last executing test programs: 5m37.276571916s ago: executing program 2 (id=1200): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c1}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@private=0xa010101, 0x0, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x4d6, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x2000000000000e) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc840, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r6, 0x0, 0x24008000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, 0x0, 0x9084) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 5m35.894224116s ago: executing program 2 (id=1206): mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000200)) shmctl$IPC_RMID(0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448de, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80102, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x40000) 5m35.757726199s ago: executing program 2 (id=1207): syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000300000040351213823fe701020301090269000301003003080b000201002006090400000001012000092401ff7f06090013090401000001"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 5m32.692248717s ago: executing program 2 (id=1215): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) syz_open_procfs(0x0, &(0x7f0000000280)='mounts\x00') epoll_create1(0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 5m31.743948578s ago: executing program 2 (id=1218): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 5m31.133288942s ago: executing program 2 (id=1222): r0 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) 5m31.046301374s ago: executing program 32 (id=1222): r0 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) 3m23.606670496s ago: executing program 0 (id=1808): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x82f49000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x72, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) setresuid(0x0, 0xee00, 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000c0001000a0c100000000000204e0000", 0x58}], 0x1) setsockopt$sock_int(r4, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@random="e33110495bfd", @empty, @val={@void, {0x8100, 0x4, 0x1, 0x3}}, {@ipv6={0x86dd, @udp={0x2, 0x6, 'mi\b', 0x10, 0x11, 0xff, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x7e, 0x0, 0x7, 0x1, 0x0, 0x3, 0x67}], {0x4e21, 0x4e22, 0x8}}}}}}, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22, 0x0, @loopback}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e23, 0xe7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffffff01}, 0x1c) mmap$snddsp_control(&(0x7f0000002000/0xf000)=nil, 0x1000, 0x1, 0x13, r0, 0x81000000) 3m22.56520056s ago: executing program 0 (id=1811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x401}, {0x0, 0x2, 0x3, 0x1000}, {0xa47, 0x5}}) 3m18.578547982s ago: executing program 0 (id=1829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 3m18.364586437s ago: executing program 0 (id=1830): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c000080040001800c0005400000000000000049080003400000000114000000110001000000000000afaeb97c4d8a2a"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="20000400000091"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="403004000000c34d9798"], &(0x7f0000000680)={0x0, 0xa, 0x1, 0x2}, 0x0, 0x0, 0x0}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000100)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x207) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, &(0x7f00000007c0)=[@nested_vmresume={0x130, 0x18, 0x3}, @rdmsr={0x66, 0x18, {0x390}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_clgi={0x17f, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @ro32=0x4406, 0x8, 0x3, 0x2}}, @rdmsr={0x66, 0x18, {0x39f}}, @nested_amd_stgi={0x17e, 0x10}, @set_irq_handler={0xc8, 0x20, {0xed, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0xa7bd9f4635f28a18, 0xd4bd}}, @uexit={0x0, 0x18, 0x2}, @wr_drn={0x68, 0x20, {0x0, 0x1}}, @code={0xa, 0x4a, {"36400f07c4e16d57cb66baa100edc4e18d6173fbc40139f4d475eab9b40b0000b800800000ba000000000f3066f30fbd0b0fd9503b470f0138"}}, @nested_amd_invlpga={0x17d, 0x20, {0x41000, 0x33ce}}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0x2158, 0x0, 0x2}}, @set_irq_handler={0xc8, 0x20, {0x49, 0x1}}, @code={0xa, 0x64, {"48b809000000000000000f23d80f21f835000000100f23f8f367450f011f0f20e035000001000f22e0b9db0a0000b800000000ba000000800f304687100f3043d97971c4e27d20ab74a96d4f64430f01f80f07"}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x7, 0x5, 0x1}}, @uexit={0x0, 0x18, 0x6}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control16, 0x4, 0x401, 0xb}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x5, 0x8, 0x1}}, @nested_amd_vmload={0x182, 0x18}], 0x33e}) syz_kvm_setup_cpu$x86(r7, r10, &(0x7f0000906000/0x18000)=nil, &(0x7f00000006c0)=[@text16={0x10, &(0x7f0000000640)="66b86cffb7880f23d00f21f86635100000050f23f86766c744240040a6aa7d6766c7442402300b00006766c744240600000000670f011c24f08245060bbaf80c66b8406c8e8d66efbafc0c66edd9fc3e0f01c8ddc765f390f011bede00729f", 0x5f}], 0x1, 0x35, &(0x7f0000000700)=[@efer={0x2, 0x9c00}], 0x1) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x18) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x2000000, 0x0, 0x10, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x4, 0x3}) 3m14.470536746s ago: executing program 0 (id=1840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 3m12.459521692s ago: executing program 0 (id=1844): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}], 0x1, 0xc000) 2m56.741268113s ago: executing program 33 (id=1844): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}], 0x1, 0xc000) 2m52.358709993s ago: executing program 3 (id=1928): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x16, 0xc6, 0xc8, 0x20, 0x2040, 0x7500, 0x51f3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x55, 0x100, 0x8, "", [{{0x9, 0x4, 0xf9, 0x4, 0x0, 0x4, 0x29, 0x59, 0x24}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) 2m49.743857723s ago: executing program 3 (id=1937): r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5500000020007fafb72d1392a4a2719302000000030b43026c26236925000400fe7f0004002dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) 2m49.552218638s ago: executing program 3 (id=1938): r0 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000100)={r5}) 2m48.639225169s ago: executing program 3 (id=1941): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) read(r1, &(0x7f0000000180)=""/145, 0x91) close_range(r0, 0xffffffffffffffff, 0x0) 2m48.420038723s ago: executing program 3 (id=1944): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0xe, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x0, 0x5000, 0xff05, 0x2, 0xb, 0x3, 0x90, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0x6, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x7391, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x20008004) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r4, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 2m46.957018457s ago: executing program 3 (id=1947): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 2m31.414625584s ago: executing program 34 (id=1947): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 9.331630006s ago: executing program 4 (id=2787): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',group_']) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b", 0xe3}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc0051"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d4", 0x7a}, {&(0x7f0000000ac0)="3fe4c8a3288f", 0x6}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f", 0x7e}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d", 0x98}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000340)={0x10000, 0x2, 0x8000000, 0x2000, &(0x7f0000001000/0x2000)=nil}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.577263793s ago: executing program 7 (id=2792): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',grou']) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40880, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c53931207348", 0xad}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000b40)="86545d2157646172b81581", 0xb}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cf", 0xcd}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x652}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.780541455s ago: executing program 5 (id=2796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0x1, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x7f, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 6.719974966s ago: executing program 7 (id=2798): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.669088537s ago: executing program 4 (id=2799): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0xe, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x0, 0x5000, 0xff05, 0x2, 0xb, 0x3, 0x90, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0x6, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x7391, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x20008004) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r4, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 6.442664732s ago: executing program 5 (id=2800): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000180)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7957ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc30eb919f98f0c8eeedbb598bc77f0ea766d13268eb19b0cfd6d9624efc20e49f72912e99e06f832a5d6a336636bcef1293071e0a88f8453", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000300)={0x0, r1}, &(0x7f0000000440)=""/68, 0x44, &(0x7f0000000400)={&(0x7f00000002c0)={'sha3-512\x00'}}) unshare(0x6a040000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) futimesat(r2, 0x0, &(0x7f0000000400)={{0x77359400}, {0x77359400}}) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) syz_usb_connect$uac2(0x0, 0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000081e0400304000010203010902"], 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [0xa2, 0xb, 0x4, 0xc, 0x4, 0x6], 0x1, 0x0, 0x0, [{}]}, 0x88) syz_clone(0x0, &(0x7f0000000380)="cd4d058449cc6ba8e83b60f104664195feb738335cc3aa89cec959310eb59d36858ac95b437b045c3d6af10165f953258e3832ed6bd07c1cfe497c474c40081360899940ffdf1dc21faf9a50640b33a1de857d4a884f8842f85576869c4791d72225553fd973b0ea449333334940c8aa34f299", 0x73, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="842c976947f3f0c46980c10974ff11ff7155945c3d35451f87b80e780f63458906c0bf14a3b4f27ee1a83237ec4007c773739c097e4706419a548c7842d039e0dfffd7fe69118c99ca35ce7da6f799b6762c17486f157a70a20ce0eb84070234114f3d4e63b9828a99d2d632cd2141c3c5f091c6d469e926abd812df1e8e5e4f1ca1a3c1daf66642b100049f2a7a4ac6803bbbff11c76bfde2b7a1877c4340ba5e9cc2784a6f76f8c1639096c411336783abfd34dcaa8fa542291a69") move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000300)={0x4c, 0x2, 0x80, "444900d730fae90500000004000000060ff697b900", 0x34424752}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000001680)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r6 = add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000006162636475666768696a6b6c6d6e6f70da275adacf7adc4a7b40f73f86e23035cf9ad343a5dc8235"], 0x18, 0xfffffffffffffff8) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r4, 0x5f) 6.333936374s ago: executing program 4 (id=2801): syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x6e22, 0xd, @empty, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000010000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10", 0x4f}], 0x1) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86", 0xdf}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc0051", @ANYRESDEC=r3], 0xb8, 0x40801}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d4", 0x7a}, {&(0x7f0000000ac0)="3fcdc8a328", 0x5}, {&(0x7f0000000640)="86545d2157646172b815818bfd0e1457556266ea0fed0fb177ea6a384b7c3f2ae620898579380233c4fc000000000006000000000000000004", 0x39}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f", 0x7e}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9", 0xc8}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x102da74324d44435) r4 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00050000000000000000000000040000000000249d197e91fee0a4aaafb74799baf1f5d2e1544ff87291b06a755e38ee90ce"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6.267746546s ago: executing program 7 (id=2802): connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2710, @host}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x13000, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x16}, {0x6}]}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 5.875421045s ago: executing program 1 (id=2803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x24040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0x1, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x7f, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) 5.712196159s ago: executing program 1 (id=2806): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000bc0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 4.909680077s ago: executing program 7 (id=2807): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2, 0x8440}], 0x1, 0x0, &(0x7f00000001c0)={[0x8001a0ffffffff]}, 0x8) dup2(r1, r2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@remote, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x800b2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r6 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r6, 0x0, 0x0, 0x1) syz_usb_connect(0x0, 0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) personality(0xeaffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0xc2482, 0x100) 4.79558397s ago: executing program 4 (id=2808): syz_open_procfs(0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)='|', 0x1}], 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x8b32, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 4.522902506s ago: executing program 1 (id=2810): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',group_']) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b", 0xe3}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc0051"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d4", 0x7a}, {&(0x7f0000000ac0)="3fe4c8a3288f", 0x6}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b", 0x99}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000340)={0x10000, 0x2, 0x8000000, 0x2000, &(0x7f0000001000/0x2000)=nil}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.295564361s ago: executing program 1 (id=2811): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0), 0xce4, r0}, 0x38) 4.036105247s ago: executing program 1 (id=2812): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000480)={&(0x7f0000000380)="e12c", 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000004c0)={r1}) 3.942597449s ago: executing program 1 (id=2813): r0 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r3 = open(0x0, 0x0, 0x0) futimesat(r3, 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000180)='./file1\x00', 0x0, 0x0, r4}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4000004, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10) timer_create(0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0xc03e) 3.450751331s ago: executing program 5 (id=2815): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) select(0x40, &(0x7f0000000080)={0x8, 0x62dc, 0x5, 0x0, 0x800, 0x8000000000000000, 0x6, 0x1ff}, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x0, 0x0, r1}) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = syz_open_procfs(r2, &(0x7f0000000100)='syscall\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0x2a818}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x9}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x54}, 0x4004) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000240)={0x7e, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x5, 0x800, 0x4}}]}) 3.296164044s ago: executing program 6 (id=2816): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000000)=',', 