last executing test programs: 13m0.643079519s ago: executing program 1 (id=1959): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000200)="0f20d8dfbc00006667360f22d466268069f78c0ffc47f00f22df0f09cb3e0f239fbaf80cf766b8d433f68484b9550900000f32bafc0ced0830660f3882a42700", 0x40}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f00000000c0)) syz_usb_connect(0x2, 0x9a2, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12m57.454981639s ago: executing program 1 (id=1971): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bind$packet(0xffffffffffffffff, 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0), 0x10000, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x2b, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x1}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x101}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0xeb, &(0x7f0000000180)=""/235, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x7, 0xfffffff9, 0x4a}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000540)=[{0x2, 0x4, 0x5, 0x3}, {0x3, 0x4, 0xf, 0x1}, {0x1, 0x4, 0x8, 0x4}, {0x0, 0x5, 0xb, 0x4}, {0x4, 0x1, 0xf, 0xc}, {0x0, 0x3, 0xf, 0x1}, {0x4, 0x2, 0xa, 0xc}], 0x10, 0xd}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@cgroup, 0xf, 0x1, 0x10001, &(0x7f0000000680)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async, rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{0x1, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)='%+9llu \x00'}, 0x20) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f00000009c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x53, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c00)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="0d00ff7fffffffff23000000da1de37b1df9579298b251592addded888103c5d4bf4caad42d33e1e8bbfacd04b3cb689bfdde7692fa6aa0c35e00f409ca8dfc67f8b5efefeb5d0cff2c9cb05fc9910cf2b710155db9fd1ae72d340a7367436888eaf57436e7bd41ac7466bb60b82ec8078e0cd2b1cf6afa4a9edfd6255124c73a37dcea397927e6950986da584b427a79e4f601b2ecf0577bce3bcd40982a63e839b2a346bc559affad9de84329030e1fd717e720c0d368dabb6e3e2d35bcd00000000", @ANYRES32=r6, @ANYRES64=r4], 0x20) (async) syz_pidfd_open(0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004000) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1000000) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="3c00000010000100000095746afe607197e459fe01009059c2be89326eb0160000004f4f90735ec1b73b43938d23d42680a2e0699188f36e54be9b646f1e3dc10e0ec7f8f92cbbce9f3b602abcc5297acf155fe70e2ab5bd2f4a26e81c1eb013b4066112817625c0932b3eb6dda42a81f20aeea3faed3cb84294ad1418", @ANYRES32=0x0, @ANYBLOB="000001000000000014001280090001007665746800000000040002800800200032000000"], 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x800) 12m56.480786132s ago: executing program 1 (id=1974): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) move_pages(0x0, 0x3, &(0x7f0000000040)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r4, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f00000001c0)=""/4096) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, &(0x7f0000000440), 0x4000, &(0x7f0000fff000/0x1000)=nil, 0x2) r6 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r6, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$netlink(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x51}}], 0x20, 0x1}, 0xc000) write$sndseq(r6, &(0x7f00000011c0), 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000001280)=ANY=[@ANYBLOB="1294940300000009021b23010106c086090400c10207010183090501020804040907"], &(0x7f0000001380)={0xa, &(0x7f00000012c0)={0xa, 0x6, 0x200, 0x6, 0x40, 0x6, 0x8, 0x1}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f00000018c0)) 12m53.175058995s ago: executing program 1 (id=1982): r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000000), 0x4) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff}, 0x80) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000002640)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, &(0x7f0000002500)=[{&(0x7f0000000d00)=']', 0x1}], 0x1}, 0x0) recvmsg(r3, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000001200)=""/2, 0x2}], 0x1, &(0x7f00000046c0)=""/244, 0xf4}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x8f) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@textreal={0x8, 0x0}], 0x1, 0xae, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x80a0000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e27c3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d749cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55bdd46e5bcb3330c7edefd31c33f61275e516"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa640f01cfc4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0e476e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) keyctl$clear(0x7, r0) pipe2(&(0x7f0000000080)={0x0, 0x0}, 0x80080) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) 12m52.087289721s ago: executing program 1 (id=1985): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/packet\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3d5", @ANYRESOCT]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000000000000000100", [0x400]}}) 12m51.851192258s ago: executing program 1 (id=1988): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000001000000b7080000000010007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb702000008fe000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000080000009500"], &(0x7f0000000300)='GPL\x00', 0x3}, 0x94) 12m50.639799113s ago: executing program 32 (id=1988): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000001000000b7080000000010007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb702000008fe000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000080000009500"], &(0x7f0000000300)='GPL\x00', 0x3}, 0x94) 9m58.159046689s ago: executing program 4 (id=2654): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5}]}, 0x10) r3 = socket(0x8, 0x0, 0x201) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000580)={0x1, @pix_mp={0x2, 0x0, 0x34325852, 0x1, 0x2, [{0x8, 0x7}, {0x8c, 0x3a400}, {0x79, 0x401}, {0x3, 0xfffffff4}, {0x9, 0x7}, {0x2}, {0x0, 0x23cb19bd}, {0x401, 0xc4e}], 0x1, 0x8, 0x3, 0x0, 0x6}}) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000001800128008000100677265000c000280080095df1ab600000000000000"], 0x38}}, 0x0) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x40, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @local}, 0x14) 9m57.928245547s ago: executing program 4 (id=2655): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x38, 0xff, 0x4f, 0x40, 0x13d3, 0x3219, 0x7a67, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7a, 0x1, 0x0, 0x5e, 0x8b, 0x15}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000200)="baf80c66b89e3baa8666efbafc0cecbaf80c66b87803158066efbafc0c66ed36f0ff8300000f320f0103660f080f01c266b9330200000f32650f09660f56940020", 0x41}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f0000000040)=0x7}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 9m54.34519268s ago: executing program 4 (id=2667): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x2000, {0x0, 0x0, 0x0, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d20000000000000000000000000000001f3ffdff00", "24431a1e77a68e174f000000000000000010e200", [0x1f00000000000000]}}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x40008, 0x2, 0x0, 0x0, 0x10, 0x4, "995e4c8b0ba6f8ed413b1ee5f3a7c862bbf64092868fd6943a428277be3c0fd8c867f86e662e0c2dd39186b32ee0690c16eb180e81ed3e5e2ebe64446497c2fc", "a6fafe5554ac900cc641df63c82e3d2347ef4230f37485c698954b3d8be9b663e59116e54ef137506743aa54d43eeef70999ee41524cf2aef5653e90d68d5ac5", "0286bcec3e402f381e7bfd123ec7d0d13d4c50ed000000000500", [0x0, 0x9]}) 9m53.768912881s ago: executing program 4 (id=2671): write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x42) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x3c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000080) syz_usb_connect(0x5, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendto$packet(r7, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a", 0x19, 0x0, &(0x7f0000000140), 0x14) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a0000001400078008001140000000690800124000007fff10000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r8 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) 9m50.574090215s ago: executing program 4 (id=2684): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000001000000b7080000000010007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800002018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000080000009500"], &(0x7f0000000300)='GPL\x00', 0x3}, 0x94) 9m50.271157488s ago: executing program 4 (id=2685): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x5, 0x4, 0x0, &(0x7f0000048000), 0x3000000) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'caif0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=@newtfilter={0x5dc, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5b0, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x9}, @TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x3}}, @TCA_FW_CLASSID={0x8, 0x1, {0x5, 0x1}}, @TCA_FW_CLASSID={0x0, 0x1, {0xfff3, 0xffe0}}]}}]}, 0x5dc}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) recvmmsg$unix(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)=""/248, 0xf8}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2}}, {{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000480)=""/195, 0xc3}, {&(0x7f0000000580)=""/164, 0xa4}, {&(0x7f0000000640)=""/107, 0x6b}], 0x3, &(0x7f00000006c0)}}, {{&(0x7f0000000800), 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000980)=""/77, 0x4d}], 0x2}}], 0x3, 0x143, &(0x7f0000000b00)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582", @ANYRES16, @ANYRESDEC, @ANYRESDEC], 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) fcntl$setlease(r3, 0x400, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x24143, 0x10) fcntl$setlease(r3, 0x400, 0x1) 9m35.243639135s ago: executing program 33 (id=2685): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x5, 0x4, 0x0, &(0x7f0000048000), 0x3000000) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'caif0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=@newtfilter={0x5dc, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5b0, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x9}, @TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x3}}, @TCA_FW_CLASSID={0x8, 0x1, {0x5, 0x1}}, @TCA_FW_CLASSID={0x0, 0x1, {0xfff3, 0xffe0}}]}}]}, 0x5dc}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) recvmmsg$unix(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)=""/248, 0xf8}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2}}, {{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000480)=""/195, 0xc3}, {&(0x7f0000000580)=""/164, 0xa4}, {&(0x7f0000000640)=""/107, 0x6b}], 0x3, &(0x7f00000006c0)}}, {{&(0x7f0000000800), 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000980)=""/77, 0x4d}], 0x2}}], 0x3, 0x143, &(0x7f0000000b00)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582", @ANYRES16, @ANYRESDEC, @ANYRESDEC], 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) fcntl$setlease(r3, 0x400, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x24143, 0x10) fcntl$setlease(r3, 0x400, 0x1) 2m12.406245789s ago: executing program 2 (id=4699): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) exit(0x1ff) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x400, 0x8000003, 0x1}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}, {0x9, 0x0, 0xb187}], 0x2, 0x201, 0x0, 0x0, 0x42, 0x5c}) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0xf0f021}) r5 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x0) 2m11.384861119s ago: executing program 2 (id=4703): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x410c3, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x356, 0x140, 0x780, 0x600, 0x0, 0x4, 0x0, 0xfffffffe, {0x9, 0x7}, {0x67, 0x0, 0x1}, {0x401, 0x7}, {0x1, 0x4, 0x1}, 0x3, 0x0, 0xe512, 0x7fff, 0x1, 0x6e, 0x10, 0x2, 0x803, 0x80, 0x8fac, 0x8, 0x8, 0x100, 0x0, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fc0400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028005001900060000000500180001000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) unshare(0x2000000) read$FUSE(0xffffffffffffffff, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0xffffffffffffffff, {0x3, 0x0, 0x0, 0x0, 0x0, 0x2, {0x100000000000000, 0x2, 0x2, 0xfff, 0x8, 0x9, 0x1ff, 0xab6, 0x0, 0xc000, 0x0, r5, r6, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r7, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r8 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$vhost_msg_v2(r9, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x80, 0x0) inotify_init1(0x800) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000005e00), 0x2, 0x0) memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) 2m9.227746575s ago: executing program 2 (id=4712): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)=ANY=[@ANYBLOB="12011001000000202505a8a4720b1c25030109021f000101ff8008090400fd01070101010905010220"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003620000000003"]}, 0x0) syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003d00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)={0x20, 0x0, 0x4, {0x2, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) syz_usb_ep_read(r0, 0x1, 0x3f, &(0x7f0000000080)=""/63) 2m6.813930075s ago: executing program 2 (id=4727): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0}], 0x2, &(0x7f00000000c0)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x47c}}], 0x18, 0x2400e044}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000000)={r4, 0x20, "dcdf6a9d5bc9f919a43c71f52469b60fc65c1d47cb3f2df65a2b9e2f408a7477"}, &(0x7f0000000080)=0x28) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r5, &(0x7f0000000200)='./file0\x00', r1, &(0x7f0000000240)='./file0\x00', 0x46) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000001d000900000000000004000001000000140001800f00"], 0x28}}, 0x0) 2m5.77131273s ago: executing program 2 (id=4730): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180060206"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0x2000c000) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT=0x0], 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_usb_ep_write(r1, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1") r2 = syz_usb_connect(0x0, 0x202, &(0x7f0000000780)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000880)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0x1a0, 0x1a0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], [0xffffffff, 0x0, 0xff, 0xff], 'veth0_to_batadv\x00', 'rose0\x00', {0xff}, {0xff}, 0x88, 0xf7, 0x4, 0x30}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x7}, {0x4, 0x0, 0x5}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xfd}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xb6db, 0x1a54, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0x30000014}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2530000000", @ANYRES32=r8, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000001c0)=0x58, 0x3) ioctl$TCXONC(r9, 0x540a, 0x2) 2m3.472022719s ago: executing program 2 (id=4738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8090, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x28a02, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x19) (async) ioctl$TCFLSH(r3, 0x40085500, 0x400000000) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x21, 0x3, 0x580, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b0, 0xffffffff, 0xffffffff, 0x4b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0x220, 0x248, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'sit0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x5}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv0\x00', 'veth1\x00'}, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private1, [], @ipv4=@remote}, {@ipv6=@dev, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@ipv4=@multicast2, [], @ipv6=@loopback}, {@ipv6=@rand_addr=' \x01\x00', [], @ipv4=@local}]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000140)='inode_switch_wbs\x00'}, 0x18) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000300)={r5, 0x328, 0x40, 0x9, 0x101, 0x7ac, 0x0, 0x3, {0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x401, 0x26, 0x4, 0x3, 0x10001}}, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) (async) r6 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x2, 0x7, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) (async) open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) landlock_restrict_self(r6, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48004}, 0x10000840) 2m2.932388648s ago: executing program 34 (id=4738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8090, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x28a02, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x19) (async) ioctl$TCFLSH(r3, 0x40085500, 0x400000000) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x21, 0x3, 0x580, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b0, 0xffffffff, 0xffffffff, 0x4b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0x220, 0x248, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'sit0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x5}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv0\x00', 'veth1\x00'}, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private1, [], @ipv4=@remote}, {@ipv6=@dev, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@ipv4=@multicast2, [], @ipv6=@loopback}, {@ipv6=@rand_addr=' \x01\x00', [], @ipv4=@local}]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000140)='inode_switch_wbs\x00'}, 0x18) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000300)={r5, 0x328, 0x40, 0x9, 0x101, 0x7ac, 0x0, 0x3, {0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x401, 0x26, 0x4, 0x3, 0x10001}}, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) (async) r6 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x2, 0x7, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) (async) open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) landlock_restrict_self(r6, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48004}, 0x10000840) 59.711688403s ago: executing program 0 (id=5024): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x6c}, @in6=@remote, {}, {0x0, 0x80000000}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xe}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8}, @XFRMA_IF_ID={0x8}]}, 0x148}}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x3, 0xfffffffd, @loopback}, 0x1c) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, r2}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r4, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x1000000}}]}}}]}, 0x8c}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r4}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r5, 0x0, r2}) 59.135053444s ago: executing program 0 (id=5028): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x2000, {0x0, 0x0, 0x0, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d20000000000000000000000000000000000000000000000000100", "24431a1e77a68e174f000000000000000010e200", [0x1f00000000000000]}}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x40008, 0x2, 0x0, 0x0, 0x10, 0x4, "995e4c8b0ba6f8ed413b1ee5f3a7c862bbf64092868fd6943a428277be3c0fd8c867f86e662e0c2dd39186b32ee0690c16eb180e81ed3e5e2ebe64446497c2fc", "a6fafe5554ac900cc641df63c82e3d2347ef4230f37485c698954b3d8be9b663e59116e54ef137506743aa54d43eeef70999ee41524cf2aef5653e90d68d5ac5", "0286bcec3e402f381e7bfd123ec7d0d13d4c50ed000000000500", [0x0, 0x9]}) 58.702885282s ago: executing program 0 (id=5030): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x700}, 0x48004) 58.103129785s ago: executing program 0 (id=5032): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x4000000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008180)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000d40)=""/4096, 0x1000}], 0x1}, 0x1ff}], 0x1, 0x40000003, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mprotect(&(0x7f000092b000/0x2000)=nil, 0x2000, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r3, 0x1) (async) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 57.737307445s ago: executing program 0 (id=5035): r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="3100000005000000", @ANYRES64=r0], 0x20) 57.595036323s ago: executing program 0 (id=5036): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000440)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004084}, 0x40) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f0000000000), &(0x7f0000000300)=r4}, 0x20) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(r5, 0x0, 0x0, 0xc0) sendto$inet(r5, &(0x7f0000000700)="bc918bffb3771c2bae5d0e57c3164d2be521e025f663348f7aa0b23940f5f072ca17dc55d7c220855d8df19159c83b46e720445c57697223221a73f485cfb002e34cdb3d6becc65f480376b700357f5e7ee2c6dffba3dbefb859e0ad6fee4b6888210a390169ec345d0400000085066fb8d65208d1c87b7798362d54156a51aa10f5b42a27e36991aa8f60e94f47e547aa77736db100d8f7696f2922557aa5be0acea553da5d47a0fefe01e0edd6de4d43d3f8c8a106d85972fdba28b40bd5d2a6b5c96cb69c", 0xc6, 0x854, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000005c0)=[{0x1, 0x3, {0x2, 0xff, 0x3}, {0x2, 0x1, 0x3}, 0x0, 0xff}, {0x0, 0x2, {0x0, 0x0, 0x2}, {0x0, 0xf0, 0x1}, 0xfe, 0x1}], 0x40) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r8, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 42.535887511s ago: executing program 35 (id=5036): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000440)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004084}, 0x40) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f0000000000), &(0x7f0000000300)=r4}, 0x20) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(r5, 0x0, 0x0, 0xc0) sendto$inet(r5, &(0x7f0000000700)="bc918bffb3771c2bae5d0e57c3164d2be521e025f663348f7aa0b23940f5f072ca17dc55d7c220855d8df19159c83b46e720445c57697223221a73f485cfb002e34cdb3d6becc65f480376b700357f5e7ee2c6dffba3dbefb859e0ad6fee4b6888210a390169ec345d0400000085066fb8d65208d1c87b7798362d54156a51aa10f5b42a27e36991aa8f60e94f47e547aa77736db100d8f7696f2922557aa5be0acea553da5d47a0fefe01e0edd6de4d43d3f8c8a106d85972fdba28b40bd5d2a6b5c96cb69c", 0xc6, 0x854, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000005c0)=[{0x1, 0x3, {0x2, 0xff, 0x3}, {0x2, 0x1, 0x3}, 0x0, 0xff}, {0x0, 0x2, {0x0, 0x0, 0x2}, {0x0, 0xf0, 0x1}, 0xfe, 0x1}], 0x40) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r8, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 9.140386734s ago: executing program 7 (id=5250): fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x1) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000080)=[@uexit={0x0, 0x18, 0x6b24}, @uexit={0x0, 0x18, 0x7}, @code={0x1, 0x6d, {"48b8554b0000000000000f23c00f21f83501000e000f23f8440fc77d17440f01b0000000008fc9b0011766bad004b000ee66b869000f00d00f350f20e035002000000f22e066baf80cb8285da883ef66bafc0cb800000000ef0f01d1"}}, @cpuid={0x2, 0x18, {0x0, 0x6}}, @uexit={0x0, 0x18, 0x400000000000000}, @uexit={0x0, 0x18, 0x4}, @code={0x1, 0x56, {"410f189e0300000066b879000f00d0420f0866baf80cb868a1f187ef66bafc0cb003eec44125e0b00001c0fec4c135dc2f66b8fe008ed065f30f1ed7263e0f01c9f30f00d0"}}, @cpuid={0x2, 0x18, {0x6, 0x9}}, @cpuid={0x2, 0x18, {0x8, 0xd}}, @cpuid={0x2, 0x18, {0x0, 0x2}}, @code={0x1, 0x59, {"66baf80cb82a44058aef66bafc0c66b862e066ef460f30d9e066b8cb008ec8c4a149c435095a0000009db9530800000f32c461d9de2f0ff8ab000000000f20c035000000400f22c0"}}, @cpuid={0x2, 0x18, {0x80000000, 0x1}}, @code={0x1, 0x88, {"c744240008000000c744240200000000ff2c24c744240028010000c744240254580c62ff2c24c42139ee6efcf3653e0f0014bb2e0f3804df0f20d835200000000f22d8c483016efb0fc4429d450fc744240038d106dfc7442402ec0c5367c7442406000000000f011c24b805000000b9080000000f01d9"}}, @cpuid={0x2, 0x18, {0x0, 0xac4f}}, @cpuid={0x2, 0x18, {0xb8b3, 0x7}}, @uexit={0x0, 0x18, 0x1}, @code={0x1, 0x4f, {"c46230f39105000000b8010000000f01d9360f00180f086667f30fc7745e0066ba4100ed66b88a000f00d067460f462cd50001c0fe66ba4200ec45da75b5"}}, @uexit={0x0, 0x18, 0xd}, @uexit={0x0, 0x18, 0x1400000000000}, @code={0x1, 0x58, {"430fc71836460f353636660f38081666baf80cb80001f388ef66bafc0c66edf30f09c4e2fd34da0f01d1c4817fe6a359a1c1e00f200066baf80cb8335a8b87ef66bafc0cb000ee"}}, @cpuid={0x2, 0x18, {0x6, 0x810000}}, @code={0x1, 0x5a, {"c4a255adf7c4c1f1e15f50aff2abc4029daabc7e00100000c74424005e556369c744240200000000c7442406000000000f011c248f491001fa0f30b90d0300000f3266b8e6000f00d0"}}, @cpuid={0x2, 0x18, {0x4, 0xffffffff}}, @cpuid={0x2, 0x18, {0x9, 0x404}}, @code={0x1, 0x52, {"66baa100ec36f34b0faeedb805000000b9009800000f01d966b850000f00d0c462f0f34d020f01c9b805000000b9629148e20f01c10f30410f07b9f80300000f32"}}, @cpuid={0x2, 0x18, {0x8, 0x5b5}}, @cpuid={0x2, 0x18, {0x722, 0x2}}, @code={0x1, 0x64, {"c4a2fd333d8a470cff430f2121da500066bad004ecc46111d1b6d30f000066b801010f00d8f2460f5d2a660f383e510066bad004b025eec744240000500000c74424021cb3e56bc7442406000000000f011424"}}, @code={0x1, 0x59, {"66ba2100b0abeec4826daeeb66430fc7b20090000066ba200066ed8f292897541106b8010000000f01d9c463791691050000001d670f7ede460f06440f20c03502000000440f22c0"}}], 0x57c}) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f00000006c0)={{0x0, 0x0, 0x80}}) r1 = semget$private(0x0, 0x4000000009, 0x0) semop(r1, &(0x7f0000000680)=[{0x7, 0xec7b, 0x1000}], 0x1) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000040)) 8.863329066s ago: executing program 7 (id=5252): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000994bd740f60d5600b5a0000000010902120001000000000904"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x2d, 0xa9, @random="cff38352107d29745448c50ae185cc4ab38dfc864d7e6633c07f01fd7309195e3503fc60e6f12b558a"}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x24000010) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1, 0xf75273e73c923b54}}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x4, 0x4}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000400)={0x40, 0xb, 0x2, '~\t'}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000480)={0x40, 0x13, 0x6, @remote}, &(0x7f00000004c0)={0x40, 0x17, 0x6}, &(0x7f0000000500)={0x40, 0x19, 0x2, "beb4"}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0x3}, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00?'