631][T17096] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1882.166047][T17096] usb 8-1: config 0 descriptor?? [ 1882.215760][T17096] hso 8-1:0.0: Can't find BULK IN endpoint [ 1882.409681][T17096] usb 8-1: USB disconnect, device number 6 [ 1882.623750][T32074] loop3: detected capacity change from 0 to 7 [ 1882.635400][T32074] Dev loop3: unable to read RDB block 7 [ 1882.655628][T32074] loop3: unable to read partition table [ 1882.677401][T32074] loop3: partition table beyond EOD, truncated [ 1882.688832][T32074] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1883.265153][T32084] loop7: detected capacity change from 0 to 7 [ 1883.318667][ C0] blk_print_req_error: 25 callbacks suppressed [ 1883.318679][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1883.334032][ C0] buffer_io_error: 25 callbacks suppressed [ 1883.334044][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1883.356451][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1883.365651][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1883.376154][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1883.385355][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1883.394407][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1883.403602][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1883.414826][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1883.424014][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1883.432302][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1883.441467][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1883.449868][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1883.459044][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1883.467291][T29992] ldm_validate_partition_table(): Disk read failed. [ 1883.488598][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1883.497777][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1883.512850][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1883.522043][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1883.530220][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1883.539373][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1883.547498][T29992] Dev loop7: unable to read RDB block 0 [ 1883.549093][T30538] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 1883.581895][T29992] loop7: unable to read partition table [ 1883.611187][T29992] loop7: partition table beyond EOD, truncated [ 1883.641924][T32084] ldm_validate_partition_table(): Disk read failed. [ 1883.682175][T32084] Dev loop7: unable to read RDB block 0 [ 1883.734662][T30538] usb 8-1: Invalid ep0 maxpacket: 32 [ 1883.759502][T32084] loop7: unable to read partition table [ 1883.768047][T32084] loop7: partition table beyond EOD, truncated [ 1883.779674][T32084] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1883.866214][T30539] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 1883.876772][T30538] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 1884.037819][T30538] usb 8-1: Invalid ep0 maxpacket: 32 [ 1884.043546][T30538] usb usb8-port1: attempt power cycle [ 1884.059545][T30539] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1884.071866][T30539] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1884.095384][T30539] usb 4-1: config 0 descriptor?? [ 1884.386233][T30538] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 1884.427836][T30538] usb 8-1: Invalid ep0 maxpacket: 32 [ 1884.557471][T30538] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 1884.586906][T30538] usb 8-1: Invalid ep0 maxpacket: 32 [ 1884.598117][T30538] usb usb8-port1: unable to enumerate USB device [ 1885.029397][T18638] usbhid 3-1:0.0: can't add hid device: -71 [ 1885.058331][T18638] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1885.132561][T18638] usb 3-1: USB disconnect, device number 90 [ 1885.675612][T32092] syzkaller0: entered promiscuous mode [ 1885.686491][T32092] syzkaller0: entered allmulticast mode [ 1885.705829][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1885.720982][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1885.732119][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1885.742663][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1885.763376][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1885.827454][T18991] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1885.840674][T18991] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1885.855310][T18991] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1885.872624][T18991] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1885.889190][T18991] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1886.473662][T30539] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1886.506800][T30539] [drm:udl_init] *ERROR* Selecting channel failed [ 1886.565675][T30539] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1886.572499][T30539] [drm] Initialized udl on minor 2 [ 1886.579076][T30539] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1886.587759][T30539] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1886.597294][T24146] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1886.606805][T24146] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1886.627339][T30539] usb 4-1: USB disconnect, device number 95 [ 1886.816317][T30538] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1886.979190][T30538] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1886.989096][T30538] usb 8-1: config 0 has no interface number 0 [ 1886.995654][T32100] chnl_net:caif_netlink_parms(): no params data found [ 1887.032190][T30538] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1887.062573][T30538] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1887.077906][T30538] usb 8-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1887.089431][T30538] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1887.143502][T30538] usb 8-1: config 0 descriptor?? [ 1887.155538][T32099] chnl_net:caif_netlink_parms(): no params data found [ 1887.399605][T32122] loop3: detected capacity change from 0 to 7 [ 1887.442446][T32122] Dev loop3: unable to read RDB block 7 [ 1887.469044][T32122] loop3: unable to read partition table [ 1887.483883][T32122] loop3: partition table beyond EOD, truncated [ 1887.503380][T32122] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1887.575530][T30538] prodikeys 0003:041E:2801.0088: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.7-1/input1 [ 1887.619093][T30538] hid_prodikeys: hid-prodikeys: failed to find output report [ 1887.619093][T30538] [ 1887.767292][T32129] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6384'. [ 1887.839794][T32100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1887.876456][T18991] Bluetooth: hci4: command tx timeout [ 1887.887384][T32100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1887.913981][T32100] bridge_slave_0: entered allmulticast mode [ 1887.957661][T18991] Bluetooth: hci6: command tx timeout [ 1887.978973][T32100] bridge_slave_0: entered promiscuous mode [ 1888.056180][T32100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1888.076288][T32100] bridge0: port 2(bridge_slave_1) entered disabled state [ 1888.109666][T32100] bridge_slave_1: entered allmulticast mode [ 1888.126313][T32100] bridge_slave_1: entered promiscuous mode [ 