0x1}, {&(0x7f0000001740)="e891d7448a762ae595feeab6c5c0004bb88bbb0bfa5d98f2782d5c064f8d39a5db98032c3849946283bdfcc068c3d04861835b6f893b9b071f337d271f7726607fa125a8cf6d02aac9bf7a7f53d655617370f051584cf9deddd40642eef301471c54b626cbb4f6e838c3940ce5ce3d821bb4de7020b26a6990d063feb2bdaaf42507d91d214f312077cc3e41e83d4c412382d8b567f50be1482946688c1b8787c2b796b024698cd64b10630e1239e5209e41ca3a5349a179d00be4554469ceac38726f5b2f7029604d2cf216033256178cef4ef0d043140e73fc06f1e8d2bf1ddfd4cae22ae26fc7d44c8d8da9c08d3aee04540bdbf45c6287d19e2af8bdf3095661c3dfd14700d160712d5135700a37387a2f04580f5097e65905ad26aa6ba84dc9042fa533c68bc3dcedea98bc901037eecc17b6719ae5fb2585c9d866d260e7c9c9dd10a2ae38d1ec2bb1e4d7bacf8a9999189724707044facbc825a0ab9a42ae5461045d12e32edca6ab869d0e66d4aacc083786e773b1d189212b91c703dfd4e8718a0a2107d0f386d48e219b09c9d35eefdb42c2d1bb3d9783b742548a21be208946298370855d7ffcddc80a73a2f1e0e5e2deaaf0d188bd66aad5f5b2917ad93a373a53c051cad32a54f0f90b2671c999e7a79925684a5140cfe9e076102944cf863e85bad4aa7ff0ec32b7067f9d52a2a011131b904ae5d6000ef6d33c449724648e687e94d62015bbc755ddf0fab81606b1ea5271c5f1fb46eca3eec5b39a2e3445a92395566e269031532ec3e407df367e5c8e27d9865b776f6ee0fa8bde3463d7c6dc00b6c48949b170f13407e94cc6ac8fc184edb0008ea896a26062dd238ec109056f2fb1908926ec6326fdba4ebe9c508a108ae2f539c043eaffd7d60452cce86a30ae91f1e5fcda29863a4372ad2512403a4e1aa54bb4821aabee7b2e5cdeed8b9036bcea5a0da4c7fa111079d6400760448c9f6defde0f26c75917ab99d9c6e3b36595a234e85711676feaf9eca2a4e390b5c885e8ffe51f12ff8febe819c810f1a68c3a7e1c2a04f9e9deacc49120cde41a130c0b74b979bd154d760c2de75f2cf459f80fe52e9415077eea6e0507388a782b647e89738d4f6055e7873012377e64dcf52e9d0330dd13a36b7249541d209b4757f94f4e33028ec732c1a64630dbb567301b05aa5ce44e96b928bf394eae9fe1bc463cbbc653f7e6ba93c77df033b23fe57199dfce1d90673533df58f05f74ddd73bf4ce392d2a2d608185271366fe757bb1cad07ad8cbef8d75edb1e390b6776a58b75cc2f2501854155c5de32c66fffe7d06830cb344071252cd4e32855cfee18b05a7e6764e7214d6e823353cea38260bfe45e4d093624f31804c78b43c86c134fceb36e54fe174040da975d7178a56a78309aef271ef6a2eaaeb844d892a437cd2a64cc3197225d64701a62a6316f0d416e85c6a9dfa3055b71db8e7e95a04cd0597c00eee41b625c1c658025da3805578959aff19f93d8f20557a82cfa5acdf0e14135a22e229a9f70428c79f8c3489b055cdd055316743d4c2d67bc18b673e11d8e7a07b73fb48903ece24ceb49c849b1aabc00c0ded6b7e19efb624ad85d11487a582b7bf9b7bdc02ee46ce9b6d088e22911d350a64dede144feded59eceb1faacb06b60053643bc9b19a553fc01bc8a990cadb9ddf00a41ee2d1dc678ea714a8e46f916895d45bd2bd6136ec88077768cde4309c30b0267234c01fe071e64ee844bca798b51b1aeb7d26462e6bbd0e26727129c28f99164ee4c3f2bcd50b299eb59d6d9f4c481b357cba09738450219aa15dd3924866dea84632cad106cfe43dafb5824993091c9ad11d7d8c8fec2416ff2ff9e82e58caa5560ecbe28c803a98a89a8e04e257573046210e0a24c809130dfc39cfa6bbc9c5e843daab98a9422a13e31ecc3d952b34eecbd5ba9b4d6da6edee1f66e2004fc9c84650333325f829690c16f4951d7db59753921adc23d54564b8252232e5cff9238a8e2595bd57c22520e567cb0a240fef04551d74f2957c8e1a9d7028139d8977507b1285fdd78efd88b19630a67e95519410c2d82787e3c675d6c69b752d4b31323e0e277cd5b096f811901eb6d83ad932369a913bb7c9c010ab340da2ccfd7b339db086231ad118c3897dd7ebf7f97a4bc3f03adc8f3652f9a480f119974dbbd8b9ebfe89f80710efd0e769308a14e5316af0dc0414c90e4317d17b1356944f0ea43ec18cd85bfc4f106ded3c023f7c6e99228a0f89e98a1a89f9328c42dc7ecf4b5287f66f55d6266f5ea5eebd6fef4c5acb80ae919f95b1dd4e21f4b2e41bd825d987a1e52db5dc30d68ca3c7a8cc26ead088acbb922983065483b572f83767f93ef9eb37e99f869a4fcb2ae9f7c1c216c2ae461325927b524daba0ccfa8ab190bd5c86ca7c1d0a8e98b8b9516bae460517962118824f09969e02aec06d4b76429594edae2c657d34724178781b92ffceac17b69f67cecb02756efcca2728c68c2386b1e682cf7710fe99496c7e98d1725ecc4ecdab9bf460697e7b09daca57b251984e8473a5e3623a544dec55aff2c541f376f2c6eb418c019890a3bed40411dbd62aed5985b5dbcdec95ffd3ba953c0ffbd0b24bcc25119f07038ae7036e2a6f2db3ae3f86f8bad6424ec2be968843cfa3a89110b3a9b9b7c5839603a1b91d609a65ec405417fa71583d8f84029965b5c5acb8e45daec55e2f56491eb697087651c344642cb787e8abdbe5b91946721d0703fe44e6d855410a95efd23a9c6eae6cf1702608b1478fe2d6d4bbc6606b2c0aca2cb86a3d71709907821ab2fe7a393d8e4a818f66fe2bbc7f6457c1de901eb9693213e48ba0665710719ba5202563696e79c588", 0x800}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) 3.131757798s ago: executing program 6 (id=2817): syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b", 0xe3}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc0051"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d4", 0x7a}, {&(0x7f0000000ac0)="3fe4c8a3288f", 0x6}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7", 0xcb}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000340)={0x10000, 0x2, 0x8000000, 0x2000, &(0x7f0000001000/0x2000)=nil}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.03718878s ago: executing program 5 (id=2818): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.819992345s ago: executing program 4 (id=2819): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x212201, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000680)="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", 0x126}], 0x1}}], 0x1, 0x14) shutdown(r3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, 0x0, 0x20000011) sendmsg$nl_generic(r1, 0x0, 0x8800) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb918", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040), 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.087465195s ago: executing program 7 (id=2820): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0xe, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x0, 0x5000, 0xff05, 0x2, 0xb, 0x3, 0x90, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0x6, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x7391, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x20008004) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r4, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 1.033064056s ago: executing program 5 (id=2821): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ptrace(0x10, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) r3 = memfd_create(0x0, 0x7) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000083c0)="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", 0x2000, 0x0) 923.777289ms ago: executing program 4 (id=2822): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) socket$netlink(0x10, 0x3, 0x13) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 800.073321ms ago: executing program 5 (id=2823): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121700000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) sendto$unix(r3, &(0x7f0000000300)="dfc3cea65ea8693244d6f9a68d6650d9967da87723c300224018206b06e51e454fa795acac703861de9ea2da099cc6dccc0964255389a2e15909bc11f62b70d4efae8b5383ba23a5270c7cdd078873c3394086749d329ff92de97dcb25984da1cdceb4ada85f52a7c7c7fcacc4b98a0dd2da559317d06fe6e8ed9a2cf078208771e64f7553528e18b404bb1b29f73a16a0e35261a87c71bd77e49389b2721d006c4e04511516643e5d14844e91ff015a5e84dc3ac508610261eeaa05a02a54942b886d779e22efeff1974e6749771aada9", 0xd1, 0x84, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 617.592046ms ago: executing program 6 (id=2824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 557.949497ms ago: executing program 7 (id=2825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x8, 0x207, 0x10, 0x0, 0xe, 0x7, 0x1}}, {0x6, 0x2, [0xb867]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) sendto$packet(r4, &(0x7f00000005c0)="05031c00d3fc140000004788ed1c", 0xe, 0x24000091, &(0x7f0000000140)={0x11, 0x7, r5, 0x1, 0xfe, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x100, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) unshare(0x22020600) 301.366753ms ago: executing program 6 (id=2826): write$bt_hci(0xffffffffffffffff, &(0x7f0000000500)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0x54}}}, 0x5) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de", 0x9b}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1", 0x33}, {&(0x7f0000000800)}], 0x4}}], 0x1, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x101, 0xfffffffd, &(0x7f00000000c0)}) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 214.707685ms ago: executing program 6 (id=2827): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000140)="0c03573afa64193f5c0c67f7ed0f08ef102566dce7ec5f66a648201426236ae476434d7c6d4dbb49b6af27b75412ff599713", 0x32}, {&(0x7f0000000180)="47b6b1bcf13967b3c4bf3cc68f653effb380625761263b1720c5cb1c081f2af91cfebdad5d8f59f17b8a1d71b9c27079e4fe363d15d9fd80591447d7dce56e707f13b3168cd1dbb94cbf2a21264246d1b563d39bab7e3e105e9956260704ea72f04250aa97c76a1683207d3de919bc0b5196b965553881bb5e792e93c42885cd11f181ac41811b073e5dcf5bc549aaa4181bdd03fe1d7da63aa4b13b67e45f868047a7dd0fae16b9536264269ed9fe79b1824b17e0d5d95fe641338a1eee0e4612e6cc974a1f8d80a731d91569", 0xcd}, {&(0x7f0000000500)="eb11946c3eeac60839553f9e6003a7c6fa8120c1cc9efcc39e37b1bce4396dd05c5d8b881233767b08e8d4faf922b5f13e172ba3252675cd4c3c79d7e7a894d0eb054e2b86e58662a4e723", 0x4b}, {&(0x7f0000000840)="396b0b2d92a081c10b00000001000000015ae169ced3036d77380fdfb4a449f37d3b3b69f6306c0a52aac4d6243e7bbe7faa4a1b07ee8d91d06cdc", 0x3b}, {&(0x7f0000000740)="8fd7e1a2dae37ddf36b42888adb33b24cd5e70270cb2d35209544b64813df407ff978c073d5ba9a9e32da3814e10996ef7943420ecfecc2de25761", 0x3b}, {&(0x7f00000002c0)="581f06a617594d1244e24b1ad08297c3a93ec8741db357cf2f47105e5a0830d4aa12743c45893332326216118c82631b2dd8ee154e7e9c12ab9ef8ea571f29a31fb97fc052ed5e49683e157e8ff5708c88924e4ff8a5076d28e610007b056699eeb3", 0x62}], 0x6}}], 0x1, 0x40080) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000440)="3187c89dda4db192b80f726757b05cfeb3a9dcb6e310ac212f9c6ebab422eb8a1b07e8fa734c4b34d05a3dd733b1d3f5954d9fb462444051", 0x38}, {&(0x7f00000008c0)="058c9ce3e71ec8530af92a4ab48c8adbc1f054b4a5a0cb88fdbc3f070309bb65328378276a7bb43b954124a4186d7ebafccd320b809fd255b45ca04c5a24e8d8d40b766c7cd772a8b0edbe17ad81278a0520122684046ac78292cd015040a59d4d0ea8cf43c116e440836d0fbdf175c32a7ba7e1177dd6100670cae382609772df7201a12b45ce650fe9", 0x8a}], 0x2) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000806d, 0x0, 0x0) 0s ago: executing program 6 (id=2828): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) kernel console output (not intermixed with test programs): op1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 598.728136][T11107] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 598.739622][T11107] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 598.751567][T11107] blk_update_request: I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 598.763135][T11107] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 598.773999][T11107] blk_update_request: I/O error, dev loop1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 598.785564][T11107] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 598.796890][T11107] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 598.808868][T11107] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 598.819315][T11107] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 598.829142][T11107] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 599.593434][ T4231] usb 1-1: USB disconnect, device number 8 [ 600.223500][ T4232] usb 1-1-port1: config error [ 601.985743][T11131] device syzkaller0 entered promiscuous mode [ 602.018162][T11131] tipc: Enabled bearer , priority 0 [ 602.060584][T11130] tipc: Resetting bearer [ 602.078366][T11130] tipc: Disabling bearer [ 605.526420][T11192] NILFS (nullb0): couldn't find nilfs on the device [ 608.593651][T11237] NILFS (nullb0): couldn't find nilfs on the device [ 609.670392][T11255] loop5: detected capacity change from 0 to 7 [ 609.751683][T11255] Dev loop5: unable to read RDB block 7 [ 609.757681][T11255] loop5: unable to read partition table [ 609.818522][T11255] loop5: partition table beyond EOD, truncated [ 609.851173][T11255] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 611.001177][T11279] NILFS (nullb0): couldn't find nilfs on the device [ 611.211481][ T4232] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 611.491324][ T4232] usb 5-1: Using ep0 maxpacket: 32 [ 611.611385][ T4232] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 611.640198][ T4232] usb 5-1: config 0 has too many interfaces: 92, using maximum allowed: 32 [ 611.682129][ T4232] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.714520][ T4232] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 92 [ 611.724337][ T4232] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 611.734172][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.751813][ T4232] usb 5-1: config 0 descriptor?? [ 612.020111][ T4235] usb 5-1: USB disconnect, device number 13 [ 612.817119][T11307] device syzkaller0 entered promiscuous mode [ 614.026962][T11318] device syzkaller0 entered promiscuous mode [ 614.269025][T11321] NILFS (nullb0): couldn't find nilfs on the device [ 615.141267][ T6478] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 615.421247][ T6478] usb 5-1: Using ep0 maxpacket: 32 [ 615.551472][ T6478] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.577726][ T6478] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 615.781906][ T6478] usb 5-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 615.792454][ T6478] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.801061][ T6478] usb 5-1: Product: syz [ 615.814495][ T6478] usb 5-1: Manufacturer: syz [ 615.820739][ T6478] usb 5-1: SerialNumber: syz [ 615.840541][T11352] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1905'. [ 615.866908][T11352] netlink: 'syz.5.1905': attribute type 1 has an invalid length. [ 616.368159][ T6478] usb 5-1: USB disconnect, device number 14 [ 616.593362][T11361] NILFS (nullb0): couldn't find nilfs on the device [ 618.561257][ T9265] ODEBUG: Out of memory. ODEBUG disabled [ 618.896703][T11387] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1917'. [ 619.242807][ T4305] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 619.585216][T11393] chnl_net:caif_netlink_parms(): no params data found [ 619.651492][ T4305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.689184][ T4305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.699619][ T4305] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 619.711200][ T4305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.727287][ T4305] usb 4-1: config 0 descriptor?? [ 620.387196][T11411] tipc: Can't bind to reserved service type 2 [ 620.405719][T11393] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.493581][T11393] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.523322][T11393] device bridge_slave_0 entered promiscuous mode [ 620.553716][T11393] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.561019][T11393] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.575809][T11393] device bridge_slave_1 entered promiscuous mode [ 620.757226][T11417] NILFS (nullb0): couldn't find nilfs on the device [ 621.223745][T11393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.337038][T11393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.393934][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 621.516918][T11393] team0: Port device team_slave_0 added [ 621.554045][T11393] team0: Port device team_slave_1 added [ 621.682376][T11393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.689429][T11393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.724210][T11393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.736732][T11393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.874894][T11393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.991432][ T4305] usbhid 4-1:0.0: can't add hid device: -71 [ 621.997856][ T4305] usbhid: probe of 4-1:0.0 failed with error -71 [ 622.049515][ T4305] usb 4-1: USB disconnect, device number 10 [ 622.066377][T11393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.120330][T11393] device hsr_slave_0 entered promiscuous mode [ 622.137145][T11393] device hsr_slave_1 entered promiscuous mode [ 622.156795][T11393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 622.183143][T11393] Cannot create hsr debugfs directory [ 622.586283][T11393] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 622.697258][T11393] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 622.728212][T11393] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 622.751417][ T4305] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 622.768432][T11393] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 623.031342][ T4305] usb 4-1: Using ep0 maxpacket: 32 [ 623.231900][ T4305] usb 4-1: unable to get BOS descriptor or descriptor too short [ 623.387084][ T4305] usb 4-1: config 9 has an invalid interface number: 249 but max is 0 [ 623.569578][ T4305] usb 4-1: config 9 has no interface number 0 [ 623.580288][ T4305] usb 4-1: config 9 interface 249 has no altsetting 0 [ 623.589336][ T4235] Bluetooth: hci1: command 0x041b tx timeout [ 623.604183][T11393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.622732][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 623.650872][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 623.677377][T11393] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.731842][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 623.749460][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 623.759092][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.766220][ T4304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.771383][ T4305] usb 4-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice=51.f3 [ 623.791630][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 623.802586][ T4305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.829553][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 623.857070][T11453] NILFS (nullb0): couldn't find nilfs on the device [ 623.910995][ T4305] usb 4-1: Product: syz [ 623.939952][ T4305] usb 4-1: Manufacturer: syz [ 623.947593][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 623.975385][ T4305] usb 4-1: SerialNumber: syz [ 624.047843][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.055050][ T4304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.265657][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.284384][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.291300][ T13] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 624.304959][ T1432] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 624.317386][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 624.334517][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 624.348277][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 624.363654][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 624.382419][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 