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000880)={0x14, &(0x7f0000000740)={0x20, 0x22, 0x2, {0x2, 0x5}}, 0x0}, 0x0) 7.991814916s ago: executing program 3 (id=5258): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000, 0x6}}, './file0\x00'}) write$ppp(r0, &(0x7f0000000040)="05199226ff19c889dad74b2c8e328a976b6020ca780dd4977d6548ac2f286d6eeeb9ebc56d6c2ddcca052fe120272eb6609b0b6aa433b8b9aa40f15f31454fae9cf026640c5b67595bdf7384b184fb72b7d76eaf4ac336f09fb0e5341186952ca29974d22a5ba59c7a6b9f808a2e7033c6bdf74ae62703d5a3fba10e2f92b48efea0733c75f87fdd344f5abb63a47a5c7c3cc1d85e0fb7751ea3b283e723aa07b34c9d147988d5bfceca4ec507c300ac018d4cff50e182cc73bcbc009a04d80fdc5878e0807a73e2417bda7ced6589045029555c6f9f09a01f598bf3ec3f8a33790cd5781dd85c6d944f6165", 0xec) ftruncate(r0, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = syz_usb_connect$cdc_ecm(0x4, 0x82, &(0x7f0000000140)={{0x12, 0x1, 0x1, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x1, 0x1, 0xd, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x6, {{0xb, 0x24, 0x6, 0x0, 0x0, "b1fecaa56d50"}, {0x5, 0x24, 0x0, 0x386}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xa, 0x4000, 0x7}, [@call_mgmt={0x5, 0x24, 0x1, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x3, 0xc7, 0x9a, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0xff, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x12, 0x3, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x95, 0x5}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x8, 0x4, 0x4, 0x8, 0x9}, 0x135, &(0x7f0000000240)={0x5, 0xf, 0x135, 0x6, [@generic={0xb, 0x10, 0x2, "a954a9f4d15f1fda"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x4, 0x8, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x7c, "b6b0c4073b5b7f9bdbd93732d29abdb6"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x3, 0x5, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x1, 0x6, 0x101, 0x85}, @generic={0xf5, 0x10, 0x3, "057af23c65e56d481a33a114bfb91c48a64a43b01c8c54c9a8665a560769cc6e91975a1e6d5315c605671ce41004658d2fdd0b40cca9bc1e80c2f5f66e6d47800f89e6b2e03d12476110cdb2d845df759202fe4ebaf013882a275d283e8b8aa68d3ff8c88804a3875a23015270c47c41f8617839c777c7f6308226b965c965873adbec14fead4b53fa7eff5140fe287ae66ab2c479b50431c87a229f3f30c3d5e44ac42940ab30a160c91389caa9a9514547a78904fc48315e81b79822d4f4bc5c3a9f5086ce5e07dc5bfbcf4bbb0b2a41a89eee627cbcfd36285f74bc4d7a03382d371848a3edc6fb4e7c053238a103ee77"}]}, 0x4, [{0x9c, &(0x7f0000000380)=@string={0x9c, 0x3, "355f9902c42153ea53ef0feb12be13b0c3c00be76274b442f9320c2af11554984c8a65578a903c102dc291a9a9e4735326d4a2980c93d88d6bc0008b0b093e19d3d43d618c4a24a71cfd90f5cf488d6754dd561c5ffecb17e1ffc73d4624b6a16e79c684c398304b79d20e0d040d58f5e06dae046b5010a2b5612b221d6d1b434dabf34ddeb428515eab2bfe8f4256f9e977ea7b9c8007a49f13"}}, {0xf2, &(0x7f0000000440)=@string={0xf2, 0x3, "e9921e5fd4f834783f7287c6b03d7e2dfa2cdff1dd40255326f03880e7cb05cd1a03c556b4e8f6843f2f4e0e7f731a79ea5072df3866068ac8ce54cdf44be612d678b3b0d12c5bee25821b511336146860cc2b4a5d49b8db259c7565fcb6db77fa03af93b8cddc75aad038302bdba6cd8ec89ee523a13d1fa1eec62d2641bdac7cc95a4aa3e246f7768b995bfa40682278dbb68ced7af382e052e4a485283737853808b1ca62392afd857b104151a0e322c6402eede0003069f1f5155e513eda9efdc2ddc49082246d801d5bf204a22b91febba21adb437cb478f2c416bf2a9161229d46c7040cd41d7e344dbb4a8f70"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xfcff}}, {0x32, &(0x7f0000000580)=@string={0x32, 0x3, "b6803bb66bcb39fe747aac6de1ea09c888b429f9e339c2bf30f42e2d86d07957b40489c5fff76e408257074f067fb1de"}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000700)={0x14, &(0x7f0000000640)={0x0, 0x16, 0x51, {0x51, 0xb, "9140e180f506f1cbcff04f082fb9084a935d2a7332af226d5916a0688503d7b0ca6d9295a66cfc88e89ffb81bf2926f686a79c6478a64198861efc167fd8b5e0a316c0261f9cbbc412145d4b00cc76"}}, &(0x7f00000006c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x1c, &(0x7f0000000740)={0x40, 0xa, 0xe5, "fae8a3e5df7611deeb613740fce48a11db9e70da254b34562dd09571cc0173f37054cd38cb5725da31b201541abce10400700f518a62becdc52604366766b22a86e319f7c4de8920f9a56c808de23b836dbfa39de488f640ded398e562893e34d8c653cd8a56b786175422818b36b3113086b459a05352d0c8ccdfb521a9877c674008ef632eaabab3f01e00c5d1871296ca0c506420f0060bbb568f54942ea999971d6f4cbe4d513637bb810c5f2b52ae16fb918b2a596a71a272d37490633a883eb533267c8a472ae49aadcb9d6719c28105aaf64c8472e69250afd8d77b698b2ff3118a"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x3}}) (async) syz_usb_connect(0x6, 0xd2d, &(0x7f0000000900)={{0x12, 0x1, 0x110, 0x75, 0xe8, 0x83, 0xff, 0x12d1, 0x482, 0xaba9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd1b, 0x4, 0xf8, 0x2, 0x30, 0x6, [{{0x9, 0x4, 0x3f, 0xb8, 0xf, 0xff, 0x1, 0x14, 0xa7, [@uac_as={[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x1, 0xb, 0x3, "0591d27a6a77"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xb, 0x8e, 0xff, "99"}]}], [{{0x9, 0x5, 0x9, 0x10, 0x8, 0x81, 0xb1, 0xd1, [@generic={0xd0, 0x1, "6dd379b7969dd1c05b6e720266b70b1890740d88e1e9f32807a05196731529941bd5378d9be2be7a4ff90505d7c64b5cab3a5b28b95c1ec10174641aabb7cdfa5ef262d0272c18baf0452d4e54d37865442e7c564ef519df3864b3e8564b1fba59c658dc1c914f2d846fac747ea550517237dbe999e4479646e7c977f1e39a50fb78f4eca3f5b828d9be9646b02d6ab08cdc585e3173adbf3dbc07424c852ebc8f633c58830955afba381c2788da053f81e7008ee1b67f0d4a280ec19bf3d5de0d201c8f42bd960dd3e507e35956"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9}]}}, {{0x9, 0x5, 0x8, 0x1c, 0x400, 0x1, 0x4, 0x8, [@generic={0xe8, 0x3b, "690278fab6b53a045c755e40f66843458ba3fdf2fd4cbdb9b046f692f6081c8b694c16a60cea9fcc6872d3f04d58d6a0922a12cde4e3a4219c26b165a30ed55ea8ecfb23c3e9e2bef7250a54651d54608fcff498c2aaffe88c374e8522003a8d83db3b6526832ecba74bbe0f9a05deef47c324e7c73f232122fdca6d6353be1bc834fdc7165b066677bdd3d00b1ab996bfbb5f65b4d3c7bca3a1d1c829fa5bae23f49344cf47ee76fc847aaec1bb850d7d4bcb61502bce2d6908ac4ee743397e943732913e0e6fbbcce71185efc85281f9163009967be54c1875875ef053f76670d678cbcfc8"}, @generic={0x59, 0x6, "0221242a0bb080335ccb0a9efddbcf6277e0025be044587596d37a632bd3aae2f0dbb6914f4b6c3c76e6a9539d342c2f29e65d8a3968cf96cc43335abc8a5d7aad83a3eed8892758fb013bc9c52a537e6f37eb8377480c"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x4, 0xb, 0xfd}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x8, 0x6c, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x10}]}}, {{0x9, 0x5, 0xe, 0x1, 0x400, 0x9, 0x80, 0x15}}, {{0x9, 0x5, 0x5, 0x3, 0x40, 0x1, 0x9, 0x7, [@generic={0x6, 0x23, "a5a8cca0"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0x56, 0x3, 0xe8, [@generic={0x31, 0x21, "e9dbd954c60c9d6b554dbf0f7bfcd39b332ce14e4832b70438c9afe3b680a9f09ed6032870123f6f96ba1ee655d047"}, @generic={0xec, 0xb, "033005ec0f8d21ddada57d74fbb47a408475ac9c6edb2a317576bbbe2d393819c53e3d6ece10762a165de32add928ae59a1161027611404edf5e45390726cda9382180af3845bd5c928dcf5f18e8921ceb125e545ec1e364b5a238689589153d5d6eb378114aea497afc7f442abc681e73bf7d01f19cad86bbea5518ea612884ea0ec955a3e2e06f4fb6808862908e2c0130a99983d749e66e0b32138e1d53c883f4ef08cc57c68284487ae5b776b1c38637b57891eba75c2f839234dd1e5b89fbebfc19b64408fb11c9ce57c88af1875e7561532c0761370d8f53e385a3ad4fd6e9ea84f1a0ba0b4357"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x4c, 0x6, 0x2}}, {{0x9, 0x5, 0x80, 0x3, 0x3ff, 0x8, 0x80, 0x7}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x2, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x5}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x1, 0xd, 0x81}}, {{0x9, 0x5, 0xc, 0x2, 0x20, 0x0, 0xf, 0x4, [@generic={0xe0, 0x3d, "f82b7c9d9804e8ca82b0ee5685bda562d3100a152f2cef040ba369e2e7b89410b1b833b9626da7aa25111f6d3961cfdcd0765379d4a165f4d44f6d4e4befad31e935d452d6d4534b47245403d2fa688676aab87b34181e9d0e6b3ba5b99ca1d8f0c6b8b9d3675514ea21480d7e1a289e3e5cf807ca4bd5776b998d9dc7126f17784e85fb4104ff6f3e155204e17e75ef32052486837986d0d2f32b3f671db8e854d250d8853ec36d5178002fa8da512e51c99f55400c268177bbb9757080d688795da8d4fca99f1abbd508c44d9f83c08638bf6cbdf5d743447c99fb7a61"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x10, 0xf7, 0x80, 0x8}}, {{0x9, 0x5, 0xbb1a5bbd47af824b, 0x0, 0x8, 0x2, 0x78, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x8}]}}, {{0x9, 0x5, 0x6, 0xc, 0x3ff, 0x6, 0x5, 0x5, [@generic={0x6d, 0xd, "1bae6193cf572920bbc1567937e32125c3ec7a65b285d2fb9ba2e58950f31b6a5f270fa63f4aa47bc485987d55262cd9a4248a3a76ae4cd347e7413af15627b89ace8cdaa2b102a33c0dff91f8d7a78fce4cd91d8a16273e84ca27d2071f139f18c26e87b230c5d23a52aa"}]}}]}}, {{0x9, 0x4, 0x3, 0x7, 0x4, 0xe4, 0xc9, 0xed, 0x9c, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, '\f '}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x2, 0xf5, 0xb}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0xff, 0x6}, @country_functional={0xc, 0x24, 0x7, 0x6, 0x8, [0x0, 0x79, 0xfff]}]}], [{{0x9, 0x5, 0x8, 0x1, 0x10, 0xe7, 0x1, 0x9, [@generic={0x5f, 0x0, "b285cbdb08ccfd1814601012916319954c2081071b02d20d3258e6f3a7cca6f785da14d9dd30675b11eb3d7245cfbda0c68897fc847be2b2c200a6454e6b38abb07b10df435fa2b74c25e996b7ea8f87fbb6749adeb44a4fb2c71b37af"}, @uac_iso={0x7, 0x25, 0x1, 0xc0, 0x5f, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x97, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x6}, @generic={0xd5, 0x21, "11c1ae414a84c3b6a6c16892b87402a0b647d22ac595a13370c4b3cc39d894fabc536e65ce0b811fb311d3197ab6715f6d1d7fe91979862eca3595a004bc8a61db5cf707747cf541586f8ca6103777a309c2ed570227297154c000fbf1d6c323c861cb20b1b77a835ab11070fb9574d6c901009c0584b096809a878a8fbc2c063a18ed6a59b88fe2c3af58f98bc9af589ac8581f85a0dbfc282b01322de20a8883b94b3f9868b6b1acb0ba63bfc1baf16db5a10e66d51000606872700f7f681761834a17d3b85698411744fc6837b6f196fc90"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x2, 0xfe, 0x78, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x1}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x6, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4}]}}]}}, {{0x9, 0x4, 0x38, 0x0, 0x7, 0x98, 0x20, 0x17, 0x2, [], [{{0x9, 0x5, 0x7, 0x0, 0x8, 0x8, 0x6, 0x8}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xa, 0xe, 0x8, [@generic={0x8f, 0xc, "bb2bed2693f5cd849e7da593ec6f4842605a6fc37e90ed1ebd0d4e94540c9680ca12bcc24bc7d8570611eebcbd1039e24358465b1a3cb676eef2755c28473a1467837f8a89cc25d77c792ef914268bca2dba712d0f89bd0145a62abbcb0f6b2932274535368d59a03ed3bf9e106ca4f95dbfe3fcced4b4e9d3bc304e24938769225f64d2cd62b29028770d532d"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x8, 0x30, 0xe2, 0x2, [@generic={0xc6, 0x20, "c800f8fb16455ea20a6892ae716478691d8c58cb790b6742a83f8ab6364335ea1ef38cfc40142a4344867432807c0cfe3baeca5e8ce3e2f81bb2d1ec07e23a99265b408b1eacb97a0106ec9b3c51b2ef246f11417a97e6912bb79337cb6d718e606bfd951399b996215a6bb4545311e61ed86f460c8619db7c232dbde03bae2007118bc241c0d063dde0d1ebd669bcb106dfe0b6e0d61cd717dc7816537c7e7244d14d7fb50287f358bba35af2934584fef26a5333c51dd6e2e2a9f5f8474a0ef374cd04"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0xb8fd}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x8b, 0x1, 0x1}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0xea, 0x1, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x1}, @generic={0xd4, 0xc, "98edbe3d66c973ae24efa8b7452b3de51dca077d1b94ae9007a66359f2167dbe892879d5ccff4492ef9616708de7198c3e1a0352c6953b514bae5ad10a5091f893ee739e980c458b7779b6b24cf18c41ae7460993cea3134bbd3dd825b199247c53d6f6ee3d71afb17d8bebcc7f862e2621c3a3348105053d3934776eab4903092a42e70cd4f4d5cfdb032de3ec8c0fda1214c8fc2c42cbec1b32e8f5bf051a32bc42d2d61dc941c541f1cdf8810fdfdcb06ae75e8a18c2dd7d36c803679b28d2e4a0fc2591c54c3751087dc27f72f9b30b1"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x0, 0xfe, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x97, 0xc2}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x1, 0xf9, 0x3}}]}}, {{0x9, 0x4, 0x24, 0xfe, 0xe, 0x95, 0x9, 0x93, 0x3, [@generic={0x65, 0x21, "e6b5ed49adab65db7b80d2a56be6b805d45f066b8d479a109cebefda56a3cc15571942abbdff59753bdb55657a66146ed256808f833dcdd08e8659f76e2c43d953fd038f0c53bf620eac7c70546d8972749f0e2b9ddd730c22f97e75329da1690f6678"}], [{{0x9, 0x5, 0x80, 0x4, 0x40, 0x1a, 0x1, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x2}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x8, 0xf0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x73, 0x7}]}}, {{0x9, 0x5, 0x7, 0x4, 0x10, 0x0, 0x10, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x12}, @generic={0xc8, 0x11, "6efdef4d37d4e684f10d50311154b74394e919d60974a270857f95e29b6aa24144f380ca5b8f6f4a009cec89574f182b31997fe1fc0726086e960034e5792e413a20e755107c85fbba6f0ccd9d41209724c2ab431d8614e3a48ffc23fbc75dfb1bf108e8ce243bbf652b4fd9123e0c480d2bb331067b23c528f8c08ea6ef12be59c3db66b2ad5e65c944f36672f3a1aab15881f91d67b91154d684e1399e480d57570028f96b21533519caf3171a137fc361dcbabe4c43557e36511f03e932b33245eb78f760"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x30, 0x1, 0x40, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xf, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x87, 0x82}]}}, {{0x9, 0x5, 0x1, 0x2, 0x10, 0x9, 0x10, 0x5, [@generic={0x13, 0x24, "80e9c5f06ab839aa592b6cc9d0ee3ca888"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x0, 0x1}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0xfe, 0x4, 0x66, [@generic={0xe, 0x3, "a19cacf58ac8ac6eb16cdfc1"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0xe5, 0x7, 0xcb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x140}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf7, 0x3}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x6e, 0xb, 0xb}}, {{0x9, 0x5, 0x83, 0xc, 0x20, 0xff, 0x5, 0xf, [@generic={0xb9, 0x4, "96433271bb42b928c5190317e073382c59d9848f421efc9cf24965d0d7122b1887d14e8bb87e101ef937b25a10e78c4d0b90b8c87e5d242441d308089b39155e650efa144ebe011b3924f227667254daa6ebafebe53451da5f451108de9fff97c8e692b07a92ec2c44ecb13bcae6726c4938b16a9af480ec83a28ed546c0d59cc39f6ee8d28778fbfb0ea4a5539bf1038b331c3ea8b9a11f00bf41ade8d0b7be28863affc231f368ffbcad1ea9d0fc35e432a732fe9f90"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x7, 0x2, 0x3}}, {{0x9, 0x5, 0x7, 0x2, 0x3ff, 0x8, 0x4, 0x1, [@generic={0x57, 0xd, "c4bdfe487057bb229aee5a09ccdbb5988486b8d25543f364005dcd38071d36bfff3ed224a5ff6f2cc809808507dcc8d26c219cd1312d0ef508587a71801e934ed4007e71ffcd7d0dc81aed94e1b1860d3af55408ec"}, @generic={0x80, 0x30, "615ba1899169e7f2920ccf1ff311a7503744455f24594510a11baa4e82b991b5e1dd65894481504d8b87f216a549afecc169a431b90868b6c7bcf457584ebc62ebc3af82ddb063f2072de254d7d5d9961d190733fbca7b9f755834e4a3194e847dac48f032a8b02e10b4ca60745584cc0d09331dc6218f26fb3a85cdcc80"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0x40, 0x2, 0x6a}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0x6, 0xa, 0xc8}}]}}]}}]}}, &(0x7f0000001800)={0xa, &(0x7f0000001640)={0xa, 0x6, 0x300, 0x6, 0x3, 0xfa, 0xff, 0x2}, 0xcb, &(0x7f0000001680)={0x5, 0xf, 0xcb, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xf, 0x5, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "5726d336d385df7c911ec9ee677841ac"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x9b, 0x10, 0xa, "b414fc00616c85bea571b6313b3accfa5cf938668cdb0990fc60f487d1c050d1aa962c6f650e4052d57b3d482e71c404b71ee0ffcc79d59e45ed81b84e1b4593dba1ac3a9d5b55a17c9b3e3cf7385741e58760160f127fdc13a21341bd669e3c3110056f1019b6eceeb97e52905d89ab0bb24ff98c91520e4ae1d5af2a066db8b43b9ede1282462fd5f451cfd93da7541ea203b0dc62fd7c"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x6, 0x7}]}, 0x2, [{0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x2409}}]}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001840)=r0, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001880), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001940)={'syztnl2\x00', &(0x7f00000018c0)={'syztnl1\x00', 0x0, 0x2f, 0x20, 0x5, 0x2, 0x9, @mcast2, @mcast1, 0x1, 0x20, 0x3, 0x5}}) bind$packet(r0, &(0x7f0000001980)={0x11, 0x1a, r5, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000019c0), 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x2, &(0x7f0000001a00)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001a80), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x3c, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x3c}}, 0x8010) (async) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001c00)=[@textreal={0x8, &(0x7f0000001b80)="0f01c8650f090f20d86635080000000f22d8660f61f366b9800000c00f326635008000000f30baf80c66b8dc760b8866efbafc0c66b8fca9000066eff2e007652e0f01c30fc79e00000f0054cc", 0x4d}], 0x1, 0x40, &(0x7f0000001c40)=[@efer={0x2, 0xc00}], 0x1) (async) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x30, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x11c, &(0x7f0000001c80)=0x4b1f0e6, 0x0, 0x4) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x30, r4, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x44) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001dc0)={'ipvlan1\x00', 0x10}) (async) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r0, 0x4008af75, &(0x7f0000001e00)={0x1, 0x8}) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001e80), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000002000)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x10000010}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0xe0, r8, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x38}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x21a8000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40800}, 0x4040) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002040), 0x2800, 0x0) (async) r9 = creat(&(0x7f0000002080)='./file0\x00', 0x0) ioctl$VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f00000020c0)={0xd, 0xffffffff}) (async) sendmsg$inet(r3, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000002100)="45f9aa946b8bad881574312d6f3e5599ba861b6946385145fc0735c97436e2d86bf66a93a0398669e394d1af438a851d96a3cdfcb57e3b2ac1f6357e5137cf950ff4c640283319da632f9336c3f9924674df71e6ed168cefd7210a9203e9d67563412ecf704a6cfa6e641c89808e6e14248c29d589c7abe9cc404ef7eab2b220c9808a70be462dab1e7136e35c25f4c85b9fd065a24313fb80c8cce6971d308bbb2d0d6955016d0ad0e9bb16602ca5994fa0ab6f07e521b4cc9f48f24bf75e8fe99b108727008ab2c0ecec523c73214372a41aa3becc3c9c8a86279fcddd3d1fc3e0f0ca99a1", 0xe6}, {&(0x7f0000002200)}], 0x2, &(0x7f0000002280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @dev={0xac, 0x14, 0x14, 0x30}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa}}, @ip_ttl={{0x14, 0x0, 0x2, 0x964}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x98}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)=@gettclass={0x24, 0x2a, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10}, {0x2, 0x7}, {0xe, 0xffe0}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 7.287809058s ago: executing program 3 (id=5260): socket$alg(0x26, 0x5, 0x0) fanotify_init(0xa00, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_route(0x10, 0x3, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0xfffffffffffffe00]}, 0x8, 0xc0800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe9) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0x8, 0x20, 0x1cd, &(0x7f0000000480)}) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f00000000c0)={0xa, @pix={0x0, 0x0, 0x39565559, 0x0, 0x0, 0x0, 0x25}}) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x4) write$binfmt_register(0xffffffffffffffff, &(0x7f00000000c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x5, 0x3a, '\x11dev/\x00', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x96) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2, &(0x7f0000000500)=[&(0x7f0000454000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil], 0x0, 0x0, 0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYRESOCT=r4], 0x98}}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x58, 0x0, 0x6, 0x0, &(0x7f00000002c0)="f722cb41346e4799f4316950fb766fecc6406339a9493f8a7026690f6e1e0bf78a44ded2bb9d01fc6e0c2b3e05ca2a4ad24d89b9f0fdf41322ce6ba0343d0d384e3c21b9c045ce63cee5f87e67bdcc33477599a3041da57fcae3c01d34ab9ab73e7f45ebe462b8f6db9d8f28e0384dc378896018da52f56972218ef3bd921aa8f5d7eab3d0a13b8b03eb82974a0dfd51efb02e124f6f6932ae73399401cf39f3302769ed7a300a0d8b31e78af503d329878dc49710f800dbea51cd5db1233f9b20df4000fd1f659a3788b3cc0462", 0x7fffffff, 0x0, 0x1, {0x1}}) 6.92728417s ago: executing program 5 (id=5262): prctl$PR_SET_FPEMU(0xa, 0x3) r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x5c, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@nested={0x48, 0x27, 0x0, 0x1, [@nested={0x43, 0xa4, 0x0, 0x1, [@generic="45f3e17c22ac5b14a72827b56695b3324dcda451b64deccd45e4282fa912da5e62b24ff042bdaba66e1987bdc3dc3512f40b328c344ac79176ee7597f2b865"]}]}]}, 0x5c}}, 0x4044) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) 6.858246409s ago: executing program 8 (id=5263): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = signalfd4(r0, &(0x7f0000000080)={[0x73]}, 0x8, 0x80800) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000001340)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xd, 0xa}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x4781}]}}]}, 0x44}}, 0x20040800) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f00000000c0)={0x0, @src_change}) syz_clone(0x70e1362923356a9a, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r10, 0x8918, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @loopback}, 0xe, r9}) 6.841677808s ago: executing program 5 (id=5264): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679a, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x2400c083, 0x1}) io_uring_enter(r1, 0x3516, 0xa1ffffff, 0x0, 0x0, 0x0) 6.484297945s ago: executing program 8 (id=5265): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000003000000050010000b00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r1}, 0x38) socket$can_j1939(0x1d, 0x2, 0x7) 6.391294926s ago: executing program 5 (id=5266): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000300)={0x1d, 0x0, 0x3, {0x1, 0xff, 0x3}, 0xff}, 0x18) (async) syz_usb_connect$uac1(0x5, 0xa5, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0xfc, 0xc0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x9, 0x0, 0x0, 0x0]}, @output_terminal={0x9}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x0, "f8431cfd"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x304, 0x4, 0x4, 0xff}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x0, "fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x2, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 5.715692759s ago: executing program 7 (id=5267): r0 = syz_io_uring_setup(0xb32, &(0x7f0000000600)={0x0, 0x10086f3, 0x2, 0x1, 0x2de}, &(0x7f0000000000), &(0x7f0000000280)) io_uring_enter(r0, 0x0, 0x0, 0x9, &(0x7f0000000040), 0x18) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xc002) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) read$FUSE(r8, &(0x7f0000001680)={0x2020}, 0x2020) timer_delete(r7) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r9, 0x7a4, &(0x7f00000001c0)={{@any, 0x7}, 0x43, 0x40e8, 0xc83, 0x46bd}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="850000002f000000d7000000100000009500000000000000423d19f1e4e058f160906b507e5120a0425f48f9550dcf76fc596696e6f89a4a2b1d29eadfdabd5217ba2d02d98d17b488d5437e04555f3dc719afc000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) 5.435020194s ago: executing program 6 (id=5269): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x3) ftruncate(r0, 0x4) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0xff, "cf2b62dae327d9e96d90dd0b09b8faaef6ef0d1d764a391158b96672cb9c32f3", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"b9ab641d539746664b8de444bc9261bc6d4dd66751b28079ec077903248f56b8", r1}) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') read$FUSE(r3, &(0x7f00000061c0)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x0, 0x7, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x0, 0x3, 0x3}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = eventfd(0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000001340)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r10 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x8, 0x3, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) write$dsp(r9, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000200)={"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"}) ioctl$SNDCTL_DSP_GETISPACE(r10, 