last executing test programs: 23m36.063992001s ago: executing program 4 (id=209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000a5e819d5fc33180206050000000000000000000000000014000780080011420000000005001500000000000500010006000000050005000a000000050004020073797a310000000011000300686173683a69702c6d6100000000000000"], 0x60}}, 0x4000) 23m35.824065583s ago: executing program 4 (id=210): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000000)=@t={0x81, 0x6, 0x48, 0xfa, @generic=0x9}) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r3) (async) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x1a, 0x0, @val=@netfilter={0xa, 0x0, 0xfffffffa}}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x20) (async) r6 = socket$inet6(0xa, 0x800, 0x100) getsockopt$inet_int(r6, 0x0, 0x33, 0x0, &(0x7f0000000500)=0x3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xfffffffc}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x3c}}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e21, @remote}, 0x107, 0x0, 0x0, 0x0, 0xd76f, 0x0, 0xffffffff, 0x9, 0x5e}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e21, 0x9, @local}, @in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, @in6={0xa, 0x4e20, 0x9, @mcast1, 0x7}, @in={0x2, 0x4e20, @multicast1}], 0x74) (async) socket$inet6_udp(0xa, 0x2, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x735}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffb000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000000c0)=""/16, 0x10, 0x10000, 0x0, 0x0) 23m35.618098011s ago: executing program 4 (id=212): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@ipv4_deladdr={0x34, 0x15, 0x1, 0xfffffffb, 0x2000000, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_ADDRESS={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x14000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x80000006}]}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x4d7}, 0x8) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@ipv4_deladdr={0x34, 0x15, 0x1, 0xfffffffb, 0x2000000, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_ADDRESS={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x14000000) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x80000006}]}) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x4d7}, 0x8) (async) 23m35.313987269s ago: executing program 4 (id=216): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000100000000000000000000000000900000000000000000000000000000001000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ac141414000000000000000000000000000000003200000000000000fe8000000000000000000000000000bb013500000000ff00000000000400000001000000fe800000000000000000000000000025000000003200000000000000ffffffff0000000000000000000000000000000000000000000000000200000000000000ac1e0101000000000000000000000000000000003c00000002000000fe8800000000000000000000000001010000000001030000000000000000000000000000fe8000000000000000000000800000bb000000003c00000002000000fe800000000000000000000000000010000000000000ff00ff7f00000300000000000000ac141426000000000000000000000000000000002b000000020000"], 0x23c}, 0x1, 0x0, 0x0, 0x54}, 0x4000004) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "f330bccd"}]}}, 0x0}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x208000, &(0x7f0000000640)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3c, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r6, &(0x7f0000000640)='\x00', 0x89901) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_SET_NAME_A(r9, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f0000000540)=0x1) r10 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r10, 0x0) ftruncate(r10, 0x51a9497) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) socket(0x28, 0x3, 0x0) 23m32.213934253s ago: executing program 4 (id=234): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) (async) r1 = getpgid(0x0) (async) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) syz_clone3(&(0x7f0000000180)={0x800000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) landlock_restrict_self(r2, 0x0) (async, rerun: 64) r3 = syz_pidfd_open(r1, 0x0) (async, rerun: 64) r4 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @last={{0xfffffffffffffc2e}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f00000005c0)={r6, "0ab81f775537054993f9351e15186ed8"}) (async) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000019240)={r6, 0x6, 0x8}) r7 = fsopen(&(0x7f0000000540)='reiserfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) (async) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) (async) ioctl$PPPIOCGNPMODE(r8, 0xc008744c, &(0x7f00000015c0)={0x80fb}) (async) pidfd_send_signal(r3, 0x21, 0x0, 0x4) (async) r10 = syz_open_procfs(0x0, &(0x7f0000019140)='net/snmp\x00') bind$rds(r10, &(0x7f0000019080)={0x2, 0x4e20, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbdcbbbb0800450000300000000006019078ac1e0001ac1414aa037090780009800145"], 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16], 0x0) (async) pread64(r7, &(0x7f0000019640)=""/102366, 0x18fde, 0xa6d) syz_emit_ethernet(0x36, &(0x7f0000019180)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x3, 0x0, 0x28, 0x67, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp_prespec={0x44, 0x4, 0x7d, 0x3, 0x5}, @end]}}, {0x0, 0x883e, 0xc, 0x0, @opaque="231aefa2"}}}}}, 0x0) 23m31.886972834s ago: executing program 4 (id=238): socket$kcm(0x29, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x3c, 0x301, 0x70bd24, 0xfffffffc, {0xa}, [@typed={0x8, 0x3, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={0x0, r2, 0x4000, r2}, 0x18) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="100028bd700000002000e3ffff"], 0x20}}, 0x4010) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sync() r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2b) r7 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)=ANY=[@ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xb}, 0x94) syz_usb_control_io$uac2(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYRESDEC=r6, @ANYRES32=0x0, @ANYRES32=r3], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) socket$nl_sock_diag(0x10, 0x3, 0x4) 23m31.473716761s ago: executing program 32 (id=238): socket$kcm(0x29, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x3c, 0x301, 0x70bd24, 0xfffffffc, {0xa}, [@typed={0x8, 0x3, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={0x0, r2, 0x4000, r2}, 0x18) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="100028bd700000002000e3ffff"], 0x20}}, 0x4010) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sync() r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2b) r7 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)=ANY=[@ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xb}, 0x94) syz_usb_control_io$uac2(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYRESDEC=r6, @ANYRES32=0x0, @ANYRES32=r3], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) socket$nl_sock_diag(0x10, 0x3, 0x4) 10m43.329803487s ago: executing program 2 (id=3670): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x202) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r2, 0x4982, 0x701ca}, [@IFLA_LINKINFO={0x28, 0x37, 0x0, 0x1, @veth={{0x9, 0x324}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x10000, 0x48124}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x4, 0x3a, ']!', 0x3a, '}}', 0x3a, './file0', 0x3a, [0x43, 0x50, 0x0, 0x4f, 0x50, 0x50, 0x50, 0x43, 0x43, 0x50]}, 0x35) 10m43.113366477s ago: executing program 2 (id=3673): syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000480)=@mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7f}, @device_a, @device_a, @from_mac, {0x6, 0x9}}, 0x4, @default, 0x4000, @void, @val={0x1, 0x7, [{0x12, 0x1}, {0x1b}, {0x12, 0x1}, {0x6}, {0x48}, {0x4, 0x1}, {0x5, 0x1}]}, @val={0x3, 0x1, 0x9d}, @val={0x4, 0x6, {0x4, 0x3, 0x9, 0x2}}, @val={0x6, 0x2, 0x1}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x0, 0x1, 0x0, {0x2, 0x7, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x0, 0x80000001, 0x8}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x6, 0x8}}, @val={0x76, 0x6, {0x0, 0x7, 0x1a, 0xff78}}, [{0xdd, 0x10, "89e7f86a5ee1c1dfee56c6190220bb06"}, {0xdd, 0x7b, "0ca185c9f523f22c8b38fe9ec33d00b51fd280263df20b1db1d8dac11b23f791ca837014bfde4060060c2029788f0660890792b21d8f0fd8bc52354d26523df0d43cdea7c1efbfb6685fdbf113e2a78671968fa4179266965cf05885fea0fdc46255933f31f99ee56167dcce85d043c657e709533e975edc998d6a"}, {0xdd, 