1888.250974][T32099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1888.265799][T32099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1888.291184][T32099] bridge_slave_0: entered allmulticast mode [ 1888.308316][T32099] bridge_slave_0: entered promiscuous mode [ 1888.381704][T32099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1888.407668][T32099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1888.424629][T32099] bridge_slave_1: entered allmulticast mode [ 1888.435492][T32099] bridge_slave_1: entered promiscuous mode [ 1888.448845][T32100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1888.493261][T32100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1888.564044][T32099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1888.610958][T32099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1888.623946][T32100] team0: Port device team_slave_0 added [ 1888.660779][T32100] team0: Port device team_slave_1 added [ 1888.721570][T32099] team0: Port device team_slave_0 added [ 1888.771464][T32099] team0: Port device team_slave_1 added [ 1888.786897][T32100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1888.795102][T32100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1888.823228][T32100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1888.862663][T32100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1888.872004][T32100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1888.899873][T32100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1888.952986][T32099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1888.961404][T32099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1888.990636][T32099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1889.033195][T32099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1889.040710][T32099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1889.068154][T32099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1889.122348][T32100] hsr_slave_0: entered promiscuous mode [ 1889.134318][T32100] hsr_slave_1: entered promiscuous mode [ 1889.142577][T32100] debugfs: 'hsr0' already exists in 'hsr' [ 1889.150396][T32100] Cannot create hsr debugfs directory [ 1889.260550][T32099] hsr_slave_0: entered promiscuous mode [ 1889.275993][T32099] hsr_slave_1: entered promiscuous mode [ 1889.288275][T32099] debugfs: 'hsr0' already exists in 'hsr' [ 1889.294185][T32099] Cannot create hsr debugfs directory [ 1889.541751][ T5824] usb 8-1: USB disconnect, device number 11 [ 1889.956687][T18991] Bluetooth: hci4: command tx timeout [ 1890.039587][T18991] Bluetooth: hci6: command tx timeout [ 1890.074448][T32099] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1890.132515][T32099] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1890.187074][T30538] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1890.205178][T32099] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1890.280958][T32099] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1890.350900][T30538] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1890.362606][T30538] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1890.375404][T30538] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1890.384542][T32100] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1890.394816][T30538] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1890.415017][T30538] usb 8-1: config 0 descriptor?? [ 1890.418060][T32100] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1890.473164][T32100] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1890.503502][T32100] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1890.517459][T18638] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1890.680815][T32099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1890.698867][T18638] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1890.738592][T18638] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1890.741354][T32099] 8021q: adding VLAN 0 to HW filter on device team0 [ 1890.758804][T18638] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1890.771389][T18638] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.783602][T18638] usb 3-1: Product: syz [ 1890.790684][T18638] usb 3-1: Manufacturer: syz [ 1890.798493][T18638] usb 3-1: SerialNumber: syz [ 1890.799604][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1890.810271][ T5970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1890.811063][T18638] cdc_mbim 3-1:1.0: skipping garbage [ 1890.841753][T32100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1890.861033][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1890.868235][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1890.951365][T32100] 8021q: adding VLAN 0 to HW filter on device team0 [ 1891.016535][T32142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1891.025521][T32142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1891.037788][T32142] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1891.049212][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1891.056436][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1891.065696][T30538] usbhid 8-1:0.0: can't add hid device: -71 [ 1891.097641][T30538] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1891.110618][T30538] usb 8-1: USB disconnect, device number 12 [ 1891.114333][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1891.123812][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1891.393307][T32099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1891.463239][T32100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1891.569035][T32099] veth0_vlan: entered promiscuous mode [ 1891.644995][T32099] veth1_vlan: entered promiscuous mode [ 1891.693573][T32100] veth0_vlan: entered promiscuous mode [ 1891.732099][T32100] veth1_vlan: entered promiscuous mode [ 1891.774148][T32099] veth0_macvtap: entered promiscuous mode [ 1891.832439][T32099] veth1_macvtap: entered promiscuous mode [ 1891.921497][T32100] veth0_macvtap: entered promiscuous mode [ 1891.955199][T32100] veth1_macvtap: entered promiscuous mode [ 1891.995184][T32099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1892.030038][T32099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1892.038976][T18991] Bluetooth: hci4: command tx timeout [ 1892.102240][T31476] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.115763][T31476] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.116637][T18991] Bluetooth: hci6: command tx timeout [ 1892.191923][T31476] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.273751][T32100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1892.307359][T31476] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.398214][T32100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1892.486566][ T331] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.499187][ T331] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.526677][ T331] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.552988][ T331] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.574370][ T331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1892.616232][ T331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1892.730925][ T5948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1892.755352][ T5948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1892.883352][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1892.920917][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1893.069043][T31476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1893.098211][T31476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1893.466629][T18638] cdc_mbim 