0x8010500d, &(0x7f0000002500)) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000040)={r8, 0x2, 0x2}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x4008af25, &(0x7f0000002a80)) 5.303234815s ago: executing program 7 (id=5270): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x933, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b408000000ffffff891004000000000016000000ffffffc095000000000000001b05753161d25b4bd03aadb924a423c7bfe9442a94243a3fa46cce2b8f7bcc91766561555934f48ab2053317bf198dd77ea57ed1c046ed21b138abca75ba44dbf98c30f826c4bf64a3058a7a4aea2212b5fc2bf2da2f0e2ff741243a828131895fdbe605a73af882d50bd990368868a28ac13e5bdad4b8e49e854af52b5fd4a0de0fd2fc643af963550fd79f65e10c666e688f85c4c19b9fd6a88f4668ec44d9e393ef18a9bf4e8e0f7fec2a1cbc333d62fe60b8d21a5407a433cce3396f8ca2692769b1e84cec2ce9967cebab5caa18eeab28285fbfdc00dda97e7c09a6080e76631ca9121d89361879afff5f74b31f43e00f9799d3f34e87211d3c3a34b94c522f9dda91333bbeb43bb706e94216d5b9914bdba2b6e780cba1ec657a5eb8704ee04728864e97ed66d4b8afa57d00000000000000000000005cd4bc37e16b06201a30ef88246f312eb6d77b7463e3b8b0b366c28d6e390be511beacbbb812cc7d2004ce2819ea8a26277cc18ff8a72beb637be0ecf048e43c824ba5c2610c68d9af5ebbfacce321ea14968d6d8dd61035aff3a8dfa9b1d1936e781f82c4b29c8c151afb532af084b63498ad4b748dfdbfd5ba32eb86127aeb3333e48f7e9051b263df6f520073ab3dd636ffa02b9b14ad9b0c23f3e7279bcc8c17987f80261ee72c77849ba78452a5cfaa703405b881579f8efb306a4ce935224a30513c73c3cb0082383e3223b4c77459ae86605bcb"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$pptp(0x18, 0x1, 0x2) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r6, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "45448c13"}, @global=@item_012={0x1, 0x1, 0x4, '`'}]}}, 0x0}, 0x0) 4.738239059s ago: executing program 5 (id=5271): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/packet\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3d5", @ANYRESOCT]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd000000000000000900", [0x400]}}) 4.451239247s ago: executing program 8 (id=5272): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, @val=@tracing={0x0, 0x2}}, 0x20) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x8000) 4.435516834s ago: executing program 5 (id=5273): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200000010f3044d074000010203010330050904000801030101000921ff00010122b00b09058103100002ba07"], 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/144, 0x90}], 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x0, 0x2000000}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000010000104000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000044c0), 0x141802) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000020700cb6f00000000000010902240001000090000904000001030000000921fcff000122030009058103"], 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x14001, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8, 0x0, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000a40)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002240)={'ip6_vti0\x00', &(0x7f00000021c0)={'ip6_vti0\x00', r4, 0x2f, 0x2, 0x0, 0xa, 0x22, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x8, 0x7d6, 0xfffffe00}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000002280)={@initdev, @loopback}, &(0x7f00000022c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002300)) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0xffff8000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}], 0x1c) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 4.312231179s ago: executing program 6 (id=5274): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0xe1, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r1, &(0x7f00000004c0)=""/196, 0xc4, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x100000000000000, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="400923000000230f89b81875976ef7a158973dbdb21c2a60074778a14ab39343e290b498e547843661", @ANYBLOB="86e1acbb3601973de8614108f28b33485a9d7995e215f46a25b527ea8375f22a71f12ae9e5f7f8a8f3f54139786fd5b601e01a7f5c16"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.911094186s ago: executing program 8 (id=5275): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="04000100"], 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x5, @private2, 0x4}, @in={0x2, 0x4e22, @local}], 0x3c) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) pipe2$watch_queue(0x0, 0x80) add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x52b281, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) 3.869395663s ago: executing program 3 (id=5276): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679a, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x2400c083, 0x1}) io_uring_enter(r1, 0x3516, 0xffffffa1, 0x0, 0x0, 0x0) 3.389828092s ago: executing program 3 (id=5277): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)='h', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)="a4e2", 0x2}], 0x1}}], 0x3, 0x40448c0) shutdown(r0, 0x1) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x10) 3.204945382s ago: executing program 6 (id=5278): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000010e3c0)={0x0, 0x0, "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", "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"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r2, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 3.143367217s ago: executing program 3 (id=5279): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$audio(0xffffff9c, 0x0, 0x402, 0x0) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x40000000, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r4, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000200)=0xd) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYRES16=r3, @ANYBLOB="fea2c36be81d889dea4e1cb8670a31fa128b65cb24adc3f62a2f2ad62d098f57b8033628177fc41fb8c385ed91245fc9aeb96aea793a34b6f3cb1e3213d67be05667", @ANYBLOB="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", @ANYRES8=0x0, @ANYRES64=r1, @ANYRES32=r1], 0x14}, 0x1, 0x0, 0x0, 0x4000400}, 0x84) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r7 = add_key$keyring(&(0x7f0000000bc0), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (rerun: 32) keyctl$clear(0x7, r7) socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000001c0)="240000005a001f001007f4d655c63589ce9e", 0x12) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r8 = socket$inet(0x2, 0x4000000805, 0x0) listen(r8, 0x7) (async) sendmmsg$inet_sctp(r8, &(0x7f0000005ac0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x4}}], 0x18, 0x80}], 0x1, 0x5) (async, rerun: 32) r9 = accept$alg(r1, 0x0, 0x0) (rerun: 32) sendmmsg$alg(r9, 0x0, 0x0, 0x4004041) (async) recvmmsg(r9, &(0x7f0000006700)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1}, 0x4}], 0x1, 0x160, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xc014}, 0x8010) 2.988988676s ago: executing program 3 (id=5280): syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003620000000003"]}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000003d00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)={0x20, 0x0, 0x4, {0x2, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r0, &(0x7f0000006800)="10", 0x1) syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000080)=""/63) 2.1997825s ago: executing program 6 (id=5282): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078"], 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x8c880, 0x0) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000100)={r6}) close(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.175468859s ago: executing program 7 (id=5283): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/packet\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3d5", @ANYRESOCT]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd000000005061f30900", [0x400]}}) 1.089716416s ago: executing program 7 (id=5284): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x3, 0xfffe, 0x1000}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0xc63e}, {0x4, 0x4, 0x1800}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) tkill(r1, 0x2) ptrace(0x4207, r1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f0000673000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000009c0)=0x7, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x4, 0x100, 0x0, 0x333}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 518.858182ms ago: executing program 5 (id=5285): syz_usb_connect(0x4, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201c01a40f30c74d33bbc2000000109021b2bd9990a00000904000001a7a00f000905", @ANYRES16=0x0], 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000100)=0x3c, 0x4) fsetxattr(0xffffffffffffffff, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x22c, 0x30, 0x1, 0x0, 0x0, {}, [{0x218, 0x1, [@m_nat={0x1cc, 0x1e, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x38a, 0x5, 0x3, 0x9}, @dev={0xac, 0x14, 0x14, 0x3a}, @rand_addr=0x64010100, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x4, 0x20000000, 0x4, 0x8}, @private=0xa010100, @multicast1, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0xff, 0x4, 0x6, 0x5c11}, @multicast1, @rand_addr=0x64010102, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x606b, 0x9e8, 0x7, 0x1}, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast2, 0x0, 0x1}}]}, {0x103, 0x6, "40d4c08de4ce61f02edacaa3b61175744acf06f0932cde3f0e1acd0c29350122788aaa979e8707660346b8f7e0ab87825f497c14d891500c75a8a856028f8564eb2619bd4238d5a1a375b20b30a69a9612c0507add8d03e1e59d3d62fe3c09f6b0fdb6c368e194b848c15d36944449dc72e11e09408f36ce576748a4f7c91a37dd5c09f0ad0699b3caf63479d3c0548ebff585fb105c9665cca5a413d0cc9ccb84fd36bdb29c8161ee62a83f753213e96600319d7a045acbfdc65567232090dc84c47c8302d56e74d7d9683a50c2588b35969e93e1a86260f525cd8a128050aeb06c2094edf32e2fd11d340d09a414bdf1ee2e22de52b38a55eb037c098646"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000027c0), 0x1, 0x0) writev(r4, &(0x7f0000000300)=[{0x0}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000040000000900000000000000", @ANYBLOB="0400"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, 0x0, 0x0) 465.160105ms ago: executing program 6 (id=5286): r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) (async) syz_io_uring_setup(0x239, &(0x7f0000000400)={0x0, 0x5e5, 0x10100}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) memfd_secret(0x80000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x803, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) socket$inet6(0xa, 0x3, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) (async) syz_io_uring_setup(0x4f86, &(0x7f0000000680)={0x0, 0xd9cd, 0x400, 0xa}, 0x0, 0x0) pipe(&(0x7f0000000240)) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x1, 0x704d, 0x1, 0x3, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x200001, 0x100, 0xfe, 0x4a, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x200, 0x40, 0x19b2, 0x8000, 0x7, 0xc1, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x4, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x4, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x7, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xfffffed2, 0x7fffffff, 0xffff, 0x7, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0xf, 0x7, 0x800, 0x6c368002, 0x4, 0x1000007, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x5, 0x4, 0x4, 0x8, 0x40, 0xc14, 0x80000001, 0x3, 0x3, 0x7, 0x7, 0x8, 0x8, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x4, 0x0, 0xfff, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x0, 0x0, 0x6, 0x8, 0x9, 0x4, 0x2], [0x1, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x405, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0xa, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x10000, 0x7f, 0x7ff, 0xd, 0x400, 0x0, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0xfffffffc, 0x2, 0x5d9fff6, 0x3ff, 0xff, 0x4, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x0, 0x9, 0x0, 0xffff, 0x7, 0x6, 0x0, 0x81, 0x9, 0x2000002, 0x3, 0x100, 0x8, 0x0, 0x6, 0x10], [0xffefff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x9, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x7, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x201, 0xfff, 0x0, 0x0, 0x3c65, 0xa, 0x6, 0x80, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0x0, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13b, 0x7, 0x8, 0xb757, 0x2, 0x117, 0x996, 0x54, 0x8c1, 0x0, 0x5, 0x5, 0xf, 0x100, 0x10000400, 0x9, 0x5, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000500)={0x0, 0x2000000, 0x800, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0001007674690004000280da00"/24], 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) 236.469304ms ago: executing program 6 (id=5287): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r2 = epoll_create(0xd74f) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)={0x1}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r3 = dup(r0) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0xe, 0x0, 0x47524247, 0x2, 0x9, [{0x3, 0x4}, {0x5, 0x4}, {0x7f, 0x3}, {0x9, 0x6}, {0x4, 0x30000000}, {0x2, 0x38}, {0xe, 0x2}, {0x80000001, 0x15}], 0x9, 0x6, 0x8, 0x0, 0x4}}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x4000, 0x80000001, 0x450800}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xa900, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004085}, 0x40408c0) syz_io_uring_setup(0x3995, &(0x7f0000000140)={0x0, 0x9021, 0x2000, 0x1, 0x1c1, 0x0, r3}, &(0x7f0000000000), &(0x7f00000001c0)) 0s ago: executing program 8 (id=5288): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001080)={0x44, &(0x7f00000004c0)=ANY=[@ANYBLOB="00002e000000b808a5298623b496b66a6edbfd00b99f0b3696edcb9fe211e88d3ddb4ab2abeef85f969006f6cafe9a6904e5a62b6ecd6f4bdc906f35c9fc66a66f8a96"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000000)={0x28, 0x5, r3, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001080)={0x44, &(0x7f00000004c0)=ANY=[@ANYBLOB="00002e000000b808a5298623b496b66a6edbfd00b99f0b3696edcb9fe211e88d3ddb4ab2abeef85f969006f6cafe9a6904e5a62b6ecd6f4bdc906f35c9fc66a66f8a96"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000000)={0x28, 0x5, r3, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) kernel console output (not intermixed with test programs): ify_area+0x258/0x650 [ 1246.858686][T24405] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1246.858709][T24405] vfs_read+0x200/0x980 [ 1246.858766][T24405] ? __pfx___mutex_lock+0x10/0x10 [ 1246.858795][T24405] ? __pfx_vfs_read+0x10/0x10 [ 1246.858826][T24405] ? __fget_files+0x2a/0x420 [ 1246.858869][T24405] ? __fget_files+0x3a0/0x420 [ 1246.858891][T24405] ? __fget_files+0x2a/0x420 [ 1246.858924][T24405] ksys_read+0x145/0x250 [ 1246.858957][T24405] ? __pfx_ksys_read+0x10/0x10 [ 1246.858986][T24405] ? rcu_is_watching+0x15/0xb0 [ 1246.859030][T24405] ? do_syscall_64+0xbe/0x3b0 [ 1246.859053][T24405] do_syscall_64+0xfa/0x3b0 [ 1246.859071][T24405] ? lockdep_hardirqs_on+0x9c/0x150 [ 1246.859100][T24405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.859122][T24405] ? clear_bhb_loop+0x60/0xb0 [ 1246.859147][T24405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.859167][T24405] RIP: 0033:0x7fd2b7d8d33c [ 1246.859185][T24405] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1246.859204][T24405] RSP: 002b:00007fd2b8c03030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1246.859225][T24405] RAX: ffffffffffffffda RBX: 00007fd2b7fb5fa0 RCX: 00007fd2b7d8d33c [ 1246.859240][T24405] RDX: 000000000000000f RSI: 00007fd2b8c030a0 RDI: 0000000000000003 [ 1246.859253][T24405] RBP: 00007fd2b8c03090 R08: 0000000000000000 R09: 0000000000000000 [ 1246.859266][T24405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1246.859279][T24405] R13: 0000000000000000 R14: 00007fd2b7fb5fa0 R15: 00007fd2b80dfa28 [ 1246.859311][T24405] [ 1247.194801][ T10] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1247.590629][ T10] usb 1-1: device descriptor read/8, error -71 [ 1247.669441][T24431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1247.682220][T24431] team0: Port device batadv0 added [ 1247.781696][T24431] hub 9-0:1.0: USB hub found [ 1247.791118][T24431] hub 9-0:1.0: 1 port detected [ 1247.845443][ T10] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1247.898231][ T10] usb 1-1: device descriptor read/8, error -71 [ 1248.027487][ T10] usb usb1-port1: unable to enumerate USB device [ 1248.653321][T24451] loop6: detected capacity change from 0 to 7 [ 1248.683352][T24451] Dev loop6: unable to read RDB block 7 [ 1248.754692][T24451] loop6: AHDI p3 p4 [ 1248.774782][T24451] loop6: partition table partially beyond EOD, truncated [ 1248.807036][T24451] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1249.609063][T24462] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4800'. [ 1250.260476][T24468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4801'. [ 1250.530301][T16073] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1250.939427][T16073] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1250.965144][T16073] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1250.994498][T16073] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1251.004835][ T10] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1251.020127][T16073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.066693][T24464] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1251.096275][T16073] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1251.155118][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1251.192914][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1251.219516][ T10] usb 4-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 1251.249312][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.283123][ T10] usb 4-1: Product: syz [ 1251.305118][ T10] usb 4-1: Manufacturer: syz [ 1251.307283][T24464] binder: BINDER_SET_CONTEXT_MGR already set [ 1251.309727][ T10] usb 4-1: SerialNumber: syz [ 1251.341811][T24464] binder: 24463:24464 ioctl 4018620d 200000000040 returned -16 [ 1251.361171][T24466] binder: 24463:24466 ioctl c0306201 2000000003c0 returned -14 [ 1251.392720][T16073] usb 6-1: USB disconnect, device number 119 [ 1251.625476][ T10] usb 4-1: selecting invalid altsetting 1 [ 1251.672637][ T10] catc 4-1:8.0: Can't set altsetting 1. [ 1251.713471][ T10] catc 4-1:8.0: probe with driver catc failed with error -5 [ 1251.741027][T24484] geneve2: entered promiscuous mode [ 1251.763228][ T10] usb 4-1: USB disconnect, device number 81 [ 1251.769706][T24487] loop6: detected capacity change from 0 to 524287487 [ 1251.804370][T24487] Buffer I/O error on dev loop6, logical block 0, async page read [ 1251.865696][T24490] loop6: detected capacity change from 524287487 to 0 [ 1251.868289][T24487] Buffer I/O error on dev loop6, logical block 0, async page read [ 1251.913608][T24487] ldm_validate_partition_table(): Disk read failed. [ 1251.924941][T24487] Dev loop6: unable to read RDB block 0 [ 1251.939435][T24487] loop6: unable to read partition table [ 1251.961864][T24487] loop6: partition table beyond EOD, truncated [ 1251.978319][T24487] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 1252.208284][T24501] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4811'. [ 1252.311618][T24502] bond_slave_0: entered promiscuous mode [ 1252.318119][T24502] bond_slave_1: entered promiscuous mode [ 1252.339245][T24502] macvlan2: entered allmulticast mode [ 1252.363103][T24502] bond0: entered allmulticast mode [ 1252.372222][T24502] bond_slave_0: entered allmulticast mode [ 1252.386235][T24502] bond_slave_1: entered allmulticast mode [ 1252.415996][T24502] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1252.424548][T24502] bridge0: port 3(macvlan2) entered blocking state [ 1252.448543][T24502] bridge0: port 3(macvlan2) entered disabled state [ 1252.482599][T24506] xt_CT: No such helper "snmp" [ 1252.491733][T24502] macvlan2: entered promiscuous mode [ 1252.505305][T16073] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1252.506288][T24502] bond0: entered promiscuous mode [ 1252.532216][T24502] bridge0: port 3(macvlan2) entered blocking state [ 1252.540552][T24502] bridge0: port 3(macvlan2) entered forwarding state [ 1252.554394][T24515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4816'. [ 1252.569393][T24506] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1252.618954][T24506] kvm: pic: level sensitive irq not supported [ 1252.619382][T24506] kvm: pic: non byte read [ 1252.670928][T24522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.695247][T16073] usb 4-1: Using ep0 maxpacket: 8 [ 1252.741530][T24522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.766851][T16073] usb 4-1: config 0 has no interfaces? [ 1252.792091][T24522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.808214][T24522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.832221][T16073] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1252.889373][T16073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.952148][T16073] usb 4-1: config 0 descriptor?? [ 1253.307764][T24504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1253.367821][T24504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.453198][T16595] usb 4-1: USB disconnect, device number 82 [ 1253.564352][T24547] loop6: detected capacity change from 0 to 524287487 [ 1253.587541][T24547] Buffer I/O error on dev loop6, logical block 0, async page read [ 1253.627916][T24547] Buffer I/O error on dev loop6, logical block 0, async page read [ 1253.685251][T24548] loop6: detected capacity change from 524287487 to 0 [ 1253.685261][T24547] Buffer I/O error on dev loop6, logical block 0, async page read [ 1253.685385][T24547] ldm_validate_partition_table(): Disk read failed. [ 1253.789726][T24547] Dev loop6: unable to read RDB block 0 [ 1253.809580][T24547] loop6: unable to read partition table [ 1253.823677][T24547] loop6: partition table beyond EOD, truncated [ 1253.847148][T24547] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 1254.530175][T24565] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4825'. [ 1255.335355][T16073] usb 1-1: new low-speed USB device number 66 using dummy_hcd [ 1255.584765][T16073] usb 1-1: Invalid ep0 maxpacket: 64 [ 1255.725271][T16073] usb 1-1: new low-speed USB device number 67 using dummy_hcd [ 1255.892702][T24592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.901213][T16073] usb 1-1: Invalid ep0 maxpacket: 64 [ 1255.911819][T16073] usb usb1-port1: attempt power cycle [ 1255.918367][T24592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1255.954971][T24592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.974672][T24592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.284932][T16073] usb 1-1: new low-speed USB device number 68 using dummy_hcd [ 1256.315227][T16073] usb 1-1: Invalid ep0 maxpacket: 64 [ 1256.393170][T24598] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4832'. [ 1256.428583][T16595] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1256.431371][T24600] loop6: detected capacity change from 0 to 524287487 [ 1256.445368][T24600] Buffer I/O error on dev loop6, logical block 0, async page read [ 1256.453301][T24600] Buffer I/O error on dev loop6, logical block 0, async page read [ 1256.468007][T16073] usb 1-1: new low-speed USB device number 69 using dummy_hcd [ 1256.475787][T24600] Buffer I/O error on dev loop6, logical block 0, async page read [ 1256.505395][T16073] usb 1-1: Invalid ep0 maxpacket: 64 [ 1256.510972][T16073] usb usb1-port1: unable to enumerate USB device [ 1256.534936][T24602] loop6: detected capacity change from 524287487 to 0 [ 1256.536030][T24600] Buffer I/O error on dev loop6, logical block 0, async page read [ 1256.549825][T24600] ldm_validate_partition_table(): Disk read failed. [ 1256.558800][T24600] Dev loop6: unable to read RDB block 0 [ 1256.564397][T24600] loop6: unable to read partition table [ 1256.570333][T24600] loop6: partition table beyond EOD, truncated [ 1256.584324][T24600] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 1256.629044][T16595] usb 4-1: Using ep0 maxpacket: 8 [ 1256.636957][T16595] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 1256.692199][T16595] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.720005][T16595] usb 4-1: config 135 has no interface number 0 [ 1256.743029][T16595] usb 4-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 1256.795875][T16595] usb 4-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 1256.839902][T16595] usb 4-1: config 135 interface 230 has no altsetting 0 [ 1256.874518][T16595] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1256.904602][T16595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.936235][T16595] usb 4-1: Product: syz [ 1256.940424][T16595] usb 4-1: Manufacturer: syz [ 1256.964774][T16595] usb 4-1: SerialNumber: syz [ 1256.987629][T16595] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 1257.017838][T16595] usb 4-1: No valid video chain found. [ 1257.442523][T16595] usb 4-1: USB disconnect, device number 83 [ 