0xce, "212d1bf222f0aa78926929db18c31678e0fe838a00dc04e376c020dc64a0487942ba1fcde1b90b49470a3398cc05393599fcf68f2e124d00cb8f1eb329de0026b9abe5d0c82cf9d0648a369b28c9256f5ab5f9eb3ad8e3f4edf9eba129a4d1df055a4828a1bc699ad28d0e71fd0b01873de438a9bf2ef0b954c371a9741f668ec169fd822f5c6f13f99fa1fc1765ffcb884f08446212e15c721236a4f3cc06b6b2dcc65b714f71cdcc3b4d61a6a29e04cf701ed89909e2e984ca2f0c5f9c1320dd57e94d13b160dade0d628512c7"}, {0xdd, 0x75, "9a2e797a5903d07d948caac0e15760fb3e65ebdbf042db70e0b93452eb01f05afbf962093f067e992b31d13409e0522ff512242ac541cada958f01a18e29a09256c65b3f38f5b3f2baeb32b1a2d38b165450956e92d35b9685f70df3a30680dfd9e1081b121ea53a52d08ce3f657be0209ea57b9ed"}, {0xdd, 0xfb, "1fe9096fc7ee04ad5ba61ef9f1d032bcebba2c99bc9f6ef4d65033db988d2be4093c07f05c5320a23af6f6c10a52068c6af8b749bd1fd75f9d10bcd86d8961f03e8fd2bd0f555721985b05c029994db4924c1fd475d7b4463b5bbd28435ed24cdb7dc816ba87f6abc642d535bcdcbefb5a4c42e1e66d4df847bee4aec0a44327f604b50dd726fa1847b5ca0ff2a0b7a1f70f824018f9d7e22d3bb4426f7df6fd08cc8b48831e57151a10e51119e34ef922b893f66e0ef882247e6976c81d47de9f3852fbac98e6b2b9fca5d6485551a397e7c54ec8e066916792a5020027b4695a19c624c5857a1188eae03a852539f2f3755093f2430345422f75"}, {0xdd, 0xe5, "bc8b9cb9ad5b68c79b8559f0f4abf784f4b63fad543753ae0f32c94dc90fa46a629be6c7d2f0af347f6c77605110df7c03ec04e6a1a838d596dbc107d8afcd549a10c003c5bc82f3b8d4552d3fcf256d54f10ef2b8b1be360e0307692331baf9fed8eb2d74e9fae53269402795950c374ccb387ca66ce8998c51f3eee4929e56ae4b0acb494ee26daa3230f17d139f79f807999f79d47366e86415cae4277e06995642f426e840e48126eb729dc624ccf00934adbf584e3ad134dc75813583e7af8a46845e369472de69a0fd187359b1a2110eac97ef0ecc763e9b060f563723335e051dfa"}, {0xdd, 0x6b, "0100bfe00cfe05d1a448f605daa77b2580b97674c6d17d619619ab27c83b94e29efe3ea438b44fcba5e8bd6dedb63bbaf790987d1bb9ecc25f8946404ee260f44065f9248d0104585d1d87197875c43a4bd4bd0dcee3e33a1389e312d944aeb9b570bcca23eace728fede1"}, {0xdd, 0xd0, "1441f6c2bfade62c65ff1374da176180a0c3e469a925631502ecb6e99217c7318869d908ba73022e23371c55083f6c03c0083cc748eab0eee5a5e31844c214076ebacd4742ecc9ea9d006a36976c5d892acb8781bf1b8b0ec0ccbb2ba262c89cbff42bbd81a89be125f618cb86fcc37adf45e59777b2aa3e1141e30ad6896544a3e26a262785abd8179dd99816c3b96e1609e5bef3661502f6eec42b6d885e138625832f3c73237c7cfbcfad15814d5ec6d33b9bca5c86e0b4cc5ab8d23f1d364a8c64c27da71a01d297aa44200f699a"}, {0xdd, 0xd3, "b08c3d54640f3d65f6710c8f16c3c685a7f89e268d28b9c1b8364d3d3efa3f4bd3be9d4854091d2c06ff33a5cc88b2fef7a0311270f58bfe2ba68ea84f83afc64fb2b359deb159b652212f4eb42eaff5adb77235087f65889cb06507766608d651690b84e1aa2723203baae8a5d957e3fdce209a7d427fb6a31c0a7e97fb268f227581bcef58f2f17828501d1cc038ce8febe24c4507bea4a659174cc381f25d6be4173ea81971c250482d69ac146b97d9865b444995c08deed520d847b24d149b17a4984a520fa4723890982dd4fe6dfb88d8"}, {0xdd, 0x9c, "9044071f94719ef7084b6ea2d93a47486c04035bd5d99c98970718104c910ac76456a03c3175b2a829f505c0951b74b374a8b8f0b8ff7767c46109b69b948c87429c6b136b99ddb7c5c74588049d2c5fcc02b8bd10f5b8637bf8c248856ec5b59f36d82dc76f39ae26b13c9cd8e6613c9a74bb999444e40a7b405ecdce6d46a010e3fd936f12aea96e15eed244743a60dc820fb529daccb0b1dc935e"}]}, 0x6dd) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = syz_open_pts(r0, 0x141601) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xb840c58f) ioctl$TIOCSETD(r1, 0x5423, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000080)="10", 0x1, 0x0, &(0x7f0000000640)={0x11, 0xc, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0xc0010020, 0x0, 0x40}]}) r9 = syz_ublk_setup_io_uring(0x184f, &(0x7f0000000300)={0x0, 0xa15f, 0x8, 0x3, 0x40}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) io_uring_enter(r9, 0x1838, 0x4db, 0x60, &(0x7f0000000440)={[0x3]}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r10 = io_uring_setup(0x3fe9, &(0x7f0000000280)={0x0, 0x7ba6, 0x800, 0x3, 0x61}) r11 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x207, 0x0, r10}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000180)={0x4, 0x0, [{0x401, 0x0, 0xb29}, {0x2ce, 0x0, 0x3}, {0x308}, {0x2f8, 0x0, 0x1}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r11, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m42.436044214s ago: executing program 2 (id=3678): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x10010, 0xffffffffffffffff, 0xffffe000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r0, @ANYRESDEC=r3], 0x20) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newqdisc={0x74, 0x24, 0x100, 0x70bd28, 0x40000, {0x0, 0x0, 0x0, 0x0, {0xd, 0x7}, {0x6}, {0xb, 0xffff}}, [@TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0xc0, 0x2fe6, 0x140, 0x2, 0x10001, 0x8, 0x2}}, {0x8, 0x2, [0x8, 0x1ff]}}, {{0x1c, 0x1, {0x10, 0xb, 0x3ff, 0x6, 0x2, 0x0, 0x8, 0x3}}, {0xa, 0x2, [0x7ff, 0x3, 0x4]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4090}, 0x48000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r6, r4, 0x0, 0x9) r7 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r7, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f00000004c0)="190253f6f7f0", 0x0, 0xffffffff, 0x14, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000180)}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r9) syz_open_dev$radio(&(0x7f0000000140), 0x1, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_CQM(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYRES8=r7, @ANYRES32=0x0, @ANYRESHEX=r4, @ANYRESOCT=r9], 0x8c}, 0x1, 0x0, 0x0, 0x200000d4}, 0x4004000) close(r6) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r9], &(0x7f0000000000)='GPL\x00', 0x0, 0x52}, 0x94) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r8, @ANYRES32=r0, @ANYBLOB, @ANYRES64=0x0], 0x20) 10m41.542222452s ago: executing program 2 (id=3683): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x2000000c}) write$P9_RSTATu(r0, &(0x7f0000000980)={0x23b, 0x7d, 0x0, {{0x500, 0xfa, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x13\xf6\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00', 0x5e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf6\x99\xfa\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xf6\xc6\x9ai\xd0\x17\xce\xc4Y\x06\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1a'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0xffffffffffffffff}}, 0x23b) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x58, r4, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xff, 0x60}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008004}, 0x40004000) r5 = socket$tipc(0x1e, 0x5, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x208000, 0x0, 0x3d, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000001740)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') r8 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fchdir(r9) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r10, &(0x7f00000102c0)={0x2020}, 0x7) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000580)="eda55b", 0x3}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_open_dev$sg(&(0x7f0000000000), 0xffff0000, 0x2842) ioctl$SCSI_IOCTL_SEND_COMMAND(r11, 0x1, &(0x7f0000000080)={0x0, 0x7, 0x23}) recvmmsg(r5, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000000780)=""/206, 0xce}], 0x1, &(0x7f00000003c0)=""/214, 0xd6}, 0x8}], 0x1, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000021328c26c9c1b10774ee99e17ddcee69c68e48c5632db05736894fb2ad31ccff6b04c5b408a4c9be6bb2c7039e6000057637864a96d0f06fcf0f7699401777bd80782948a0d38a62a554d00e97fc1efe117115b5ee7796d48b8a7c3f5ce16abe57005c6c5a28276fdc3a49b5adf3ba99076ee17c38511577c4deac94d6bdfcb6fd4ca621737708fed38dc63a5203538d09d618420195840e2390e2e426ae6cb690a90565bc6ef73caa9968a3", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf25010000001400020077673200"/34], 0x28}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 10m41.458157472s ago: executing program 2 (id=3685): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000009003940422c021664da010203010902120001000000040904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 10m41.208494734s ago: executing program 2 (id=3686): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) open(0x0, 0x14927e, 0x9) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x6}, 0x76e0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) open(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x0) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) listen(r2, 0x0) accept4$inet6(r2, 0x0, 0x0, 