3-1:1.0: bind() failure [ 1893.479083][T18638] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1893.488296][T18638] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1893.501052][T18638] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 1893.604441][T18638] usb 3-1: USB disconnect, device number 91 [ 1893.772279][T32174] netlink: 9 bytes leftover after parsing attributes in process `syz.7.6392'. [ 1893.790418][T24146] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1893.804222][T32176] netlink: 120 bytes leftover after parsing attributes in process `syz.2.6391'. [ 1893.845183][T32174] 0: renamed from hsr_slave_1 (while UP) [ 1893.860744][T32176] af_packet: tpacket_rcv: packet too big, clamped from 134 to 4294967286. macoff=82 [ 1893.882927][T32174] 0: entered allmulticast mode [ 1893.968063][T24146] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1893.979122][T24146] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1893.980632][T32174] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 1894.009472][T24146] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1894.027168][T24146] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.035301][T24146] usb 10-1: Product: syz [ 1894.044644][T24146] usb 10-1: Manufacturer: syz [ 1894.052139][T24146] usb 10-1: SerialNumber: syz [ 1894.067485][T32174] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6392'. [ 1894.121106][T18991] Bluetooth: hci4: command tx timeout [ 1894.196281][T18991] Bluetooth: hci6: command tx timeout [ 1894.337348][T24146] usb 10-1: 0:2 : does not exist [ 1894.445295][T24146] usb 10-1: USB disconnect, device number 2 [ 1894.521766][T29992] udevd[29992]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1894.800655][T32180] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6393'. [ 1895.054091][T32182] netlink: 'syz.9.6394': attribute type 1 has an invalid length. [ 1895.337050][ T5824] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1895.375667][T32194] syzkaller0: entered promiscuous mode [ 1895.386586][T32194] syzkaller0: entered allmulticast mode [ 1895.526516][ T5824] usb 9-1: Using ep0 maxpacket: 16 [ 1895.533911][ T9] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 1895.555901][ T5824] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1895.577940][ T5824] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1895.587728][ T5824] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1895.600974][ T5824] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1895.616209][T24146] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1895.625141][ T5824] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1895.635889][ T5824] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.653393][ T5824] usb 9-1: Product: syz [ 1895.661914][ T5824] usb 9-1: Manufacturer: syz [ 1895.666615][ T5824] usb 9-1: SerialNumber: syz [ 1895.825254][ T9] usb 3-1: config 0 has an invalid interface number: 44 but max is 1 [ 1895.834699][ T9] usb 3-1: config 0 has an invalid interface number: 92 but max is 1 [ 1895.843545][ T9] usb 3-1: config 0 has no interface number 0 [ 1895.858737][ T9] usb 3-1: config 0 has no interface number 1 [ 1895.867833][T24146] usb 8-1: Using ep0 maxpacket: 8 [ 1895.878179][T24146] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1895.913285][ T9] usb 3-1: config 0 interface 44 has no altsetting 0 [ 1895.913780][T24146] usb 8-1: config 8 has an invalid interface number: 79 but max is 0 [ 1895.921447][ T9] usb 3-1: config 0 interface 92 has no altsetting 0 [ 1895.953228][T24146] usb 8-1: config 8 has no interface number 0 [ 1895.966709][T24146] usb 8-1: config 8 interface 79 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1895.978556][T24146] usb 8-1: config 8 interface 79 has no altsetting 0 [ 1895.989296][T24146] usb 8-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=55.05 [ 1895.989902][ T5824] usb 9-1: USB disconnect, device number 2 [ 1895.998569][T24146] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.016501][T24146] usb 8-1: Product: syz [ 1896.020698][T24146] usb 8-1: Manufacturer: syz [ 1896.025316][T24146] usb 8-1: SerialNumber: syz [ 1896.035928][ T9] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01ab, bcdDevice=85.24 [ 1896.060720][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.076023][ T9] usb 3-1: Product: syz [ 1896.100907][ T9] usb 3-1: Manufacturer: syz [ 1896.105674][ T9] usb 3-1: SerialNumber: syz [ 1896.117252][T29992] udevd[29992]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1896.215655][ T9] usb 3-1: config 0 descriptor?? [ 1896.235716][ T9] usb 3-1: Interface #92 referenced by multiple IADs [ 1896.256489][T32186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1896.311363][T32186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1896.468331][T32190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1896.487444][T32190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1896.507689][ T9] ftdi_sio 3-1:0.44: FTDI USB Serial Device converter detected [ 1896.548860][ T9] ftdi_sio ttyUSB0: unknown device type: 0x8524 [ 1896.575491][ T9] ftdi_sio 3-1:0.92: FTDI USB Serial Device converter detected [ 1896.593265][ T9] ftdi_sio ttyUSB1: unknown device type: 0x8524 [ 1896.629474][ T9] usb 3-1: USB disconnect, device number 92 [ 1896.690252][ T9] ftdi_sio 3-1:0.44: device disconnected [ 1896.711135][ T9] ftdi_sio 3-1:0.92: device disconnected [ 1897.323291][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1897.323311][ T30] audit: type=1326 audit(1765080682.947:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32205 comm="syz.8.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5a98f749 code=0x7ffc0000 [ 1897.361908][ T30] audit: type=1326 audit(1765080682.947:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32205 comm="syz.8.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5a98f749 code=0x7ffc0000 [ 1897.387840][ T30] audit: type=1326 audit(1765080682.947:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32205 comm="syz.8.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7efc5a98f749 code=0x7ffc0000 [ 1897.414062][ T30] audit: type=1326 audit(1765080682.947:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32205 comm="syz.8.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5a98f749 code=0x7ffc0000 [ 1897.438298][ T30] audit: type=1326 audit(1765080682.957:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32205 comm="syz.8.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7efc5a98f749 code=0x7ffc0000 [ 1897.462364][ T30] audit: type=1326 audit(1765080682.957:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32205 comm="syz.8.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5a98f749 code=0x7ffc0000 [ 1897.543332][ T30] audit: type=1326 audit(1765080682.957:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32205 comm="syz.8.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5a98f749 code=0x7ffc0000 [ 1897.732664][ T30] audit: type=1326 audit(1765080682.957:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32205 comm="syz.8.