1257.561012][T24629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1257.610029][T24629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1257.624587][T24629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1257.640403][T24629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.476606][ T10] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1258.675787][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1258.701390][ T10] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1258.719511][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.736658][ T10] usb 6-1: Product: syz [ 1258.745464][ T10] usb 6-1: Manufacturer: syz [ 1258.750087][ T10] usb 6-1: SerialNumber: syz [ 1258.765634][T16595] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1258.811039][ T10] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1258.823317][ T10] r8152-cfgselector 6-1: config 0 descriptor?? [ 1258.989538][T16595] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1258.999498][T16595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.011364][T16595] usb 4-1: Product: syz [ 1259.015848][T16595] usb 4-1: Manufacturer: syz [ 1259.020697][T16595] usb 4-1: SerialNumber: syz [ 1259.039251][T16595] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1259.071208][T16596] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1259.339706][ T10] r8152-cfgselector 6-1: USB disconnect, device number 120 [ 1259.902550][T24648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1259.933035][T24648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1259.979111][T24648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1259.992351][T24660] loop6: detected capacity change from 0 to 7 [ 1259.993078][T24648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.024058][T24660] Dev loop6: unable to read RDB block 7 [ 1260.053343][T24660] loop6: AHDI p1 p2 p4 [ 1260.078297][T24660] loop6: partition table partially beyond EOD, truncated [ 1260.098184][T24660] loop6: p1 start 926365495 is beyond EOD, truncated [ 1260.123829][T24660] loop6: p2 size 8 extends beyond EOD, truncated [ 1260.128060][T16596] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1260.204038][T16596] ath9k_htc: Failed to initialize the device [ 1260.227514][T24664] loop6: detected capacity change from 7 to 0 [ 1260.232517][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1260.330171][T16596] usb 4-1: ath9k_htc: USB layer deinitialized [ 1260.380476][T16595] usb 4-1: USB disconnect, device number 84 [ 1260.413590][ T5929] udevd[5929]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1260.759374][T24686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.772097][T24686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1261.958448][T24725] loop6: detected capacity change from 0 to 7 [ 1261.990253][T24725] Dev loop6: unable to read RDB block 7 [ 1262.006268][T24725] loop6: AHDI p1 p2 p4 [ 1262.017974][T24725] loop6: partition table partially beyond EOD, truncated [ 1262.039788][T24725] loop6: p1 start 926365495 is beyond EOD, truncated [ 1262.048777][T24725] loop6: p2 size 8 extends beyond EOD, truncated [ 1262.139001][T24729] loop6: detected capacity change from 0 to 524287487 [ 1262.162281][ T5929] Buffer I/O error on dev loop6, logical block 0, async page read [ 1262.177125][ T5929] Buffer I/O error on dev loop6, logical block 0, async page read [ 1262.354152][T24732] loop6: detected capacity change from 524287487 to 0 [ 1262.354180][ T5929] Buffer I/O error on dev loop6, logical block 0, async page read [ 1262.460965][ T5929] ldm_validate_partition_table(): Disk read failed. [ 1262.479741][ T5930] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1262.505297][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 1262.522808][ T5929] Dev loop6: unable to read RDB block 0 [ 1262.534822][ T5929] loop6: unable to read partition table [ 1262.551532][ T5929] loop6: partition table beyond EOD, truncated [ 1262.621781][ T5929] udevd[5929]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1262.655535][ T5930] usb 6-1: device descriptor read/64, error -32 [ 1262.762711][T24744] input input151: cannot allocate more than FF_MAX_EFFECTS effects [ 1262.800984][T24744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1262.841841][T24744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.914768][ T5930] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1262.923906][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 1263.078273][ T5930] usb 6-1: device descriptor read/64, error -32 [ 1263.229106][ T5930] usb usb6-port1: attempt power cycle [ 1263.335582][T16596] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1263.529537][T16596] usb 1-1: config 0 has no interfaces? [ 1263.543044][T16596] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1263.570524][T16596] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.587405][ T5930] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1263.599887][T16596] usb 1-1: Product: syz [ 1263.618266][T16596] usb 1-1: Manufacturer: syz [ 1263.627256][ T5930] usb 6-1: Using ep0 maxpacket: 8 [ 1263.630175][T16596] usb 1-1: SerialNumber: syz [ 1263.652314][T16596] usb 1-1: config 0 descriptor?? [ 1263.672513][ T5930] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1263.758823][ T5930] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.822464][ T5930] usb 6-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1263.894960][ T5930] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1263.900588][T24754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1263.917768][T24754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1263.947964][ T5930] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1263.957233][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.965712][ T5930] usb 6-1: Product: syz [ 1263.970040][ T5930] usb 6-1: Manufacturer: syz [ 1263.975004][ T5930] usb 6-1: SerialNumber: syz [ 1264.824907][T16595] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1264.984889][T16595] usb 4-1: Using ep0 maxpacket: 32 [ 1264.993665][T16595] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 1265.014384][T16595] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1265.035392][T16595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.063549][T16595] usb 4-1: Product: syz [ 1265.078719][T16595] usb 4-1: Manufacturer: syz [ 1265.108734][T16595] usb 4-1: SerialNumber: syz [ 1265.143490][T16595] usb 4-1: config 0 descriptor?? [ 1265.182978][T24775] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22 [ 1265.209819][T16595] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1265.316670][ T5930] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1265.336233][ T5930] usb 6-1: USB disconnect, device number 123 [ 1265.478845][T24791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.560768][T24791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.578510][T24794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.612747][T24794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.844830][ T5930] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1266.016963][ T5930] usb 6-1: device descriptor read/64, error -71 [ 1266.236304][T16596] usb 1-1: USB disconnect, device number 70 [ 1266.268087][ T5930] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1266.415261][ T5930] usb 6-1: device descriptor read/64, error -71 [ 1266.462091][T24813] loop6: detected capacity change from 0 to 7 [ 1266.483147][T24813] Dev loop6: unable to read RDB block 7 [ 1266.500849][T24813] loop6: AHDI p1 p2 p4 [ 1266.514827][T24813] loop6: partition table partially beyond EOD, truncated [ 1266.532196][T24813] loop6: p1 start 926365495 is beyond EOD, truncated [ 1266.542882][ T5930] usb usb6-port1: attempt power cycle [ 1266.552500][T24813] loop6: p2 size 8 extends beyond EOD, truncated [ 1266.667774][ T5929] udevd[5929]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1266.871382][T24831] dvmrp0: entered allmulticast mode [ 1266.895841][ T5930] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1266.935533][ T5930] usb 6-1: device descriptor read/8, error -71 [ 1267.185093][ T5930] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1267.216517][ T5930] usb 6-1: device descriptor read/8, error -71 [ 1267.338814][ T5930] usb usb6-port1: unable to enumerate USB device [ 1267.465575][T16595] usb 4-1: USB disconnect, device number 85 [ 1267.577696][ T6861] udevd[6861]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1267.733294][T24856] loop2: detected capacity change from 0 to 7 [ 1267.761492][T24856] Dev loop2: unable to read RDB block 7 [ 1267.790509][T24856] loop2: AHDI p1 p2 p3 [ 1267.796305][T24856] loop2: partition table partially beyond EOD, truncated [ 1267.803844][T24856] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1267.812981][T24856] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1268.604531][T24873] netlink: 'syz.6.4881': attribute type 21 has an invalid length. [ 1268.634607][T24873] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4881'. [ 1268.693689][T24876] loop9: detected capacity change from 0 to 7 [ 1268.717361][T24876] Dev loop9: unable to read RDB block 7 [ 1268.723787][T24876] loop9: unable to read partition table [ 1268.733697][T24873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.734269][T24876] loop9: partition table beyond EOD, truncated [ 1268.780033][T24873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.792081][T24876] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1269.134933][ T5930] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1269.304824][ T5930] usb 6-1: Using ep0 maxpacket: 16 [ 1269.312532][ T5930] usb 6-1: config 0 has no interfaces? [ 1269.321626][ T5930] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1269.333082][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.343335][ T5930] usb 6-1: Product: syz [ 1269.349820][ T5930] usb 6-1: Manufacturer: syz [ 1269.356265][ T5930] usb 6-1: SerialNumber: syz [ 1269.363856][ T5930] usb 6-1: config 0 descriptor?? [ 1269.768312][T24892] netlink: 300 bytes leftover after parsing attributes in process `syz.0.4887'. [ 1269.812962][T24895] loop2: detected capacity change from 0 to 7 [ 1269.822252][T24895] Dev loop2: unable to read RDB block 7 [ 1269.828961][T24895] loop2: AHDI p1 p2 p3 [ 1269.835454][T24895] loop2: partition table partially beyond EOD, truncated [ 1269.842788][T24895] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1269.850256][T24895] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1270.624792][T16596] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1270.724786][ T5922] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1270.774900][T16596] usb 1-1: Using ep0 maxpacket: 32 [ 1270.782650][T16596] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1270.791628][T16596] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1270.800868][T16596] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.809330][T16596] usb 1-1: Product: syz [ 1270.813595][T16596] usb 1-1: Manufacturer: syz [ 1270.819046][T16596] usb 1-1: SerialNumber: syz [ 1270.827034][T16596] usb 1-1: config 0 descriptor?? [ 1270.865131][ T5922] usb 4-1: device descriptor read/64, error -71 [ 1271.104880][ T5922] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1271.251162][T16596] gs_usb 1-1:0.0: Couldn't get device config: (err=-71) [ 1271.272180][T16596] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 1271.280326][ T5922] usb 4-1: device descriptor read/64, error -71 [ 1271.298969][T16596] usb 1-1: USB disconnect, device number 71 [ 1271.301674][T24916] fuse: Bad value for 'fd' [ 1271.396401][ T5922] usb usb4-port1: attempt power cycle [ 1271.734964][ T5922] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1271.767586][ T5922] usb 4-1: device descriptor read/8, error -71 [ 1271.796833][ T5930] usb 6-1: USB disconnect, device number 2 [ 1271.806151][T16073] usb 1-1: new low-speed USB device number 72 using dummy_hcd [ 1271.954820][T16073] usb 1-1: device descriptor read/64, error -71 [ 1272.014813][ T5922] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1272.035475][ T5922] usb 4-1: device descriptor read/8, error -71 [ 1272.145727][ T5922] usb usb4-port1: unable to enumerate USB device [ 1272.194990][T16073] usb 1-1: new low-speed USB device number 73 using dummy_hcd [ 1272.345747][T16073] usb 1-1: device descriptor read/64, error -71 [ 1272.476352][T16073] usb usb1-port1: attempt power cycle [ 1272.824769][T16073] usb 1-1: new low-speed USB device number 74 using dummy_hcd [ 1272.948694][T16073] usb 1-1: device descriptor read/8, error -71 [ 1273.224792][T16073] usb 1-1: new low-speed USB device number 75 using dummy_hcd [ 1273.296242][T16073] usb 1-1: device descriptor read/8, error -71 [ 1273.435413][T16073] usb usb1-port1: unable to enumerate USB device [ 1273.805862][T24954] loop3: detected capacity change from 0 to 1 [ 1273.840157][T24954] Dev loop3: unable to read RDB block 1 [ 1273.854843][T24954] loop3: unable to read partition table [ 1273.871128][T24954] loop3: partition table beyond EOD, truncated [ 1273.887661][T24954] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1274.034811][ T5922] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1274.157281][T24961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.183734][T24961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.214800][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 1274.226690][ T5922] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 1274.266851][ T5922] usb 4-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1274.289136][T24932] Bluetooth: hci2: command 0x0405 tx timeout [ 1274.314084][ T5922] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1274.362259][ T5922] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1274.411036][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.448423][ T5922] usb 4-1: Product: ⎨쬭 [ 1274.463328][ T5922] usb 4-1: Manufacturer: ᱊ [ 1274.478135][ T5922] usb 4-1: SerialNumber: Х [ 1274.507109][T24953] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1274.512318][T24966] random: crng reseeded on system resumption [ 1274.545450][T24953] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1274.789310][ T5922] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 90 if 0 alt 2 proto 1 vid 0x0525 pid 0xA4A8 [ 1274.828663][ T5922] usb 4-1: USB disconnect, device number 90 [ 1274.886551][ T5922] usblp0: removed [ 1274.941042][T24974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.976296][T24974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1275.063510][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1275.063547][ T30] audit: type=1326 audit(1750848510.675:7694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24973 comm="syz.6.4908" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2b7d8e929 code=0x80000000 [ 1275.851456][T24988] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4912'. [ 1275.939577][T24991] loop6: detected capacity change from 0 to 524287487 [ 1275.959134][T24991] Buffer I/O error on dev loop6, logical block 0, async page read [ 1275.982830][T24991] Buffer I/O error on dev loop6, logical block 0, async page read [ 1276.045360][T24992] loop6: detected capacity change from 524287487 to 0 [ 1276.052362][T24991] Buffer I/O error on dev loop6, logical block 0, async page read [ 1276.074500][T24991] ldm_validate_partition_table(): Disk read failed. [ 1276.100533][T24991] Dev loop6: unable to read RDB block 0 [ 1276.131596][T24991] loop6: unable to read partition table [ 1276.147141][T24991] loop6: partition table beyond EOD, truncated [ 1276.168052][T24991] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 1276.235425][T24995] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1276.481671][T25008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4919'. [ 1276.533412][T25010] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4921'. [ 1276.742818][T25010] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4921'. [ 1276.800911][T25004] loop2: detected capacity change from 0 to 7 [ 1276.814060][T25004] Dev loop2: unable to read RDB block 7 [ 1276.821901][T25004] loop2: AHDI p1 p2 p3 [ 1276.831896][T25004] loop2: partition table partially beyond EOD, truncated [ 1276.841286][T25004] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1276.848335][T25004] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1276.881081][T25021] loop6: detected capacity change from 0 to 7 [ 1276.907815][T25021] Dev loop6: unable to read RDB block 7 [ 1276.918475][T25021] loop6: AHDI p1 p2 p4 [ 1276.933170][T25021] loop6: partition table partially beyond EOD, truncated [ 1276.956104][T25021] loop6: p1 start 926365495 is beyond EOD, truncated [ 1276.973182][T25021] loop6: p2 size 8 extends beyond EOD, truncated [ 1277.057343][ T6154] udevd[6154]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1277.743421][T25041] loop6: detected capacity change from 0 to 524287487 [ 1277.752870][T25041] Buffer I/O error on dev loop6, logical block 0, async page read [ 1277.762629][T25041] Buffer I/O error on dev loop6, logical block 0, async page read [ 1277.772308][T25041] Buffer I/O error on dev loop6, logical block 0, async page read [ 1277.782352][T25041] Buffer I/O error on dev loop6, logical block 0, async page read [ 1277.790825][T25041] Buffer I/O error on dev loop6, logical block 0, async page read [ 1277.802824][T25041] Buffer I/O error on dev loop6, logical block 0, async page read [ 1277.812617][T25041] Buffer I/O error on dev loop6, logical block 0, async page read [ 1277.844953][T25043] loop6: detected capacity change from 524287487 to 0 [ 1277.851900][T25041] ldm_validate_partition_table(): Disk read failed. [ 1277.865983][T25041] Dev loop6: unable to read RDB block 0 [ 1277.871590][T25041] loop6: unable to read partition table [ 1277.879008][T25041] loop6: partition table beyond EOD, truncated [ 1277.890837][T25041] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 1277.920424][ T30] audit: type=1326 audit(1750848513.535:7695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25038 comm="syz.3.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c738e929 code=0x7ffc0000 [ 1277.950321][ T30] audit: type=1326 audit(1750848513.535:7696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25038 comm="syz.3.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c738e929 code=0x7ffc0000 [ 1277.980298][ T30] audit: type=1326 audit(1750848513.535:7697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25038 comm="syz.3.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc4c738e929 code=0x7ffc0000 [ 1278.013649][ T30] audit: type=1326 audit(1750848513.535:7698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25038 comm="syz.3.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c738e929 code=0x7ffc0000 [ 1278.042416][ T30] audit: type=1326 audit(1750848513.535:7699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25038 comm="syz.3.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c738e929 code=0x7ffc0000 [ 1278.111293][ T30] audit: type=1326 audit(1750848513.555:7700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25038 comm="syz.3.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc4c738e929 code=0x7ffc0000 [ 1278.149930][ T30] audit: type=1326 audit(1750848513.555:7701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25038 comm="syz.3.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c738e929 code=0x7ffc0000 [ 1278.176269][T25049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4932'. [ 1278.185990][T25049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4932'. [ 1278.214329][T25050] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4932'. [ 1278.215744][ T30] audit: type=1326 audit(1750848513.555:7702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25038 comm="syz.3.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c738e929 code=0x7ffc0000 [ 1278.250353][T25049] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4932'. [ 1278.260269][ T30] audit: type=1326 audit(1750848513.555:7703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25038 comm="syz.3.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc4c738e929 code=0x7ffc0000 [ 1278.379035][T25054] loop6: detected capacity change from 0 to 7 [ 1278.392942][T25055] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4933'. [ 1278.398089][T25054] Dev loop6: unable to read RDB block 7 [ 1278.414630][T25055] openvswitch: netlink: nsh attr 8224 is out of range max 3 [ 1278.417799][T25054] loop6: AHDI p1 p2 p4 [ 1278.430521][T25055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1278.439594][T25054] loop6: partition table partially beyond EOD, truncated [ 1278.459683][T25054] loop6: p1 start 926365495 is beyond EOD, truncated [ 1278.469753][T25054] loop6: p2 size 8 extends beyond EOD, truncated [ 1278.540379][ T5929] udevd[5929]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1278.775070][T25059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4936'. [ 1278.851482][T25062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1278.887014][T25062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.916635][T25058] loop2: detected capacity change from 0 to 7 [ 1278.930285][ T5929] Dev loop2: unable to read RDB block 7 [ 1278.936278][ T5929] loop2: AHDI p1 p2 p3 [ 1278.941689][ T5929] loop2: partition table partially beyond EOD, truncated [ 1278.953782][ T5929] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1278.963619][ T5929] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1278.979998][T25058] Dev loop2: unable to read RDB block 7 [ 1278.994079][T25058] loop2: AHDI p1 p2 p3 [ 1278.999699][T25058] loop2: partition table partially beyond EOD, truncated [ 1279.011365][T25058] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1279.018343][T25058] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1279.239931][T25065] syz_tun: left promiscuous mode [ 1279.262131][T25065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1279.482805][T25077] loop6: detected capacity change from 0 to 524287487 [ 1279.498829][ T5929] ldm_validate_partition_table(): Disk read failed. [ 1279.507230][ T5929] Dev loop6: unable to read RDB block 0 [ 1279.515699][ T5929] loop6: unable to read partition table [ 1279.530648][T25077] ldm_validate_partition_table(): Disk read failed. [ 1279.539539][T25077] Dev loop6: unable to read RDB block 0 [ 1279.554837][ T5930] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1279.575990][T25080] loop6: detected capacity change from 524287487 to 0 [ 1279.576129][T25077] loop6: unable to read partition table [ 1279.593041][T25077] loop6: partition table beyond EOD, truncated [ 1279.600293][T25077] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 1279.646236][T16073] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1279.715019][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 1279.721944][ T5930] usb 4-1: config 1 interface 0 altsetting 12 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1279.743106][ T5930] usb 4-1: config 1 interface 0 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1279.777849][ T5930] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1279.787125][ T5930] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1279.808393][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.816610][T16073] usb 6-1: Using ep0 maxpacket: 32 [ 1279.829716][ T5930] usb 4-1: Product: ࠧ [ 1279.833667][T25085] loop6: detected capacity change from 0 to 7 [ 1279.834208][ T5930] usb 4-1: Manufacturer: ۜ໩鐜瘻爡ذペ殺ꏰ綽澊鶹꒢豽㛵輺ᑹᚠ⪥㢡ㄬ຀瘊藃寎」얕祩ꨙ์⣻목舯밲懊顖ꂕ땺蘹⢹喝緖덅㞨獟ۤꊶ柸⤦䐳㕟橄펱联㧶师ٙ庐東铩᫭瘸덍⑟吖ᓌ輸䳻욶括ሷ瑰飿戏棒揥ﬥ቙箨畇얈縅岰춪셕 [ 1279.834486][T16073] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1279.851511][ T5929] Dev loop6: unable to read RDB block 7 [ 1279.877463][ T5930] usb 4-1: SerialNumber: 季㫞䐿㾚⹒襔▸䴓꾈먷ǹ櫆ₑ魏㢄㴍搮锌뼊ࢽ⩟፻爈䉓䗣抄卻秡Თ蚓聥ꬨꗜଙ磂™薑⬴濵¸롚危꽷俿罙闔弤늤渉쨇츷ꘙ坥얗包ቸ掓鍖礛첅ꄱ䍊椾荃퀡갻伪ఊ蜧掭떚ﶞ셿쒹ተ䗨薌堀꾢軅쌕ᬰꅲ嚊뿖箘⇗쀊អ晼坹앯ꊛ [ 1279.905526][T16073] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1279.924459][ T5929] loop6: AHDI p1 p2 p4 [ 1279.930999][T25069] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1279.934051][ T5929] loop6: partition table partially beyond EOD, [ 1279.939671][T25069] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1279.942498][ T5929] truncated [ 1279.946677][T16073] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1279.953874][ T5929] loop6: p1 start 926365495 is beyond EOD, [ 1279.956724][T16073] usb 6-1: config 1 has no interface number 0 [ 1279.956795][T16073] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1279.956823][T16073] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1279.956866][T16073] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1279.956913][T16073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.973039][ T5929] truncated [ 1280.008212][T16073] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1280.012489][ T5929] loop6: p2 size 8 extends beyond EOD, truncated [ 1280.043302][T25085] Dev loop6: unable to read RDB block 7 [ 1280.049581][T25085] loop6: AHDI p1 p2 p4 [ 1280.053901][T25085] loop6: partition table partially beyond EOD, truncated [ 1280.065305][T25085] loop6: p1 start 926365495 is beyond EOD, truncated [ 1280.072821][T25085] loop6: p2 size 8 extends beyond EOD, truncated [ 1280.118890][ T5929] udevd[5929]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1280.180760][ T5929] udevd[5929]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1280.207134][T16073] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1280.214084][T25069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.293260][T25089] loop2: detected capacity change from 0 to 7 [ 1280.296132][T25069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.322642][T25089] Dev loop2: unable to read RDB block 7 [ 1280.331548][T25089] loop2: AHDI p1 p2 p3 [ 1280.336006][T25089] loop2: partition table partially beyond EOD, truncated [ 1280.343373][T25089] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1280.351320][T25089] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1280.408682][ T5930] usb 4-1: USB disconnect, device number 91 [ 1280.492561][T25075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.520261][T25075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.553873][T16073] usb 6-1: USB disconnect, device number 3 [ 1280.600674][T16073] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1281.277114][T25103] __nla_validate_parse: 2 callbacks suppressed [ 1281.277127][T25103] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4949'. [ 1281.755301][T25122] QAT: failed to copy from user cfg_data. [ 1281.777095][T25122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4954'. [ 1281.834767][ T30] audit: type=1326 audit(1750848517.445:7704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25120 comm="syz.6.4955" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd2b7d8e929 code=0x0 [ 1281.895767][T25128] loop6: detected capacity change from 0 to 7 [ 1281.907331][T25128] Dev loop6: unable to read RDB block 7 [ 1281.916962][T25128] loop6: AHDI p1 p2 p4 [ 1281.925131][T25128] loop6: partition table partially beyond EOD, truncated [ 1281.941026][T25128] loop6: p1 start 926365495 is beyond EOD, truncated [ 1281.955013][T25128] loop6: p2 size 8 extends beyond EOD, truncated [ 1282.083077][ T5929] udevd[5929]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1282.606466][ T5930] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1282.795237][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 1282.807336][ T5930] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1282.822766][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1282.847006][ T5930] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1282.860893][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.872418][ T5930] usb 4-1: Product: syz [ 1282.878160][ T5930] usb 4-1: Manufacturer: syz [ 1282.882947][ T5930] usb 4-1: SerialNumber: syz [ 1282.920412][ T5930] usb 4-1: config 0 descriptor?? [ 1282.957286][ T5930] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1282.993762][ T5930] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1283.325943][T25151] loop2: detected capacity change from 0 to 7 [ 1283.357487][T25151] Dev loop2: unable to read RDB block 7 [ 1283.377606][T25151] loop2: AHDI p1 p2 p3 [ 1283.386621][T25151] loop2: partition table partially beyond EOD, truncated [ 1283.397113][T25151] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1283.409207][T25151] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1283.597847][ T5930] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1283.675522][ T5930] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1283.818253][ T30] audit: type=1326 audit(1750848519.435:7705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25154 comm="syz.5.4963" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa78938e929 code=0x0 [ 1284.289049][T25140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1284.305795][T25140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1284.346765][T25140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1284.379782][T25140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1284.424853][ T5930] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 1284.433898][T25169] binder: BINDER_SET_CONTEXT_MGR already set [ 1284.440000][ T5930] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 1284.452224][T25169] binder: 25168:25169 ioctl 4018620d 200000000040 returned -16 [ 1284.625033][ T5930] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 1284.654153][ T5930] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1284.816992][ T5930] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 1284.837398][ T5930] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1284.845416][ T5930] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1284.860256][ T5930] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1284.986678][ T5930] usb 4-1: USB disconnect, device number 92 [ 1285.305106][ T24] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1285.478717][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1285.501216][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1285.558009][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1285.650919][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1285.731343][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.838478][ T24] usb 1-1: config 0 descriptor?? [ 1285.890383][ T24] em28xx 1-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 1286.097733][T25184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1286.143286][T25184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1286.161866][ T24] usb 1-1: USB disconnect, device number 76 [ 1286.705213][T25223] netlink: 388 bytes leftover after parsing attributes in process `syz.3.4983'. [ 1287.185122][ T24] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1287.347685][ T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1287.357516][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.368244][ T5922] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1287.376402][ T24] usb 1-1: config 0 descriptor?? [ 1287.399222][ T24] cp210x 1-1:0.0: cp210x converter detected [ 1287.547708][ T5922] usb 6-1: config 1 has an invalid interface number: 5 but max is 2 [ 1287.555973][ T5922] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.570047][ T5922] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1287.579866][ T5922] usb 6-1: config 1 has no interface number 1 [ 1287.589669][ T5922] usb 6-1: too many endpoints for config 1 interface 5 altsetting 70: 232, using maximum allowed: 30 [ 1287.609133][ T5922] usb 6-1: config 1 interface 5 altsetting 70 has 0 endpoint descriptors, different from the interface descriptor's value: 232 [ 1287.610297][ T24] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1287.644639][T16073] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 1287.666411][ T5922] usb 6-1: config 1 interface 5 has no altsetting 0 [ 1287.669445][ T24] cp210x 1-1:0.0: querying part number failed [ 1287.695215][ T5922] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1287.705403][ T24] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1287.719122][T25246] loop6: detected capacity change from 0 to 7 [ 1287.725500][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.731941][ T24] usb 1-1: USB disconnect, device number 77 [ 1287.733532][ T5922] usb 6-1: Product: syz [ 1287.733551][ T5922] usb 6-1: Manufacturer: й [ 1287.733569][ T5922] usb 6-1: SerialNumber: syz [ 1287.756872][T25246] Dev loop6: unable to read RDB block 7 [ 1287.762454][T25246] loop6: AHDI p1 p2 p4 [ 1287.767339][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1287.772273][T25246] loop6: partition table partially beyond EOD, truncated [ 1287.785663][T25246] loop6: p1 start 926365495 is beyond EOD, truncated [ 1287.792901][T25246] loop6: p2 size 8 extends beyond EOD, truncated [ 1287.793893][ T24] cp210x 1-1:0.0: device disconnected [ 1287.836617][T16073] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.857950][T16073] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1287.877069][ T6154] udevd[6154]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1287.897520][T16073] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1287.912639][T16073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1287.945769][T16073] usb 4-1: SerialNumber: syz [ 1287.962584][T16073] usb 4-1: 0:2 : does not exist [ 1287.971289][T16073] usb 4-1: unit 255 not found! [ 1288.025467][ T5922] usb 6-1: 0:2 : does not exist [ 1288.086461][ T5922] usb 6-1: USB disconnect, device number 4 [ 1288.117045][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1288.202284][T16073] usb 4-1: USB disconnect, device number 93 [ 1288.584937][ T24] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1288.761525][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1288.803844][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1288.834557][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1288.846848][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1288.865408][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1288.877152][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.885272][T16073] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1288.900445][ T24] usb 1-1: config 0 descriptor?? [ 1288.906527][T25257] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1289.077838][T16073] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.137514][T16073] usb 6-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 1289.175532][T16073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.342056][ T24] plantronics 0003:047F:FFFF.0056: No inputs registered, leaving [ 1289.355935][T16073] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1289.367266][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1289.396685][ T24] plantronics 0003:047F:FFFF.0056: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1289.405108][T16595] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1289.464274][ T24] usb 6-1: USB disconnect, device number 5 [ 1289.480000][T25274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.493872][T25273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.507431][T25274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.515989][T25273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.594873][T16595] usb 4-1: Using ep0 maxpacket: 8 [ 1289.602000][T16595] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1289.611274][T16595] usb 4-1: config 0 has no interface number 0 [ 1289.619494][T16595] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1289.628818][T16595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.637064][T16595] usb 4-1: Product: syz [ 1289.641263][T16595] usb 4-1: Manufacturer: syz [ 1289.646974][T16595] usb 4-1: SerialNumber: syz [ 1289.656084][T16595] usb 4-1: config 0 descriptor?? [ 1289.706310][T25277] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.4994'. [ 1289.715931][T25277] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4994'. [ 1289.868495][T16595] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 1289.881518][T16595] usb 4-1: No streaming interface found for terminal 6. [ 1289.893938][T16595] usb 4-1: USB disconnect, device number 94 [ 1290.070979][T25281] loop6: detected capacity change from 0 to 7 [ 1290.078837][T25281] Dev loop6: unable to read RDB block 7 [ 1290.084527][T25281] loop6: AHDI p1 p2 p4 [ 1290.088933][T25281] loop6: partition table partially beyond EOD, truncated [ 1290.097059][T25281] loop6: p1 start 926365495 is beyond EOD, truncated [ 1290.104877][T25281] loop6: p2 size 8 extends beyond EOD, truncated [ 1290.180250][ T5929] udevd[5929]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1290.704795][ T10] usb 1-1: reset high-speed USB device number 78 using dummy_hcd [ 1290.847317][T24932] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1290.858622][T24932] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1290.866916][T24932] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1290.875665][T24932] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1290.884027][T24932] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1290.891195][ T10] usb 1-1: device descriptor read/64, error -32 [ 1291.000651][ T2944] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1291.115181][ T2944] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1291.144903][ T10] usb 1-1: reset high-speed USB device number 78 using dummy_hcd [ 1291.184413][ T2944] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1291.203969][T25284] chnl_net:caif_netlink_parms(): no params data found [ 1291.261235][ T2944] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1291.294942][ T10] usb 1-1: device descriptor read/64, error -32 [ 1291.321318][T25284] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.329404][T25284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.341752][T25284] bridge_slave_0: entered allmulticast mode [ 1291.358588][T25284] bridge_slave_0: entered promiscuous mode [ 1291.371028][T25284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.382938][T25284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.390268][T25284] bridge_slave_1: entered allmulticast mode [ 1291.400842][T25284] bridge_slave_1: entered promiscuous mode [ 1291.448740][T25284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1291.488236][T25284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1291.535241][ T10] usb 1-1: reset high-speed USB device number 78 using dummy_hcd [ 1291.568612][ T10] usb 1-1: device descriptor read/8, error -32 [ 1291.603387][T25284] team0: Port device team_slave_0 added [ 1291.618439][T25284] team0: Port device team_slave_1 added [ 1291.688488][ T2944] bridge_slave_1: left promiscuous mode [ 1291.694725][ T2944] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.708620][ T2944] bridge_slave_0: left promiscuous mode [ 1291.714762][ T2944] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.040340][ T2944] dvmrp0 (unregistering): left allmulticast mode [ 1292.308841][ T2944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1292.326504][ T2944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1292.354194][ T2944] bond0 (unregistering): (slave team0): Releasing backup interface [ 1292.369348][ T2944] team0: left allmulticast mode [ 1292.401917][ T2944] bond0 (unregistering): Released all slaves [ 1292.658853][ T2944] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1292.683079][ T2944] bond1 (unregistering): (slave vlan2): Releasing active interface [ 1292.701619][ T2944] bond1 (unregistering): Released all slaves [ 1292.721503][ T2944] bond2 (unregistering): Released all slaves [ 1292.760461][T25284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1292.768121][ T10] usb 1-1: reset high-speed USB device number 78 using dummy_hcd [ 1292.788421][T25284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1292.828686][ T10] usb 1-1: device reset changed ep0 maxpacket size! [ 1292.838051][ T5922] usb 1-1: USB disconnect, device number 78 [ 1292.856343][T25284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1292.890584][T25284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1292.900260][T25284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1292.934806][T24932] Bluetooth: hci3: command tx timeout [ 1292.960702][T25284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1292.971073][T25330] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5015'. [ 1293.004893][ T5922] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1293.018414][ T2944] ave_0: left promiscuous mode [ 1293.076100][T25330] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5015'. [ 1293.119348][ T2944] tipc: Disabling bearer [ 1293.125335][ T2944] tipc: Left network mode [ 1293.153059][T25284] hsr_slave_0: entered promiscuous mode [ 1293.167914][T25284] hsr_slave_1: entered promiscuous mode [ 1293.177382][ T2944] IPVS: stopping backup sync thread 22700 ... [ 1293.188029][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 1293.195678][T25284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1293.210305][T25284] Cannot create hsr debugfs directory [ 1293.222174][ T5922] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 1293.243611][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.258324][ T5922] usb 1-1: Product: syz [ 1293.261225][T25333] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5016'. [ 1293.271388][ T5922] usb 1-1: Manufacturer: syz [ 1293.271407][ T5922] usb 1-1: SerialNumber: syz [ 1293.276863][ T5922] usb 1-1: config 0 descriptor?? [ 1293.293461][ T5922] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1293.309374][ T5922] usb 1-1: Detected FT4233HP [ 1293.377739][T25333] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5016'. [ 1293.634641][T25339] loop7: detected capacity change from 0 to 1 [ 1293.662210][T25339] FAULT_INJECTION: forcing a failure. [ 1293.662210][T25339] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.709610][T25339] CPU: 1 UID: 0 PID: 25339 Comm: syz.7.5017 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 1293.709635][T25339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1293.709646][T25339] Call Trace: [ 1293.709653][T25339] [ 1293.709662][T25339] dump_stack_lvl+0x189/0x250 [ 1293.709693][T25339] ? __pfx____ratelimit+0x10/0x10 [ 1293.709719][T25339] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1293.709746][T25339] ? __pfx__printk+0x10/0x10 [ 1293.709767][T25339] ? __pfx___might_resched+0x10/0x10 [ 1293.709794][T25339] ? fs_reclaim_acquire+0x7d/0x100 [ 1293.709819][T25339] should_fail_ex+0x414/0x560 [ 1293.709846][T25339] should_failslab+0xa8/0x100 [ 1293.709866][T25339] __kmalloc_cache_noprof+0x70/0x3d0 [ 1293.709884][T25339] ? alloc_pipe_info+0xe9/0x4d0 [ 1293.709907][T25339] alloc_pipe_info+0xe9/0x4d0 [ 1293.709926][T25339] splice_direct_to_actor+0xa5d/0xcc0 [ 1293.709947][T25339] ? aa_file_perm+0x11f/0xed0 [ 1293.709970][T25339] ? aa_file_perm+0x3e7/0xed0 [ 1293.710001][T25339] ? __lock_acquire+0xab9/0xd20 [ 1293.710026][T25339] ? __pfx_direct_splice_actor+0x10/0x10 [ 1293.710045][T25339] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1293.710064][T25339] ? __pfx_aa_file_perm+0x10/0x10 [ 1293.710093][T25339] do_splice_direct+0x181/0x270 [ 1293.710115][T25339] ? __pfx_do_splice_direct+0x10/0x10 [ 1293.710134][T25339] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1293.710155][T25339] ? bpf_lsm_file_permission+0x9/0x20 [ 1293.710179][T25339] ? security_file_permission+0x75/0x290 [ 1293.710200][T25339] ? rw_verify_area+0x258/0x650 [ 1293.710229][T25339] do_sendfile+0x4da/0x7e0 [ 1293.710251][T25339] ? __pfx_vfs_write+0x10/0x10 [ 1293.710282][T25339] ? __pfx_do_sendfile+0x10/0x10 [ 1293.710304][T25339] ? __fget_files+0x3a0/0x420 [ 1293.710333][T25339] __se_sys_sendfile64+0x13e/0x190 [ 1293.710355][T25339] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1293.710373][T25339] ? rcu_is_watching+0x15/0xb0 [ 1293.710404][T25339] ? do_syscall_64+0xbe/0x3b0 [ 1293.710423][T25339] do_syscall_64+0xfa/0x3b0 [ 1293.710437][T25339] ? lockdep_hardirqs_on+0x9c/0x150 [ 1293.710460][T25339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.710476][T25339] ? clear_bhb_loop+0x60/0xb0 [ 1293.710497][T25339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.710513][T25339] RIP: 0033:0x7f3a2338e929 [ 1293.710529][T25339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1293.710545][T25339] RSP: 002b:00007f3a24230038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1293.710563][T25339] RAX: ffffffffffffffda RBX: 00007f3a235b5fa0 RCX: 00007f3a2338e929 [ 1293.710576][T25339] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1293.710587][T25339] RBP: 00007f3a24230090 R08: 0000000000000000 R09: 0000000000000000 [ 1293.710605][T25339] R10: 0000000024002deb R11: 0000000000000246 R12: 0000000000000001 [ 1293.710617][T25339] R13: 0000000000000000 R14: 00007f3a235b5fa0 R15: 00007f3a236dfa28 [ 1293.710644][T25339] [ 1294.235300][ T2944] hsr_slave_0: left promiscuous mode [ 1294.295866][ T2944] hsr_slave_1: left promiscuous mode [ 1294.332274][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1294.343285][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1294.363186][ T5922] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1294.388337][ T5922] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1294.392120][T25356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1294.411726][T25356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1294.420436][ T5922] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1294.574894][ T5922] usb 1-1: USB disconnect, device number 79 [ 1294.622615][ T5922] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1294.642737][ T5922] ftdi_sio 1-1:0.0: device disconnected [ 1294.668699][T25361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1294.684841][ T24] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1294.692628][T25361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1294.995551][ T24] usb 4-1: config 0 has no interfaces? [ 1295.005249][T19702] Bluetooth: hci3: command tx timeout [ 1295.124376][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1295.142528][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.154207][ T24] usb 4-1: Product: syz [ 1295.159491][ T24] usb 4-1: Manufacturer: syz [ 1295.165612][ T24] usb 4-1: SerialNumber: syz [ 1295.188265][ T24] usb 4-1: config 0 descriptor?? [ 1295.537685][ T2944] team0 (unregistering): Port device team_slave_1 removed [ 1295.588398][ T2944] team0 (unregistering): Port device C removed [ 1297.095067][T19702] Bluetooth: hci3: command tx timeout [ 1297.231826][T25386] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1297.272006][ T2944] IPVS: stop unused estimator thread 0... [ 1297.281771][T25388] netlink: 'syz.0.5024': attribute type 14 has an invalid length. [ 1297.304831][T25389] binder: 25387:25389 ioctl c0306201 200000000540 returned -14 [ 1297.336507][T25386] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1297.698089][T25400] loop6: detected capacity change from 0 to 524287487 [ 1297.722182][T25400] buffer_io_error: 31 callbacks suppressed [ 1297.722194][T25400] Buffer I/O error on dev loop6, logical block 0, async page read [ 1297.818065][T25402] loop6: detected capacity change from 524287487 to 0 [ 1297.818079][T25400] Buffer I/O error on dev loop6, logical block 0, async page read [ 1297.818233][T25400] ldm_validate_partition_table(): Disk read failed. [ 1297.872329][T25284] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1297.928363][T25400] Dev loop6: unable to read RDB block 0 [ 1297.934064][T25400] loop6: unable to read partition table [ 1297.941238][T25400] loop6: partition table beyond EOD, truncated [ 1297.954707][T25284] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1297.961705][T25400] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 1297.980036][T25284] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1298.028065][T25284] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1298.109976][T25405] loop7: detected capacity change from 0 to 1 [ 1298.142253][T25405] FAULT_INJECTION: forcing a failure. [ 1298.142253][T25405] name failslab, interval 1, probability 0, space 0, times 0 [ 1298.178779][T25405] CPU: 0 UID: 0 PID: 25405 Comm: syz.6.5029 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 1298.178802][T25405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1298.178812][T25405] Call Trace: [ 1298.178819][T25405] [ 1298.178826][T25405] dump_stack_lvl+0x189/0x250 [ 1298.178855][T25405] ? __pfx____ratelimit+0x10/0x10 [ 1298.178878][T25405] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1298.178902][T25405] ? __pfx__printk+0x10/0x10 [ 1298.178921][T25405] ? __pfx___might_resched+0x10/0x10 [ 1298.178947][T25405] ? fs_reclaim_acquire+0x7d/0x100 [ 1298.178972][T25405] should_fail_ex+0x414/0x560 [ 1298.178998][T25405] should_failslab+0xa8/0x100 [ 1298.179018][T25405] __kmalloc_noprof+0xcb/0x4f0 [ 1298.179034][T25405] ? alloc_pipe_info+0x1fd/0x4d0 [ 1298.179056][T25405] alloc_pipe_info+0x1fd/0x4d0 [ 1298.179102][T25405] splice_direct_to_actor+0xa5d/0xcc0 [ 1298.179124][T25405] ? aa_file_perm+0x11f/0xed0 [ 1298.179149][T25405] ? aa_file_perm+0x3e7/0xed0 [ 1298.179183][T25405] ? __lock_acquire+0xab9/0xd20 [ 1298.179208][T25405] ? __pfx_direct_splice_actor+0x10/0x10 [ 1298.179227][T25405] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1298.179247][T25405] ? __pfx_aa_file_perm+0x10/0x10 [ 1298.179279][T25405] do_splice_direct+0x181/0x270 [ 1298.179301][T25405] ? __pfx_do_splice_direct+0x10/0x10 [ 1298.179321][T25405] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1298.179344][T25405] ? bpf_lsm_file_permission+0x9/0x20 [ 1298.179370][T25405] ? security_file_permission+0x75/0x290 [ 1298.179392][T25405] ? rw_verify_area+0x258/0x650 [ 1298.179424][T25405] do_sendfile+0x4da/0x7e0 [ 1298.179446][T25405] ? __pfx_vfs_write+0x10/0x10 [ 1298.179480][T25405] ? __pfx_do_sendfile+0x10/0x10 [ 1298.179502][T25405] ? __fget_files+0x3a0/0x420 [ 1298.179533][T25405] __se_sys_sendfile64+0x13e/0x190 [ 1298.179558][T25405] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1298.179578][T25405] ? rcu_is_watching+0x15/0xb0 [ 1298.179611][T25405] ? do_syscall_64+0xbe/0x3b0 [ 1298.179632][T25405] do_syscall_64+0xfa/0x3b0 [ 1298.179647][T25405] ? lockdep_hardirqs_on+0x9c/0x150 [ 1298.179673][T25405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.179691][T25405] ? clear_bhb_loop+0x60/0xb0 [ 1298.179714][T25405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.179733][T25405] RIP: 0033:0x7fd2b7d8e929 [ 