0x0) accept4$tipc(r2, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@gettaction={0x54, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4048040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10m40.883568554s ago: executing program 33 (id=3686): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) open(0x0, 0x14927e, 0x9) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x6}, 0x76e0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) open(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x0) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) listen(r2, 0x0) accept4$inet6(r2, 0x0, 0x0, 0x0) accept4$tipc(r2, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@gettaction={0x54, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4048040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m4.972544452s ago: executing program 1 (id=6468): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000300)='FROZEN\x00', 0x7) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) unshare(0x2040400) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x2a000, 0x1000}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r7, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e21, 0x3}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x100008}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, 0x0}}], 0x2, 0x48050) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x2, &(0x7f0000000200)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000}, 0x94) r9 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r9, 0x0) 1m3.408878501s ago: executing program 1 (id=6473): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040100010300000009210000000122020009058103"], 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x3136564e, 0x1, @discrete={0xff, 0xfffffeff}}) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000012c0)="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", 0x7d0}], 0x1}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002280)=""/4096, 0x1000}], 0x1}, 0x40002160) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0x0, "1393"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000240)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000705c25905e5390f09c11b7bae030f5e910add90baa7af30ddea5042bdc9a8386a47b1bcd22ebe9fc66f6178abea26ed2d65e8312ac1934ba60c00b8707f6c6f7e378e9b6799ffe5cb2def7a667"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m0.273507443s ago: executing program 1 (id=6489): syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="04140606c85b1eb00001090064415c324de78ce774cb67d3dfa7d298c228f20bd1faffd4f12f7bb45ea9f4e7535dbf3209fecc8319ebf3c0c1aa047f40524c2c65b491af28241fc0072b4dc4cc059c553965c89cd7316704c3b809f714c0b9277bbed6c2c18ae702924c7dfa39a59210f7984d950b405a8fbf1405bddd392ad35acf670d6e29c63569b870b164910eb6f91aabc61aa906a04241544974ff5d09b3af40f21aa658c5b29508ec5693343a8202a91f50ef"], 0x9) sendmsg(r2, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000040)={{0x2, 0x4e21, @remote}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x0, {0x2, 0x4e20, @loopback}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x20000180) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = socket(0x28, 0x5, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4000000, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000000c0)='asymmetric\x00', 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, 0x0, 0x0) 58.626192286s ago: executing program 1 (id=6498): unshare(0x6a040000) r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f000000d540)=[{{&(0x7f0000000180)=@file={0x0, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000540)="410982", 0x3}, {&(0x7f0000000740)="b0679d07ebfa1433a2e2418e28b82e3b62a34b8aa41669f4e7d3187278760caa229e94dbd68cebc67dc29cb5f81651407384158fe11132838aa0c360d373655867e5bc6df95357e8209d1a65f7c4e5020f58389eeac0c8507e6187a6e1b06186b57a613a5eb311ac0ef748e711599ac4fe14080c60ecaaf4fe198825a4a38b5b3423730c", 0x84}, {&(0x7f0000000d00)="e9eb832d09d1d25aef1222db5412241a3f403316b1bb7e765cbaf57fd47c332a21e1c2ae6de632a85e25ae489665678567e2106ac27a9ed8a841a3c7e554ed4974082f698d46305419834b8e253d167984d6db98be200b1b6ce26752794888c1aff99618d1ab6fa5c6840b50364e489efb42bcf06589b2c363cdf0bb47be95997e8cf51dcf723ad5481400707bc572fc202d9d2d0e821febb33fd4", 0x9b}, {&(0x7f0000000dc0)}], 0x4, &(0x7f0000000e40)=[@cred={{0x1c}}], 0x20, 0x4040}}, {{&(0x7f0000000e80)=@file={0x1, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000f00)="f5a10e4d493893c940c38645f9f64a693229ef8e24086d3c621d2ceaff44935ad46c47d75d19986797ece163fa2ba4c9fa371c5683edae761340d5ae0f32c13dbb1eb5dd2ab1007f997b4ff553df966ad512f1482de44d2b49aea23ea3e9b36e84f91c1b4cfdf8b00f2b370b331acc2c74a31f910c257c315bfad4d84377ac6b391931c519f7b78c3ea7e154ce1e4921dd01550c878def1a4bf2f991da55dd2a7a838dc2ea01b50dd7d32ce64ef4f1e34cbd3e64af4bd4d827daad7677512db692986be3b5bc46c42395d31cd51b18f70e52dd000e6274ab4ec81dbfe5e34698cb93e98c1ca4f36a62333473da9f6bf9d261", 0xf2}, {&(0x7f0000001200)="159c68c3b71b0d7ab489ad524a2eac6300000000000000000000000000000000000000000000000000000000000000c4c0377d5a858535a568b7680046c0c7ba6b9bd694256409be1e5ccfe6f22a03327f4daf8fa4b77f6d03777b7ac381fabf4dcf62f9ad029f9dd98a664d19afb88f2e3e9a1ed9ac2e10c0b893b83f4bccdb58e7507fc3d0c5fee3ead4bd7a97a2e16a52247880f4ed02ce58349841937d", 0x9f}, {&(0x7f0000001040)="5c437f11df948f1c1c724c4f0aa4f38c4cb9148fb683b2903e918fc7e5232d9f8487989f51a291b8f5845a27507410ff1fad9e75ec851cb51b28df33c4c4c7fc4b7a44f2614c629aa8cb13b938102e76f40e19f92059e4c830f3a201eb00661abcae8615", 0x64}, {&(0x7f00000010c0)="4b1a748d1180c5ea7ecbee7a2abf3c645f422d598473bcc09af6b0c0ab07ff2c93776c89221008f0561db07b65da00cacbbfd204c76ab995496347c2df1b1f69ee043d6368f4fa6302e414a2ee68b305f37103a46cf18118972a2764f7b48fed6f2921b0843f777cf972203148f0751f2a495b4b2cd2a6aeb8597960d85b6cb4a6ea7132882370d60d7935a32f956ba0e0b28ce906462404aded8203206d829d705f1f3ad2465ffd4bb4479a399ca3f90b528fa7190f9759f5b3fd91117abadc1b181f3d165141fe041e57a761d4d9b684ae9693a8708907da3fe234e46ee3cf86e844176d58cc31045f69a7", 0xec}], 0x4, &(0x7f0000003300)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r1, r0, r0, r1, r0, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r2, r0, r0, r2, r0, r0, r2]}}], 0xe8, 0x804}}, {{&(0x7f0000003400)=@file={0x1, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00'}, 0x6e, &(0x7f0000003580)=[{&(0x7f0000003480)="1d8206383554", 0x6}, {&(0x7f00000034c0)="7f7be2bd2c1449fbaf1bf7aad69ecfcd5cc219048954d9d2d2e23590518c65757a0f5f8a24e382974ee6176bea018b966a315fb1107b95861a1257957468c570b2d8beee7342c0bc10b050d579a8c19cdc8be2502382c8da24c28c72770169bd2035339b01933f7892ec449eb796b8daf59ef89f22e668b960296c1c299eb56f1d338f44", 0x84}], 0x2, &(0x7f00000035c0)=[@rights={{0x2c, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50, 0x80}}, {{&(0x7f0000003640)=@file={0x0, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e, &(0x7f0000003980)=[{&(0x7f00000036c0)="f52396887b4ebfacd81eae1abf80151b321f23273aa8ee852ffa3f4857cf4d6f51dbb37d4e7d39a25b0445da1b548e8f3d4597245b1c60cbe865d975e1843311b23cf4105aa498f5cd6701d58b16db46e899643aa2c4e19e9d0c0830b7fee82ac0c294e6e69359a8c18ac6b2be0e21dff706186cc9ffabf0533a92091c88ab2ff41af22c0b24", 0x86}, {&(0x7f0000003780)="421db89fb824ff3a37e293f1c5805968ba11c84756215cc5d27ab80828c0884484916a5ebd928c7cf6dc9f171b3e4d47840b7ca52c336c48334b2f59181b7796416c20f624d10bdca870d9a3b18c41d99c1a352cb2350e91856efcdbe25ddeba5af1de0d550b5aaaae687590d2760eca6bb330742fe556944acb2f5bf28d6a1766ec5dd900c2e1b2", 0x88}, {&(0x7f0000003840)="dd91f9f113108f86e9882f2dc03a4b81674e0fd1ae117a1d5272dc61223c42bab63cd48006f811ebb9203cefd68bcad082c1d1", 0x33}, {&(0x7f00000012c0)="fc35067c6133a51c113ed4f1b0317bb25e661a91e14c6398a7b3f5d21839226a8fb34174590b79a77001f451effc3450145adbc7ba21b499a6c1d1837a888c54ae62112e0ee970fcdedbf0c8ccbfa6e0cdd3607d6138a96c40000000954a97e5a32c1b02cafaafab802e4d043377828b590c729a3e4d8e1845ab5a8a4e8bf82a636a04b0351ecbada8f4bcd61f7e5946116f32c118fa7d512688ed01654617f03f39e52ea07f2c74a185db1656235dfdf3fb9b1543a2f8a9d339d41dcb0e0fef57102e260fcdd9803f728fe8071001b1c1871025c31c30cac30b3b3f33ff7a76", 0xe0}], 0x4, &(0x7f0000003a80)=[@rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100, 0x40000}}, {{&(0x7f0000003bc0)=@abs={0x6bda94ae17ef3817, 0x0, 0x4e21}, 0x6e, &(0x7f000000d400)=[{&(0x7f0000003c40)="737135918eba158adbbd497184a705d8414e271792929f22c4d24e0b8b5483c6ab24280256f39ebcc7141c5f60742335970649de2d4e3e29b141dce487227ba5258e0f1a9ce372f7aa4ffbe0148c42e645cc2bd3a3446454193ffd9277aba011d2e86afd71ed1cc30f8f591bd7ec7a26286c70140e89d2c7f89d43b81de4e991b24d54cb1cefc1a64876e562409d2a91967de9936d2608e7c494eee692189b018bd281402b8aecf7106772ffa290d488081d70794318bb05d505ee458333310aa9e682419efe12ca0d", 