624.390792][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 624.408104][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 624.418280][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 624.446924][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 624.476688][T11393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 624.488699][T11393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 624.499946][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 624.503568][ T4305] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 624.517329][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 624.537134][ T4305] usb 4-1: selecting invalid altsetting 0 [ 624.553396][ T2426] usb 4-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 624.587183][ T4305] usb 4-1: USB disconnect, device number 11 [ 624.593316][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 624.601428][ T2426] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 624.719596][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 624.733661][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 624.743964][ T13] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 624.756046][ T13] usb 2-1: config 0 has no interface number 0 [ 624.789748][T11393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.931309][ T13] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 624.964317][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.008638][ T13] usb 2-1: Product: syz [ 625.024266][T11473] netlink: 'syz.3.1937': attribute type 4 has an invalid length. [ 625.032317][ T13] usb 2-1: Manufacturer: syz [ 625.041650][ T13] usb 2-1: SerialNumber: syz [ 625.057684][T11473] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1937'. [ 625.076461][ T13] usb 2-1: config 0 descriptor?? [ 625.284407][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 625.498857][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 625.514596][T11457] ALSA: mixer_oss: invalid OSS volume '' [ 625.540416][ T13] usb 2-1: USB disconnect, device number 15 [ 625.562613][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 625.601903][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 625.621806][ T6478] Bluetooth: hci1: command 0x040f tx timeout [ 625.734200][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 625.806776][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 625.882080][T11393] device veth0_vlan entered promiscuous mode [ 625.912748][T11482] sch_tbf: burst 14 is lower than device syzkaller0 mtu (1514) ! [ 625.926039][T11393] device veth1_vlan entered promiscuous mode [ 625.939894][T11482] device syzkaller0 entered promiscuous mode [ 626.085104][T11393] device veth0_macvtap entered promiscuous mode [ 626.121817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 626.132592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 626.163413][T11393] device veth1_macvtap entered promiscuous mode [ 626.199530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 626.235605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 626.275179][T11393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.312584][T11393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.341439][T11393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.361133][T11393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.381787][T11393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.401138][T11393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.418834][T11393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.450782][T11393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.478660][T11393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.509697][T11393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.540846][T11393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.578621][T11495] tipc: Enabled bearer , priority 0 [ 626.592697][T11496] device syzkaller0 entered promiscuous mode [ 626.600179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 626.619903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 626.682322][T11393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.716618][T11393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.731969][T11393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.743307][T11393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.753209][T11393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.763681][T11393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.773554][T11393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.784011][T11393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.850745][T11504] NILFS (nullb0): couldn't find nilfs on the device [ 626.941826][T11393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.150667][T11393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.397547][T11393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.436328][T11393] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.521497][T11393] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.530352][T11393] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.551223][T11393] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.595150][T11489] tipc: Disabling bearer [ 627.603874][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 627.681256][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 627.701784][ T6478] Bluetooth: hci1: command 0x0419 tx timeout [ 627.885853][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.906176][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.939238][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 628.021070][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.058265][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.119170][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 628.752465][ T4231] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 629.191371][ T4231] usb 6-1: not running at top speed; connect to a high speed hub [ 629.291666][ T4231] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 629.340284][ T4231] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 629.481938][ T4231] usb 6-1: language id specifier not provided by device, defaulting to English [ 629.671642][ T4231] usb 6-1: New USB device found, idVendor=04b4, idProduct=9320, bcdDevice= 0.40 [ 629.721213][ T4231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.804502][T11536] print_req_error: 2 callbacks suppressed [ 629.804532][T11536] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.822709][T11536] blk_update_request: I/O error, dev loop1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.834064][T11536] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 629.844843][T11536] blk_update_request: I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.866720][T11536] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 629.879697][T11536] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.892401][T11536] blk_update_request: I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.905136][T11536] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 629.915802][T11536] blk_update_request: I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.927327][T11536] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 629.939890][T11536] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.952448][T11536] blk_update_request: I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.964295][T11536] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 629.974886][T11536] blk_update_request: I/O error, dev loop1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.986469][T11536] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 629.998886][T11536] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 630.014176][T11536] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 630.025279][T11536] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 630.035249][T11536] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 630.595915][ T4231] usb 6-1: Product: syz [ 630.600259][ T4231] usb 6-1: Manufacturer: syz [ 630.604971][ T4231] usb 6-1: SerialNumber: syz [ 630.653882][ T4231] usb 6-1: can't set config #1, error -71 [ 630.680096][ T4231] usb 6-1: USB disconnect, device number 6 [ 630.886028][T11547] tipc: Started in network mode [ 630.909062][T11547] tipc: Node identity c23b47564d83, cluster identity 4711 [ 630.954446][T11547] tipc: Enabled bearer , priority 0 [ 631.019066][T11544] tipc: Disabling bearer [ 631.070942][T11555] netlink: 'syz.4.1959': attribute type 1 has an invalid length. [ 632.203481][T11567] tipc: Enabled bearer , priority 0 [ 632.266663][T11567] tipc: Resetting bearer [ 632.293528][T11566] tipc: Disabling bearer [ 632.623228][T11578] NILFS (nullb0): couldn't find nilfs on the device [ 633.393331][T11589] tipc: Enabled bearer , priority 0 [ 633.416107][T11588] tipc: Disabling bearer [ 633.431083][T11591] netlink: 'syz.6.1972': attribute type 1 has an invalid length. [ 634.348994][T11601] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1975'. [ 634.362701][ T6478] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 634.411450][T11604] netlink: 'syz.6.1975': attribute type 1 has an invalid length. [ 634.833685][T11614] NILFS (nullb0): couldn't find nilfs on the device [ 634.894612][T11583] udc-core: couldn't find an available UDC or it's busy [ 635.043429][T11583] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 635.371033][T11583] udc-core: couldn't find an available UDC or it's busy [ 635.422065][T11583] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 635.518108][T11619] device syzkaller0 entered promiscuous mode [ 635.876335][T11630] binder_alloc: 11629: binder_alloc_buf, no vma [ 635.934937][T11632] binder_alloc: 11629: binder_alloc_buf, no vma [ 636.591273][ T6478] usb 5-1: unable to get BOS descriptor or descriptor too short [ 636.889402][ T6478] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 636.922088][ T6478] usb 5-1: can't read configurations, error -71 [ 640.046624][T11667] netlink: 'syz.1.1993': attribute type 1 has an invalid length. [ 640.170663][T11673] tipc: Enabled bearer , priority 0 [ 640.240667][T11679] binder_alloc: 11677: binder_alloc_buf, no vma [ 640.315861][T11670] tipc: Disabling bearer [ 640.376303][T11683] tipc: Enabled bearer , priority 0 [ 640.399195][T11683] device syzkaller0 entered promiscuous mode [ 640.447707][T11683] tipc: Resetting bearer [ 640.529235][T11682] tipc: Resetting bearer [ 640.547414][T11682] tipc: Disabling bearer [ 641.578147][T11691] device syzkaller0 entered promiscuous mode [ 641.684352][T11700] NILFS (nullb0): couldn't find nilfs on the device [ 642.313793][T11691] tipc: Enabled bearer , priority 0 [ 642.382692][T11707] netlink: 'syz.4.2007': attribute type 1 has an invalid length. [ 642.402679][T11691] tipc: Resetting bearer [ 642.437426][T11690] tipc: Resetting bearer [ 642.452580][T11690] tipc: Disabling bearer [ 643.380608][T11720] binder_alloc: 11719: binder_alloc_buf, no vma [ 643.388124][T11717] tipc: Enabled bearer , priority 0 [ 643.663995][T11724] binder_alloc: 11719: binder_alloc_buf, no vma [ 643.714469][T11716] tipc: Disabling bearer [ 645.223265][T11741] netlink: 'syz.6.2018': attribute type 1 has an invalid length. [ 645.231566][ T1108] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 645.299710][T11744] NILFS (nullb0): couldn't find nilfs on the device [ 645.602067][ T1108] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 645.656957][ T1108] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 645.756505][ T1108] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 645.928242][ T1108] usb 2-1: config 1 interface 0 has no altsetting 0 [ 645.972633][T11749] device syzkaller0 entered promiscuous mode [ 646.001492][T11749] tipc: Enabled bearer , priority 0 [ 646.015243][T11749] tipc: Resetting bearer [ 646.034386][T11746] tipc: Resetting bearer [ 646.058640][T11746] tipc: Disabling bearer [ 646.091495][ T1108] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 646.115795][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.131028][ T1108] usb 2-1: Product: syz [ 646.138876][T11728] chnl_net:caif_netlink_parms(): no params data found [ 646.146531][ T1108] usb 2-1: Manufacturer: syz [ 646.189413][ T6478] Bluetooth: hci5: command 0x0409 tx timeout [ 646.212098][ T1108] usb 2-1: SerialNumber: syz [ 646.225605][T11757] device syzkaller0 entered promiscuous mode [ 646.261566][T11737] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 646.279563][T11737] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 646.650653][ T1108] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 647.204444][T11728] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.221308][ T1108] usb 2-1: USB disconnect, device number 16 [ 647.317003][T11728] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.391770][T11728] device bridge_slave_0 entered promiscuous mode [ 647.464660][T11728] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.541652][T11728] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.566292][T11728] device bridge_slave_1 entered promiscuous mode [ 647.695193][T11728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.745046][T11728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.869733][T11787] device syzkaller0 entered promiscuous mode [ 647.907242][T11728] team0: Port device team_slave_0 added [ 647.927549][T11728] team0: Port device team_slave_1 added [ 647.945981][T11785] tipc: Enabled bearer , priority 0 [ 647.980810][T11728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.990216][T11728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.031920][T11728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.058795][T11783] tipc: Resetting bearer [ 648.090052][T11783] tipc: Disabling bearer [ 648.107286][T11728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.114926][T11728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.151915][T11728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.217066][ T4304] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.261298][ T1108] Bluetooth: hci5: command 0x041b tx timeout [ 648.332750][ T4304] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.394596][T11728] device hsr_slave_0 entered promiscuous mode [ 648.422263][T11728] device hsr_slave_1 entered promiscuous mode [ 648.432740][T11728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 648.451247][T11728] Cannot create hsr debugfs directory [ 648.476647][ T4304] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.583770][ T4304] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.808680][T11797] device syzkaller0 entered promiscuous mode [ 649.555565][T11797] tipc: Enabled bearer , priority 0 [ 649.599420][T11804] tipc: Resetting bearer [ 649.617461][T11794] tipc: Resetting bearer [ 649.645534][T11794] tipc: Disabling bearer [ 649.870869][ T4304] tipc: Left network mode [ 650.036574][T11728] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 650.076748][T11728] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 650.170312][T11728] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 650.239335][T11728] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 650.382512][T11820] print_req_error: 2 callbacks suppressed [ 650.382541][T11820] blk_update_request: I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.400548][T11820] blk_update_request: I/O error, dev loop6, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.411912][T11820] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 650.423878][T11820] blk_update_request: I/O error, dev loop6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.444491][T11820] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 650.457133][T11820] blk_update_request: I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.469718][T11820] blk_update_request: I/O error, dev loop6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.481184][T11820] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 650.492335][T11820] blk_update_request: I/O error, dev loop6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.503916][T11820] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 650.517302][T11820] blk_update_request: I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.529581][T11820] blk_update_request: I/O error, dev loop6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.541159][T11820] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 650.541200][ T4232] Bluetooth: hci5: command 0x040f tx timeout [ 650.557782][T11820] blk_update_request: I/O error, dev loop6, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.569560][T11820] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 650.581030][T11820] blk_update_request: I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.593767][T11820] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 650.604803][T11820] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 650.614777][T11820] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 651.499628][T11728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.558782][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 651.570846][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 651.590711][T11728] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.635799][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 651.655270][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 651.669096][ T4293] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.676252][ T4293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.694163][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 651.726158][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 651.764936][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.772123][ T4293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.867730][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 651.920644][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 651.977134][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 652.022556][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 652.043992][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 652.069178][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 652.120326][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 652.153658][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 652.212155][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 652.249435][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 652.317444][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 652.339090][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 652.369711][T11728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 652.610815][ T4304] device hsr_slave_0 left promiscuous mode [ 652.620383][ T4304] device hsr_slave_1 left promiscuous mode [ 652.639163][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.639230][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.639863][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.716739][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.741955][ T4304] device bridge_slave_1 left promiscuous mode [ 652.758437][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.777769][ T4304] device bridge_slave_0 left promiscuous mode [ 652.796887][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.823737][ T4304] device veth1_macvtap left promiscuous mode [ 652.830402][ T4304] device veth0_macvtap left promiscuous mode [ 652.836890][ T4304] device veth1_vlan left promiscuous mode [ 652.843880][ T4304] device veth0_vlan left promiscuous mode [ 653.646473][ T5784] Bluetooth: hci5: command 0x0419 tx timeout [ 654.081822][ T4304] team0 (unregistering): Port device team_slave_1 removed [ 654.098140][ T4304] team0 (unregistering): Port device team_slave_0 removed [ 654.126680][ T4304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.168657][ T4304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.260386][ T4304] bond0 (unregistering): Released all slaves [ 654.322087][T11884] device syzkaller0 entered promiscuous mode [ 654.462933][ T1108] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 654.498309][ T1108] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 654.520923][T11911] binder: BINDER_SET_CONTEXT_MGR already set [ 654.548107][T11911] binder: 11910:11911 ioctl 4018620d 200000000140 returned -16 [ 654.570276][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 654.591770][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 654.615013][T11728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.868728][T11924] device syzkaller0 entered promiscuous mode [ 654.894827][T11924] tipc: Enabled bearer , priority 0 [ 655.107018][T11923] tipc: Resetting bearer [ 655.552853][T11923] tipc: Disabling bearer [ 655.788590][T11932] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2061'. [ 655.862660][T11932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 655.978977][T11932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 656.742072][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 656.801404][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 656.928099][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 656.965592][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 656.997199][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 657.016164][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 657.044221][T11728] device veth0_vlan entered promiscuous mode [ 657.071212][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 657.093210][T11728] device veth1_vlan entered promiscuous mode [ 657.214457][T11965] device syzkaller0 entered promiscuous mode [ 657.282890][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 657.300625][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 657.342807][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 657.377604][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 657.460036][T11728] device veth0_macvtap entered promiscuous mode [ 657.512895][T11728] device veth1_macvtap entered promiscuous mode [ 657.618903][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.630580][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.650307][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.663405][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.681372][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.698578][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.709698][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.728354][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.768062][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.815644][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.853740][T11728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.035511][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 658.051917][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 658.060175][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 658.069771][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 658.711414][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.741272][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.821948][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.870017][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.928654][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.947375][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.958260][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.969179][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.979464][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.006189][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.027326][T11728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 659.056309][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 659.087366][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 659.123024][T11728] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.151244][T11728] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.180638][T11728] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.200876][T11728] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.271441][T11996] device syzkaller0 entered promiscuous mode [ 659.552757][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.961515][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.286732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 660.305779][T12010] tipc: Enabled bearer , priority 0 [ 660.331872][T12013] device syzkaller0 entered promiscuous mode [ 660.338934][ T4255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.351201][ T4255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.373089][T12008] tipc: Resetting bearer [ 660.380153][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 660.464384][T12020] print_req_error: 2 callbacks suppressed [ 660.464416][T12020] blk_update_request: I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 660.482562][T12020] blk_update_request: I/O error, dev loop6, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 660.493915][T12020] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 660.504980][T12020] blk_update_request: I/O error, dev loop6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 660.536382][T12020] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 660.550714][T12020] blk_update_request: I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 660.564412][T12020] blk_update_request: I/O error, dev loop6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 660.575958][T12020] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 660.586739][T12020] blk_update_request: I/O error, dev loop6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 660.598295][T12020] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 660.610124][T12020] blk_update_request: I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 660.622801][T12020] blk_update_request: I/O error, dev loop6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 660.634765][T12020] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 660.645376][T12020] blk_update_request: I/O error, dev loop6, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 660.657121][T12020] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 660.671188][T12020] blk_update_request: I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 660.683869][T12020] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 660.695363][T12020] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 660.705883][T12020] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 660.808936][T12007] tipc: Disabling bearer [ 661.430461][T12025] tipc: Started in network mode [ 661.456741][T12025] tipc: Node identity 0668a49ab679, cluster identity 4711 [ 661.505742][T12025] tipc: Enabled bearer , priority 0 [ 661.559040][T12025] tipc: Resetting bearer [ 661.630347][T12030] device syzkaller0 entered promiscuous mode [ 662.348146][T12030] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 662.500028][T12024] tipc: Resetting bearer [ 662.622042][T12024] tipc: Disabling bearer [ 662.666958][ T4268] tipc: Node number set to 2953946266 [ 662.813791][T12057] device syzkaller0 entered promiscuous mode [ 662.868157][T12057] tipc: Enabled bearer , priority 0 [ 662.915355][T12056] tipc: Resetting bearer [ 662.953262][T12056] tipc: Disabling bearer [ 662.964437][ T25] audit: type=1326 audit(1783037081.577:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12054 comm="syz.6.2088" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f2d24afcbd7 code=0x0 [ 663.025196][T12065] netlink: 'syz.1.2090': attribute type 1 has an invalid length. [ 663.121259][ T1108] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 663.176936][T12069] tipc: Enabled bearer , priority 0 [ 663.229461][T12069] tipc: Resetting bearer [ 663.279434][T12068] tipc: Disabling bearer [ 663.316901][T12072] device syzkaller0 entered promiscuous mode [ 663.491429][ T1108] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 663.509156][ T1108] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 663.547464][ T1108] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 663.591284][ T1108] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 663.642101][ T1108] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.735379][ T1108] usb 8-1: invalid MIDI out EP 0 [ 664.468021][ T1108] snd-usb-audio: probe of 8-1:27.0 failed with error -22 [ 664.548905][ T1108] usb 8-1: USB disconnect, device number 2 [ 664.984371][T12096] udevd[12096]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 665.098914][T12100] tipc: Enabled bearer , priority 0 [ 665.113315][T12100] device syzkaller0 entered promiscuous mode [ 665.274809][T12100] tipc: Resetting bearer [ 665.352493][T12099] tipc: Resetting bearer [ 665.426060][T12099] tipc: Disabling bearer [ 665.635492][T12116] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2101'. [ 665.738777][T12120] device syzkaller0 entered promiscuous mode [ 665.822648][T12120] tipc: Enabled bearer , priority 0 [ 665.868261][T12119] tipc: Resetting bearer [ 666.052956][T12119] tipc: Disabling bearer [ 666.189630][T12134] device syzkaller0 entered promiscuous mode [ 666.780496][T12145] netlink: 'syz.6.2108': attribute type 1 has an invalid length. [ 667.351417][T12097] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 667.633229][T12161] tipc: Enabled bearer , priority 0 [ 667.672547][T12161] device syzkaller0 entered promiscuous mode [ 667.718145][T12161] tipc: Resetting bearer [ 667.751763][T12158] tipc: Resetting bearer [ 667.771413][T12097] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 667.789952][T12097] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 667.792511][T12158] tipc: Disabling bearer [ 667.802356][T12097] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 667.979013][T12097] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 668.001305][ T4235] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 668.010368][T12097] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.029766][T12097] usb 5-1: Product: syz [ 668.036844][T12097] usb 5-1: Manufacturer: syz [ 668.121508][T12097] usb 5-1: SerialNumber: syz [ 668.182339][T12097] cdc_mbim 5-1:1.0: skipping garbage [ 668.386342][T12148] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 668.414036][T12148] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 668.432386][ T4235] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 668.464596][ T4235] usb 8-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 668.505512][ T4235] usb 8-1: config 220 interface 0 has no altsetting 0 [ 668.730010][ T4235] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 668.750730][ T4235] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.767200][ T4235] usb 8-1: Product: syz [ 668.774044][T12199] device syzkaller0 entered promiscuous mode [ 668.780295][ T4235] usb 8-1: Manufacturer: syz [ 668.792428][ T4235] usb 8-1: SerialNumber: syz [ 668.833313][T12199] tipc: Enabled bearer , priority 0 [ 668.929277][T12198] tipc: Resetting bearer [ 668.980128][T12198] tipc: Disabling bearer [ 669.081967][T12148] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 669.090182][T12148] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 669.341471][T12097] cdc_mbim 5-1:1.0: bind() failure [ 669.371287][T12097] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 669.384333][T12217] netlink: 'syz.5.2121': attribute type 1 has an invalid length. [ 669.391308][T12097] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 669.411269][T12097] usbtest: probe of 5-1:1.1 failed with error -71 [ 669.439732][T12097] usb 5-1: USB disconnect, device number 17 [ 669.566382][T12224] device syzkaller0 entered promiscuous mode [ 669.812264][T12233] tipc: Enabled bearer , priority 0 [ 669.848489][T12233] device syzkaller0 entered promiscuous mode [ 669.902368][T12233] tipc: Resetting bearer [ 669.927801][T12232] tipc: Resetting bearer [ 669.946596][T12232] tipc: Disabling bearer [ 670.093312][T12249] tipc: Enabling of bearer rejected, failed to enable media [ 670.590444][T12260] device syzkaller0 entered promiscuous mode [ 670.614461][T12260] tipc: Enabled bearer , priority 0 [ 670.640124][T12259] tipc: Resetting bearer [ 670.668255][T12259] tipc: Disabling bearer [ 670.728654][ T13] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 670.811424][ T4235] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 670.826480][ T4235] usb 8-1: No valid video chain found. [ 670.844783][ T4235] usb 8-1: USB disconnect, device number 3 [ 670.884420][T12268] netlink: 'syz.7.2133': attribute type 1 has an invalid length. [ 671.098228][T12273] device syzkaller0 entered promiscuous mode [ 671.111613][ T13] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 671.141126][ T13] usb 5-1: config 0 has no interface number 0 [ 671.161452][ T13] usb 5-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 671.369603][T12279] 9pnet: Insufficient options for proto=fd [ 671.969844][ T13] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 671.979409][ T13] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 671.988289][ T13] usb 5-1: Product: syz [ 671.992526][ T13] usb 5-1: SerialNumber: syz [ 672.001214][ T13] usb 5-1: config 0 descriptor?? [ 672.103462][ T13] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 672.161234][ T6478] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 672.411171][ T6478] usb 8-1: Using ep0 maxpacket: 16 [ 672.566079][T12097] usb 5-1: USB disconnect, device number 18 [ 672.581594][ T6478] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 673.601243][ T6478] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 673.610412][ T6478] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.620420][T12296] device syzkaller0 entered promiscuous mode [ 673.654517][T12302] tipc: Enabling of bearer rejected, failed to enable media [ 673.661155][ T6478] usb 8-1: Product: syz [ 673.668120][ T6478] usb 8-1: Manufacturer: syz [ 673.680526][ T6478] usb 8-1: SerialNumber: syz [ 673.687277][T12296] tipc: Enabled bearer , priority 0 [ 673.701833][ T6478] usb 8-1: config 0 descriptor?? [ 673.720264][T12300] tipc: Enabled bearer , priority 0 [ 673.749031][T12295] tipc: Resetting bearer [ 673.848871][T12295] tipc: Disabling bearer [ 673.867387][T12307] tipc: Resetting bearer [ 673.891927][T12299] tipc: Disabling bearer [ 673.925732][T12310] tipc: Enabled bearer , priority 0 [ 673.939513][T12310] device syzkaller0 entered promiscuous mode [ 673.984362][T12310] tipc: Resetting bearer [ 674.022138][T12308] tipc: Resetting bearer [ 674.053116][T12308] tipc: Disabling bearer [ 674.204522][T12328] device syzkaller0 entered promiscuous mode [ 674.282520][ T13] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 674.571260][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 674.730966][T12346] 9pnet: Insufficient options for proto=fd [ 