1298.179749][T25405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1298.179766][T25405] RSP: 002b:00007fd2b8c03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1298.179786][T25405] RAX: ffffffffffffffda RBX: 00007fd2b7fb5fa0 RCX: 00007fd2b7d8e929 [ 1298.179800][T25405] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1298.179811][T25405] RBP: 00007fd2b8c03090 R08: 0000000000000000 R09: 0000000000000000 [ 1298.179823][T25405] R10: 0000000024002deb R11: 0000000000000246 R12: 0000000000000001 [ 1298.179835][T25405] R13: 0000000000000000 R14: 00007fd2b7fb5fa0 R15: 00007fd2b80dfa28 [ 1298.179864][T25405] [ 1298.511110][ T10] usb 4-1: USB disconnect, device number 95 [ 1298.612881][T25284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1298.631909][T25284] 8021q: adding VLAN 0 to HW filter on device team0 [ 1298.694107][T14688] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.701291][T14688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1298.763684][T25284] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1298.779452][T25284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1298.800698][T14688] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.807827][T14688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1298.847355][T25424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1298.868177][T25424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1298.912522][T25284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1299.178527][T19702] Bluetooth: hci3: command tx timeout [ 1299.219049][T25432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5036'. [ 1299.408778][T25284] veth0_vlan: entered promiscuous mode [ 1299.472085][T25284] veth1_vlan: entered promiscuous mode [ 1299.560980][T25284] veth0_macvtap: entered promiscuous mode [ 1299.605066][T16073] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1299.619760][T25284] veth1_macvtap: entered promiscuous mode [ 1299.689394][T25284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1299.711897][T25284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1299.730770][T25284] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.740512][T25284] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.749485][T25284] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.762789][T25284] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.771785][T16073] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1299.790853][T16073] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1299.800601][T16073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1299.814774][T16073] usb 4-1: SerialNumber: syz [ 1299.941404][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.958733][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.971697][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.978415][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.039361][T14707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.047088][T25430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1300.060170][T14707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.119942][T25430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1300.140559][T25430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1300.163020][T25430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1300.380278][T25446] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.507431][T25469] vlan2: entered allmulticast mode [ 1301.529466][T25469] bridge0: port 4(vlan2) entered blocking state [ 1301.551167][T25469] bridge0: port 4(vlan2) entered disabled state [ 1301.569411][T25472] loop7: detected capacity change from 0 to 1 [ 1301.581600][T25472] FAULT_INJECTION: forcing a failure. [ 1301.581600][T25472] name failslab, interval 1, probability 0, space 0, times 0 [ 1301.613098][T25472] CPU: 0 UID: 0 PID: 25472 Comm: syz.5.5040 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 1301.613123][T25472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1301.613135][T25472] Call Trace: [ 1301.613143][T25472] [ 1301.613152][T25472] dump_stack_lvl+0x189/0x250 [ 1301.613186][T25472] ? __pfx____ratelimit+0x10/0x10 [ 1301.613214][T25472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1301.613243][T25472] ? __pfx__printk+0x10/0x10 [ 1301.613269][T25472] ? __pfx___might_resched+0x10/0x10 [ 1301.613297][T25472] ? fs_reclaim_acquire+0x7d/0x100 [ 1301.613323][T25472] should_fail_ex+0x414/0x560 [ 1301.613353][T25472] should_failslab+0xa8/0x100 [ 1301.613375][T25472] __kmalloc_noprof+0xcb/0x4f0 [ 1301.613393][T25472] ? copy_splice_read+0x143/0x9b0 [ 1301.613421][T25472] copy_splice_read+0x143/0x9b0 [ 1301.613453][T25472] ? __pfx_copy_splice_read+0x10/0x10 [ 1301.613470][T25472] ? look_up_lock_class+0x74/0x170 [ 1301.613525][T25472] ? register_lock_class+0x51/0x320 [ 1301.613558][T25472] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1301.613592][T25472] ? alloc_pipe_info+0x374/0x4d0 [ 1301.613615][T25472] ? __pfx_filemap_splice_read+0x10/0x10 [ 1301.613641][T25472] splice_direct_to_actor+0x4d0/0xcc0 [ 1301.613685][T25472] ? __pfx_direct_splice_actor+0x10/0x10 [ 1301.613707][T25472] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1301.613730][T25472] ? __pfx_aa_file_perm+0x10/0x10 [ 1301.613767][T25472] do_splice_direct+0x181/0x270 [ 1301.613793][T25472] ? __pfx_do_splice_direct+0x10/0x10 [ 1301.613816][T25472] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1301.613842][T25472] ? bpf_lsm_file_permission+0x9/0x20 [ 1301.613869][T25472] ? security_file_permission+0x75/0x290 [ 1301.613893][T25472] ? rw_verify_area+0x258/0x650 [ 1301.613929][T25472] do_sendfile+0x4da/0x7e0 [ 1301.613954][T25472] ? __pfx_vfs_write+0x10/0x10 [ 1301.613991][T25472] ? __pfx_do_sendfile+0x10/0x10 [ 1301.614016][T25472] ? __fget_files+0x3a0/0x420 [ 1301.614051][T25472] __se_sys_sendfile64+0x13e/0x190 [ 1301.614078][T25472] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1301.614100][T25472] ? rcu_is_watching+0x15/0xb0 [ 1301.614142][T25472] ? do_syscall_64+0xbe/0x3b0 [ 1301.614165][T25472] do_syscall_64+0xfa/0x3b0 [ 1301.614183][T25472] ? lockdep_hardirqs_on+0x9c/0x150 [ 1301.614212][T25472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.614234][T25472] ? clear_bhb_loop+0x60/0xb0 [ 1301.614259][T25472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.614279][T25472] RIP: 0033:0x7fc2c918e929 [ 1301.614298][T25472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1301.614316][T25472] RSP: 002b:00007fc2ca07a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1301.614337][T25472] RAX: ffffffffffffffda RBX: 00007fc2c93b5fa0 RCX: 00007fc2c918e929 [ 1301.614352][T25472] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1301.614364][T25472] RBP: 00007fc2ca07a090 R08: 0000000000000000 R09: 0000000000000000 [ 1301.614378][T25472] R10: 0000000024002deb R11: 0000000000000246 R12: 0000000000000001 [ 1301.614390][T25472] R13: 0000000000000000 R14: 00007fc2c93b5fa0 R15: 00007fc2c94dfa28 [ 1301.614421][T25472] [ 1301.937823][T25469] vlan2: entered promiscuous mode [ 1302.275792][T16073] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 1302.393095][T25476] syz.5.5041: attempt to access beyond end of device [ 1302.393095][T25476] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1302.407069][T16073] usb 4-1: USB disconnect, device number 96 [ 1302.511676][T25479] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5042'. [ 1302.932631][T25495] vimc link validate: Scaler:src:16x2160 (0x33424752, 10, 0, 2, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1303.073871][T25501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.092049][T25501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.130347][T25501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.195101][T25501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.404529][T25489] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5042'. [ 1303.417735][T25489] netlink: 43 bytes leftover after parsing attributes in process `syz.7.5042'. [ 1303.428306][T25489] netlink: 'syz.7.5042': attribute type 5 has an invalid length. [ 1303.436198][T25489] netlink: 43 bytes leftover after parsing attributes in process `syz.7.5042'. [ 1304.380937][T25530] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5053'. [ 1304.434821][ T24] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1304.618392][ T24] usb 6-1: not running at top speed; connect to a high speed hub [ 1304.629905][ T24] usb 6-1: config 1 interface 0 altsetting 15 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1304.645813][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1304.678026][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1304.722517][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.743721][ T24] usb 6-1: Product: 网㉉쀭쥿굴髺ⓣ㘞缚⯆핍革䭨캩淶꒥᪈ᑟᐠ뭾㽎㽰㶓뎅Ž꺻સὗ萶䤲긅뷃畄쨦잋벮耩ځ㿥逐⢘뻸⧧뇿䜡彳벥⺵믿ౕꓳ䇈翾푺돟䖆鮴ꑲႹ⨆箌몋뢹〼䕟솨悙ό퓖ః㗤䂆昨ⴑꮟ鉡訍哘샢Îለ뜺欕斤䀼ӝ嘱἟㨆Ṻ쌹ᓽ磆拪悳ҩ翥핊䘄 [ 1304.827239][ T24] usb 6-1: Manufacturer: 봎駔鲖撢ꁬ೤眗쮶턡 [ 1304.858173][ T24] usb 6-1: SerialNumber: 㠊 [ 1305.296153][ T24] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 15 proto 3 vid 0x0525 pid 0xA4A8 [ 1305.352340][ T24] usb 6-1: USB disconnect, device number 6 [ 1305.395369][ T24] usblp0: removed [ 1305.954785][ T24] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1306.184979][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1306.203785][ T24] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1306.223280][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.236375][ T24] usb 4-1: Product: syz [ 1306.240674][ T24] usb 4-1: Manufacturer: syz [ 1306.246210][ T24] usb 4-1: SerialNumber: syz [ 1306.290724][ T24] usb 4-1: config 0 descriptor?? [ 1306.506497][ T24] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1306.844780][ T5922] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1306.971498][T25579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.981627][T25579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.989733][ T5922] usb 6-1: device descriptor read/64, error -71 [ 1307.215008][ T24] gspca_sunplus: reg_w_riv err -110 [ 1307.244831][ T5922] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1307.255837][ T24] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 1307.498575][ T5922] usb 6-1: device descriptor read/64, error -71 [ 1307.705162][ T5922] usb usb6-port1: attempt power cycle [ 1308.054941][ T5922] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1308.135563][ T5922] usb 6-1: device descriptor read/8, error -71 [ 1308.374771][ T5922] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1308.415509][ T5922] usb 6-1: device descriptor read/8, error -71 [ 1308.545157][ T5922] usb usb6-port1: unable to enumerate USB device [ 1308.653894][ T5922] usb 4-1: USB disconnect, device number 97 [ 1308.878188][T25585] loop6: detected capacity change from 0 to 7 [ 1308.909676][ T6154] Dev loop6: unable to read RDB block 7 [ 1308.929003][ T6154] loop6: AHDI p1 p2 p4 [ 1308.933213][ T6154] loop6: partition table partially beyond EOD, truncated [ 1308.954602][ T6154] loop6: p1 start 926365495 is beyond EOD, truncated [ 1308.961680][ T6154] loop6: p2 size 8 extends beyond EOD, truncated [ 1308.983683][T25585] Dev loop6: unable to read RDB block 7 [ 1308.995302][T25585] loop6: AHDI p1 p2 p4 [ 1309.004315][T25585] loop6: partition table partially beyond EOD, truncated [ 1309.020934][T25585] loop6: p1 start 926365495 is beyond EOD, truncated [ 1309.030849][T25585] loop6: p2 size 8 extends beyond EOD, truncated [ 1309.149903][ T5929] udevd[5929]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1309.187405][ T5929] udevd[5929]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1310.314365][T25607] loop2: detected capacity change from 0 to 7 [ 1310.323433][ T6154] Dev loop2: unable to read RDB block 7 [ 1310.351853][ T6154] loop2: AHDI p1 p2 p3 [ 1310.370443][ T6154] loop2: partition table partially beyond EOD, truncated [ 1310.486115][ T6154] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1310.547143][ T6154] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1310.625808][T25607] Dev loop2: unable to read RDB block 7 [ 1310.631770][T25607] loop2: AHDI p1 p2 p3 [ 1310.641658][T25607] loop2: partition table partially beyond EOD, truncated [ 1310.686342][T25607] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1310.723700][T25607] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1311.465493][T25610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.475063][T25610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.814838][ T5922] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1311.964837][ T5922] usb 4-1: device descriptor read/64, error -71 [ 1312.143317][T25614] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5074'. [ 1312.195667][T25614] netlink: 'syz.6.5074': attribute type 5 has an invalid length. [ 1312.205494][ T5922] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1312.227878][T25614] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5074'. [ 1312.261203][T25614] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 1312.294735][T25614] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 1312.314023][T25614] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 1312.344729][T25614] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 1312.354789][ T5922] usb 4-1: device descriptor read/64, error -71 [ 1312.371355][T25614] geneve2: entered promiscuous mode [ 1312.382825][T25614] geneve2: entered allmulticast mode [ 1312.505169][ T5922] usb usb4-port1: attempt power cycle [ 1312.978169][T25629] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5077'. [ 1313.124874][ T5922] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1313.159581][ T5922] usb 4-1: device descriptor read/8, error -71 [ 1313.414797][ T5922] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1313.455381][ T5922] usb 4-1: device descriptor read/8, error -71 [ 1313.585769][ T5922] usb usb4-port1: unable to enumerate USB device [ 1313.815243][T25635] loop6: detected capacity change from 0 to 7 [ 1313.839887][T25635] Dev loop6: unable to read RDB block 7 [ 1313.857018][T25635] loop6: AHDI p1 p2 p4 [ 1313.861219][T25635] loop6: partition table partially beyond EOD, truncated [ 1313.905232][T25635] loop6: p1 start 926365495 is beyond EOD, truncated [ 1313.930673][T25635] loop6: p2 size 8 extends beyond EOD, truncated [ 1314.088177][ T5929] udevd[5929]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1314.298475][T25642] tap0: tun_chr_ioctl cmd 1074025677 [ 1314.303978][T25642] tap0: linktype set to 776 [ 1314.346208][T25644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1314.360150][T25642] tap0: tun_chr_ioctl cmd 35108 [ 1314.376675][T25644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1314.677325][T25650] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5085'. [ 1314.718072][T19702] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1314.730412][T19702] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1314.742179][T19702] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1314.753324][T19702] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1314.754822][ T5934] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1314.770970][T19702] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1314.919409][ T5934] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1314.930617][ T5934] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1314.940382][ T5934] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1314.949987][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1314.960696][ T5934] usb 6-1: Product: syz [ 1314.965183][ T5934] usb 6-1: Manufacturer: syz [ 1314.969835][ T5934] usb 6-1: SerialNumber: syz [ 1314.977786][ T5934] usb 6-1: config 0 descriptor?? [ 1314.990055][T25652] chnl_net:caif_netlink_parms(): no params data found [ 1314.992686][ T5934] usb 6-1: selecting invalid altsetting 0 [ 1315.002766][T16073] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1315.186878][T16073] usb 4-1: Using ep0 maxpacket: 16 [ 1315.208767][T16073] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.224772][T16073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1315.244145][T25661] fuse: blksize only supported for fuseblk [ 1315.250260][T16073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1315.269292][T16073] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1315.279046][T16073] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1315.294099][T16073] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1315.303335][T16073] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1315.311525][T16073] usb 4-1: Manufacturer: syz [ 1315.325389][T16073] usb 4-1: config 0 descriptor?? [ 1315.446293][T25652] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.460147][T25652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.468249][T25652] bridge_slave_0: entered allmulticast mode [ 1315.479019][T25652] bridge_slave_0: entered promiscuous mode [ 1315.521124][T25652] bridge0: port 2(bridge_slave_1) entered blocking state [ 1315.574315][T25652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.590395][T25652] bridge_slave_1: entered allmulticast mode [ 1315.596547][T16073] rc_core: IR keymap rc-hauppauge not found [ 1315.613426][T25652] bridge_slave_1: entered promiscuous mode [ 1315.620792][T19702] Bluetooth: hci5: unexpected event for opcode 0x200d [ 1315.642712][T16073] Registered IR keymap rc-empty [ 1315.651520][T16073] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1315.676840][T16073] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1315.691164][T25652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1315.719074][ T5934] usb 6-1: USB disconnect, device number 11 [ 1315.725807][T16073] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1315.752427][T25652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1315.766856][T16073] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input155 [ 1315.813902][T16073] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1315.858341][T16073] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1315.905475][T16073] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1315.915388][T25652] team0: Port device team_slave_0 added [ 1315.926968][T25652] team0: Port device team_slave_1 added [ 1315.935484][T16073] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1315.947675][T25677] loop2: detected capacity change from 0 to 7 [ 1315.955770][T25677] Dev loop2: unable to read RDB block 7 [ 1315.961453][T25677] loop2: AHDI p1 p2 p3 [ 1315.973804][T25677] loop2: partition table partially beyond EOD, truncated [ 1315.989765][T25677] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1315.996820][T16073] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1316.004547][T25677] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1316.015007][T16073] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1316.049933][T16073] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1316.118706][T25652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1316.136688][T25652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1316.162681][ C0] vkms_vblank_simulate: vblank timer overrun [ 1316.194852][T16073] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1316.214880][T16073] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1316.230006][T25652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1316.241078][T16073] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1316.242952][T25652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1316.260701][T25652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1316.286584][ C0] vkms_vblank_simulate: vblank timer overrun [ 1316.295955][T25652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1316.337900][T16073] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1316.378100][T25652] hsr_slave_0: entered promiscuous mode [ 1316.385565][T25652] hsr_slave_1: entered promiscuous mode [ 1316.397850][T16073] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1316.518504][T16073] usb 4-1: USB disconnect, device number 102 [ 1316.767580][T25652] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1316.788994][T25652] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1316.821533][T25652] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1316.854256][T25652] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1316.862844][T19702] Bluetooth: hci4: command tx timeout [ 1317.187055][T25652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1317.229875][T25652] 8021q: adding VLAN 0 to HW filter on device team0 [ 1317.262779][T20935] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.269910][T20935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1317.348912][T14688] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.356081][T14688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1317.857611][T25652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1318.109275][T25652] veth0_vlan: entered promiscuous mode [ 1318.256563][T25652] veth1_vlan: entered promiscuous mode [ 1318.294619][ T30] audit: type=1326 audit(1750848553.885:7706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25702 comm="syz.3.5096" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4c738e929 code=0xffff0000 [ 1318.419313][T25652] veth0_macvtap: entered promiscuous mode [ 1318.470476][T25652] veth1_macvtap: entered promiscuous mode [ 1318.531305][T25652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1318.585748][T25652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1318.632714][T25652] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.670206][T25652] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.719600][T25652] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.753896][T25652] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.927255][T19702] Bluetooth: hci4: command tx timeout [ 1319.066665][ T2944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1319.114525][ T2944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1319.138238][T25708] loop6: detected capacity change from 0 to 7 [ 1319.169570][ T5929] Dev loop6: unable to read RDB block 7 [ 1319.175372][ T5929] loop6: AHDI p3 p4 [ 1319.195262][ T5929] loop6: partition table partially beyond EOD, truncated [ 1319.215111][T20935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1319.215165][ T5929] loop6: p3 start 1869967406 is beyond EOD, [ 1319.222937][T20935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1319.280773][ T5929] truncated [ 1319.301210][T25708] Dev loop6: unable to read RDB block 7 [ 1319.349736][T25708] loop6: AHDI p3 p4 [ 1319.365279][T25708] loop6: partition table partially beyond EOD, truncated [ 1319.429962][ T30] audit: type=1326 audit(1750848555.045:7707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25710 comm="syz.8.5081" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a5f58e929 code=0x0 [ 1319.454333][T25708] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1319.635236][T25715] loop6: detected capacity change from 0 to 524287487 [ 1319.649069][ T5929] Buffer I/O error on dev loop6, logical block 0, async page read [ 1319.657551][ T5929] Buffer I/O error on dev loop6, logical block 0, async page read [ 1319.666599][ T5929] Buffer I/O error on dev loop6, logical block 0, async page read [ 1319.675215][ T5929] Buffer I/O error on dev loop6, logical block 0, async page read [ 1319.683219][ T5929] Buffer I/O error on dev loop6, logical block 0, async page read [ 1319.692627][ T5929] Buffer I/O error on dev loop6, logical block 0, async page read [ 1319.745033][T25716] loop6: detected capacity change from 524287487 to 0 [ 1319.755322][ T5929] Buffer I/O error on dev loop6, logical block 0, async page read [ 1319.784567][ T5929] ldm_validate_partition_table(): Disk read failed. [ 1319.804170][ T5929] Dev loop6: unable to read RDB block 0 [ 1319.826798][ T5929] loop6: unable to read partition table [ 1319.843639][ T5929] loop6: partition table beyond EOD, truncated [ 1320.091360][T25718] loop2: detected capacity change from 0 to 7 [ 1320.107844][ T5929] Dev loop2: unable to read RDB block 7 [ 1320.117059][ T5929] loop2: AHDI p1 p2 p3 [ 1320.130589][ T5929] loop2: partition table partially beyond EOD, truncated [ 1320.153730][ T5929] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1320.194288][ T5929] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1320.243465][T25718] Dev loop2: unable to read RDB block 7 [ 1320.249438][T25718] loop2: AHDI p1 p2 p3 [ 1320.255841][T25718] loop2: partition table partially beyond EOD, truncated [ 1320.281770][T25718] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1320.291688][T25718] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1321.005323][T19702] Bluetooth: hci4: command tx timeout [ 1321.125095][T16073] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1321.314889][T16073] usb 6-1: Using ep0 maxpacket: 8 [ 1321.391733][T16073] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1321.429390][T16073] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.468924][T16073] usb 6-1: Product: syz [ 1321.486610][T16073] usb 6-1: Manufacturer: syz [ 1321.507582][T16073] usb 6-1: SerialNumber: syz [ 1321.547360][T16073] usb 6-1: config 0 descriptor?? [ 