0xc9}, {&(0x7f0000003d40)="583a3bfa034bef76f4b556af0145f6ee9d097f0b03394c94fbf09200b5ab56906b07a21ce783ffe65f4aa93b7371", 0x2e}, {&(0x7f0000003d80)="a8e7aa60e2baac4de117e2b277aa76604ef12b845c53b18810495688535f040610f82069aa970cf0fb2aae1371d8fa67c4fd885c48f08d4ee414ff0a6ab3d1cc3d7516559d33873a51eddc442ca3dbcfd48c41cc0952fb5fdad28632f04bd1069a3347c95e3c36968ee247b8385a82c04fac27bf317aa643a71894fcba0564d1e128240dd8bc68e57aaab0bdd966d11b161f6020324aed6c0db6e914545a8af78aec5258ef480270c0eb79291604dc7e74dcb6ee7a5e4a224081c43c9bf45077f9a7f96da3685482cd085b7213b76be2294588d009a45f1e95616d2032a898cb77", 0xe1}, {&(0x7f000000c280)="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", 0x1000}, {&(0x7f000000d280)="7804981070eb492684c48a4b97849f867e8bd4c5cbf48116e152ed5086e3cf841bbcfc9bfd5b6e1807be0a1900a8c5dcf6051bd31013b9e5d647ef01a4487eb34bfb0abba36b68ae598847860a7fd408ead643238129275fb2ede5c7ddd315dcca395687cffe600051682c44fe01f592e018ef0f1fe0e5830bbbcf457bb98645bed233ee23e8021e19d741ccbe045c479079cd2e2e7d6bf5e9038cc0d35dfc09a4d4d117a887ce5aeaaaa080031b90d621689b1b85354048a314", 0xba}, {&(0x7f000000d340)="b7882b86ed2b13bd29627acb955683d251057bcac048a7687029417bf77e14a237a52ca26e96371ed07f3956ae99236752d167050a7eb3761233691f80b72aa09184b66023f131cb667dff56039086827dc786c72f02363277faef53699868121e624c8600d34bce4e4d88bf1450da6fd753e45fc3d2819521f8ddfe31a1aee6fe700de3f5dbb35c48b5e4", 0x8b}], 0x6, &(0x7f000000d480)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x98, 0x4}}], 0x5, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000040)={0x0, 0x2, 0x201e, 0x1}) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f00000002c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000100), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000040)={0x2, 0xf3}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000080)={0x2, 0x3}, 0x2) recvmmsg(r1, &(0x7f00000003c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000800)=""/119, 0x77}, {&(0x7f00000004c0)=""/75, 0x4b}, {&(0x7f0000000600)=""/157, 0xd0}, {&(0x7f00000006c0)=""/124, 0x7c}, {&(0x7f0000000880)=""/105, 0x69}, {&(0x7f00000013c0)=""/167, 0xb0}], 0x7, &(0x7f0000000a40)=""/102, 0x66}}], 0x1, 0x40010042, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="400100001a000100feffffff00010000e0000002fffc00000000000000000000fc01000030b8d7b101ee59b4000000010001071c4e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES64=r1, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc02000000000000000000000033000100000000002000009201000000000010a39b000000000000ffff0000000062daad437b5d00001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000008000000005350000020001002000000000000000480003006465666c61746500000000000000c40000000400000000000300"/239, @ANYBLOB="6f9338a21b704d837aa00ab07829f8cdaeddbbe536ab0f94e1acafc977c8c39e055e64a9d2b2fe65c962fd207b3e1a8d69b868a08f5008debe87010bfafa4bccf4f7338504724753760adce5109593e4d21c7863716018358afa662b4b1d3210afbb07fb42d17731e0c22bad17adb512121e97f3865ebcd877c8760448487832eaf6f7661c097948adc3830e7980989d80a36b496b2586ebafdda5254d9e2cb41c192dd44389350f1fc84f55bedbfdf8eff76a1bf2cf21003724876383f94e4cde9376d4b17345433dca"], 0x140}}, 0x844) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e60, 0x10000, 0x0, 0x9}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 56.475700421s ago: executing program 5 (id=6509): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xb) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/vmstat\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) r4 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x4000}) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000300)) r5 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r4, 0x40106e80, &(0x7f0000000340)={0xfff, 0x1}) write$P9_RVERSION(r5, &(0x7f0000002200)=ANY=[], 0xfffffcd9) r6 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r6, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000600)="974501000000000001008cc5ffffffff0a30aec2d6", 0x15}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100}}}], 0x20}, 0x400c804) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000100)=0x40005) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x11, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1c}}, [@map_fd={0x18, 0x7, 0x1, 0x0, r0}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 56.474422605s ago: executing program 1 (id=6510): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001080)={0x14, 0x0, &(0x7f0000000fc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, 0x0, 0x0}, 0x0) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) (rerun: 64) syz_usb_control_io$hid(r0, &(0x7f0000004500)={0x14, 0x0, &(0x7f0000004400)={0x0, 0x3, 0xc, @string={0xc, 0x3, "4c515919419b952740e4"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41a}}, 0x0, 0x0}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000947000/0x1000)=nil, 0x1000, 0x1, 0x13, r1, 0x3e7d9000) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0xba, 0xe, 0x55, 0x0, 0xff, 0x8, 0x2c, 0x3, 0x4, 0xa6, 0x5, 0x2, 0x80, 0x9, 0x5, 0x5d}}) (async, rerun: 64) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (rerun: 64) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) (async) r6 = socket(0x22, 0x2, 0x3) (async, rerun: 64) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x20, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) (async) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0xbc, r7, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2000}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}, @IPVS_SVC_ATTR_AF={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x7}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3b35}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xbc}, 0x1, 0x0, 0x0, 0x801}, 0x20000044) (async) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r7, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x80) (async) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x188, r7, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fffffff}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8001}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x79}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x40}, 0x80808c1) 54.870521102s ago: executing program 5 (id=6517): prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x602, 0x0) socket$kcm(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x9, 0x1, 0x6, 0xfa11, 0x2}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) accept4$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x18, 0xfffffffffffffff9) request_key(&(0x7f0000001d40)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) 53.371641642s ago: executing program 1 (id=6519): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="02010000080000000000000000000000030005000000000002000000ac1414000000000000040000030006000000000002"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x48c0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) unshare(0x2a020480) socket$nl_route(0x10, 0x3, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) 50.028844603s ago: executing program 6 (id=6526): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000340)}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, 0x0, 0x0) r4 = gettid() r5 = getpid() ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f00003dc000/0x9000)=nil) rt_tgsigqueueinfo(r5, r4, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x4}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000002c0)={[{0x5, 0x4, 0x5, 0x5, 0x2, 0x12, 0x7, 0xd, 0xb9, 0x3, 0xe, 0xa, 0x201}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xfb, 0x2, 0x5, 0x1f, 0x3, 0x4, 0x7b, 0x20e}, {0x6, 0x15, 0x18, 0x34, 0x48, 0x0, 0x3, 0x84, 0x0, 0x4, 0x4, 0x7, 0x1}], 0xfaffffff}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000500)={[0x7f, 0x5, 0x7784, 0x8, 0x0, 0x7fffffff, 0x8, 0x1, 0xffffff, 0x20000000000068ff, 0x5, 0x745, 0xffffffff, 0x3, 0x0, 0x101], 0x1, 0x202}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = userfaultfd(0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000008, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mlock2(&(0x7f0000b58000/0x2000)=nil, 0x2000, 0x1) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x249}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 