675.302401][ T13] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 675.311016][ T13] usb 2-1: config 0 has no interface number 0 [ 675.317287][ T13] usb 2-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 675.379666][ T13] usb 2-1: config 0 interface 1 has no altsetting 0 [ 675.502379][ T1108] usb 8-1: USB disconnect, device number 4 [ 675.583174][ T25] audit: type=1326 audit(1783037094.197:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12356 comm="syz.5.2152" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb56ffd6e59 code=0x0 [ 675.791361][ T13] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 675.800449][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.412901][ T13] usb 2-1: Product: syz [ 676.485519][ T13] usb 2-1: Manufacturer: syz [ 676.490178][ T13] usb 2-1: SerialNumber: syz [ 676.498608][ T13] usb 2-1: config 0 descriptor?? [ 676.909589][T12379] tipc: Enabled bearer , priority 0 [ 676.962219][T12375] tipc: Enabling of bearer rejected, failed to enable media [ 676.986761][T12379] tipc: Resetting bearer [ 677.027356][T12378] tipc: Disabling bearer [ 677.056820][T12386] device syzkaller0 entered promiscuous mode [ 677.088970][T12386] tipc: Enabled bearer , priority 0 [ 677.147773][T12385] tipc: Resetting bearer [ 677.202216][T12385] tipc: Disabling bearer [ 677.329758][T12389] device syzkaller0 entered promiscuous mode [ 677.882991][T12410] 9pnet: Insufficient options for proto=fd [ 678.683409][ T13] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 678.729264][ T13] cx231xx 2-1:0.1: Not found matching IAD interface [ 678.789290][ T13] usb 2-1: USB disconnect, device number 17 [ 679.362417][T12436] device syzkaller0 entered promiscuous mode [ 679.722142][T12453] tipc: Enabled bearer , priority 0 [ 679.755299][T12453] device syzkaller0 entered promiscuous mode [ 679.820580][T12453] tipc: Resetting bearer [ 679.902033][T12452] tipc: Resetting bearer [ 679.922011][T12452] tipc: Disabling bearer [ 680.410887][T12475] 9pnet: Insufficient options for proto=fd [ 681.701881][T12496] device syzkaller0 entered promiscuous mode [ 681.762316][T12506] tipc: Enabled bearer , priority 0 [ 681.772259][T12499] tipc: Resetting bearer [ 681.894874][T12497] tipc: Disabling bearer [ 682.494363][T12530] 9pnet: Insufficient options for proto=fd [ 683.313488][T12532] device syzkaller0 entered promiscuous mode [ 683.339674][T12532] tipc: Enabled bearer , priority 0 [ 683.435150][T12531] tipc: Resetting bearer [ 683.500488][T12531] tipc: Disabling bearer [ 683.557523][T12545] device syzkaller0 entered promiscuous mode [ 683.572634][T12546] netlink: 'syz.4.2198': attribute type 1 has an invalid length. [ 683.911859][T12573] tipc: Enabling of bearer rejected, failed to enable media [ 685.703287][ T2426] pvrusb2: request_firmware fatal error with code=-110 [ 685.704701][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.716708][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.727091][ T1432] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 685.738545][ T2426] pvrusb2: Failure uploading firmware1 [ 685.771428][ T2426] pvrusb2: Device initialization was not successful. [ 685.788706][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 685.841423][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 685.921708][ T4305] pvrusb2: Device being rendered inoperable [ 686.017580][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880612cc800: rx timeout, send abort [ 686.028593][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880612cc800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 686.115845][T12615] device syzkaller0 entered promiscuous mode [ 687.929620][T12651] print_req_error: 2 callbacks suppressed [ 687.929663][T12651] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 687.948605][T12651] blk_update_request: I/O error, dev loop1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 687.960332][T12651] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 687.973096][T12651] blk_update_request: I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 687.995335][T12651] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 688.007788][T12651] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 688.020311][T12651] blk_update_request: I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 688.032362][T12651] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 688.043405][T12651] blk_update_request: I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 688.055387][T12651] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 688.068887][T12651] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 688.081359][T12651] blk_update_request: I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 688.094662][T12651] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 688.105932][T12651] blk_update_request: I/O error, dev loop1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 688.118061][T12651] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 688.130208][T12651] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 688.143320][T12651] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 688.154500][T12651] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 688.164814][T12651] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 689.377040][T12668] device syzkaller0 entered promiscuous mode [ 690.640170][T12717] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 690.660113][T12717] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 690.674126][T12717] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 690.695040][T12717] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 690.708341][T12717] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 690.719498][T12717] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 690.732710][T12717] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 690.743465][T12717] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 690.753437][T12717] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 691.555718][T12723] device syzkaller0 entered promiscuous mode [ 692.746812][T12754] tipc: Enabling of bearer rejected, failed to enable media [ 695.869965][T12797] device syzkaller0 entered promiscuous mode [ 696.514534][T12833] device syzkaller0 entered promiscuous mode [ 698.120466][T12864] sch_tbf: burst 14 is lower than device syzkaller0 mtu (1514) ! [ 698.172468][T12866] device syzkaller0 entered promiscuous mode [ 698.481192][T12097] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 698.741341][T12097] usb 2-1: Using ep0 maxpacket: 32 [ 698.885257][T12889] print_req_error: 14 callbacks suppressed [ 698.885305][T12889] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 698.903487][T12097] usb 2-1: unable to get BOS descriptor or descriptor too short [ 698.911912][T12889] blk_update_request: I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 698.924273][T12889] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 698.944916][T12889] blk_update_request: I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 698.956556][T12889] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 698.969284][T12889] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 698.982541][T12889] blk_update_request: I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 698.994248][T12889] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 699.004949][T12889] blk_update_request: I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 699.016653][T12889] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 699.029049][T12889] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 699.041391][T12889] blk_update_request: I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 699.053048][T12889] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 699.063655][T12889] blk_update_request: I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 699.075329][T12889] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 699.086948][T12889] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 699.099430][T12889] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 699.110158][T12889] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 699.120100][T12889] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1) [ 699.221754][T12097] usb 2-1: config 9 has an invalid interface number: 249 but max is 0 [ 699.252091][T12097] usb 2-1: config 9 has no interface number 0 [ 699.304635][T12097] usb 2-1: config 9 interface 249 has no altsetting 0 [ 699.521669][T12097] usb 2-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice=51.f3 [ 699.556816][T12097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.574440][T12886] device syzkaller0 entered promiscuous mode [ 699.617997][T12097] usb 2-1: Product: syz [ 699.655884][T12097] usb 2-1: Manufacturer: syz [ 699.683634][T12097] usb 2-1: SerialNumber: syz [ 700.033010][T12097] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 700.065761][T12097] usb 2-1: selecting invalid altsetting 0 [ 700.070912][T12901] device syzkaller0 entered promiscuous mode [ 700.075560][T12097] usb 2-1: USB disconnect, device number 18 [ 700.081619][ T2426] usb 2-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 700.140936][ T2426] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 701.028419][T12912] sch_tbf: burst 14 is lower than device syzkaller0 mtu (1514) ! [ 701.808086][T12936] device syzkaller0 entered promiscuous mode [ 701.908419][T12938] device syzkaller0 entered promiscuous mode [ 701.916237][T12936] tipc: Enabled bearer , priority 0 [ 702.030089][T12933] tipc: Resetting bearer [ 702.069634][T12933] tipc: Disabling bearer [ 702.521239][ T4232] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 702.771414][ T4232] usb 6-1: Using ep0 maxpacket: 32 [ 703.803769][ T4232] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.900211][ T4232] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.911527][ T4232] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 703.920775][ T4232] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.938380][ T4232] usb 6-1: config 0 descriptor?? [ 703.987547][ T4232] hub 6-1:0.0: USB hub found [ 704.241317][ T4232] hub 6-1:0.0: config failed, can't read hub descriptor (err -90) [ 704.700622][ T4232] hid-generic 0003:046D:C31C.0004: item fetching failed at offset 0/1 [ 704.801081][ T4232] hid-generic: probe of 0003:046D:C31C.0004 failed with error -22 [ 704.838473][T12972] device syzkaller0 entered promiscuous mode [ 705.022689][T12947] MPTCP: addr_signal error, add_addr=1, echo=0 [ 705.050810][T12976] device syzkaller0 entered promiscuous mode [ 705.069030][T12976] tipc: Enabled bearer , priority 0 [ 705.077688][T12975] tipc: Resetting bearer [ 705.110535][T12975] tipc: Disabling bearer [ 705.151870][ T4305] usb 6-1: USB disconnect, device number 7 [ 705.612350][T12999] tipc: Enabling of bearer rejected, failed to enable media [ 705.870932][T13006] device syzkaller0 entered promiscuous mode [ 706.208066][T13012] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2312'. [ 706.323383][T13013] device syzkaller0 entered promiscuous mode [ 706.655244][T13023] device syzkaller0 entered promiscuous mode [ 706.696746][T13023] tipc: Enabled bearer , priority 0 [ 706.730531][T13022] tipc: Resetting bearer [ 706.766205][T13022] tipc: Disabling bearer [ 707.783910][T13043] tipc: Enabling of bearer rejected, failed to enable media [ 708.963464][T13054] device syzkaller0 entered promiscuous mode [ 709.514772][T13078] device syzkaller0 entered promiscuous mode [ 709.544754][T13078] tipc: Enabled bearer , priority 0 [ 709.560409][T13075] tipc: Resetting bearer [ 709.619464][T13075] tipc: Disabling bearer [ 710.022690][T13100] tipc: Enabling of bearer rejected, failed to enable media [ 712.024586][T13112] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2338'. [ 712.792339][T13140] device syzkaller0 entered promiscuous mode [ 712.807851][T13140] tipc: Enabled bearer , priority 0 [ 712.851889][T13137] tipc: Resetting bearer [ 712.894721][T13137] tipc: Disabling bearer [ 712.932051][T13145] device syzkaller0 entered promiscuous mode [ 713.172774][T13157] tipc: Enabling of bearer rejected, failed to enable media [ 714.101275][T13165] binder: BINDER_SET_CONTEXT_MGR already set [ 714.127342][T13165] binder: 13163:13165 ioctl 4018620d 200000000140 returned -16 [ 714.669017][T13190] tipc: Enabled bearer , priority 0 [ 714.686358][T13189] tipc: Disabling bearer [ 714.717476][T13192] device syzkaller0 entered promiscuous mode [ 714.732017][T13192] tipc: Enabled bearer , priority 0 [ 714.740326][T13191] tipc: Resetting bearer [ 714.771905][T13191] tipc: Disabling bearer [ 714.871339][ T4237] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 715.251561][ T4237] usb 5-1: config 5 has an invalid interface number: 49 but max is 0 [ 716.195768][ T4237] usb 5-1: config 5 has no interface number 0 [ 716.268095][ T4237] usb 5-1: config 5 interface 49 has no altsetting 0 [ 716.476196][T13201] device syzkaller0 entered promiscuous mode [ 716.531569][ T4237] usb 5-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 716.611570][ T4237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.646063][ T25] audit: type=1326 audit(1783037135.257:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.5.2368" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56ffd6e59 code=0x7ffc0000 [ 716.646073][ T4237] usb 5-1: Product: syz [ 716.646091][ T4237] usb 5-1: Manufacturer: syz [ 716.721640][ T25] audit: type=1326 audit(1783037135.307:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.5.2368" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb56ffd6e59 code=0x7ffc0000 [ 716.781400][ T4237] usb 5-1: SerialNumber: syz [ 716.908264][ T25] audit: type=1326 audit(1783037135.307:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.5.2368" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56ffd6e59 code=0x7ffc0000 [ 717.068202][ T25] audit: type=1326 audit(1783037135.307:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.5.2368" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fb56ffd6e59 code=0x7ffc0000 [ 717.210752][ T25] audit: type=1326 audit(1783037135.307:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.5.2368" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56ffd6e59 code=0x7ffc0000 [ 717.241927][ T25] audit: type=1326 audit(1783037135.307:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.5.2368" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb56ffd6e59 code=0x7ffc0000 [ 718.088072][ T25] audit: type=1326 audit(1783037135.307:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.5.2368" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56ffd6e59 code=0x7ffc0000 [ 718.114238][ T4237] ums-jumpshot 5-1:5.49: USB Mass Storage device detected [ 718.142969][ T4237] ums-jumpshot 5-1:5.49: Quirks match for vid 05dc pid 0001: 2 [ 718.155083][ T25] audit: type=1326 audit(1783037135.307:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.5.2368" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb56ffd6e59 code=0x7ffc0000 [ 718.180679][ T25] audit: type=1326 audit(1783037135.307:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.5.2368" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56ffd6e59 code=0x7ffc0000 [ 718.205498][ T25] audit: type=1326 audit(1783037135.307:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.5.2368" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb56ffd6e59 code=0x7ffc0000 [ 718.243966][ T4237] usb 5-1: USB disconnect, device number 19 [ 718.316219][T13237] print_req_error: 2 callbacks suppressed [ 718.316270][T13237] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 718.334448][T13237] blk_update_request: I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 718.346242][T13237] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 718.357170][T13237] blk_update_request: I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 718.376964][T13237] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 718.389892][T13237] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 718.402878][T13237] blk_update_request: I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 718.414453][T13237] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 718.425840][T13237] blk_update_request: I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 718.437448][T13237] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 718.449270][T13237] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 718.462187][T13237] blk_update_request: I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 718.473876][T13237] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 718.487965][T13237] blk_update_request: I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 718.499573][T13237] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 718.512023][T13237] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 718.524766][T13237] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 718.536528][T13237] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 718.546599][T13237] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1) [ 719.157272][T13241] device syzkaller0 entered promiscuous mode [ 719.174398][T13241] tipc: Enabled bearer , priority 0 [ 719.183243][T13240] tipc: Resetting bearer [ 719.212092][T13240] tipc: Disabling bearer [ 719.235887][T13242] tipc: Enabled bearer , priority 0 [ 719.280911][T13239] tipc: Disabling bearer [ 