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7efc5a98f749 code=0x7ffc0000 [ 1898.268567][T24146] usb 8-1: bad CDC descriptors [ 1898.499774][T24146] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1898.530326][T32224] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6406'. [ 1898.644408][T24146] snd-usb-audio 8-1:8.79: probe with driver snd-usb-audio failed with error -2 [ 1898.673890][T24146] usb 8-1: USB disconnect, device number 13 [ 1898.693872][T29992] udevd[29992]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:8.79/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1900.163570][T32230] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6407'. [ 1900.223057][T32230] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6407'. [ 1900.268413][T32248] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6413'. [ 1900.434945][T32251] bridge0: port 1(bridge_slave_0) entered disabled state [ 1900.489151][T32251] bridge0: port 2(bridge_slave_1) entered disabled state [ 1900.796469][T18489] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1900.876334][ T30] audit: type=1326 audit(1765080686.597:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32261 comm="syz.7.6418" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7c038f749 code=0x0 [ 1901.283516][T18489] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1901.297792][T18489] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1901.433123][T18489] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1901.456437][T18489] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1901.470150][T18489] usb 9-1: Product: syz [ 1901.494793][T18489] usb 9-1: Manufacturer: syz [ 1901.509160][T18489] usb 9-1: SerialNumber: syz [ 1901.523107][T18489] usb 9-1: config 0 descriptor?? [ 1901.763442][T18489] usb 9-1: selecting invalid altsetting 0 [ 1902.636362][T32286] loop2: detected capacity change from 0 to 7 [ 1902.797949][T32286] Dev loop2: unable to read RDB block 7 [ 1902.855724][T32286] loop2: unable to read partition table [ 1902.893649][T32286] loop2: partition table beyond EOD, truncated [ 1902.950091][T32286] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1903.205797][T32290] FAULT_INJECTION: forcing a failure. [ 1903.205797][T32290] name failslab, interval 1, probability 0, space 0, times 0 [ 1903.252718][T32290] CPU: 1 UID: 0 PID: 32290 Comm: syz.2.6425 Tainted: G L syzkaller #0 PREEMPT(full) [ 1903.252747][T32290] Tainted: [L]=SOFTLOCKUP [ 1903.252755][T32290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1903.252766][T32290] Call Trace: [ 1903.252774][T32290] [ 1903.252782][T32290] dump_stack_lvl+0x189/0x250 [ 1903.252809][T32290] ? __pfx____ratelimit+0x10/0x10 [ 1903.252830][T32290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1903.252850][T32290] ? __pfx__printk+0x10/0x10 [ 1903.252875][T32290] ? __pfx___might_resched+0x10/0x10 [ 1903.252895][T32290] ? fs_reclaim_acquire+0x7d/0x100 [ 1903.252919][T32290] should_fail_ex+0x414/0x560 [ 1903.252943][T32290] should_failslab+0xa8/0x100 [ 1903.252965][T32290] kmem_cache_alloc_noprof+0x88/0x710 [ 1903.252988][T32290] ? alloc_empty_file+0x55/0x1d0 [ 1903.253006][T32290] ? kernel_text_address+0xa5/0xe0 [ 1903.253030][T32290] alloc_empty_file+0x55/0x1d0 [ 1903.253051][T32290] path_openat+0x108/0x3dd0 [ 1903.253084][T32290] ? stack_trace_save+0x9c/0xe0 [ 1903.253108][T32290] ? __pfx_stack_trace_save+0x10/0x10 [ 1903.253134][T32290] ? stack_depot_save_flags+0x40/0x850 [ 1903.253161][T32290] ? kasan_save_track+0x4f/0x80 [ 1903.253177][T32290] ? kasan_save_track+0x3e/0x80 [ 1903.253191][T32290] ? __kasan_slab_alloc+0x6c/0x80 [ 1903.253208][T32290] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 1903.253229][T32290] ? getname_flags+0xb8/0x540 [ 1903.253247][T32290] ? do_sys_openat2+0xbc/0x200 [ 1903.253269][T32290] ? __pfx_path_openat+0x10/0x10 [ 1903.253295][T32290] ? __lock_acquire+0x6b6/0x2cf0 [ 1903.253328][T32290] do_filp_open+0x1fa/0x410 [ 1903.253353][T32290] ? __pfx_do_filp_open+0x10/0x10 [ 1903.253395][T32290] ? _raw_spin_unlock+0x28/0x50 [ 1903.253413][T32290] ? alloc_fd+0x64c/0x6c0 [ 1903.253445][T32290] do_sys_openat2+0x121/0x200 [ 1903.253470][T32290] ? __pfx_do_sys_openat2+0x10/0x10 [ 1903.253496][T32290] ? ksys_write+0x22a/0x250 [ 1903.253515][T32290] ? __pfx_ksys_write+0x10/0x10 [ 1903.253534][T32290] __x64_sys_openat+0x138/0x170 [ 1903.253562][T32290] do_syscall_64+0xfa/0xf80 [ 1903.253585][T32290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.253602][T32290] ? clear_bhb_loop+0x60/0xb0 [ 1903.253631][T32290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.253648][T32290] RIP: 0033:0x7efeb2d8df90 [ 1903.253666][T32290] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1903.253682][T32290] RSP: 002b:00007efeb3b6db70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1903.253702][T32290] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efeb2d8df90 [ 1903.253716][T32290] RDX: 0000000000000000 RSI: 00007efeb3b6dc10 RDI: 00000000ffffff9c [ 1903.253728][T32290] RBP: 00007efeb3b6dc10 R08: 0000000000000000 R09: 0000000000000000 [ 1903.253739][T32290] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1903.253750][T32290] R13: 00007efeb2fe6038 R14: 00007efeb2fe5fa0 R15: 00007efeb310fa28 [ 1903.253780][T32290] [ 1903.890706][ T5826] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1903.942020][ T5826] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1903.956333][ T5826] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1903.975362][ T5826] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1903.986933][ T5826] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1904.526876][ T5824] usb 9-1: USB disconnect, device number 3 [ 1904.735990][T32295] chnl_net:caif_netlink_parms(): no params data found [ 1904.872006][T32311] No such timeout policy "syz0" [ 1905.087547][T18489] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1905.174580][T32295] bridge0: port 1(bridge_slave_0) entered blocking state [ 1905.215534][T32295] bridge0: port 1(bridge_slave_0) entered disabled state [ 1905.242752][T32295] bridge_slave_0: entered allmulticast mode [ 1905.281097][T32295] bridge_slave_0: entered promiscuous mode [ 1905.290962][T18489] usb 10-1: Using ep0 maxpacket: 16 [ 1905.312566][T18489] usb 10-1: config 0 has an invalid interface number: 223 but max is 0 [ 1905.324675][T32295] bridge0: port 2(bridge_slave_1) entered blocking state [ 1905.356454][T18489] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1905.381935][T32295] bridge0: port 2(bridge_slave_1) entered disabled state [ 1905.402027][T32295] bridge_slave_1: entered allmulticast mode [ 1905.409469][T18489] usb 10-1: config 0 has no interface number 0 [ 1905.421487][T32295] bridge_slave_1: entered promiscuous mode [ 1905.430131][T18489] usb 10-1: config 0 interface 223 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1905.487699][T18489] usb 10-1: config 0 interface 223 has no altsetting 0 [ 1905.533009][T18489] usb 10-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1905.572476][T18489] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.635188][T32295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1905.657397][T18489] usb 10-1: Product: syz [ 1905.661692][T18489] usb 10-1: Manufacturer: syz [ 1905.700918][T18489] usb 10-1: SerialNumber: syz [ 1905.714333][T32295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1905.738978][T18489] usb 10-1: config 0 descriptor?? [ 1905.995866][T32303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1906.068488][T32303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1906.132906][T32328] FAULT_INJECTION: forcing a failure. [ 1906.132906][T32328] name failslab, interval 1, probability 0, space 0, times 0 [ 1906.134088][ T5826] Bluetooth: hci7: command tx timeout [ 1906.179326][T18489] usb 10-1: Can not set alternate setting to 1, error: -71 [ 1906.209756][T32328] CPU: 0 UID: 0 PID: 32328 Comm: syz.7.6435 Tainted: G L syzkaller #0 PREEMPT(full) [ 1906.209787][T32328] Tainted: [L]=SOFTLOCKUP [ 1906.209793][T32328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1906.209805][T32328] Call Trace: [ 1906.209812][T32328] [ 1906.209820][T32328] dump_stack_lvl+0x189/0x250 [ 1906.209845][T32328] ? __pfx____ratelimit+0x10/0x10 [ 1906.209867][T32328] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1906.209885][T32328] ? __pfx__printk+0x10/0x10 [ 1906.209913][T32328] ? __pfx___might_resched+0x10/0x10 [ 1906.209931][T32328] ? fs_reclaim_acquire+0x7d/0x100 [ 1906.209953][T32328] should_fail_ex+0x414/0x560 [ 1906.209976][T32328] should_failslab+0xa8/0x100 [ 1906.209997][T32328] kmem_cache_alloc_noprof+0x88/0x710 [ 1906.210022][T32328] ? security_file_alloc+0x34/0x330 [ 1906.210046][T32328] security_file_alloc+0x34/0x330 [ 1906.210065][T32328] init_file+0x93/0x2f0 [ 1906.210090][T32328] alloc_empty_file+0x6e/0x1d0 [ 1906.210109][T32328] path_openat+0x108/0x3dd0 [ 1906.210144][T32328] ? stack_trace_save+0x9c/0xe0 [ 1906.210165][T32328] ? __pfx_stack_trace_save+0x10/0x10 [ 1906.210189][T32328] ? stack_depot_save_flags+0x40/0x850 [ 1906.210215][T32328] ? kasan_save_track+0x4f/0x80 [ 1906.210230][T32328] ? kasan_save_track+0x3e/0x80 [ 1906.210244][T32328] ? __kasan_slab_alloc+0x6c/0x80 [ 1906.210261][T32328] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 1906.210280][T32328] ? getname_flags+0xb8/0x540 [ 1906.210296][T32328] ? do_sys_openat2+0xbc/0x200 [ 1906.210318][T32328] ? __pfx_path_openat+0x10/0x10 [ 1906.210343][T32328] ? __lock_acquire+0x6b6/0x2cf0 [ 1906.210375][T32328] do_filp_open+0x1fa/0x410 [ 1906.210399][T32328] ? __pfx_do_filp_open+0x10/0x10 [ 1906.210443][T32328] ? _raw_spin_unlock+0x28/0x50 [ 1906.210462][T32328] ? alloc_fd+0x64c/0x6c0 [ 1906.210491][T32328] do_sys_openat2+0x121/0x200 [ 1906.210515][T32328] ? __pfx_do_sys_openat2+0x10/0x10 [ 1906.210540][T32328] ? ksys_write+0x22a/0x250 [ 1906.210556][T32328] ? __pfx_ksys_write+0x10/0x10 [ 1906.210571][T32328] __x64_sys_openat+0x138/0x170 [ 1906.210603][T32328] do_syscall_64+0xfa/0xf80 [ 1906.210625][T32328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.210642][T32328] ? clear_bhb_loop+0x60/0xb0 [ 1906.210661][T32328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.210674][T32328] RIP: 0033:0x7fe7c038df90 [ 1906.210688][T32328] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1906.210700][T32328] RSP: 002b:00007fe7c114fb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1906.210716][T32328] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe7c038df90 [ 1906.210725][T32328] RDX: 0000000000000000 RSI: 00007fe7c114fc10 RDI: 00000000ffffff9c [ 1906.210733][T32328] RBP: 00007fe7c114fc10 R08: 0000000000000000 R09: 0000000000000000 [ 1906.210741][T32328] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1906.210749][T32328] R13: 00007fe7c05e6038 R14: 00007fe7c05e5fa0 R15: 00007fe7c070fa28 [ 1906.210769][T32328] [ 1906.212753][T32295] team0: Port device team_slave_0 added [ 1906.521807][T18489] synaptics_usb 10-1:0.223: probe with driver synaptics_usb failed with error -71 [ 1906.533010][T18489] usb 10-1: USB disconnect, device number 3 [ 1906.549494][T32295] team0: Port device team_slave_1 added [ 1906.621832][T32335] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6434'. [ 1906.648138][T32332] syz_tun: entered allmulticast mode [ 1906.823303][T32335] syz_tun (unregistering): left allmulticast mode [ 1906.860585][T32329] kvm: faulting far call emulation tainted memory [ 1906.944421][T32295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1906.952989][T32295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1906.981509][T32295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1907.000690][T32295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1907.018299][T32295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1907.102248][T32295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1907.302640][T32344] loop2: detected capacity change from 0 to 7 [ 1907.418389][T32295] hsr_slave_0: entered promiscuous mode [ 1907.433657][T32344] Dev loop2: unable to read RDB block 7 [ 1907.441071][T32344] loop2: AHDI p1 p2 p3 [ 1907.444052][T32295] hsr_slave_1: entered promiscuous mode [ 1907.512926][T32344] loop2: partition table partially beyond EOD, truncated [ 1907.524805][T32344] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1907.558314][T32295] debugfs: 'hsr0' already exists in 'hsr' [ 1907.564096][T32295] Cannot create hsr debugfs directory [ 1907.645418][T32344] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1907.745210][ T5198] Dev loop2: unable to read RDB block 7 [ 1907.807088][ T5198] loop2: AHDI p1 p2 p3 [ 1907.827877][ T5198] loop2: partition table partially beyond EOD, truncated [ 1907.925811][ T5198] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1907.944620][ T5198] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1908.205682][ T5826] Bluetooth: hci7: command tx timeout [ 1908.206223][ T5198] Dev loop2: unable to read RDB block 7 [ 1908.240107][ T5198] loop2: AHDI p1 p2 p3 [ 1908.255458][ T5198] loop2: partition table partially beyond EOD, truncated [ 1908.270904][ T5198] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1908.339548][ T5198] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1909.813850][T32403] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1910.285745][ T5826] Bluetooth: hci7: command tx timeout [ 1910.940036][T32427] loop3: detected capacity change from 0 to 7 [ 1910.994011][T32427] Dev loop3: unable to read RDB block 7 [ 1911.014794][T32427] loop3: unable to read partition table [ 1911.032075][T32427] loop3: partition table beyond EOD, truncated [ 1911.057763][T32427] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1911.154041][T32422] syzkaller0: entered promiscuous mode [ 1911.181379][T32422] syzkaller0: entered allmulticast mode [ 1911.966339][T24146] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1912.151985][T24146] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1912.173410][T24146] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.221772][T24146] usb 3-1: Product: syz [ 1912.234023][T24146] usb 3-1: Manufacturer: syz [ 1912.263421][T24146] usb 3-1: SerialNumber: syz [ 1912.298437][T24146] usb 3-1: config 0 descriptor?? [ 1912.363414][ T5826] Bluetooth: hci7: command tx timeout [ 1912.369752][T24146] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1912.531816][T32440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1912.557581][T32440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1912.608231][T24146] gspca_sunplus: reg_r err -71 [ 1912.629232][T24146] usb 3-1: USB disconnect, device number 93 [ 1913.722509][T32472] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6459'. [ 1913.732535][T32473] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6459'. [ 1913.743591][T32474] netlink: 'syz.2.6458': attribute type 4 has an invalid length. [ 