48.226298769s ago: executing program 3 (id=6531): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000440)={0x3c00, 0x258, 0x60, 0x0, 0x0, 0x1, 0x0, 0x0, {0x40000000}, {0x0, 0x2}, {}, {0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x800, 0x3, 0x7ff, 0x2d, 0x0, 0x0, 0x6}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000001c0)=0x2000000000000066, 0x218) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x44000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000100, 0x20000000, 0x80000000000004, 0x6, 0x0, {0x0, 0x10041, 0x101, 0xc, 0x2, 0x2, 0x10000, 0x2, 0x0, 0xa000, 0xfffffffc, 0x0, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca46, 0x0, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000083c0)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0xa0, 0x0, 0x71, {{0x3, 0x0, 0x800, 0xbafd, 0x2, 0x8, {0x0, 0x9, 0x5, 0xfffffffffffffff5, 0x8, 0x4, 0x2, 0x6, 0x13, 0x8000, 0x1003, 0x0, 0x0, 0x0, 0x7}}, {0x0, 0x1}}}, 0x0, 0x0}) getresgid(&(0x7f0000005780), &(0x7f00000057c0)=0x0, &(0x7f0000005800)) syz_fuse_handle_req(r3, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000005980)={&(0x7f00000040c0)={0x50, 0x0, 0x1, {0x7, 0x2d, 0x10001, 0x200, 0x1000, 0x2, 0x3, 0x0, 0x0, 0x0, 0x4, 0x9}}, &(0x7f0000004140)={0x18, 0x0, 0x7, {0x4}}, &(0x7f0000004180)={0x18, 0xfffffffffffffffc, 0x6, {0x7}}, &(0x7f00000041c0)={0x18, 0x0, 0x8, {0xffffffc1}}, &(0x7f0000004200)={0x18, 0x0, 0xa6, {0xffff88cb}}, &(0x7f0000004480)={0x28, 0x7fffffffffffffed, 0x52ae, {{0x8000000000, 0x9, 0x1}}}, &(0x7f00000044c0)={0x60, 0x0, 0x6, {{0xba, 0x5, 0x7, 0x8da, 0x7, 0x6, 0x2, 0x4}}}, &(0x7f0000004540)={0x18, 0x0, 0x80000000, {0x1}}, &(0x7f0000004580)={0x30, 0xfffffffffffffffe, 0x2, {'\xb0\x80s\xe8\xd4N\x91\xe3\xda\x92,\"C\x82D\xbb\x88\\i\xe2i\xc8\xe9\xd85\xb1\x14):M\xdcn'}}, &(0x7f00000045c0)={0x20, 0x0, 0x7c, {0x0, 0xc}}, &(0x7f00000046c0)={0x78, 0x0, 0x9, {0x5, 0x8608, 0x0, {0x0, 0x1, 0x8, 0x3, 0x1e, 0x5, 0x6, 0x6, 0x5, 0x1000, 0x0, 0x0, 0x0, 0xffff7fff}}}, &(0x7f0000004900)={0x90, 0x0, 0x7ff, {0x7, 0x1, 0xfffffffffffffd1f, 0x118, 0x1000, 0x7, {0x2, 0x3, 0x4, 0x100, 0xd71, 0x8, 0x3ff, 0x100, 0x1, 0x4000, 0x6, 0x0, 0x0, 0x6, 0x2}}}, &(0x7f00000049c0)={0x150, 0x0, 0x8a, [{0x4, 0x8, 0x20, 0x4, '\xb0\x80s\xe8\xd4N\x91\xe3\xda\x92,\"C\x82D\xbb\x88\\i\xe2i\xc8\xe9\xd85\xb1\x14):M\xdcn'}, {0x6, 0xc37, 0xd, 0x29, 'dns_resolver\x00'}, {0x4, 0x6, 0x3, 0x6, ':*.'}, {0x1, 0x7, 0x0, 0x2}, {0x1, 0x101, 0x3, 0x8c, 'syz'}, {0x0, 0xb6, 0x3, 0x5, '}(:'}, {0x3, 0xe, 0x1, 0xfffffff8, '-'}, {0x6, 0x7fffffff, 0x5, 0x6, '##\\::'}, {0x5, 0x0, 0xa, 0x0, 'wireguard\x00'}]}, &(0x7f00000051c0)={0x490, 0x0, 0xfffffffffffffff8, [{{0x2, 0x3, 0x6, 0xd9d, 0xa, 0xfffffffa, {0x1, 0x7ff, 0x8000000000000000, 0x7, 0x5, 0x8, 0x5, 0x83, 0x1, 0xc000, 0x81, 0x0, 0xee01, 0x81, 0xc}}, {0x6, 0x140da175, 0x11, 0x5, '/proc/partitions\x00'}}, {{0x1, 0x2, 0x10, 0x3, 0x1000, 0x6, {0x1, 0xfa0f, 0x8, 0xf9, 0x4, 0x0, 0x8, 0xb, 0x80000000, 0x2000, 0x5, 0x0, 0x0, 0x9}}, {0x5, 0x3, 0x1, 0x1000, '\x00'}}, {{0x1, 0x0, 0x4, 0x9, 0xfffffff7, 0x5, {0x1, 0x54, 0x2, 0x35c607f7, 0x4800000000000, 0x3, 0x9, 0x4, 0x10001, 0x4000, 0x8fac, 0x0, 0xffffffffffffffff, 0x400, 0x2}}, {0x1, 0x7f, 0x20, 0x5, '\xb0\x80s\xe8\xd4N\x91\xe3\xda\x92,\"C\x82D\xbb\b\\i\xe2i\xc8\xe9\xd85\xb1\x14):M\xdcn'}}, {{0x5, 0x3, 0x2, 0x2, 0x6, 0xfffffffd, {0x3, 0x6, 0x9, 0x9, 0x1, 0x0, 0xcd, 0x6, 0x3, 0xa000, 0x8000, 0x0, 0x0, 0x8, 0xe1}}, {0x5, 0x5, 0x4, 0x3, 'wg2\x00'}}, {{0x1, 0x0, 0x7f, 0x7ff, 0x2b4, 0x4, {0x0, 0x2, 0x8, 0x4, 0x10001, 0x10000, 0x7, 0x1, 0x1, 0x1000, 0x9, 0x0, 0x0, 0x200, 0x8}}, {0x1, 0x3, 0x1, 0x10, ':'}}, {{0x3, 0x0, 0xa6, 0x4, 0x6, 0x2, {0x6, 0xbddb, 0x2, 0x0, 0x7, 0x421, 0x80, 0x2c, 0x81, 0x8000, 0x1, 0x0, 0x0, 0x3, 0x8}}, {0x5, 0x3, 0x0, 0xffffffff}}, {{0x6, 0x3, 0x2a, 0x1, 0x3, 0x4, {0x5, 0x80, 0x7, 0x49d, 0x6, 0x1, 0x1, 0x8, 0xfffff74e, 0x6000, 0x8, 0x0, 0x0, 0x3ff, 0x2}}, {0x0, 0x6, 0x1, 0x4, '\x00'}}]}, &(0x7f0000005680)={0xa0, 0xfffffffffffffffe, 0x20000010001, {{0x6, 0x2, 0xbaba, 0x2, 0x1, 0xfffffff3, {0x3, 0x8001, 0x3, 0x2ec0, 0x2, 0xffffffffffffffff, 0x5, 0x2, 0xfffffff8, 0x4000, 0x9, 0xffffffffffffffff, 0x0, 0x1000, 0x131}}, {0x0, 0x10}}}, &(0x7f0000005740)={0x20, 0x0, 0x7, {0x5, 0x0, 0xd, 0x7}}, &(0x7f0000005840)={0x130, 0xffffffffffffffda, 0x5, {0x2, 0x8, 0x0, '\x00', {0x20, 0x5, 0x0, 0x0, 0x0, r6, 0xc000, '\x00', 0x6, 0x3ff, 0x1dab, 0x8b, {0x9, 0x3}, {0x6, 0x3}, {0x4, 0xffffffff}, {0xb}, 0x7, 0x0, 0xa70, 0x4}}}}) syz_genetlink_get_family_id$ethtool(0x0, r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, 0x0, 0x0) memfd_create(0x0, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4004044}, 0x8080) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000800)={0x54, r8, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x10004040) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) gettid() timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @thr={&(0x7f0000000080)="20703e7a4e1d00b6f5381221ab08cfd29eef308d89f06131364e20451ef22a6bf075e77d3aea27aaf9d184a926be6b8e945fd5e8fc60ac3f80a1e745f51ceb197e92476e0ef853df350fe0de0f104bc0bd5cbfef824309693a19dadcd1635c2be28b8121bb953134d9ce6c44a2521a96e04fa75cf4cfedffb63528b00549ba043051dd8ecf99c9a0c17fb42ba38560f659819c13ac26a484207b9f08e26b55b9478fe438a697d0b50455de5bedc09ecaa73ed0bfadf850cd4b5b1cff595a0e641b62253b58bf7e33dbc3f843815eeb27d9b77a78308fa512b898cff94af22bc2bfa58ddd79fc7d7291c25f22a7dabb5e91", &(0x7f0000000300)="3b06c11c24befce46b64af2ab0cb36461d16de2a621f3b03e52d222ff8843cc9359f7f85a2e7e7850a4f77989ad89228bad9407a46fe210004a8ba3bb088775c38e35484604884435cd0293db16f9fb3e25c312f94470d2b906aad5aae093c4f751210e53d2a054bd963c2ac6902a015ffe9cd606e12689d3b7217c36e020e5ace47e5609cc2592c3de14bcc9da95e6b81bb3846a923b4877a5c0b0345464c32c3"}}, &(0x7f0000bbdffc)) add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="000001020200", 0x6, 0xfffffffffffffffb) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@mcast1, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@private0, 0x52, r9}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, 0x0) 47.090766249s ago: executing program 3 (id=6532): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x65) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@func={0x6, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x61, 0x5f, 0x2e, 0x30, 0x61, 0x0, 0x0]}}, &(0x7f0000001f00)=""/4096, 0x2d, 0x1000, 0x1}, 0x28) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000280)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_driver={0x1, 0x7, &(0x7f00000000c0)="c735b120de306bf669a642e5a9c20bae393349e595360dca26152887446249dafbbce23a22a7743dfff4d8d6779a440fd2490791b5cfac3ecc19fb3eb3eecbe44f516c8ad0f61f3886a74de93232b0348399277680005c4cd09380e1aadbdb9c605d0f080b2b5dc320c9f8cc03efa6c76e6bd105d0fe32cb550dfc0558bef4fc8ada9ee9374bd9956ae417"}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) mmap$usbfs(&(0x7f00009a2000/0x4000)=nil, 0x4000, 0x17, 0x8010, r0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 46.974944501s ago: executing program 6 (id=6533): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000000100000002000000", 0xfe60) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x2, 0xfffffffd, @mcast2}}}, &(0x7f0000000180)=0x84) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0x1000000}}}}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000000300)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x5, @private0, 0x5}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)='F', 0x1}], 0x1}}], 0x1, 0xc841) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, &(0x7f00000000c0)) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 46.606383535s ago: executing program 0 (id=6534): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, 0x0) (fail_nth: 4) 46.07041419s ago: executing program 5 (id=6535): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) accept4(r2, 0x0, 0x0, 0x80000) r3 = socket$inet6(0x10, 0x2, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f0000000180)=0x3ff, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='S', 0x1}], 0x1}}], 0x1, 0x20008000) shutdown(r4, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) read$FUSE(r3, &(0x7f0000003c80)={0x2020}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x9, 0xa3, {0xffffffffffffffff}, {0xee00}, 0x1e72}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140)=r6, 0x12) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c7900, 0x0) sendfile(r5, r7, 