1321.574589][T16073] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1322.210413][T25733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.236375][T25733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.524469][T25738] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5105'. [ 1322.537035][T25738] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5105'. [ 1322.603616][T25725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.625145][T25725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.763984][T25747] loop6: detected capacity change from 0 to 7 [ 1322.793758][T25747] Dev loop6: unable to read RDB block 7 [ 1322.809877][T25747] loop6: AHDI p3 p4 [ 1322.814121][T25747] loop6: partition table partially beyond EOD, truncated [ 1322.828845][T25747] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1322.890579][T25745] fuse: root generation should be zero [ 1323.084938][T19702] Bluetooth: hci4: command tx timeout [ 1323.275240][ T92] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1323.310670][T25758] loop6: detected capacity change from 0 to 7 [ 1323.325922][T16073] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1323.340243][T25758] Dev loop6: unable to read RDB block 7 [ 1323.360581][T25758] loop6: AHDI p1 p2 p4 [ 1323.374769][T25758] loop6: partition table partially beyond EOD, truncated [ 1323.382423][T25758] loop6: p1 start 926365495 is beyond EOD, truncated [ 1323.394967][T25758] loop6: p2 size 8 extends beyond EOD, truncated [ 1323.454798][ T92] usb 4-1: Using ep0 maxpacket: 32 [ 1323.464303][ T92] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 1323.469377][ T5929] udevd[5929]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1323.485180][ T92] usb 4-1: config 0 has no interface number 0 [ 1323.509217][ T92] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 1323.518427][T16073] usb 9-1: Using ep0 maxpacket: 16 [ 1323.524960][ T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.533235][ T92] usb 4-1: Product: syz [ 1323.538954][T16073] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1323.548539][ T92] usb 4-1: Manufacturer: syz [ 1323.553229][T16073] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.571961][ T92] usb 4-1: SerialNumber: syz [ 1323.590647][ T92] usb 4-1: config 0 descriptor?? [ 1323.605620][T16073] usb 9-1: config 0 descriptor?? [ 1323.617874][T16073] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1323.626915][ T92] ftdi_sio 4-1:0.217: FTDI USB Serial Device converter detected [ 1323.656129][ T92] usb 4-1: Detected SIO [ 1323.662033][ T92] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1323.818696][ T10] usb 6-1: USB disconnect, device number 12 [ 1323.836584][ T92] usb 4-1: USB disconnect, device number 103 [ 1323.870306][ T92] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1323.910923][ T92] ftdi_sio 4-1:0.217: device disconnected [ 1324.261652][T25767] batadv_slave_1: entered promiscuous mode [ 1324.270166][T25767] batadv_slave_1: left allmulticast mode [ 1324.278453][T25767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5117'. [ 1324.578831][T25771] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1324.630125][T16073] gspca_sonixj: reg_w1 err -71 [ 1324.656709][T16073] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 1324.667249][T16073] usb 9-1: USB disconnect, device number 2 [ 1324.685936][T25782] batadv_slave_1: entered promiscuous mode [ 1324.755739][T25782] batadv_slave_1: left promiscuous mode [ 1324.978540][T25788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1325.002952][T25788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1325.173905][T25794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1325.184834][T16073] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1325.208655][T25794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1325.308668][T25797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5127'. [ 1325.375521][T16073] usb 6-1: Using ep0 maxpacket: 32 [ 1325.383259][T16073] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1325.396665][T25797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5127'. [ 1325.404535][T16073] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1325.452318][T16073] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 1325.473182][T16073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.543133][T16073] usb 6-1: config 0 descriptor?? [ 1325.788104][T16073] usbhid 6-1:0.0: can't add hid device: -71 [ 1325.810269][T16073] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1325.844231][T16073] usb 6-1: USB disconnect, device number 13 [ 1325.925299][T25809] dvmrp0: entered allmulticast mode [ 1325.941501][T16595] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1326.215888][T16595] usb 9-1: Using ep0 maxpacket: 8 [ 1326.224136][T16595] usb 9-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1326.243049][T16595] usb 9-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1326.262919][T16595] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1326.269985][T16595] usb 9-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 1326.332838][T16595] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.431863][T16595] usb 9-1: config 0 descriptor?? [ 1326.763219][T25823] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1327.074965][T16595] usb 9-1: string descriptor 0 read error: -71 [ 1327.093140][T16595] uclogic 0003:5543:0045.0057: failed retrieving string descriptor #200: -71 [ 1327.126799][ T10] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1327.159009][T16595] uclogic 0003:5543:0045.0057: failed retrieving pen parameters: -71 [ 1327.189763][T16595] uclogic 0003:5543:0045.0057: failed probing pen v2 parameters: -71 [ 1327.228756][T16595] uclogic 0003:5543:0045.0057: failed probing parameters: -71 [ 1327.241467][T16595] uclogic 0003:5543:0045.0057: probe with driver uclogic failed with error -71 [ 1327.278612][T16595] usb 9-1: USB disconnect, device number 3 [ 1327.302191][T25830] loop6: detected capacity change from 0 to 7 [ 1327.327204][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1327.351332][T25830] Dev loop6: unable to read RDB block 7 [ 1327.367863][ T10] usb 4-1: config 255 has an invalid interface number: 119 but max is 0 [ 1327.428023][T25830] loop6: AHDI p1 p2 p4 [ 1327.432417][ T10] usb 4-1: config 255 has no interface number 0 [ 1327.439310][T25830] loop6: partition table partially beyond EOD, truncated [ 1327.450524][ T10] usb 4-1: config 255 interface 119 has no altsetting 0 [ 1327.457801][T25830] loop6: p1 start 926365495 is beyond EOD, truncated [ 1327.488547][ T10] usb 4-1: New USB device found, idVendor=0421, idProduct=048e, bcdDevice=d4.8c [ 1327.509250][T25830] loop6: p2 size 8 extends beyond EOD, truncated [ 1327.537815][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.597176][ T10] usb 4-1: Product: syz [ 1327.624123][ T10] usb 4-1: Manufacturer: syz [ 1327.653528][ T10] usb 4-1: SerialNumber: syz [ 1327.841917][ T5929] udevd[5929]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1327.910729][ T10] rndis_host 4-1:255.119: invalid descriptor buffer length [ 1327.964052][T25837] loop6: detected capacity change from 0 to 7 [ 1328.001665][ T10] usb 4-1: bad CDC descriptors [ 1328.009094][T25837] Dev loop6: unable to read RDB block 7 [ 1328.027137][ T10] cdc_acm 4-1:255.119: invalid descriptor buffer length [ 1328.074087][T25837] loop6: AHDI p3 p4 [ 1328.097409][T25837] loop6: partition table partially beyond EOD, truncated [ 1328.107957][ T10] usb 4-1: USB disconnect, device number 104 [ 1328.129908][T25837] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1329.390524][T25870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.403871][T25870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.465230][T25874] loop6: detected capacity change from 0 to 7 [ 1329.488714][T25874] Dev loop6: unable to read RDB block 7 [ 1329.494317][T25874] loop6: AHDI p3 p4 [ 1329.509098][T25874] loop6: partition table partially beyond EOD, truncated [ 1329.527302][T25874] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1329.673449][T25882] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5156'. [ 1329.693010][T25882] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5156'. [ 1331.153356][T25901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.172562][T25901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.989950][T25910] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5165'. [ 1332.007216][T25914] loop6: detected capacity change from 0 to 7 [ 1332.015214][T25910] loop7: detected capacity change from 0 to 1 [ 1332.073237][T25914] Dev loop6: unable to read RDB block 7 [ 1332.106961][T25914] loop6: AHDI p3 p4 [ 1332.118232][T25914] loop6: partition table partially beyond EOD, truncated [ 1332.147360][T25914] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1332.947024][T25935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.957385][T25936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.966522][T25935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.974792][T25936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.095871][T25935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.131671][T25935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.987621][T25956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1335.178785][T25959] loop6: detected capacity change from 0 to 7 [ 1335.235511][T25959] Dev loop6: unable to read RDB block 7 [ 1335.253634][T25959] loop6: AHDI p3 p4 [ 1335.263626][T25959] loop6: partition table partially beyond EOD, truncated [ 1335.275756][T25959] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1336.007201][ T92] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1336.184808][ T92] usb 4-1: Using ep0 maxpacket: 8 [ 1336.199211][ T92] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1336.226455][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1336.254922][ T92] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1336.267001][ T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.293290][T25982] netlink: 'syz.6.5186': attribute type 11 has an invalid length. [ 1336.297611][ T92] usb 4-1: Product: syz [ 1336.319205][ T92] usb 4-1: Manufacturer: syz [ 1336.328470][ T92] usb 4-1: SerialNumber: syz [ 1336.342443][ T92] usb 4-1: config 0 descriptor?? [ 1336.512140][ T92] rc_core: IR keymap rc-streamzap not found [ 1336.532470][ T92] Registered IR keymap rc-empty [ 1336.553350][ T92] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1336.613434][ T92] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input157 [ 1336.652185][ T92] usb 4-1: USB disconnect, device number 105 [ 1337.574799][T16596] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1337.725354][T16596] usb 4-1: Using ep0 maxpacket: 16 [ 1337.751188][T16596] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1337.788272][T16596] usb 4-1: config 7 has an invalid interface number: 79 but max is 0 [ 1337.797424][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1337.842367][T16596] usb 4-1: config 7 has no interface number 0 [ 1337.868688][T16596] usb 4-1: config 7 interface 79 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1337.930945][T16596] usb 4-1: config 7 interface 79 altsetting 6 endpoint 0x7 has an invalid bInterval 64, changing to 10 [ 1337.946922][T16596] usb 4-1: config 7 interface 79 has no altsetting 0 [ 1337.957969][T16596] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=f4.98 [ 1337.982479][T16596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.001863][T16596] usb 4-1: Product: syz [ 1338.006265][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 1338.015020][T16596] usb 4-1: Manufacturer: syz [ 1338.025254][T16596] usb 4-1: SerialNumber: syz [ 1338.034801][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.051008][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 34, changing to 9 [ 1338.082293][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1338.122751][ T10] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1338.149704][ T10] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1338.195949][ T10] usb 9-1: Manufacturer: syz [ 1338.235399][ T10] usb 9-1: config 0 descriptor?? [ 1338.285340][T16596] usb 4-1: USB disconnect, device number 106 [ 1338.459580][T26016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.494991][T26016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1338.555148][T26016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.604943][T26016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1338.671394][T26032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.697687][ T5934] usb 9-1: USB disconnect, device number 4 [ 1338.718466][T26032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.229454][T26044] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 1339.521850][ T30] audit: type=1326 audit(1750848575.135:7708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26048 comm="syz.6.5206" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd2b7d8e929 code=0x0 [ 1339.820923][T26058] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5207'. [ 1339.876572][T26058] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 1339.883282][T26058] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1339.931294][T26062] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(15) [ 1339.937927][T26062] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1339.967924][T26058] vhci_hcd vhci_hcd.0: Device attached [ 1340.001816][T26065] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(20) [ 1340.008444][T26065] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1340.023123][T26062] vhci_hcd vhci_hcd.0: Device attached [ 1340.095914][T26058] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1340.124376][T26058] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(23) [ 1340.130988][T26058] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1340.148187][T26058] vhci_hcd vhci_hcd.0: Device attached [ 1340.153822][T26065] vhci_hcd vhci_hcd.0: Device attached [ 1340.189862][T26062] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(22) [ 1340.196473][T26062] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1340.204483][T26062] vhci_hcd vhci_hcd.0: Device attached [ 1340.210211][T16596] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 1340.227134][T26058] vhci_hcd vhci_hcd.0: pdev(6) rhport(6) sockfd(29) [ 1340.233784][T26058] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1340.269086][T26058] vhci_hcd vhci_hcd.0: Device attached [ 1340.312299][T26070] vhci_hcd: connection closed [ 1340.312305][T26072] vhci_hcd: connection closed [ 1340.312533][T26074] vhci_hcd: connection closed [ 1340.322386][T26059] vhci_hcd: connection reset by peer [ 1340.323302][T26063] vhci_hcd: connection closed [ 1340.332515][T26067] vhci_hcd: connection closed [ 1340.337325][T14707] vhci_hcd: stop threads [ 1340.337355][T14707] vhci_hcd: release socket [ 1340.337395][T14707] vhci_hcd: disconnect device [ 1340.372820][T20935] vhci_hcd: stop threads [ 1340.391119][T20935] vhci_hcd: release socket [ 1340.410723][T20935] vhci_hcd: disconnect device [ 1340.436120][T20935] vhci_hcd: stop threads [ 1340.446384][T20935] vhci_hcd: release socket [ 1340.451041][T20935] vhci_hcd: disconnect device [ 1340.462987][T20935] vhci_hcd: stop threads [ 1340.469343][T20935] vhci_hcd: release socket [ 1340.474352][T20935] vhci_hcd: disconnect device [ 1340.490127][T20935] vhci_hcd: stop threads [ 1340.498442][T20935] vhci_hcd: release socket [ 1340.503011][T20935] vhci_hcd: disconnect device [ 1340.509205][T26077] loop6: detected capacity change from 0 to 7 [ 1340.509611][T20935] vhci_hcd: stop threads [ 1340.520818][T20935] vhci_hcd: release socket [ 1340.539484][T20935] vhci_hcd: disconnect device [ 1340.555240][T26077] Dev loop6: unable to read RDB block 7 [ 1340.574832][T26077] loop6: AHDI p3 p4 [ 1340.614454][T26077] loop6: partition table partially beyond EOD, truncated [ 1340.665745][T26077] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1340.842375][T26081] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5211'. [ 1340.870210][T26081] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5211'. [ 1341.032667][T26087] gtp0: entered promiscuous mode [ 1341.052251][T26087] gtp0: entered allmulticast mode [ 1341.288080][T26093] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5215'. [ 1341.329906][T26107] loop6: detected capacity change from 0 to 524287487 [ 1341.340331][T26107] Buffer I/O error on dev loop6, logical block 0, async page read [ 1341.351196][T26107] Buffer I/O error on dev loop6, logical block 0, async page read [ 1341.362009][T26107] Buffer I/O error on dev loop6, logical block 0, async page read [ 1341.372346][T26107] Buffer I/O error on dev loop6, logical block 0, async page read [ 1341.392799][T26107] Buffer I/O error on dev loop6, logical block 0, async page read [ 1341.429133][T26108] loop6: detected capacity change from 524287487 to 0 [ 1341.429162][T26107] Buffer I/O error on dev loop6, logical block 0, async page read [ 1341.449990][T26107] ldm_validate_partition_table(): Disk read failed. [ 1341.457358][T26107] Dev loop6: unable to read RDB block 0 [ 1341.463101][T26107] loop6: unable to read partition table [ 1341.473002][T26107] loop6: partition table beyond EOD, truncated [ 1341.500375][T26107] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 1341.717347][T26114] loop6: detected capacity change from 0 to 7 [ 1341.755336][ T5929] Dev loop6: unable to read RDB block 7 [ 1341.760939][ T5929] loop6: AHDI p3 p4 [ 1341.786232][ T5929] loop6: partition table partially beyond EOD, truncated [ 1341.814818][ T5929] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1341.833407][T26114] Dev loop6: unable to read RDB block 7 [ 1341.857002][T26114] loop6: AHDI p3 p4 [ 1341.864286][T26114] loop6: partition table partially beyond EOD, truncated [ 1341.904986][T26114] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1342.329128][T26112] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5221'. [ 1342.355014][T16595] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1342.525157][T16595] usb 6-1: Using ep0 maxpacket: 16 [ 1342.550876][T16595] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1342.614926][T16595] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1342.657012][T16595] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1342.692739][T16595] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1342.728458][T16595] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.831511][T16595] usb 6-1: config 0 descriptor?? [ 1343.250361][T26144] netlink: 'syz.7.5231': attribute type 1 has an invalid length. [ 1343.299733][T16595] sony 0003:054C:0268.0058: item fetching failed at offset 0/2 [ 1343.335942][T16595] sony 0003:054C:0268.0058: parse failed [ 1343.359913][T16595] sony 0003:054C:0268.0058: probe with driver sony failed with error -22 [ 1343.483960][T16595] usb 6-1: USB disconnect, device number 14 [ 1345.085762][ T92] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1345.263642][ T92] usb 9-1: device descriptor read/64, error -71 [ 1345.334827][T16596] vhci_hcd: vhci_device speed not set [ 1345.435069][T26181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1345.454397][T26181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1345.521657][T26183] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1345.534860][ T92] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1345.690340][ T92] usb 9-1: device descriptor read/64, error -71 [ 1345.811112][ T92] usb usb9-port1: attempt power cycle [ 1345.846238][ T5922] usb 4-1: new low-speed USB device number 107 using dummy_hcd [ 1345.966643][T26191] netlink: 182 bytes leftover after parsing attributes in process `syz.6.5246'. [ 1346.050131][ T5922] usb 4-1: config 0 has an invalid interface number: 221 but max is 0 [ 1346.084606][ T5922] usb 4-1: config 0 has no interface number 0 [ 1346.090939][ T5922] usb 4-1: too many endpoints for config 0 interface 221 altsetting 164: 167, using maximum allowed: 30 [ 1346.096989][T26198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.121862][T26198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.134998][ T5922] usb 4-1: config 0 interface 221 altsetting 164 has 0 endpoint descriptors, different from the interface descriptor's value: 167 [ 1346.185443][ T92] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1346.187940][ T5922] usb 4-1: config 0 interface 221 has no altsetting 0 [ 1346.237737][ T92] usb 9-1: device descriptor read/8, error -71 [ 1346.475568][ T92] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1346.535769][ T92] usb 9-1: device descriptor read/8, error -71 [ 1346.604766][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1346.648386][ T92] usb usb9-port1: unable to enumerate USB device [ 1347.644747][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1348.544252][ T5922] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 1348.575007][T16073] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 1348.594465][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.635710][ T5922] usb 4-1: config 0 descriptor?? [ 1348.641176][ T5922] usb 4-1: can't set config #0, error -71 [ 1348.675606][ T5922] usb 4-1: USB disconnect, device number 107 [ 1348.748900][T16073] usb 9-1: not running at top speed; connect to a high speed hub [ 1348.773731][T16073] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1348.814746][T16073] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1348.844216][T16073] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1348.885106][T16073] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1348.904554][T16073] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.930101][T16073] usb 9-1: Product: Е [ 1348.934226][T16073] usb 9-1: Manufacturer: ᦊ旴薮⺈鄓偰犅킽佧ᵼꑃꯨ渰ꭒႶ斄薙⇢⥤辯뿇밞껪貫㪿탩꛹休ॗᠰ稸섰⃥落ه꣭ [ 1348.964928][T16073] usb 9-1: SerialNumber: ဉ [ 1349.380439][T16073] usb 9-1: 0:2 : does not exist [ 1349.429217][T16073] usb 9-1: USB disconnect, device number 10 [ 1349.524564][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1349.832837][T26249] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5262'. [ 1349.843263][T26246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1349.925406][T26246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.944845][T16595] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1350.045183][T26253] netlink: 256 bytes leftover after parsing attributes in process `syz.8.5263'. [ 1350.068573][T26253] unsupported nlmsg_type 40 [ 1350.152307][T26245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1350.192352][T26245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1350.786251][ T5922] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1350.861840][T16595] usb 4-1: config 0 has no interfaces? [ 1350.917115][T16595] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1350.957102][T16595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.975595][T16595] usb 4-1: Product: syz [ 1350.984791][ T5922] usb 6-1: Using ep0 maxpacket: 16 [ 1350.990623][T16595] usb 4-1: Manufacturer: syz [ 1351.001487][T16595] usb 4-1: SerialNumber: syz [ 1351.006330][ T5922] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1351.033541][T16595] usb 4-1: config 0 descriptor?? [ 1351.047698][ T5922] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1351.098324][ T5922] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1351.117070][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.154746][ T5922] usb 6-1: Product: syz [ 1351.180097][ T5922] usb 6-1: Manufacturer: syz [ 1351.204740][ T5922] usb 6-1: SerialNumber: syz [ 1351.268203][T26263] loop7: detected capacity change from 0 to 1 [ 1351.556222][ T5922] usb 6-1: USB disconnect, device number 15 [ 1351.607219][T26273] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5260'. [ 1351.639465][ T5929] udevd[5929]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 1351.657527][ T5929] udevd[5929]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 1352.087836][T26277] loop6: detected capacity change from 0 to 7 [ 1352.097420][ T5929] Dev loop6: unable to read RDB block 7 [ 1352.103250][ T5929] loop6: AHDI p1 p2 p4 [ 1352.108310][ T5929] loop6: partition table partially beyond EOD, truncated [ 1352.121459][ T5929] loop6: p1 start 926365495 is beyond EOD, truncated [ 1352.129224][ T5929] loop6: p2 size 8 extends beyond EOD, truncated [ 1352.151786][T26277] Dev loop6: unable to read RDB block 7 [ 1352.161010][T26277] loop6: AHDI p1 p2 p4 [ 1352.167581][T26277] loop6: partition table partially beyond EOD, truncated [ 1352.177721][T26277] loop6: p1 start 926365495 is beyond EOD, truncated [ 1352.189282][T26277] loop6: p2 size 8 extends beyond EOD, truncated [ 1352.556485][T26283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.601597][T26283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1352.641189][T26285] syz_tun: entered promiscuous mode [ 1352.647386][T26285] macsec1: entered promiscuous mode [ 1352.660281][T26285] macsec1: entered allmulticast mode [ 1352.665914][T26285] syz_tun: entered allmulticast mode [ 1352.674442][T26285] syz_tun: left allmulticast mode [ 1352.682828][T26285] syz_tun: left promiscuous mode [ 1352.734818][ T5934] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1352.860319][T16073] usb 4-1: USB disconnect, device number 108 [ 