1913.829940][T32472] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6459'. [ 1913.886660][T32472] netlink: 'syz.7.6459': attribute type 11 has an invalid length. [ 1913.934287][T32472] netlink: 176148 bytes leftover after parsing attributes in process `syz.7.6459'. [ 1913.984696][T32473] netlink: 'syz.7.6459': attribute type 11 has an invalid length. [ 1914.023093][T32473] netlink: 176148 bytes leftover after parsing attributes in process `syz.7.6459'. [ 1914.611506][T32493] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6461'. [ 1914.771221][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.778230][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1917.759266][T32295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1917.800670][T32295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1917.855395][T32295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1917.910868][T32295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1918.233351][T32295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1918.300088][T32295] 8021q: adding VLAN 0 to HW filter on device team0 [ 1918.335628][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1918.342844][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1918.388757][T31256] bridge0: port 2(bridge_slave_1) entered blocking state [ 1918.395918][T31256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1918.595899][T32295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1918.746897][T32295] veth0_vlan: entered promiscuous mode [ 1918.775107][T32295] veth1_vlan: entered promiscuous mode [ 1918.879446][T32295] veth0_macvtap: entered promiscuous mode [ 1918.911113][T32295] veth1_macvtap: entered promiscuous mode [ 1918.974094][T32295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1919.021896][T32295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1919.067893][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1919.084178][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1919.123382][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1919.175412][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1919.280772][T31474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1919.293801][T31474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1919.345001][T31474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1919.370584][T31474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1919.475946][T32527] loop9: detected capacity change from 0 to 7 [ 1919.484753][T32527] Dev loop9: unable to read RDB block 7 [ 1919.492240][T32527] loop9: unable to read partition table [ 1919.498290][T32527] loop9: partition table beyond EOD, truncated [ 1919.516292][T32527] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1976.202230][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.208681][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2009.007700][T32095] Bluetooth: hci6: command 0x0406 tx timeout [ 2009.014952][T32095] Bluetooth: hci4: command 0x0406 tx timeout [ 2029.479252][T32625] Bluetooth: hci7: command 0x0406 tx timeout [ 2033.156500][ T31] INFO: task syz.6.6334:31940 blocked for more than 143 seconds. [ 2033.165143][ T31] Tainted: G L syzkaller #0 [ 2033.178703][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2033.189476][ T31] task:syz.6.6334 state:D stack:26456 pid:31940 tgid:31939 ppid:22419 task_flags:0x440040 flags:0x00080002 [ 2033.202879][ T31] Call Trace: [ 2033.212436][ T31] [ 2033.215422][ T31] __schedule+0x14bc/0x5000 [ 2033.222239][ T31] ? __pfx___schedule+0x10/0x10 [ 2033.227356][ T31] ? schedule+0x91/0x360 [ 2033.231631][ T31] schedule+0x165/0x360 [ 2033.238942][ T31] schedule_preempt_disabled+0x13/0x30 [ 2033.245670][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 2033.252640][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 2033.259735][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 2033.267248][ T31] ? page_cache_ra_order+0x37a/0xe50 [ 2033.275667][ T31] down_read+0x99/0x2e0 [ 2033.281276][ T31] page_cache_ra_order+0x37a/0xe50 [ 2033.286626][ T31] do_sync_mmap_readahead+0x66a/0x870 [ 2033.292033][ T31] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 2033.298139][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 2033.303459][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 2033.310427][ T31] filemap_fault+0x6ac/0x1290 [ 2033.317277][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 2033.323855][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 2033.331605][ T31] __do_fault+0x138/0x390 [ 2033.337597][ T31] do_pte_missing+0x2206/0x3330 [ 2033.344077][ T31] handle_mm_fault+0x1b26/0x32b0 [ 2033.350878][ T31] ? mt_find+0x15c/0x5e0 [ 2033.356847][ T31] ? handle_mm_fault+0xdb/0x32b0 [ 2033.361836][ T31] ? __pfx_handle_mm_fault+0x10/0x10 [ 2033.367281][ T31] ? __pfx_find_vma+0x10/0x10 [ 2033.374872][ T31] ? vma_is_secretmem+0xd/0x50 [ 2033.379770][ T31] __get_user_pages+0x1650/0x29f0 [ 2033.384854][ T31] populate_vma_page_range+0x29f/0x3a0 [ 2033.391935][ T31] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2033.399734][ T31] ? down_read+0x274/0x2e0 [ 2033.405667][ T31] ? __mm_populate+0x160/0x380 [ 2033.412145][ T31] __mm_populate+0x24c/0x380 [ 2033.418425][ T31] ? __pfx___mm_populate+0x10/0x10 [ 2033.425016][ T31] vm_mmap_pgoff+0x387/0x4d0 [ 2033.431348][ T31] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2033.438332][ T31] ? __fget_files+0x2a/0x420 [ 2033.442954][ T31] ? __fget_files+0x2a/0x420 [ 2033.447698][ T31] ? __fget_files+0x2a/0x420 [ 2033.452306][ T31] ksys_mmap_pgoff+0x51f/0x760 [ 2033.457174][ T31] do_syscall_64+0xfa/0xf80 [ 2033.461708][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2033.467931][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2033.472623][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2033.483510][ T31] RIP: 0033:0x7f6874d8f749 [ 2033.488111][ T31] RSP: 002b:00007f6875d0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2033.498422][ T31] RAX: ffffffffffffffda RBX: 00007f6874fe5fa0 RCX: 00007f6874d8f749 [ 2033.508064][ T31] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 2033.517942][ T31] RBP: 00007f6874e13f91 R08: 0000000000000004 R09: 000000002c93a000 [ 2033.527650][ T31] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 2033.537377][ T31] R13: 00007f6874fe6038 R14: 00007f6874fe5fa0 R15: 00007f687510fa28 [ 2033.546916][ T31] [ 2033.550009][ T31] INFO: task syz.6.6334:31941 blocked for more than 143 seconds. [ 2033.557842][ T31] Tainted: G L syzkaller #0 [ 2033.566681][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2033.575459][ T31] task:syz.6.6334 state:D stack:27800 pid:31941 tgid:31939 ppid:22419 task_flags:0x440040 flags:0x00080002 [ 2033.591427][ T31] Call Trace: [ 2033.596348][ T31] [ 2033.600738][ T31] __schedule+0x14bc/0x5000 [ 2033.606969][ T31] ? __pfx___schedule+0x10/0x10 [ 2033.613287][ T31] ? schedule+0x91/0x360 [ 2033.619306][ T31] schedule+0x165/0x360 [ 2033.624888][ T31] schedule_preempt_disabled+0x13/0x30 [ 2033.632266][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 2033.637936][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 2033.643706][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 2033.649909][ T31] ? page_cache_ra_order+0x37a/0xe50 [ 2033.655234][ T31] down_read+0x99/0x2e0 [ 2033.659671][ T31] page_cache_ra_order+0x37a/0xe50 [ 2033.666384][ T31] do_sync_mmap_readahead+0x66a/0x870 [ 2033.673362][ T31] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 2033.683402][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 2033.690232][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 2033.697219][ T31] filemap_fault+0x6ac/0x1290 [ 2033.703565][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 2033.710800][ T31] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 2033.717884][ T31] ? kmem_cache_alloc_noprof+0x3ce/0x710 [ 2033.723570][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 2033.728994][ T31] ? pte_alloc_one+0x1f9/0x370 [ 2033.733796][ T31] __do_fault+0x138/0x390 [ 2033.738234][ T31] do_pte_missing+0x6ad/0x3330 [ 2033.743042][ T31] handle_mm_fault+0x1b26/0x32b0 [ 2033.748178][ T31] ? handle_mm_fault+0xdb/0x32b0 [ 2033.753144][ T31] ? __pfx_handle_mm_fault+0x10/0x10 [ 2033.758559][ T31] ? lock_mm_and_find_vma+0x9c/0x300 [ 2033.765453][ T31] do_user_addr_fault+0x764/0x1380 [ 2033.772325][ T31] exc_page_fault+0x82/0x100 [ 2033.778678][ T31] asm_exc_page_fault+0x26/0x30 [ 2033.787170][ T31] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 2033.794469][ T31] Code: e9 44 49 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 49 04 00 66 2e 0f 1f [ 2033.816236][ T31] RSP: 0018:ffffc9000e1f7ca8 EFLAGS: 00050202 [ 2033.824058][ T31] RAX: ffffffff848c3000 RBX: 0000000000000004 RCX: 0000000000000004 [ 2033.833648][ T31] RDX: 0000000000000000 RSI: ffffc9000e1f7d70 RDI: 00002000000001c0 [ 2033.841692][ T31] RBP: ffffc9000e1f7dd0 R08: 0000000000000003 R09: 0000000000000004 [ 2033.849759][ T31] R10: dffffc0000000000 R11: fffff52001c3efae R12: 00002000000001c4 [ 2033.859225][ T31] R13: 00007ffffffff000 R14: ffffc9000e1f7d70 R15: 00002000000001c0 [ 2033.868976][ T31] ? _copy_from_user+0x50/0xb0 [ 2033.873789][ T31] _copy_to_user+0x8a/0xb0 [ 2033.878486][ T31] do_timer_create+0xb50/0x11c0 [ 2033.887370][ T31] ? __pfx_do_timer_create+0x10/0x10 [ 2033.894396][ T31] __x64_sys_timer_create+0x13f/0x190 [ 2033.901459][ T31] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 2033.909292][ T31] ? rcu_is_watching+0x15/0xb0 [ 2033.915517][ T31] ? do_syscall_64+0xbe/0xf80 [ 2033.922084][ T31] do_syscall_64+0xfa/0xf80 [ 2033.926826][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2033.932918][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2033.937702][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2033.943608][ T31] RIP: 0033:0x7f6874d8f749 [ 2033.948169][ T31] RSP: 002b:00007f6875cee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 2033.958734][ T31] RAX: ffffffffffffffda RBX: 00007f6874fe6090 RCX: 00007f6874d8f749 [ 2033.968815][ T31] RDX: 00002000000001c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 2033.978459][ T31] RBP: 00007f6874e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 2033.991008][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2034.000665][ T31] R13: 00007f6874fe6128 R14: 00007f6874fe6090 R15: 00007f687510fa28 [ 2034.010415][ T31] [ 2034.014898][ T31] INFO: task syz.3.6385:32131 blocked for more than 144 seconds. [ 2034.023264][ T31] Tainted: G L syzkaller #0 [ 2034.029973][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2034.044458][ T31] task:syz.3.6385 state:D stack:25336 pid:32131 tgid:32131 ppid:31098 task_flags:0x440040 flags:0x00080002 [ 2034.056672][ T31] Call Trace: [ 2034.060037][ T31] [ 2034.062989][ T31] __schedule+0x14bc/0x5000 [ 2034.067668][ T31] ? __pfx___schedule+0x10/0x10 [ 2034.072565][ T31] ? schedule+0x91/0x360 [ 2034.078209][ T31] schedule+0x165/0x360 [ 2034.083553][ T31] schedule_preempt_disabled+0x13/0x30 [ 2034.092396][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 2034.099462][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 2034.106509][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 2034.112616][ T31] ? page_cache_ra_order+0x37a/0xe50 [ 2034.119568][ T31] down_read+0x99/0x2e0 [ 2034.124980][ T31] page_cache_ra_order+0x37a/0xe50 [ 2034.131612][ T31] do_sync_mmap_readahead+0x66a/0x870 [ 2034.137105][ T31] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 2034.143030][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 2034.148476][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 2034.153782][ T31] filemap_fault+0x6ac/0x1290 [ 2034.158581][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 2034.164869][ T31] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 2034.171629][ T31] ? kmem_cache_alloc_noprof+0x3ce/0x710 [ 2034.178632][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 2034.185125][ T31] ? pte_alloc_one+0x1f9/0x370 [ 2034.194284][ T31] __do_fault+0x138/0x390 [ 2034.199989][ T31] do_pte_missing+0x6ad/0x3330 [ 2034.206435][ T31] ? lock_vma_under_rcu+0x1a7/0x4a0 [ 2034.212910][ T31] handle_mm_fault+0x1b26/0x32b0 [ 2034.217994][ T31] ? handle_mm_fault+0xdb/0x32b0 [ 2034.222967][ T31] ? __pfx_handle_mm_fault+0x10/0x10 [ 2034.228423][ T31] ? lock_vma_under_rcu+0x42c/0x4a0 [ 2034.233651][ T31] ? __pfx_do_futex+0x10/0x10 [ 2034.238429][ T31] ? do_user_addr_fault+0x1a8/0x1380 [ 2034.243744][ T31] do_user_addr_fault+0xa7c/0x1380 [ 2034.248949][ T31] ? rcu_is_watching+0x15/0xb0 [ 2034.253745][ T31] ? trace_page_fault_user+0x84/0x1c0 [ 2034.260985][ T31] exc_page_fault+0x82/0x100 [ 2034.266889][ T31] asm_exc_page_fault+0x26/0x30 [ 2034.271770][ T31] RIP: 0033:0x7fb89e0556b1 [ 2034.277921][ T31] RSP: 002b:00007fb89e50fb50 EFLAGS: 00010246 [ 2034.285592][ T31] RAX: 0000200000000240 RBX: 0000000000000004 RCX: 0000000000000000 [ 2034.297962][ T31] RDX: 000000000000000c RSI: 0000000000000000 RDI: 000055555afdb3c8 [ 2034.308074][ T31] RBP: 00007fb89e50fc58 R08: 0000000000000000 R09: 0000000000000000 [ 2034.316406][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 00007fb89e3e618c [ 2034.324402][ T31] R13: 00007fb89e3e6180 R14: fffffffffffffffe R15: 00007fb89e50fca0 [ 2034.334032][ T31] [ 2034.338692][ T31] INFO: task syz.3.6385:32132 blocked for more than 144 seconds. [ 2034.366919][ T31] Tainted: G L syzkaller #0 [ 2034.373486][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2034.382247][ T31] task:syz.3.6385 state:D stack:26264 pid:32132 tgid:32131 ppid:31098 task_flags:0x440140 flags:0x00080002 [ 2034.398199][ T31] Call Trace: [ 2034.402690][ T31] [ 2034.406839][ T31] __schedule+0x14bc/0x5000 [ 2034.412607][ T31] ? __pfx___schedule+0x10/0x10 [ 2034.418879][ T31] ? schedule+0x91/0x360 [ 2034.423161][ T31] schedule+0x165/0x360 [ 2034.427641][ T31] schedule_preempt_disabled+0x13/0x30 [ 2034.433126][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 2034.439135][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 2034.444917][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 2034.452344][ T31] ? page_cache_ra_order+0x37a/0xe50 [ 2034.459002][ T31] down_read+0x99/0x2e0 [ 2034.464386][ T31] page_cache_ra_order+0x37a/0xe50 [ 2034.470983][ T31] do_sync_mmap_readahead+0x66a/0x870 [ 2034.477727][ T31] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 2034.484817][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 2034.491535][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 2034.501208][ T31] filemap_fault+0x6ac/0x1290 [ 2034.505942][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 2034.511231][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 2034.516802][ T31] __do_fault+0x138/0x390 [ 2034.521160][ T31] do_pte_missing+0x2206/0x3330 [ 2034.526130][ T31] handle_mm_fault+0x1b26/0x32b0 [ 2034.531095][ T31] ? mt_find+0x15c/0x5e0 [ 2034.535370][ T31] ? handle_mm_fault+0xdb/0x32b0 [ 2034.541890][ T31] ? __pfx_handle_mm_fault+0x10/0x10 [ 2034.548710][ T31] ? __pfx_find_vma+0x10/0x10 [ 2034.554608][ T31] ? vma_is_secretmem+0xd/0x50 [ 2034.560782][ T31] __get_user_pages+0x1650/0x29f0 [ 2034.567184][ T31] populate_vma_page_range+0x29f/0x3a0 [ 2034.573855][ T31] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2034.581307][ T31] ? down_read+0x274/0x2e0 [ 2034.587102][ T31] ? __mm_populate+0x160/0x380 [ 2034.591920][ T31] __mm_populate+0x24c/0x380 [ 2034.596659][ T31] ? __pfx___mm_populate+0x10/0x10 [ 2034.604293][ T31] vm_mmap_pgoff+0x387/0x4d0 [ 2034.609104][ T31] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2034.614251][ T31] ? __fget_files+0x2a/0x420 [ 2034.618975][ T31] ? __fget_files+0x2a/0x420 [ 2034.624775][ T31] ? __fget_files+0x2a/0x420 [ 2034.630781][ T31] ksys_mmap_pgoff+0x51f/0x760 [ 2034.636784][ T31] do_syscall_64+0xfa/0xf80 [ 2034.641322][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2034.648968][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2034.654848][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2034.662129][ T31] RIP: 0033:0x7fb89e18f749 [ 2034.667935][ T31] RSP: 002b:00007fb89efc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2034.677731][ T31] RAX: ffffffffffffffda RBX: 00007fb89e3e5fa0 RCX: 00007fb89e18f749 [ 2034.685729][ T31] RDX: 0000000003000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 2034.693805][ T31] RBP: 00007fb89e213f91 R08: 0000000000000009 R09: 00000000fc2a5000 [ 2034.701894][ T31] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 2034.713114][ T31] R13: 00007fb89e3e6038 R14: 00007fb89e3e5fa0 R15: 00007fb89e50fa28 [ 2034.722862][ T31] [ 2034.727290][ T31] [ 2034.727290][ T31] Showing all locks held in the system: [ 2034.756260][ T31] 1 lock held by ksoftirqd/0/15: [ 2034.761242][ T31] 1 lock held by khungtaskd/31: [ 2034.780701][ T31] #0: ffffffff8df41e20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2034.816207][ T31] 5 locks held by kworker/0:1H/56: [ 2034.821363][ T31] #0: ffff8880b883a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 2034.833153][ T31] #1: ffff8880b8824588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 2034.843436][ T31] #2: ffffffff8df41e20 (rcu_read_lock){....}-{1:3}, at: blk_mq_run_work_fn+0x9b/0x300 [ 2034.854795][ T31] #3: ffffffff8df41e20 (rcu_read_lock){....}-{1:3}, at: blk_queue_exit+0x26/0x240 [ 2034.865427][ T31] #4: ffffffff8e6860d8 (pool_lock#2){-.-.}-{2:2}, at: pcpu_alloc+0x28d/0x360 [ 2034.875773][ T31] 2 locks held by getty/5588: [ 2034.881889][ T31] #0: ffff88814cd470a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2034.893017][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2034.904546][ T31] 2 locks held by syz.4.6332/31936: [ 2034.912129][ T31] #0: ffff88814904aa28 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_fallocate+0x260/0x530 [ 2034.923163][ T31] #1: ffff88814904abc8 (mapping.invalidate_lock){++++}-{4:4}, at: blkdev_fallocate+0x290/0x530 [ 2034.933738][ T31] 1 lock held by syz.6.6334/31940: [ 2034.940044][ T31] #0: ffff88814904abc8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x37a/0xe50 [ 2034.952175][ T31] 1 lock held by syz.6.6334/31941: [ 2034.958676][ T31] #0: ffff88814904abc8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x37a/0xe50 [ 2034.970651][ T31] 1 lock held by syz.3.6385/32131: [ 2034.977014][ T31] #0: ffff88814904abc8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x37a/0xe50 [ 2034.989248][ T31] 1 lock held by syz.3.6385/32132: [ 2034.995555][ T31] #0: ffff88814904abc8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x37a/0xe50 [ 2035.007765][ T31] [ 2035.012416][ T31] ============================================= [ 2035.012416][ T31] [ 2035.021167][ T31] NMI backtrace for cpu 1 [ 2035.021186][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2035.021206][ T31] Tainted: [L]=SOFTLOCKUP [ 2035.021213][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2035.021223][ T31] Call Trace: [ 2035.021230][ T31] [ 2035.021237][ T31] dump_stack_lvl+0x189/0x250 [ 2035.021262][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2035.021280][ T31] ? __pfx__printk+0x10/0x10 [ 2035.021312][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2035.021331][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2035.021350][ T31] ? __pfx__printk+0x10/0x10 [ 2035.021376][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2035.021400][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2035.021419][ T31] watchdog+0xf3c/0xf80 [ 2035.021445][ T31] ? watchdog+0x1e2/0xf80 [ 2035.021470][ T31] kthread+0x711/0x8a0 [ 2035.021492][ T31] ? __pfx_watchdog+0x10/0x10 [ 2035.021511][ T31] ? __pfx_kthread+0x10/0x10 [ 2035.021532][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2035.021550][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 2035.021569][ T31] ? __pfx_kthread+0x10/0x10 [ 2035.021588][ T31] ret_from_fork+0x599/0xb30 [ 2035.021606][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2035.021630][ T31] ? __switch_to_asm+0x39/0x70 [ 2035.021648][ T31] ? __switch_to_asm+0x33/0x70 [ 2035.021665][ T31] ? __pfx_kthread+0x10/0x10 [ 2035.021685][ T31] ret_from_fork_asm+0x1a/0x30 [ 2035.021718][ T31] [ 2035.021724][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2035.175552][ C0] NMI backtrace for cpu 0 [ 2035.175571][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2035.175592][ C0] Tainted: [L]=SOFTLOCKUP [ 2035.175599][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2035.175609][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2035.175633][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 80 19 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2035.175647][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 2035.175662][ C0] RAX: f2fd0c219e203000 RBX: ffffffff81974b6a RCX: f2fd0c219e203000 [ 2035.175674][ C0] RDX: 0000000000000001 RSI: ffffffff8d7831da RDI: ffffffff8bc00c60 [ 2035.175685][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b88336db R09: 1ffff110171066db [ 2035.175697][ C0] R10: dffffc0000000000 R11: ffffed10171066dc R12: ffffffff8f815070 [ 2035.175709][ C0] R13: 1ffffffff1b92a50 R14: 0000000000000000 R15: 0000000000000000 [ 2035.175720][ C0] FS: 0000000000000000(0000) GS:ffff888126084000(0000) knlGS:0000000000000000 [ 2035.175732][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2035.175743][ C0] CR2: 000055c8c829fd08 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 2035.175758][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 2035.175769][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2035.175780][ C0] Call Trace: [ 2035.175787][ C0] [ 2035.175794][ C0] default_idle+0x13/0x20 [ 2035.175814][ C0] default_idle_call+0x73/0xb0 [ 2035.175835][ C0] do_idle+0x1ea/0x520 [ 2035.175851][ C0] ? irqentry_exit+0x5ba/0x660 [ 2035.175872][ C0] ? __pfx_do_idle+0x10/0x10 [ 2035.175895][ C0] cpu_startup_entry+0x44/0x60 [ 2035.175911][ C0] rest_init+0x2de/0x300 [ 2035.175926][ C0] start_kernel+0x3ae/0x410 [ 2035.175947][ C0] x86_64_start_reservations+0x24/0x30 [ 2035.175964][ C0] x86_64_start_kernel+0x143/0x1c0 [ 2035.175979][ C0] common_startup_64+0x13e/0x147 [ 2035.176007][ C0] [ 2037.646428][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.652787][ T1300] ieee802154 phy1 wpan1: encryption failed: -22