0x0, 0x201f00) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r8 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x2) preadv(r8, &(0x7f0000000680)=[{&(0x7f0000000400)=""/162, 0xa2}], 0x1, 0x80000001, 0x3) ioctl$VIDIOC_S_STD(r8, 0x40085618, &(0x7f0000000300)=0x800) 46.002741544s ago: executing program 3 (id=6536): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000003d40), 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$kcm(r2, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x2000081) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x6, 0x480000) fcntl$lock(r3, 0x22, &(0x7f0000000340)={0x2, 0x4, 0x9, 0x92, 0xffffffffffffffff}) r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0x60000526) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r8 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r8, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r8, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) 45.294497555s ago: executing program 0 (id=6537): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x18, 0x4, 0x0, 0x0, 0x60, 0xfffe, 0x0, 0xff, 0x4, 0x0, @local, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x29, 0x3, 0xa, [{@multicast2, 0x7}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x5}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x9a}]}, @timestamp_addr={0x44, 0x1c, 0x58, 0x1, 0xa, [{@private=0xa010101, 0x3}, {@remote, 0x3}, {@local, 0x7}]}, @generic={0x88, 0x5, "e59afa"}, @timestamp_addr={0x44, 0x4, 0x6, 0x1, 0x5}]}}}}}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x6, @multicast2, 0x4e22, 0x1, 'wrr\x00', 0x20, 0x1b53, 0xd}, 0x2c) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f046}) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@ipv4_delroute={0x24, 0x19, 0x20, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x80, 0x8, 0xfd, 0x1, 0xff, 0x7, 0x100}, [@RTA_PREFSRC={0x8, 0x7, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x8d1}, 0x4044810) open$dir(0x0, 0x2, 0x190) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000100000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="421c0000000000001c001280090001007866726d000000000c0002800800020001000008140003006970365f767469300000000000000000"], 0x50}}, 0x20020004) 44.994371322s ago: executing program 0 (id=6538): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200001a0500140003006e657464657673696d300000000000000c001680080001800400f37f050091cc80920000"], 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r6 = msgget$private(0x0, 0x4a0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgsnd(r6, &(0x7f0000000440)=ANY=[], 0xe3, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r8 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x3b}, 0x5a) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x900066}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x7, 0x4) syz_usb_connect(0x3, 0x64, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007"], 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000080)=0x5d6, 0x4) 44.819488948s ago: executing program 3 (id=6539): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x8900}, [@IFLA_MASTER={0x8, 0x3, r3}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x44}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) (async) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000b24000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x6, 0x84, 0x2, 0x44, 0x18}) (async) r6 = socket(0xa, 0x5, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r8 = accept4$alg(r6, 0x0, 0x0, 0x101800) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x1d, &(0x7f0000000040)=0x2, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r9, 0xc0045006, &(0x7f0000000000)=0x20006f) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r12, @ANYBLOB="050006"], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) 43.538575967s ago: executing program 6 (id=6540): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r4, 0x1) flock(r4, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) unshare(0x22020600) r5 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r5, &(0x7f0000000cc0)={0xa, 0x4e20, 0x2f19, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x1c0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_debug_messages', 0x402, 0x0) write$FUSE_DIRENT(r6, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0xf0) statx(r6, &(0x7f0000000100)='./file0\x00', 0x0, 0x100, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r6, &(0x7f00000009c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000d00)=ANY=[@ANYBLOB="440300001600200026bd7000ffdbdf2500000000000000000000ffffe0000002ac1e00010000000000000000000000004e21000e4e22007e0200000008000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="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"], 0x344}, 0x1, 0x0, 0x0, 0x40}, 0x40) setxattr$incfs_id(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0, 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6040, 0x4042}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x21}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xff}]}, 0x40}, 0x1, 0x0, 0x0, 0x40c0000}, 0x0) 42.56945825s ago: executing program 3 (id=6541): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f027, 0x0, '\x00', @p_u8=0x0}}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r5) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xf, 0x3, 0x10001, 0x6}, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) (async) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r4, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x14}], 0x1}, 0x4011) socket$packet(0x11, 0x3, 0x300) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r11 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x2c020400) (async) getsockopt$XDP_STATISTICS(r11, 0x11b, 0x7, 0x0, &(0x7f0000000100)=0x18) (async) socket(0x2, 0xa, 0x300) (async) r12 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="7110b6000000000095"], &(0x7f00000000c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff07}, 0x94) (async) write$tun(r10, &(0x7f0000000700)={@void, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x7fff}}}}, 0x32) 40.522503542s ago: executing program 5 (id=6542): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x3f}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mountinfo\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="030300f67058f8eb172d2f"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x9d) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r4, @ANYBLOB="010008000300"/18, @ANYRES32=r7, @ANYBLOB="61003300800c0400080211000000080211000000a43aabd6c23026002706000000000000640000100000010004060fab0100060006020100050303560025030134042a01022d1a00100400000000000000004f009a001800000000000100000008000000080026007116000004006c00"], 0x8c}, 0x1, 0x0, 0x0, 0x40005}, 0x40810) 40.435300761s ago: executing program 6 (id=6543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)=ANY=[@ANYBLOB="1400000000080701000000000000000003000002"], 0x14}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) 40.282245948s ago: executing program 3 (id=6544): process_vm_writev(0x0, &(0x7f0000001c80)=[{0x0}], 0x1, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') fchdir(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xfffff000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') open_tree(r1, &(0x7f0000000080)='./file0\x00', 0x100) write$FUSE_DIRENT(r1, &(0x7f0000000380)=ANY=[], 0x130) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket(0x10, 0x402, 0x31a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs$namespace(0x0, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newqdisc={0xac, 0x24, 0xf07, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0x10, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x3ff}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x88}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x95}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3c}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xeb}]}, {0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xffffffff}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xeb76}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0xac}}, 0x4) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {0xffff, 0xffff}, {0x8, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048805}, 0x2040) 40.183538134s ago: executing program 6 (id=6545): socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40809440, &(0x7f00000001c0)={&(0x7f0000000180)=[{&(0x7f0000000080)="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", 0xfb}], 0x1, 0x400, 0x0, 0x1, 0x3, 0x3, 0x1, 0xff}) fsopen(&(0x7f0000000040)='ceph\x00', 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000906030000000000000000000500003c0900020073797a3100000000050001000700000038000780060004404e24000005000700ff0000000c000180080001400a0101010c001480080001407f00f3010c00168008000140ac1414"], 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) 40.152267026s ago: executing program 5 (id=6546): r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd2a, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_usb_connect$uac2(0x3, 0xcd, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000408c0d1400400001020301090286000301003003080b00020109200609040000000101200009240102000626000311240803010000000000000200010000000c240304020301030d07"], 0x0) 39.924099845s ago: executing program 6 (id=6547): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000000000007112180000000000bc201000210000009500000000000000159bb11d55cd54f795ebc6c48b7ee57df364594defe47aa18c81fbb86c6042dbf743a90b61bae3a57ba478e003fe723b194058bc41fc8c6082cee0dce6c4e98c88"], 0x0, 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) write$binfmt_register(r3, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237) r4 = socket(0x2, 0x3, 0x2) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000240)={0x3, 0x0, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000300)={r5}) sendmsg$IPSET_CMD_FLUSH(r2, 0x0, 0x480c4) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = dup(r6) ioctl$PTP_EXTTS_REQUEST2(r7, 0x40603d07, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f0000000200)=@default_ibss_ssid, 0x6, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000100)={r8}) socket$kcm(0x29, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = socket(0x2, 0x80805, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0xa, 0x2, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r11, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x20, 0xa7e, 0x400070}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x8000, 0x100077}, {@remote, 0x4e20, 0x3, 0x8, 0x200}}, 0x44) syz_emit_ethernet(0x82, &(0x7f0000000640)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000800450000740000000000019078ac1e0001ac1414aa05009078e00000e04600001f000000000011000000000000ac141400070300070300443c00030a01012f00000000e0000001000000007f00000100000200ac1414aa000000000000000000000000ac14"], 0x0) 38.613864133s ago: executing program 0 (id=6548): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0xdcdf, @loopback, 0xffff}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r1, 0xc}, 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)=0x33) (async, rerun: 64) ioctl$KVM_RUN(r5, 0xae80, 0x0) (rerun: 64) 37.598538223s ago: executing program 0 (id=6549): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) splice(r0, &(0x7f0000000040)=0x10, r1, 0x0, 0x807, 0x0) (fail_nth: 3) 36.592942161s ago: executing program 0 (id=6550): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d2", 0x6d}, {&(0x7f0000000140)="89a713c2ca38d36f526284d93c6628738a19795b93d3094bc466d4aeef8fd28b41a1bae573446d2c98031cfb54a9813147463227b3fff52baefa47aa293da7d73fcc6398d38020308740d22d9f036b8da97c11cedc998d6d1db8d4d0cc24232366bb18369343a35ce45f8e9eab9c36a87d721b7d0e7de4291fb99f5ab136984352", 0x81}, {&(0x7f00000002c0)="2a543c81f23cf69a094c5d2669f186ee7455f3373f201dd5992c6532c2d1ae72ada9690925ff10751ebc925925e86710fc849263f82335f9d58b161744dc1e71393849d4e0f559e031a19d00a53b716c5052e1abc83b33c0e906f6d4591057454473c394822d4f000e2b404ae5d78bf7b52ab3fe8588bf14b9826a2bd45661434c4928699e640d88b88e9c3e9a650d4ddcd5498aecd7aee66334eb1a41f4162ba256fcd61d92240b20dc0de07f15c1032d15", 0xb2}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)='B', 0x1}], 0x1}}], 0x2, 0x2090) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0xf8, 0x0, 0xa, 0x400, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x7a, 0x6, "ab743094f20e70e2c05cd90f22735bd898d4f5975af810c851250b57ec872d8e0e26b4b01b57daa4e66d2f24741660c329404395b58500b45845bf2805b4a8695af530029a6d31ae688a462227db31f7a4ca2b87c4442c216e223458399a4c3d6133df2e2befc938e5ed3b88a2023432a658d02a7289"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x49, 0x6, "ad5638ed028e9412b8b2551563cc19f46c1b4a55476ea52d5c498895bfbd4cce6fac40b60c7d0fd3cbef36c0c1e0a106ea8057a8965fd926b61e92739b4f2bb590c0b27eb7"}]}, @NFT_MSG_NEWFLOWTABLE={0x80, 0x16, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x4}}}, 0x1a0}, 0x1, 0x0, 0x0, 0x80}, 0xc0c0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000803c, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="24000000010401010000000000000000050000000500010002"], 0x24}}, 0x20008888) 36.373904583s ago: executing program 5 (id=6551): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x431, 0x301080) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x2, 0x3, 0x7}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, 0x0) 0s ago: executing program 34 (id=6544): process_vm_writev(0x0, &(0x7f0000001c80)=[{0x0}], 0x1, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') fchdir(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xfffff000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') open_tree(r1, &(0x7f0000000080)='./file0\x00', 0x100) write$FUSE_DIRENT(r1, &(0x7f0000000380)=ANY=[], 0x130) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket(0x10, 0x402, 0x31a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs$namespace(0x0, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newqdisc={0xac, 0x24, 0xf07, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0x10, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x3ff}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x88}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x95}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3c}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xeb}]}, {0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xffffffff}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xeb76}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0xac}}, 0x4) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {0xffff, 0xffff}, {0x8, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048805}, 0x2040) kernel console output (not intermixed with test programs): byte, ignoring [ 1410.617493][T16335] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1410.628738][T16335] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1410.645932][T16335] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1410.649211][T29345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1410.658914][T16335] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1410.667860][T29345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1410.695176][T16335] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1410.743689][T16335] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1410.754889][T29345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1410.757059][T29345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1410.782251][T29345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1410.793774][T16335] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1410.831272][T16335] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1410.834454][T29345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1410.849587][T16335] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1410.868077][T16335] usb 7-1: string descriptor 0 read error: -22 [ 1410.875182][T16335] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1410.884815][T16335] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.930126][T16335] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1411.122540][T14810] usb 4-1: Firmware: major: 24, minor: 33, hardware type: ATUSB (2) [ 1411.187698][T29345] hsr_slave_0: entered promiscuous mode [ 1411.214684][T29345] hsr_slave_1: entered promiscuous mode [ 1411.231093][T29345] debugfs: 'hsr0' already exists in 'hsr' [ 1411.245098][T29345] Cannot create hsr debugfs directory [ 1411.302079][T29657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1411.327104][T14810] usb 4-1: failed to fetch extended address, random address set [ 1411.329892][T29657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1411.370112][T15192] bridge_slave_1: left allmulticast mode [ 1411.385430][T15192] bridge_slave_1: left