1352.976660][ T5934] usb 6-1: Using ep0 maxpacket: 16 [ 1353.043391][T26281] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5273'. [ 1353.062884][T26281] bridge0: entered promiscuous mode [ 1353.119606][T26281] macvlan2: entered promiscuous mode [ 1353.127691][T26293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.290284][T26293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.545243][ T24] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1353.716856][ T24] usb 9-1: config 0 has no interfaces? [ 1353.740650][ T24] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1353.778602][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.808530][ T24] usb 9-1: Product: syz [ 1353.818245][ T24] usb 9-1: Manufacturer: syz [ 1353.823958][ T24] usb 9-1: SerialNumber: syz [ 1353.840658][ T24] usb 9-1: config 0 descriptor?? [ 1354.851388][T26314] loop6: detected capacity change from 0 to 7 [ 1354.932239][ T5929] Dev loop6: unable to read RDB block 7 [ 1354.972699][ T5929] loop6: AHDI p1 p2 p4 [ 1355.002452][ T5929] loop6: partition table partially beyond EOD, truncated [ 1355.175012][ T5929] loop6: p1 start 926365495 is beyond EOD, truncated [ 1355.237864][ T5929] loop6: p2 size 8 extends beyond EOD, truncated [ 1355.335262][T26314] Dev loop6: unable to read RDB block 7 [ 1355.372240][T26314] loop6: AHDI p1 p2 p4 [ 1355.399885][T26314] loop6: partition table partially beyond EOD, truncated [ 1355.429150][T26314] loop6: p1 start 926365495 is beyond EOD, truncated [ 1355.454893][T26314] loop6: p2 size 8 extends beyond EOD, truncated [ 1355.878425][ T5929] udevd[5929]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1355.919211][ T5929] udevd[5929]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1356.011263][T24932] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1356.022443][T24932] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1356.030706][T24932] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1356.041222][T24932] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1356.051840][T24932] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1356.152548][ T5934] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1356.175853][ T5934] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1356.224785][ T5934] usb 6-1: can't read configurations, error -71 [ 1356.755839][T16595] usb 9-1: USB disconnect, device number 11 [ 1356.822301][T20935] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1356.885376][T20935] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.944435][T26331] bridge0: entered promiscuous mode [ 1356.950110][T26331] vlan2: entered promiscuous mode [ 1356.955196][T26331] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:579 [ 1356.964491][T26331] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 26331, name: syz.6.5287 [ 1356.973643][T26331] preempt_count: 201, expected: 0 [ 1356.978688][T26331] RCU nest depth: 0, expected: 0 [ 1356.983646][T26331] 3 locks held by syz.6.5287/26331: [ 1356.988956][T26331] #0: ffffffff8ec808c0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1356.998601][T26331] #1: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1357.007736][T26331] #2: ffff888032ca4368 (&dev_addr_list_lock_key#6/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 1357.017996][T26331] Preemption disabled at: [ 1357.018007][T26331] [] dev_uc_add+0x56/0x120 [ 1357.028368][T26331] CPU: 0 UID: 0 PID: 26331 Comm: syz.6.5287 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 1357.028388][T26331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1357.028398][T26331] Call Trace: [ 1357.028405][T26331] [ 1357.028412][T26331] dump_stack_lvl+0x189/0x250 [ 1357.028440][T26331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1357.028464][T26331] ? __pfx__printk+0x10/0x10 [ 1357.028482][T26331] ? print_lock_name+0xde/0x100 [ 1357.028497][T26331] ? dev_uc_add+0x56/0x120 [ 1357.028517][T26331] __might_resched+0x495/0x610 [ 1357.028544][T26331] ? dev_uc_add+0x56/0x120 [ 1357.028562][T26331] ? __pfx___might_resched+0x10/0x10 [ 1357.028584][T26331] ? console_unlock+0x21b/0x270 [ 1357.028601][T26331] ? __pfx_console_unlock+0x10/0x10 [ 1357.028623][T26331] __mutex_lock+0x106/0xe80 [ 1357.028649][T26331] ? __pfx__printk+0x10/0x10 [ 1357.028667][T26331] ? dev_set_promiscuity+0x10e/0x260 [ 1357.028683][T26331] ? __netdev_printk+0x365/0x4d0 [ 1357.028705][T26331] ? __pfx___mutex_lock+0x10/0x10 [ 1357.028728][T26331] ? netdev_info+0x10a/0x160 [ 1357.028750][T26331] ? __pfx_netdev_info+0x10/0x10 [ 1357.028775][T26331] dev_set_promiscuity+0x10e/0x260 [ 1357.028794][T26331] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 1357.028813][T26331] __dev_set_promiscuity+0x534/0x740 [ 1357.028831][T26331] ? netdev_info+0x10a/0x160 [ 1357.028852][T26331] netif_set_promiscuity+0x50/0xe0 [ 1357.028871][T26331] dev_set_promiscuity+0x126/0x260 [ 1357.028891][T26331] br_manage_promisc+0x180/0x560 [ 1357.028912][T26331] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 1357.028939][T26331] __dev_set_promiscuity+0x534/0x740 [ 1357.028967][T26331] ? __hw_addr_add_ex+0x3c5/0x770 [ 1357.028998][T26331] __dev_set_rx_mode+0x17c/0x260 [ 1357.029018][T26331] dev_uc_add+0xc8/0x120 [ 1357.029038][T26331] macvlan_open+0x446/0x8e0 [ 1357.029061][T26331] __dev_open+0x470/0x880 [ 1357.029080][T26331] ? __pfx___dev_open+0x10/0x10 [ 1357.029101][T26331] __dev_change_flags+0x1ea/0x6d0 [ 1357.029123][T26331] ? __pfx___dev_change_flags+0x10/0x10 [ 1357.029149][T26331] rtnl_newlink_create+0x555/0xb00 [ 1357.029176][T26331] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1357.029192][T26331] ? rtnl_newlink+0x8db/0x1c70 [ 1357.029209][T26331] ? __pfx___mutex_lock+0x10/0x10 [ 1357.029238][T26331] ? ns_capable+0x8a/0xf0 [ 1357.029267][T26331] rtnl_newlink+0x16d6/0x1c70 [ 1357.029290][T26331] ? netlink_sendmsg+0x805/0xb30 [ 1357.029329][T26331] ? __pfx_rtnl_newlink+0x10/0x10 [ 1357.029361][T26331] ? kasan_quarantine_put+0xdd/0x220 [ 1357.029384][T26331] ? lockdep_hardirqs_on+0x9c/0x150 [ 1357.029410][T26331] ? nlmon_xmit+0xb0/0x100 [ 1357.029431][T26331] ? kmem_cache_free+0x18f/0x400 [ 1357.029451][T26331] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1357.029473][T26331] ? lockdep_hardirqs_on+0x9c/0x150 [ 1357.029494][T26331] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1357.029516][T26331] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1357.029548][T26331] ? __dev_queue_xmit+0x27e/0x3a70 [ 1357.029590][T26331] ? __lock_acquire+0xab9/0xd20 [ 1357.029646][T26331] ? __pfx_rtnl_newlink+0x10/0x10 [ 1357.029667][T26331] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1357.029685][T26331] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1357.029699][T26331] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1357.029712][T26331] ? ref_tracker_free+0x63a/0x7d0 [ 1357.029731][T26331] ? __copy_skb_header+0xa7/0x550 [ 1357.029751][T26331] ? __pfx_ref_tracker_free+0x10/0x10 [ 1357.029770][T26331] ? __skb_clone+0x63/0x7a0 [ 1357.029794][T26331] netlink_rcv_skb+0x208/0x470 [ 1357.029812][T26331] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1357.029827][T26331] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1357.029854][T26331] ? netlink_deliver_tap+0x2e/0x1b0 [ 1357.029869][T26331] ? netlink_deliver_tap+0x2e/0x1b0 [ 1357.029890][T26331] netlink_unicast+0x75b/0x8d0 [ 1357.029913][T26331] netlink_sendmsg+0x805/0xb30 [ 1357.029937][T26331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1357.029957][T26331] ? aa_sock_msg_perm+0x94/0x160 [ 1357.029977][T26331] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1357.029996][T26331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1357.030014][T26331] __sock_sendmsg+0x219/0x270 [ 1357.030047][T26331] ____sys_sendmsg+0x505/0x830 [ 1357.030079][T26331] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1357.030113][T26331] ? import_iovec+0x74/0xa0 [ 1357.030131][T26331] ___sys_sendmsg+0x21f/0x2a0 [ 1357.030151][T26331] ? __pfx____sys_sendmsg+0x10/0x10 [ 1357.030196][T26331] ? __fget_files+0x2a/0x420 [ 1357.030211][T26331] ? __fget_files+0x3a0/0x420 [ 1357.030235][T26331] __x64_sys_sendmsg+0x19b/0x260 [ 1357.030255][T26331] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1357.030293][T26331] ? rcu_is_watching+0x15/0xb0 [ 1357.030334][T26331] ? do_syscall_64+0xbe/0x3b0 [ 1357.030351][T26331] do_syscall_64+0xfa/0x3b0 [ 1357.030363][T26331] ? lockdep_hardirqs_on+0x9c/0x150 [ 1357.030384][T26331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.030399][T26331] ? clear_bhb_loop+0x60/0xb0 [ 1357.030417][T26331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.030432][T26331] RIP: 0033:0x7fd2b7d8e929 [ 1357.030445][T26331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1357.030458][T26331] RSP: 002b:00007fd2b8c03038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1357.030473][T26331] RAX: ffffffffffffffda RBX: 00007fd2b7fb5fa0 RCX: 00007fd2b7d8e929 [ 1357.030485][T26331] RDX: 00000000040408c0 RSI: 0000200000000240 RDI: 0000000000000006 [ 1357.030494][T26331] RBP: 00007fd2b7e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1357.030504][T26331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1357.030513][T26331] R13: 0000000000000000 R14: 00007fd2b7fb5fa0 R15: 00007fd2b80dfa28 [ 1357.030535][T26331] [ 1357.030553][T26331] [ 1357.575239][T26331] ============================= [ 1357.580084][T26331] [ BUG: Invalid wait context ] [ 1357.584937][T26331] 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 Tainted: G W [ 1357.593622][T26331] ----------------------------- [ 1357.598473][T26331] syz.6.5287/26331 is trying to lock: [ 1357.603846][T26331] ffff88802945ed30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260 [ 1357.614226][T26331] other info that might help us debug this: [ 1357.620117][T26331] context-{5:5} [ 1357.623581][T26331] 3 locks held by syz.6.5287/26331: [ 1357.628776][T26331] #0: ffffffff8ec808c0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1357.638274][T26331] #1: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1357.647322][T26331] #2: ffff888032ca4368 (&dev_addr_list_lock_key#6/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 1357.657517][T26331] stack backtrace: [ 1357.661239][T26331] CPU: 0 UID: 0 PID: 26331 Comm: syz.6.5287 Tainted: G W 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 1357.661262][T26331] Tainted: [W]=WARN [ 1357.661269][T26331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1357.661278][T26331] Call Trace: [ 1357.661284][T26331] [ 1357.661291][T26331] dump_stack_lvl+0x189/0x250 [ 1357.661316][T26331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1357.661337][T26331] ? __pfx__printk+0x10/0x10 [ 1357.661353][T26331] ? print_lock_name+0xde/0x100 [ 1357.661368][T26331] __lock_acquire+0xbcb/0xd20 [ 1357.661390][T26331] ? dev_set_promiscuity+0x10e/0x260 [ 1357.661404][T26331] lock_acquire+0x120/0x360 [ 1357.661422][T26331] ? dev_set_promiscuity+0x10e/0x260 [ 1357.661442][T26331] __mutex_lock+0x182/0xe80 [ 1357.661464][T26331] ? dev_set_promiscuity+0x10e/0x260 [ 1357.661479][T26331] ? __pfx__printk+0x10/0x10 [ 1357.661494][T26331] ? dev_set_promiscuity+0x10e/0x260 [ 1357.661514][T26331] ? __netdev_printk+0x365/0x4d0 [ 1357.661534][T26331] ? __pfx___mutex_lock+0x10/0x10 [ 1357.661555][T26331] ? netdev_info+0x10a/0x160 [ 1357.661574][T26331] ? __pfx_netdev_info+0x10/0x10 [ 1357.661592][T26331] dev_set_promiscuity+0x10e/0x260 [ 1357.661609][T26331] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 1357.661627][T26331] __dev_set_promiscuity+0x534/0x740 [ 1357.661643][T26331] ? netdev_info+0x10a/0x160 [ 1357.661661][T26331] netif_set_promiscuity+0x50/0xe0 [ 1357.661677][T26331] dev_set_promiscuity+0x126/0x260 [ 1357.661694][T26331] br_manage_promisc+0x180/0x560 [ 1357.661710][T26331] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 1357.661728][T26331] __dev_set_promiscuity+0x534/0x740 [ 1357.661744][T26331] ? __hw_addr_add_ex+0x3c5/0x770 [ 1357.661761][T26331] __dev_set_rx_mode+0x17c/0x260 [ 1357.661777][T26331] dev_uc_add+0xc8/0x120 [ 1357.661794][T26331] macvlan_open+0x446/0x8e0 [ 1357.661812][T26331] __dev_open+0x470/0x880 [ 1357.661827][T26331] ? __pfx___dev_open+0x10/0x10 [ 1357.661843][T26331] __dev_change_flags+0x1ea/0x6d0 [ 1357.661860][T26331] ? __pfx___dev_change_flags+0x10/0x10 [ 1357.661879][T26331] rtnl_newlink_create+0x555/0xb00 [ 1357.661899][T26331] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1357.661914][T26331] ? rtnl_newlink+0x8db/0x1c70 [ 1357.661928][T26331] ? __pfx___mutex_lock+0x10/0x10 [ 1357.661952][T26331] ? ns_capable+0x8a/0xf0 [ 1357.661991][T26331] rtnl_newlink+0x16d6/0x1c70 [ 1357.662006][T26331] ? netlink_sendmsg+0x805/0xb30 [ 1357.662027][T26331] ? __pfx_rtnl_newlink+0x10/0x10 [ 1357.662075][T26331] ? kasan_quarantine_put+0xdd/0x220 [ 1357.662099][T26331] ? lockdep_hardirqs_on+0x9c/0x150 [ 1357.662122][T26331] ? nlmon_xmit+0xb0/0x100 [ 1357.662144][T26331] ? kmem_cache_free+0x18f/0x400 [ 1357.662160][T26331] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1357.662183][T26331] ? lockdep_hardirqs_on+0x9c/0x150 [ 1357.662204][T26331] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1357.662225][T26331] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1357.662248][T26331] ? __dev_queue_xmit+0x27e/0x3a70 [ 1357.662277][T26331] ? __lock_acquire+0xab9/0xd20 [ 1357.662305][T26331] ? __pfx_rtnl_newlink+0x10/0x10 [ 1357.662319][T26331] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1357.662335][T26331] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1357.662349][T26331] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1357.662363][T26331] ? ref_tracker_free+0x63a/0x7d0 [ 1357.662383][T26331] ? __copy_skb_header+0xa7/0x550 [ 1357.662402][T26331] ? __pfx_ref_tracker_free+0x10/0x10 [ 1357.662421][T26331] ? __skb_clone+0x63/0x7a0 [ 1357.662441][T26331] netlink_rcv_skb+0x208/0x470 [ 1357.662458][T26331] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1357.662472][T26331] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1357.662492][T26331] ? netlink_deliver_tap+0x2e/0x1b0 [ 1357.662514][T26331] ? netlink_deliver_tap+0x2e/0x1b0 [ 1357.662531][T26331] netlink_unicast+0x75b/0x8d0 [ 1357.662549][T26331] netlink_sendmsg+0x805/0xb30 [ 1357.662569][T26331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1357.662587][T26331] ? aa_sock_msg_perm+0x94/0x160 [ 1357.662606][T26331] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1357.662626][T26331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1357.662642][T26331] __sock_sendmsg+0x219/0x270 [ 1357.662665][T26331] ____sys_sendmsg+0x505/0x830 [ 1357.662685][T26331] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1357.662706][T26331] ? import_iovec+0x74/0xa0 [ 1357.662720][T26331] ___sys_sendmsg+0x21f/0x2a0 [ 1357.662739][T26331] ? __pfx____sys_sendmsg+0x10/0x10 [ 1357.662788][T26331] ? __fget_files+0x2a/0x420 [ 1357.662805][T26331] ? __fget_files+0x3a0/0x420 [ 1357.662825][T26331] __x64_sys_sendmsg+0x19b/0x260 [ 1357.662846][T26331] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1357.662869][T26331] ? rcu_is_watching+0x15/0xb0 [ 1357.662895][T26331] ? do_syscall_64+0xbe/0x3b0 [ 1357.662909][T26331] do_syscall_64+0xfa/0x3b0 [ 1357.662922][T26331] ? lockdep_hardirqs_on+0x9c/0x150 [ 1357.662944][T26331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.662960][T26331] ? clear_bhb_loop+0x60/0xb0 [ 1357.662977][T26331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.662994][T26331] RIP: 0033:0x7fd2b7d8e929 [ 1357.663008][T26331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1357.663023][T26331] RSP: 002b:00007fd2b8c03038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1357.663040][T26331] RAX: ffffffffffffffda RBX: 00007fd2b7fb5fa0 RCX: 00007fd2b7d8e929 [ 1357.663053][T26331] RDX: 00000000040408c0 RSI: 0000200000000240 RDI: 0000000000000006 [ 1357.663063][T26331] RBP: 00007fd2b7e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1357.663074][T26331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1357.663084][T26331] R13: 0000000000000000 R14: 00007fd2b7fb5fa0 R15: 00007fd2b80dfa28 [ 1357.663101][T26331] [ 1358.222300][T24932] Bluetooth: hci6: command tx timeout [ 1358.363928][T26340] netlink: 'syz.5.5285': attribute type 4 has an invalid length. [ 1358.394741][T24932] Bluetooth: hci2: command 0x0405 tx timeout [ 1358.432319][T26331] macvlan2: entered promiscuous mode [ 1358.534760][T16595] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1358.550360][T20935] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1358.560699][T20935] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.857117][T20935] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1358.904714][T20935] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.218956][T16596] usb 7-1: USB disconnect, device number 8 [ 1359.263167][T16595] usb 9-1: device descriptor read/all, error -71 [ 1359.488251][T20935] erspan0 (unregistering): left promiscuous mode [ 1359.546089][T20935] bond0 (unregistering): (slave gretap1): Releasing active interface [ 1359.621492][T20935]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1359.632593][T20935]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1359.644216][T20935]  (unregistering): (slave macvlan0): Releasing backup interface [ 1359.654166][T20935]  (unregistering): Released all slaves [ 1359.663051][T20935] bond1 (unregistering): Released all slaves [ 1359.674487][T20935] bond0 (unregistering): Released all slaves [ 1359.766633][T20935] : left promiscuous mode [ 1359.865204][T20935] : left promiscuous mode [ 1359.934782][T20935] tipc: Disabling bearer [ 1359.940500][T20935] tipc: Left network mode [ 1360.217591][T20935] hsr_slave_0: left promiscuous mode [ 1360.223370][T20935] hsr_slave_1: left promiscuous mode [ 1360.236378][T20935] veth0_macvtap: left allmulticast mode [ 1360.241967][T20935] veth0_macvtap: left promiscuous mode [ 1360.252776][T20935] veth1_macvtap: left promiscuous mode [ 1360.261258][T20935] veth1_vlan: left promiscuous mode [ 1360.267451][T20935] veth0_vlan: left promiscuous mode [ 1360.322768][T20935] team0 (unregistering): Port device batadv0 removed [ 1360.545745][T20935] team0 (unregistering): Port device team_slave_1 removed [ 1360.588491][T20935] team0 (unregistering): Port device team_slave_0 removed [ 1360.971136][T20935] IPVS: stop unused estimator thread 0... [ 1361.057435][T20935] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.119251][T20935] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.190266][T20935] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.253999][T20935] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.388377][T20935] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.408721][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.415658][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.438951][T20935] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.502900][T20935] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.584324][T20935] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.720676][T20935] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.759576][T20935] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.807916][T20935] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.853331][T20935] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.959060][T20935] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1362.013226][T20935] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1362.078491][T20935] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1362.152915][T20935] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1362.240954][T20935] bridge_slave_1: left allmulticast mode [ 1362.247789][T20935] bridge_slave_1: left promiscuous mode [ 1362.253547][T20935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.267452][T20935] bridge_slave_0: left allmulticast mode [ 1362.273124][T20935] bridge_slave_0: left promiscuous mode [ 1362.279764][T20935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.289437][T20935] vlan2: left promiscuous mode [ 1362.295006][T20935] bridge0: port 4(vlan2) entered disabled state [ 1362.302398][T20935] macvlan2: left promiscuous mode [ 1362.307926][T20935] bond0: left promiscuous mode [ 1362.313107][T20935] bridge0: port 3(macvlan2) entered disabled state [ 1362.322249][T20935] bridge_slave_1: left allmulticast mode [ 1362.328108][T20935] bridge_slave_1: left promiscuous mode [ 1362.333775][T20935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.342859][T20935] bridge_slave_0: left promiscuous mode [ 1362.348699][T20935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.358350][T20935] bridge_slave_1: left allmulticast mode [ 1362.363992][T20935] bridge_slave_1: left promiscuous mode [ 1362.370680][T20935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.380484][T20935] bridge_slave_0: left allmulticast mode [ 1362.386421][T20935] bridge_slave_0: left promiscuous mode [ 1362.392057][T20935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.401159][T20935] vlan2: left allmulticast mode [ 1362.406175][T20935] dummy0: left allmulticast mode [ 1362.411110][T20935] vlan2: left promiscuous mode [ 1362.416332][T20935] dummy0: left promiscuous mode [ 1362.421312][T20935] bridge0: port 1(vlan2) entered disabled state [ 1362.433962][T20935] bond_slave_0: left promiscuous mode [ 1362.439580][T20935] bond_slave_1: left promiscuous mode [ 1362.589090][T20935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1362.600528][T20935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1362.610529][T20935] bond0 (unregistering): Released all slaves [ 1362.638689][T20935] dvmrp0 (unregistering): left allmulticast mode [ 1362.808712][T20935] bond0 (unregistering): left allmulticast mode [ 1362.815012][T20935] bond_slave_0: left allmulticast mode [ 1362.820480][T20935] bond_slave_1: left allmulticast mode [ 1362.830511][T20935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1362.840188][T20935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1362.850121][T20935] bond0 (unregistering): Released all slaves [ 1362.859246][T20935] bond1 (unregistering): Released all slaves [ 1362.937244][T20935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1362.947886][T20935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1362.960063][T20935] bond0 (unregistering): Released all slaves [ 1363.034703][T20935] erspan0 (unregistering): left allmulticast mode [ 1363.072879][T20935] dvmrp0 (unregistering): left allmulticast mode [ 1363.118783][T20935] bridge0 (unregistering): left allmulticast mode [ 1363.425019][T20935] bond0 (unregistering): Released all slaves [ 1363.542893][T20935] tipc: Disabling bearer [ 1363.558878][T20935] tipc: Left network mode [ 1364.013575][T20935] hsr_slave_0: left promiscuous mode [ 1364.022881][T20935] hsr_slave_1: left promiscuous mode [ 1364.029479][T20935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1364.037073][T20935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1364.045267][T20935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1364.052665][T20935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1364.066363][T20935] hsr_slave_0: left promiscuous mode [ 1364.072077][T20935] hsr_slave_1: left promiscuous mode [ 1364.079184][T20935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1364.088217][T20935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1364.097424][T20935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1364.106118][T20935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1364.117025][T20935] hsr_slave_0: left promiscuous mode [ 1364.122750][T20935] hsr_slave_1: left promiscuous mode [ 1364.128857][T20935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1364.136682][T20935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1364.144274][T20935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1364.151940][T20935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1364.162765][T20935] hsr_slave_0: left promiscuous mode [ 1364.170479][T20935] hsr_slave_1: left promiscuous mode [ 1364.183923][T20935] veth1_macvtap: left promiscuous mode [ 1364.189440][T20935] veth0_macvtap: left promiscuous mode [ 1364.195090][T20935] veth1_vlan: left promiscuous mode [ 1364.200358][T20935] veth0_vlan: left promiscuous mode [ 1364.206858][T20935] veth1_macvtap: left promiscuous mode [ 1364.212353][T20935] veth0_macvtap: left promiscuous mode [ 1364.218055][T20935] veth1_vlan: left promiscuous mode [ 1364.223305][T20935] veth0_vlan: left promiscuous mode [ 1364.229610][T20935] veth1_macvtap: left promiscuous mode [ 1364.235149][T20935] veth0_macvtap: left promiscuous mode [ 1364.240687][T20935] veth1_vlan: left promiscuous mode [ 1364.246009][T20935] veth0_vlan: left promiscuous mode [ 1364.474334][T20935] team0 (unregistering): Port device team_slave_1 removed [ 1364.501410][T20935] team0 (unregistering): Port device team_slave_0 removed [ 1364.716070][T20935] team0 (unregistering): Port device team_slave_1 removed [ 1364.728699][T20935] team0 (unregistering): Port device team_slave_0 removed [ 1364.921711][T20935] team0 (unregistering): Port device team_slave_1 removed [ 1364.949055][T20935] team0 (unregistering): Port device team_slave_0 removed [ 1366.482747][T20935] IPVS: stop unused estimator thread 0...