719.320294][T13245] binder: BINDER_SET_CONTEXT_MGR already set [ 719.362033][T13245] binder: 13243:13245 ioctl 4018620d 200000000140 returned -16 [ 721.793787][T13282] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 721.805037][T13282] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 721.818497][T13282] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 721.829797][T13282] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 721.853417][T13282] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 721.866095][T13282] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 721.878978][T13282] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 721.890888][T13282] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 721.901748][T13282] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 722.620538][T13287] tipc: Enabled bearer , priority 0 [ 722.647088][T13286] tipc: Disabling bearer [ 722.696058][T13297] binder: 13296:13297 ioctl c0306201 0 returned -14 [ 723.578120][T13324] tipc: Enabled bearer , priority 0 [ 723.614783][T13326] tipc: Enabled bearer , priority 0 [ 723.643420][T13324] tipc: Resetting bearer [ 723.672986][T13323] tipc: Disabling bearer [ 723.719802][T13325] tipc: Disabling bearer [ 724.402990][T13356] binder: 13355:13356 ioctl c0306201 0 returned -14 [ 724.609279][T13356] binder: BINDER_SET_CONTEXT_MGR already set [ 724.668445][T13356] binder: 13355:13356 ioctl 4018620d 200000000140 returned -16 [ 725.052197][T13379] tipc: Enabled bearer , priority 0 [ 725.081831][T13379] tipc: Resetting bearer [ 725.109800][T13378] tipc: Disabling bearer [ 725.265013][T13384] tipc: Enabled bearer , priority 0 [ 725.319669][T13383] tipc: Disabling bearer [ 725.807283][T13400] binder: 13398:13400 ioctl c0306201 0 returned -14 [ 726.361368][ T1108] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 726.651478][ T1108] usb 7-1: Using ep0 maxpacket: 32 [ 726.766594][T13434] tipc: Enabled bearer , priority 0 [ 726.782786][ T1108] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.789731][T13433] tipc: Resetting bearer [ 726.815324][ T1108] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 726.858530][ T1108] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 726.884687][ T1108] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.924969][ T1108] usb 7-1: config 0 descriptor?? [ 726.962432][T13428] tipc: Disabling bearer [ 726.972601][ T1108] hub 7-1:0.0: USB hub found [ 727.028657][T13441] tipc: Enabled bearer , priority 0 [ 727.221791][ T1108] hub 7-1:0.0: config failed, can't read hub descriptor (err -90) [ 727.237883][T13439] tipc: Disabling bearer [ 727.682835][ T13] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 727.692303][ T1108] hid-generic 0003:046D:C31C.0005: item fetching failed at offset 0/1 [ 727.741858][ T1108] hid-generic: probe of 0003:046D:C31C.0005 failed with error -22 [ 727.935770][T13451] tipc: Enabled bearer , priority 0 [ 727.967609][T13448] tipc: Disabling bearer [ 728.036478][ T1108] usb 7-1: USB disconnect, device number 2 [ 728.131406][ T13] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 728.240100][T13460] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2437'. [ 728.247368][ T13] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 728.271644][ T13] usb 5-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 728.295898][ T13] usb 5-1: config 1 interface 0 has no altsetting 0 [ 728.461884][ T13] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 728.470976][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.510342][ T13] usb 5-1: Product: syz [ 728.521540][ T13] usb 5-1: Manufacturer: syz [ 728.536598][ T13] usb 5-1: SerialNumber: syz [ 728.592437][T13432] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 728.607205][T13432] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 728.932296][ T13] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 728.973050][ T13] usb 5-1: USB disconnect, device number 20 [ 729.268817][T13494] device syzkaller0 entered promiscuous mode [ 729.300402][T13494] tipc: Enabled bearer , priority 0 [ 729.838204][T13494] tipc: Resetting bearer [ 729.991836][T13492] tipc: Resetting bearer [ 730.099071][T13492] tipc: Disabling bearer [ 730.150308][T13511] tipc: Enabling of bearer rejected, failed to enable media [ 731.270637][T13566] device syzkaller0 entered promiscuous mode [ 731.325012][T13566] tipc: Enabled bearer , priority 0 [ 731.382362][T13565] tipc: Resetting bearer [ 731.409905][T13565] tipc: Disabling bearer [ 731.461283][ T26] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 731.491495][ T1108] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 731.741570][ T26] usb 8-1: Using ep0 maxpacket: 32 [ 731.875873][ T26] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.908577][ T26] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.930148][ T26] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 731.940005][ T1108] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 731.963446][ T1108] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 731.991337][ T26] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.030241][ T1108] usb 6-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 732.057706][ T26] usb 8-1: config 0 descriptor?? [ 732.080499][ T1108] usb 6-1: config 1 interface 0 has no altsetting 0 [ 732.137888][ T26] hub 8-1:0.0: USB hub found [ 732.291469][ T1108] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 732.320001][ T1108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.373048][ T1108] usb 6-1: Product: syz [ 732.401874][ T26] hub 8-1:0.0: config failed, can't read hub descriptor (err -90) [ 732.416273][ T1108] usb 6-1: Manufacturer: syz [ 732.452920][ T1108] usb 6-1: SerialNumber: syz [ 732.512936][T13561] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 732.531721][T13561] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 732.842173][ T26] hid-generic 0003:046D:C31C.0006: item fetching failed at offset 0/1 [ 732.903335][ T26] hid-generic: probe of 0003:046D:C31C.0006 failed with error -22 [ 732.955240][ T1108] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 733.101719][ T1108] usb 6-1: USB disconnect, device number 8 [ 733.140659][ T26] usb 8-1: USB disconnect, device number 5 [ 734.194974][T13604] device syzkaller0 entered promiscuous mode [ 734.268282][T13604] tipc: Enabled bearer , priority 0 [ 734.343886][T13603] tipc: Resetting bearer [ 734.403333][T13603] tipc: Disabling bearer [ 734.955613][T13288] syz.1.2387 (13288) used greatest stack depth: 18736 bytes left [ 735.247595][T13637] device syzkaller0 entered promiscuous mode [ 735.381569][ T6478] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 735.622049][ T6478] usb 5-1: Using ep0 maxpacket: 32 [ 735.742089][ T6478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.794105][ T6478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.851580][ T6478] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 735.869693][ T6478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.892192][ T6478] usb 5-1: config 0 descriptor?? [ 735.932843][ T6478] hub 5-1:0.0: USB hub found [ 735.940488][T13652] device syzkaller0 entered promiscuous mode [ 735.974028][T13652] tipc: Enabled bearer , priority 0 [ 736.011799][T13651] tipc: Resetting bearer [ 736.035978][T13651] tipc: Disabling bearer [ 736.191643][ T6478] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 736.613976][ T6478] hid-generic 0003:046D:C31C.0007: item fetching failed at offset 0/1 [ 736.668000][ T6478] hid-generic: probe of 0003:046D:C31C.0007 failed with error -22 [ 736.961435][ T4231] usb 5-1: USB disconnect, device number 21 [ 737.532023][T13681] tipc: Enabled bearer , priority 0 [ 737.554482][T13679] tipc: Disabling bearer [ 737.634776][T13686] device syzkaller0 entered promiscuous mode [ 737.659899][T13687] device syzkaller0 entered promiscuous mode [ 737.670456][T13686] tipc: Enabled bearer , priority 0 [ 737.693824][T13686] tipc: Resetting bearer [ 737.707893][T13687] tipc: Enabled bearer , priority 0 [ 737.718443][T13684] tipc: Resetting bearer [ 737.752647][T13684] tipc: Disabling bearer [ 737.770235][T13685] tipc: Resetting bearer [ 737.792236][T13685] tipc: Disabling bearer [ 738.502675][ T25] kauditd_printk_skb: 6 callbacks suppressed [ 738.502756][ T25] audit: type=1326 audit(1783037157.117:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13721 comm="syz.1.2506" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f286f545bd7 code=0x0 [ 739.646225][T13750] device syzkaller0 entered promiscuous mode [ 739.662779][T13751] device syzkaller0 entered promiscuous mode [ 739.677227][T13751] tipc: Enabled bearer , priority 0 [ 739.740934][T13751] tipc: Resetting bearer [ 739.759991][T13749] tipc: Resetting bearer [ 739.787138][T13749] tipc: Disabling bearer [ 739.900366][T13753] device syzkaller0 entered promiscuous mode [ 739.979184][T13753] tipc: Enabled bearer , priority 0 [ 740.043604][T13752] tipc: Resetting bearer [ 740.107080][T13752] tipc: Disabling bearer [ 741.791176][ T4237] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 741.888300][T13819] device syzkaller0 entered promiscuous mode [ 742.101295][ T4237] usb 8-1: Using ep0 maxpacket: 32 [ 742.231568][ T4237] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.253325][ T4237] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.266763][ T4237] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 742.276497][ T4237] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.286570][ T4237] usb 8-1: config 0 descriptor?? [ 742.288115][T13833] device syzkaller0 entered promiscuous mode [ 742.332383][ T4237] hub 8-1:0.0: USB hub found [ 743.228571][ T4237] hub 8-1:0.0: config failed, can't read hub descriptor (err -90) [ 743.423707][ T4237] hid-generic 0003:046D:C31C.0008: item fetching failed at offset 0/1 [ 743.432423][ T4237] hid-generic: probe of 0003:046D:C31C.0008 failed with error -22 [ 743.461678][ T4268] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 743.741855][ T6478] usb 8-1: USB disconnect, device number 6 [ 743.777830][T13876] device syzkaller0 entered promiscuous mode [ 743.861267][ T4268] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 743.935632][ T4268] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 743.969518][ T4268] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 743.991597][ T4268] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 744.000933][ T4268] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.076301][ T4268] usb 6-1: invalid MIDI out EP 0 [ 744.101741][ T6057] Bluetooth: hci1: command 0x0406 tx timeout [ 744.114551][ T4268] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 744.188525][T13890] udevd[13890]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 744.840158][ T1108] usb 6-1: USB disconnect, device number 9 [ 746.548641][T13949] print_req_error: 14 callbacks suppressed [ 746.548693][T13949] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 746.567523][T13949] blk_update_request: I/O error, dev loop4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 746.578898][T13949] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 746.590169][T13949] blk_update_request: I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 746.612515][T13949] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 746.625140][T13949] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 746.637350][T13949] blk_update_request: I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 746.649281][T13949] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 746.659999][T13949] blk_update_request: I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 746.671926][T13949] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 746.684145][T13949] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 746.699718][T13949] blk_update_request: I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 746.711519][T13949] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 746.722529][T13949] blk_update_request: I/O error, dev loop4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 746.736878][T13949] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 746.749779][T13949] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 746.763017][T13949] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 746.774341][T13949] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 746.784192][T13949] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 747.144203][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.151029][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.159334][ T1432] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 747.511213][T13958] device syzkaller0 entered promiscuous mode [ 747.713001][ T26] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 748.151426][ T26] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 748.183818][ T26] usb 6-1: config 0 has no interface number 0 [ 748.234614][ T26] usb 6-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 748.471330][ T26] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 748.546898][ T26] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 748.648181][ T26] usb 6-1: Product: syz [ 748.666133][ T26] usb 6-1: SerialNumber: syz [ 748.689438][ T26] usb 6-1: config 0 descriptor?? [ 748.763545][ T26] usbhid 6-1:0.8: couldn't find an input interrupt endpoint [ 749.220480][ T26] usb 6-1: USB disconnect, device number 10 [ 749.446522][T13997] device syzkaller0 entered promiscuous mode [ 749.455443][T14007] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 749.466459][T14007] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 749.479504][T14007] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 749.507295][T14007] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 749.520746][T14007] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 749.532285][T14007] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 749.545254][T14007] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 749.556053][T14007] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 749.565845][T14007] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 750.361442][ T4231] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 751.191856][ T4231] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 751.288603][T14022] device syzkaller0 entered promiscuous mode [ 751.291180][ T4231] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 751.298261][T14022] tipc: Enabled bearer , priority 0 [ 751.317022][T14017] tipc: Resetting bearer [ 751.353713][T14017] tipc: Disabling bearer [ 751.377577][ T4231] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 751.631963][ T4231] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 751.641064][ T4231] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.668229][ T4231] usb 7-1: Product: syz [ 751.678844][ T4231] usb 7-1: Manufacturer: syz [ 751.694675][ T4231] usb 7-1: SerialNumber: syz [ 751.752379][ T4231] cdc_mbim 7-1:1.0: skipping garbage [ 751.865968][T14048] device syzkaller0 entered promiscuous mode [ 752.007692][T14001] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 752.047676][T14001] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 753.018249][T14069] print_req_error: 14 callbacks suppressed [ 753.018299][T14069] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 753.036724][T14069] blk_update_request: I/O error, dev loop1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 753.048081][T14069] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 753.058999][T14069] blk_update_request: I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 753.071171][T14001] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 753.080385][T14069] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 753.098558][T14069] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 753.117939][T14069] blk_update_request: I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 753.130178][T14069] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 753.141767][T14069] blk_update_request: I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 753.155161][T14069] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 753.167061][T14069] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 753.179336][T14069] blk_update_request: I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 753.191298][T14069] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 753.202498][T14069] blk_update_request: I/O error, dev loop1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 753.214080][T14069] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 753.225865][T14069] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 753.238244][T14069] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 753.248916][T14069] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 753.258850][T14069] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 753.287477][T14001] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 753.721405][ T4231] cdc_mbim 7-1:1.0: bind() failure [ 753.801307][ T4231] cdc_ncm: probe of 7-1:1.1 failed with error -71 [ 753.827058][T14071] tipc: Enabled bearer , priority 0 [ 753.871723][ T4231] cdc_mbim: probe of 7-1:1.1 failed with error -71 [ 753.885002][T14067] tipc: Disabling bearer [ 753.901316][ T4231] usbtest: probe of 7-1:1.1 failed with error -71 [ 753.942911][ T4231] usb 7-1: USB disconnect, device number 3 [ 754.677086][T14103] device syzkaller0 entered promiscuous mode [ 755.066681][T14108] device syzkaller0 entered promiscuous mode [ 755.256929][T14115] tipc: Enabling of bearer rejected, failed to enable media [ 755.330386][T14116] device syzkaller0 entered promiscuous mode [ 755.379937][T14116] tipc: Enabled bearer , priority 0 [ 755.411003][T14111] tipc: Resetting bearer [ 755.455688][T14111] tipc: Disabling bearer [ 757.093029][T14177] device syzkaller0 entered promiscuous mode [ 757.145409][T14177] tipc: Enabled bearer , priority 0 [ 757.185308][T14176] tipc: Resetting bearer [ 757.220879][T14176] tipc: Disabling bearer [ 757.359681][T14182] tipc: Enabling of bearer rejected, failed to enable media [ 757.395261][T14181] device syzkaller0 entered promiscuous mode [ 757.427849][T14181] tipc: Enabled bearer , priority 0 [ 757.482170][T14181] tipc: Resetting bearer [ 757.549304][T14180] tipc: Resetting bearer [ 757.567519][T14180] tipc: Disabling bearer [ 758.497398][T14211] print_req_error: 2 callbacks suppressed [ 758.497448][T14211] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 758.516579][T14211] blk_update_request: I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 758.527875][T14211] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 758.538719][T14211] blk_update_request: I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 758.560443][T14211] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 758.573629][T14211] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 758.586517][T14211] blk_update_request: I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 758.598108][T14211] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 758.611389][T14211] blk_update_request: I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 758.623682][T14211] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 758.636046][T14211] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 758.648315][T14211] blk_update_request: I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 758.659990][T14211] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 758.670671][T14211] blk_update_request: I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 758.682445][T14211] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 758.694035][T14211] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 758.706547][T14211] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 758.717282][T14211] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 758.727742][T14211] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1) [ 759.525451][T14218] device syzkaller0 entered promiscuous mode [ 759.576680][T14221] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2638'. [ 759.627945][T14218] tipc: Enabled bearer , priority 0 [ 759.668974][T14217] tipc: Resetting bearer [ 759.710599][T14217] tipc: Disabling bearer [ 759.814317][T14223] device syzkaller0 entered promiscuous mode [ 759.828996][T14223] tipc: Enabled bearer , priority 0 [ 759.849044][T14223] tipc: Resetting bearer [ 759.875737][T14222] tipc: Resetting bearer [ 759.943262][T14222] tipc: Disabling bearer [ 759.976944][T14227] tipc: Enabling of bearer rejected, failed to enable media [ 760.078430][T14232] device syzkaller0 entered promiscuous mode [ 760.265592][ T25] audit: type=1326 audit(1783037178.877:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14234 comm="syz.1.2643" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f286f54be59 code=0x0 [ 761.290461][T14264] device syzkaller0 entered promiscuous mode [ 761.444513][T14263] device syzkaller0 entered promiscuous mode [ 761.459687][T14264] tipc: Enabled bearer , priority 0 [ 761.499407][T14262] tipc: Resetting bearer [ 761.541716][T14262] tipc: Disabling bearer [ 761.677336][T14269] device syzkaller0 entered promiscuous mode [ 761.709291][T14269] tipc: Enabled bearer , priority 0 [ 761.782637][T14269] tipc: Resetting bearer [ 761.818300][T14268] tipc: Resetting bearer [ 761.842206][T14268] tipc: Disabling bearer [ 761.872470][T14276] tipc: Enabled bearer , priority 0 [ 761.909840][T14274] tipc: Disabling bearer [ 761.958354][T14284] tipc: Enabled bearer , priority 0 [ 762.015489][T14284] tipc: Resetting bearer [ 762.060107][T14283] tipc: Disabling bearer [ 762.181680][ T6057] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 762.337321][T14295] device syzkaller0 entered promiscuous mode [ 762.471861][ T6057] usb 6-1: Using ep0 maxpacket: 32 [ 762.502955][ T2426] pvrusb2: request_firmware fatal error with code=-110 [ 762.518643][ T2426] pvrusb2: Failure uploading firmware1 [ 762.531672][ T2426] pvrusb2: Device initialization was not successful. [ 762.548574][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 762.580468][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 762.591685][ T6057] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 762.606265][ T6057] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 762.629379][T12097] pvrusb2: Device being rendered inoperable [ 762.644364][ T6057] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.683880][ T6057] usb 6-1: config 0 descriptor?? [ 762.783581][T14095] syz.5.2600 (14095) used greatest stack depth: 17776 bytes left [ 762.937156][ T6057] usb 6-1: USB disconnect, device number 11 [ 763.081306][ T26] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 763.347643][T14305] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2665'. [ 763.438911][T14307] device syzkaller0 entered promiscuous mode [ 763.473399][ T26] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 763.505834][T14307] tipc: Enabled bearer , priority 0 [ 763.507505][ T26] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 763.522998][T14306] tipc: Resetting bearer [ 763.539054][ T26] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 763.553437][ T26] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.591887][T14291] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 763.602444][T14306] tipc: Disabling bearer [ 763.651866][T14314] device syzkaller0 entered promiscuous mode [ 763.718416][T14319] binder: 14318:14319 ioctl c0306201 0 returned -14 [ 763.896993][T14329] device syzkaller0 entered promiscuous mode [ 763.908589][T14329] tipc: Enabled bearer , priority 0 [ 763.917471][T14326] tipc: Resetting bearer [ 763.939700][T14326] tipc: Disabling bearer [ 763.977541][T14328] device syzkaller0 entered promiscuous mode [ 765.266903][ T26] usb 7-1: USB disconnect, device number 4 [ 765.449670][T14362] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2683'. [ 765.477281][T14361] device syzkaller0 entered promiscuous mode [ 765.512060][T14362] device syzkaller1 entered promiscuous mode [ 765.937071][T14378] binder: 14377:14378 ioctl c0306201 0 returned -14 [ 766.061249][T12097] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 766.511473][T12097] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 766.590575][T12097] usb 2-1: config 1 interface 0 has no altsetting 0 [ 766.879074][T14394] device syzkaller0 entered promiscuous mode [ 766.885589][T12097] usb 2-1: string descriptor 0 read error: -22 [ 766.895526][T12097] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.40 [ 766.934740][T12097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.981639][T14371] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 767.041675][ T4305] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 767.592398][ T4305] usb 7-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 767.607490][ T4305] usb 7-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 767.634877][ T4305] usb 7-1: Product: syz [ 767.639084][ T4305] usb 7-1: Manufacturer: syz [ 767.665726][ T4305] usb 7-1: SerialNumber: syz [ 767.733662][ T4305] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 767.879221][T14407] device syzkaller0 entered promiscuous mode [ 767.971471][T14389] xt_hashlimit: size too large, truncated to 1048576 [ 768.031677][T14409] mmap: syz.6.2696 (14409) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 768.134097][T14409] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2696'. [ 768.311687][T12097] usbhid 2-1:1.0: can't add hid device: -71 [ 768.334753][T14417] print_req_error: 2 callbacks suppressed [ 768.334784][T14417] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 768.353501][T14417] blk_update_request: I/O error, dev loop4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 768.365008][T14417] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 768.375961][T14417] blk_update_request: I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 768.389811][T12097] usbhid: probe of 2-1:1.0 failed with error -71 [ 768.404231][T14417] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 768.417216][T14417] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 768.430312][T14417] blk_update_request: I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 768.442089][T14417] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 768.455225][T14417] blk_update_request: I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 768.466867][T14417] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 768.479028][T14417] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 768.492369][T14417] blk_update_request: I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 768.504239][T14417] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 768.514850][T14417] blk_update_request: I/O error, dev loop4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 768.526676][T14417] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 768.538432][T14417] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 768.554143][T14417] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 768.565257][T14417] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 768.575510][T14417] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 768.685712][T12097] usb 2-1: USB disconnect, device number 19 [ 770.229288][T11455] Bluetooth: hci5: command 0x0406 tx timeout [ 770.235957][ T4305] vp7045: USB control message 'out' went wrong. [ 770.243807][ T4305] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 770.255245][ T4305] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 770.292976][T14432] device syzkaller0 entered promiscuous mode [ 772.680888][T14456] tipc: Enabled bearer , priority 0 [ 772.724542][T14455] tipc: Disabling bearer [ 773.001221][ T1108] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 773.261407][ T1108] usb 2-1: Using ep0 maxpacket: 32 [ 773.401367][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.432668][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.474103][ T1108] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 773.514607][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.557843][ T1108] usb 2-1: config 0 descriptor?? [ 773.622325][ T1108] hub 2-1:0.0: USB hub found [ 773.871339][ T1108] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 774.165740][T14487] device syzkaller0 entered promiscuous mode [ 774.294192][ T1108] hid-generic 0003:046D:C31C.0009: item fetching failed at offset 0/1 [ 774.315035][ T1108] hid-generic: probe of 0003:046D:C31C.0009 failed with error -22 [ 774.568350][T14495] device syzkaller0 entered promiscuous mode [ 774.691433][ T4231] usb 2-1: USB disconnect, device number 20 [ 775.556257][T14502] device syzkaller0 entered promiscuous mode [ 775.609725][T14506] device syzkaller0 entered promiscuous mode [ 775.969834][T14521] device syzkaller0 entered promiscuous mode [ 776.295554][T14532] device syzkaller0 entered promiscuous mode [ 776.330022][T14532] tipc: Enabled bearer , priority 0 [ 776.406962][T14532] tipc: Resetting bearer [ 776.491764][T14531] tipc: Resetting bearer [ 776.613723][T14531] tipc: Disabling bearer [ 777.729512][T14548] device syzkaller0 entered promiscuous mode [ 778.060421][ T4305] usb 7-1: USB disconnect, device number 5 [ 778.140751][T14556] device syzkaller0 entered promiscuous mode [ 778.241808][ T6057] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 778.491585][ T6057] usb 6-1: Using ep0 maxpacket: 8 [ 778.601491][T11455] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 778.771419][ T6057] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 778.781311][ T1108] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 778.787698][ T6057] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.798078][ T6057] usb 6-1: Product: syz [ 778.802790][ T6057] usb 6-1: Manufacturer: syz [ 778.807398][ T6057] usb 6-1: SerialNumber: syz [ 778.813886][ T6057] usb 6-1: config 0 descriptor?? [ 778.852952][ T6057] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244) [ 778.961504][T11455] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.974548][T11455] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.985173][T11455] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 778.999821][T11455] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 779.009737][T11455] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.022262][T11455] usb 7-1: config 0 descriptor?? [ 779.181341][ T1108] usb 8-1: config 4 has an invalid interface number: 15 but max is 0 [ 779.193094][ T1108] usb 8-1: config 4 has no interface number 0 [ 779.204994][ T1108] usb 8-1: config 4 interface 15 has no altsetting 0 [ 779.381440][ T1108] usb 8-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=8b.8e [ 779.395134][ T1108] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.412426][ T1108] usb 8-1: Product: syz [ 779.419277][ T1108] usb 8-1: Manufacturer: syz [ 779.427703][ T1108] usb 8-1: SerialNumber: syz [ 779.503089][T11455] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 779.512109][T11455] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 779.519534][T11455] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 779.527593][T11455] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 779.535609][T11455] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 779.543729][T11455] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 779.551746][T11455] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 779.559379][T11455] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 779.567467][T11455] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 779.581586][T11455] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 779.589015][T11455] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 779.610628][T11455] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 779.618523][T11455] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 779.641682][T11455] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 779.649114][T11455] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 779.662445][T11455] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 779.709292][T11455] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 779.795708][ T4237] usb 7-1: USB disconnect, device number 6 [ 779.880501][T14569] fido_id[14569]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 779.902080][T14570] device syzkaller0 entered promiscuous mode [ 779.945877][ T1108] gspca_main: touptek-2.14.0 probing 0547:6801 [ 779.960302][ T1108] usb 8-1: USB disconnect, device number 7 [ 780.031833][ T6057] radio-usb-si4713: probe of 6-1:0.0 failed with error -71 [ 780.039881][ T6057] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 780.065985][ T6057] usb 6-1: USB disconnect, device number 12 [ 781.042486][T14583] device syzkaller0 entered promiscuous mode [ 781.090838][T14587] device syzkaller0 entered promiscuous mode [ 781.287214][T14592] device bridge0 entered promiscuous mode [ 781.470141][T14599] loop8: detected capacity change from 0 to 7 [ 781.500069][T14599] Dev loop8: unable to read RDB block 7 [ 781.529511][T14599] loop8: unable to read partition table [ 781.562965][T14599] loop8: partition table beyond EOD, truncated [ 781.581679][T14599] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 781.791758][T11455] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 782.061649][T11455] usb 8-1: Using ep0 maxpacket: 8 [ 782.181810][T11455] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 782.200712][T11455] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 782.231639][T11455] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.487363][T14616] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 782.511525][T14616] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 782.593876][T14616] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 782.797483][ T25] audit: type=1326 audit(1783037201.407:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14619 comm="syz.1.2775" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286f54be59 code=0x7ffc0000 [ 782.868918][ T25] audit: type=1326 audit(1783037201.437:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14619 comm="syz.1.2775" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286f54be59 code=0x7ffc0000 [ 782.921895][ T25] audit: type=1326 audit(1783037201.437:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14619 comm="syz.1.2775" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f286f54be59 code=0x7ffc0000 [ 782.956740][ T25] audit: type=1326 audit(1783037201.437:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14619 comm="syz.1.2775" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286f54be59 code=0x7ffc0000 [ 782.970972][T14628] program syz.7.2769 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 782.991161][ T4237] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 783.024965][T14627] device syzkaller0 entered promiscuous mode [ 783.191612][ T25] audit: type=1326 audit(1783037201.447:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14619 comm="syz.1.2775" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286f54be59 code=0x7ffc0000 [ 783.245746][ T6057] usb 8-1: USB disconnect, device number 8 [ 783.287714][ T25] audit: type=1326 audit(1783037201.447:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14619 comm="syz.1.2775" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f286f54be59 code=0x7ffc0000 [ 783.430369][ T25] audit: type=1326 audit(1783037201.447:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14619 comm="syz.1.2775" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286f54be59 code=0x7ffc0000 [ 783.481298][ T4237] usb 5-1: unable to get BOS descriptor or descriptor too short [ 783.507998][ T25] audit: type=1326 audit(1783037201.447:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14619 comm="syz.1.2775" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286f54be59 code=0x7ffc0000 [ 783.574386][ T4237] usb 5-1: not running at top speed; connect to a high speed hub [ 783.596558][ T25] audit: type=1326 audit(1783037201.447:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14619 comm="syz.1.2775" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f286f54be59 code=0x7ffc0000 [ 783.674099][ T25] audit: type=1326 audit(1783037201.447:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14619 comm="syz.1.2775" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286f54be59 code=0x7ffc0000 [ 783.703226][ T4237] usb 5-1: config 13 has an invalid interface number: 102 but max is 0 [ 783.716196][ T4237] usb 5-1: config 13 has no interface number 0 [ 783.827280][T14638] tipc: Enabled bearer , priority 0 [ 783.847880][T14637] tipc: Disabling bearer [ 783.931764][ T4237] usb 5-1: New USB device found, idVendor=0421, idProduct=df51, bcdDevice=d7.eb [ 783.967251][ T4237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.004069][ T4237] usb 5-1: Product: syz [ 784.021735][ T4237] usb 5-1: Manufacturer: syz [ 784.045285][ T4237] usb 5-1: SerialNumber: syz [ 784.248984][T14645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2783'. [ 784.592002][ T4237] cdc_phonet 5-1:13.102: More than one union descriptor, skipping ... [ 784.605090][ T4237] cdc_phonet: probe of 5-1:13.102 failed with error -22 [ 784.652170][ T4237] usb 5-1: USB disconnect, device number 22 [ 785.128222][T14653] device syzkaller0 entered promiscuous mode [ 785.170801][T14653] tipc: Enabled bearer , priority 0 [ 785.207394][T14653] tipc: Resetting bearer [ 785.232039][T14652] tipc: Resetting bearer [ 785.255433][T14652] tipc: Disabling bearer [ 788.117577][T14686] device syzkaller0 entered promiscuous mode [ 788.140775][T14689] tipc: Enabled bearer , priority 0 [ 788.161024][T14686] tipc: Enabled bearer , priority 0 [ 788.195412][T14687] tipc: Disabling bearer [ 788.233214][T14690] tipc: Resetting bearer [ 788.267645][T14685] tipc: Resetting bearer [ 788.310826][T14685] tipc: Disabling bearer [ 788.552453][ T25] kauditd_printk_skb: 9 callbacks suppressed [ 788.552466][ T25] audit: type=1326 audit(1783037207.167:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14696 comm="syz.7.2802" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16334aee59 code=0x0 [ 788.582976][ T4305] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 788.831312][ T4305] usb 6-1: Using ep0 maxpacket: 32 [ 788.959077][ T4305] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 788.973889][ T4305] usb 6-1: config 0 has no interface number 0 [ 789.003450][ T4305] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 789.082718][ T4305] usb 6-1: config 0 interface 89 has no altsetting 0 [ 789.292041][ T4305] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 789.328134][ T4305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.396667][ T4305] usb 6-1: Product: syz [ 789.419041][T14709] binder: BINDER_SET_CONTEXT_MGR already set [ 789.435286][ T4305] usb 6-1: Manufacturer: syz [ 789.462200][T14709] binder: 14708:14709 ioctl 4018620d 200000000140 returned -16 [ 789.475989][ T4305] usb 6-1: SerialNumber: syz [ 789.590828][ T4305] usb 6-1: config 0 descriptor?? [ 789.689279][ T4305] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 789.755393][ T4305] em28xx 6-1:0.89: Video interface 89 found: [ 790.161928][T14721] udc-core: couldn't find an available UDC or it's busy [ 790.191779][T14721] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 790.221710][ T6057] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 790.445865][ T25] audit: type=1326 audit(1783037209.057:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14726 comm="syz.1.2811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286f54be59 code=0x7ffc0000 [ 790.474099][ T6057] usb 8-1: Using ep0 maxpacket: 8 [ 790.515453][ T25] audit: type=1326 audit(1783037209.057:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14726 comm="syz.1.2811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286f54be59 code=0x7ffc0000 [ 790.588960][ T25] audit: type=1326 audit(1783037209.057:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14726 comm="syz.1.2811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286f54be59 code=0x7ffc0000 [ 790.621620][ T6057] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 790.629738][ T6057] usb 8-1: config 0 has no interface number 0 [ 790.662152][ T25] audit: type=1326 audit(1783037209.057:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14726 comm="syz.1.2811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f286f54be59 code=0x7ffc0000 [ 790.701758][ T4305] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 790.720156][ T25] audit: type=1326 audit(1783037209.057:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14726 comm="syz.1.2811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286f54be59 code=0x7ffc0000 [ 790.788977][ T25] audit: type=1326 audit(1783037209.057:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14726 comm="syz.1.2811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286f54be59 code=0x7ffc0000 [ 790.831393][ T6057] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 790.840665][ T6057] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.861718][ T6057] usb 8-1: Product: syz [ 790.865923][ T6057] usb 8-1: Manufacturer: syz [ 790.870536][ T6057] usb 8-1: SerialNumber: syz [ 790.876285][ T25] audit: type=1326 audit(1783037209.057:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14726 comm="syz.1.2811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286f54be59 code=0x7ffc0000 [ 790.942076][ T6057] usb 8-1: config 0 descriptor?? [ 791.020293][ T25] audit: type=1326 audit(1783037209.057:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14726 comm="syz.1.2811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286f54be59 code=0x7ffc0000 [ 791.256644][ T25] audit: type=1326 audit(1783037209.057:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14726 comm="syz.1.2811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f286f54be59 code=0x7ffc0000 [ 791.931981][ T4305] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 793.457950][ T4305] em28xx 6-1:0.89: board has no eeprom [ 793.571641][ T4305] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 793.579066][ T4305] em28xx 6-1:0.89: analog set to bulk mode. [ 793.621679][ T6057] usb 8-1: Found UVC 0.04 device syz (046d:08c3) [ 793.629377][ T6057] uvcvideo 8-1:0.31: Entity type for entity Output 6 was not initialized! [ 793.664790][T11455] em28xx 6-1:0.89: Registering V4L2 extension [ 793.728108][ T6057] usb 8-1: USB disconnect, device number 9 [ 793.831845][T11455] em28xx 6-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 793.863965][T11455] em28xx 6-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 793.883834][T14755] tipc: Enabled bearer , priority 0 [ 793.901662][T11455] em28xx 6-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 793.914383][T14754] tipc: Disabling bearer [ 793.931727][T11455] em28xx 6-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 793.951838][T11455] em28xx 6-1:0.89: Config register raw data: 0xfffffffb [ 794.041702][T11455] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 794.049501][T11455] em28xx 6-1:0.89: No AC97 audio processor [ 794.124981][T14767] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 794.189339][T14771] device syzkaller0 entered promiscuous mode [ 794.733541][T11455] usb 6-1: Decoder not found [ 794.738181][T11455] em28xx 6-1:0.89: failed to create media graph [ 794.785090][T11455] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 794.803196][T14780] netlink: 'syz.6.2828': attribute type 1 has an invalid length. [ 794.837558][T11455] em28xx 6-1:0.89: Registering snapshot button... [ 794.837829][T14779] ================================================================== [ 794.852910][T14779] BUG: KASAN: use-after-free in v4l2_open+0x32d/0x340 [ 794.859989][T14779] Read of size 4 at addr ffff888150d289b0 by task v4l_id/14779 [ 794.867584][T14779] [ 794.870085][T14779] CPU: 1 PID: 14779 Comm: v4l_id Not tainted syzkaller #0 [ 794.877277][T14779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 794.887353][T14779] Call Trace: [ 794.890703][T14779] [ 794.893685][T14779] dump_stack_lvl+0x188/0x250 [ 794.898458][T14779] ? show_regs_print_info+0x20/0x20 [ 794.903636][T14779] ? _printk+0xda/0x130 [ 794.907837][T14779] ? load_image+0x410/0x410 [ 794.912449][T14779] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 794.917959][T14779] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 794.923596][T14779] print_address_description+0x60/0x2d0 [ 794.929132][T14779] ? v4l2_open+0x32d/0x340 [ 794.933536][T14779] kasan_report+0xdf/0x130 [ 794.938063][T14779] ? v4l2_open+0x32d/0x340 [ 794.942474][T14779] v4l2_open+0x32d/0x340 [ 794.946717][T14779] chrdev_open+0x585/0x5f0 [ 794.951199][T14779] ? cd_forget+0x160/0x160 [ 794.955634][T14779] ? fsnotify_perm+0x3a7/0x560 [ 794.960535][T14779] ? cd_forget+0x160/0x160 [ 794.964946][T14779] do_dentry_open+0x7f7/0xf90 [ 794.969686][T14779] ? vfs_open+0x2b/0x80 [ 794.973842][T14779] path_openat+0x2718/0x2fb0 [ 794.978435][T14779] ? __kasan_slab_alloc+0xa9/0xc0 [ 794.983446][T14779] ? do_filp_open+0x400/0x400 [ 794.988139][T14779] do_filp_open+0x1df/0x400 [ 794.992627][T14779] ? vfs_tmpfile+0x300/0x300 [ 794.997231][T14779] ? _raw_spin_unlock+0x24/0x40 [ 795.002066][T14779] ? alloc_fd+0x59e/0x650 [ 795.006521][T14779] do_sys_openat2+0x14b/0x500 [ 795.011215][T14779] ? __lock_acquire+0x7b50/0x7b50 [ 795.016379][T14779] ? do_sys_open+0xe0/0xe0 [ 795.020801][T14779] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 795.026793][T14779] ? lock_chain_count+0x20/0x20 [ 795.031665][T14779] __x64_sys_openat+0x135/0x160 [ 795.036529][T14779] do_syscall_64+0x4c/0xa0 [ 795.041035][T14779] ? clear_bhb_loop+0x30/0x80 [ 795.045755][T14779] ? clear_bhb_loop+0x30/0x80 [ 795.050418][T14779] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 795.056428][T14779] RIP: 0033:0x7ff268232407 [ 795.060910][T14779] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 795.080550][T14779] RSP: 002b:00007ffc53c20360 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 795.089024][T14779] RAX: ffffffffffffffda RBX: 00007ff268144880 RCX: 00007ff268232407 [ 795.097014][T14779] RDX: 0000000000000000 RSI: 00007ffc53c20f1c RDI: ffffffffffffff9c [ 795.105187][T14779] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 795.113431][T14779] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 795.121421][T14779] R13: 00007ffc53c205b0 R14: 00007ff2689c0000 R15: 0000559647ed34d8 [ 795.128033][T11455] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input35 [ 795.129419][T14779] [ 795.142920][T14779] [ 795.145255][T14779] The buggy address belongs to the page: [ 795.150884][T14779] page:ffffea0005434a00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x150d28 [ 795.161482][T14779] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 795.168701][T14779] raw: 057ff00000000000 ffffea00053cf008 ffff8880b9040c70 0000000000000000 [ 795.177301][T14779] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 795.185893][T14779] page dumped because: kasan: bad access detected [ 795.192311][T14779] page_owner tracks the page as freed [ 795.197772][T14779] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x140dc0(GFP_USER|__GFP_COMP|__GFP_ZERO), pid 11455, ts 793707373723, free_ts 794836250602 [ 795.204854][T11455] em28xx 6-1:0.89: Remote control support is not available for this card. [ 795.213799][T14779] get_page_from_freelist+0x24f6/0x2670 [ 795.213923][T14779] __alloc_pages+0x1ee/0x480 [ 795.213939][T14779] kmalloc_order+0x40/0x150 [ 795.213987][T14779] kmalloc_order_trace+0x14/0xf0 [ 795.214001][T14779] em28xx_v4l2_init+0xd5/0x2cd0 [ 795.214059][T14779] em28xx_init_extension+0x118/0x1c0 [ 795.214075][T14779] process_one_work+0x867/0xff0 [ 795.214134][T14779] worker_thread+0xad7/0x12a0 [ 795.214175][T14779] kthread+0x42e/0x520 [ 795.214188][T14779] ret_from_fork+0x1f/0x30 [ 795.214257][T14779] page last free stack trace: [ 795.214264][T14779] free_unref_page_prepare+0x637/0x6c0 [ 795.214281][T14779] free_unref_page+0x8f/0x2a0 [ 795.214296][T14779] free_nonslab_page+0xde/0x150 [ 795.214310][T14779] em28xx_v4l2_init+0x155a/0x2cd0 [ 795.214323][T14779] em28xx_init_extension+0x118/0x1c0 [ 795.214337][T14779] process_one_work+0x867/0xff0 [ 795.214350][T14779] worker_thread+0xad7/0x12a0 [ 795.214364][T14779] kthread+0x42e/0x520 [ 795.214375][T14779] ret_from_fork+0x1f/0x30 [ 795.214390][T14779] [ 795.214394][T14779] Memory state around the buggy address: [ 795.214435][T14779] ffff888150d28880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 795.214447][T14779] ffff888150d28900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 795.214458][T14779] >ffff888150d28980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 795.214466][T14779] ^ [ 795.214475][T14779] ffff888150d28a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 795.214486][T14779] ffff888150d28a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 795.214495][T14779] ================================================================== [ 795.214502][T14779] Disabling lock debugging due to kernel taint [ 795.214517][ C1] vkms_vblank_simulate: vblank timer overrun [ 795.407267][T14779] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 795.414495][T14779] CPU: 0 PID: 14779 Comm: v4l_id Tainted: G B syzkaller #0 [ 795.423086][T14779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 795.433150][T14779] Call Trace: [ 795.436435][T14779] [ 795.439371][T14779] dump_stack_lvl+0x188/0x250 [ 795.444108][T14779] ? show_regs_print_info+0x20/0x20 [ 795.449320][T14779] ? load_image+0x410/0x410 [ 795.453836][T14779] panic+0x2f8/0x850 [ 795.457738][T14779] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 795.463939][T14779] ? bpf_jit_dump+0xd0/0xd0 [ 795.468452][T14779] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 795.474436][T14779] ? _raw_spin_unlock+0x40/0x40 [ 795.479298][T14779] ? v4l2_open+0x32d/0x340 [ 795.483717][T14779] check_panic_on_warn+0x80/0xa0 [ 795.488749][T14779] ? v4l2_open+0x32d/0x340 [ 795.493150][T14779] end_report+0x6d/0xf0 [ 795.497290][T14779] kasan_report+0x102/0x130 [ 795.501775][T14779] ? v4l2_open+0x32d/0x340 [ 795.506265][T14779] v4l2_open+0x32d/0x340 [ 795.510616][T14779] chrdev_open+0x585/0x5f0 [ 795.515038][T14779] ? cd_forget+0x160/0x160 [ 795.519442][T14779] ? fsnotify_perm+0x3a7/0x560 [ 795.524203][T14779] ? cd_forget+0x160/0x160 [ 795.528620][T14779] do_dentry_open+0x7f7/0xf90 [ 795.533287][T14779] ? vfs_open+0x2b/0x80 [ 795.537425][T14779] path_openat+0x2718/0x2fb0 [ 795.541999][T14779] ? __kasan_slab_alloc+0xa9/0xc0 [ 795.547026][T14779] ? do_filp_open+0x400/0x400 [ 795.551703][T14779] do_filp_open+0x1df/0x400 [ 795.556195][T14779] ? vfs_tmpfile+0x300/0x300 [ 795.560857][T14779] ? _raw_spin_unlock+0x24/0x40 [ 795.565698][T14779] ? alloc_fd+0x59e/0x650 [ 795.570029][T14779] do_sys_openat2+0x14b/0x500 [ 795.574732][T14779] ? __lock_acquire+0x7b50/0x7b50 [ 795.579742][T14779] ? do_sys_open+0xe0/0xe0 [ 795.584140][T14779] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 795.590207][T14779] ? lock_chain_count+0x20/0x20 [ 795.595065][T14779] __x64_sys_openat+0x135/0x160 [ 795.599916][T14779] do_syscall_64+0x4c/0xa0 [ 795.604325][T14779] ? clear_bhb_loop+0x30/0x80 [ 795.608984][T14779] ? clear_bhb_loop+0x30/0x80 [ 795.613643][T14779] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 795.619522][T14779] RIP: 0033:0x7ff268232407 [ 795.623943][T14779] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 795.643531][T14779] RSP: 002b:00007ffc53c20360 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 795.651932][T14779] RAX: ffffffffffffffda RBX: 00007ff268144880 RCX: 00007ff268232407 [ 795.660336][T14779] RDX: 0000000000000000 RSI: 00007ffc53c20f1c RDI: ffffffffffffff9c [ 795.668397][T14779] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 795.676469][T14779] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 795.684421][T14779] R13: 00007ffc53c205b0 R14: 00007ff2689c0000 R15: 0000559647ed34d8 [ 795.692378][T14779] [ 795.695586][T14779] Kernel Offset: disabled [ 795.699896][T14779] Rebooting in 86400 seconds..