promiscuous mode [ 1411.398305][T16335] usb 7-1: USB disconnect, device number 18 [ 1411.404326][T15192] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.426870][T15192] bridge_slave_0: left allmulticast mode [ 1411.437736][T15192] bridge_slave_0: left promiscuous mode [ 1411.454702][T15192] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.484945][T15192] lo: left allmulticast mode [ 1411.565249][T15192] ip6gretap0 (unregistering): left allmulticast mode [ 1411.757772][T15192] bond3 (unregistering): (slave gretap2): Releasing active interface [ 1411.766168][T15192] gretap2 (unregistering): left allmulticast mode [ 1411.953019][T29163] Bluetooth: hci2: command tx timeout [ 1411.971577][T15192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1412.000346][T15192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1412.010813][T15192] bond0 (unregistering): Released all slaves [ 1412.026805][T15192] bond1 (unregistering): (slave lo): Releasing backup interface [ 1412.036707][T15192] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1412.050477][T15192] bond1 (unregistering): Released all slaves [ 1412.073583][T15192] bond2 (unregistering): Released all slaves [ 1412.128797][T15192] bond3 (unregistering): Released all slaves [ 1412.163525][T15192] bond4 (unregistering): Released all slaves [ 1412.220820][ T5287] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1412.245462][T14810] usb 4-1: USB disconnect, device number 90 [ 1412.344023][T29701] fuse: Bad value for 'rootmode' [ 1413.140098][T15192] tipc: Disabling bearer [ 1413.149084][T15192] tipc: Left network mode [ 1413.807811][T16325] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 1413.920645][T29163] Bluetooth: hci0: SCO packet for unknown connection handle 172 [ 1413.995474][T16325] usb 7-1: config 0 has no interfaces? [ 1414.017983][T16325] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1414.055383][T29163] Bluetooth: hci2: command tx timeout [ 1414.067553][T16325] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.152788][T16325] usb 7-1: config 0 descriptor?? [ 1414.370731][T29792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1414.383033][T16323] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1414.449345][T29792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1414.481496][T16325] usb 7-1: string descriptor 0 read error: -71 [ 1414.518992][T16325] usb 7-1: USB disconnect, device number 19 [ 1414.556448][T16323] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1414.571691][T16323] usb 4-1: config 1 has no interface number 0 [ 1414.578460][T16323] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1414.590957][T16323] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1414.610667][T16323] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 1414.621954][T16323] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1414.637813][T16323] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1414.652729][T16323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.661563][T16323] usb 4-1: Product: syz [ 1414.666020][T16323] usb 4-1: Manufacturer: syz [ 1414.670796][T16323] usb 4-1: SerialNumber: syz [ 1414.698461][T29831] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1414.707071][T29831] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1414.738722][T15192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1414.865619][T15192] pim6reg (unregistering): left allmulticast mode [ 1414.928748][T29831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1414.939885][T29831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1414.951239][T29831] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1414.958835][T29831] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1415.013096][T16325] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1415.056138][T15192] team0 (unregistering): Port device team_slave_1 removed [ 1415.167504][T16323] usb 4-1: Incompatible driver and firmware versions [ 1415.203077][T16325] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1415.223827][T16325] usb 7-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice= 0.40 [ 1415.238052][T16325] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.254339][T29897] tipc: Enabled bearer , priority 10 [ 1415.263947][T16325] usb 7-1: config 0 descriptor?? [ 1415.407436][T29163] Bluetooth: hci3: urb ffff888055bd9b00 submission failed (2) [ 1415.841725][T29345] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1415.857723][T29345] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1415.879452][T29345] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1415.905666][T15192] IPVS: stop unused estimator thread 0... [ 1415.916769][T29345] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1415.935892][T29345] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1415.958013][T29345] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1415.978932][T29345] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1416.002333][T29345] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1416.113249][T29163] Bluetooth: hci2: command tx timeout [ 1416.141891][T29345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1416.169281][T29345] 8021q: adding VLAN 0 to HW filter on device team0 [ 1416.188178][T15182] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.195394][T15182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1416.211501][T15182] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.218666][T15182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1416.309352][T29345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1416.383503][T29345] veth0_vlan: entered promiscuous mode [ 1416.391176][T16325] tipc: Node number set to 11 [ 1416.404337][T29345] veth1_vlan: entered promiscuous mode [ 1416.441420][T29345] veth0_macvtap: entered promiscuous mode [ 1416.452228][T29345] veth1_macvtap: entered promiscuous mode [ 1416.474381][T29345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1416.491038][T29345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1416.509021][T15192] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.557964][T15192] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.577089][T15192] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.587465][T14810] usb 7-1: USB disconnect, device number 20 [ 1416.636642][T15192] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.926006][T15192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1416.938309][T15192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1417.080461][T15195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1417.089299][T15195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1417.172752][T16323] usb 4-1: USB disconnect, device number 91 [ 1417.711585][T29163] Bluetooth: hci5: SCO packet for unknown connection handle 172 [ 1417.991278][T30047] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6177'. [ 1418.016255][T30047] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6177'. [ 1418.029877][T30047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1418.038220][T30047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1418.600043][T30067] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1418.806038][T30077] bond1: option ad_select: invalid value (253) [ 1418.845004][T30077] bond1 (unregistering): Released all slaves [ 1418.931624][T30113] batadv_slave_1: entered promiscuous mode [ 1419.071096][T29163] Bluetooth: hci2: SCO packet for unknown connection handle 172 [ 1419.076022][T15190] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1419.268118][T30170] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6186'. [ 1419.654137][T30109] batadv_slave_1: left promiscuous mode [ 1420.079332][T30197] netlink: 80 bytes leftover after parsing attributes in process `syz.6.6189'. [ 1420.311594][T30225] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6193'. [ 1420.423000][T16328] usb 4-1: new low-speed USB device number 92 using dummy_hcd [ 1420.586466][T16328] usb 4-1: config 0 has an invalid interface number: 213 but max is 0 [ 1420.594804][T16328] usb 4-1: config 0 has no interface number 0 [ 1420.601268][T16328] usb 4-1: config 0 interface 213 altsetting 2 endpoint 0x7 has invalid maxpacket 16, setting to 8 [ 1420.612126][T16328] usb 4-1: config 0 interface 213 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1420.613022][T16323] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1420.623283][T16328] usb 4-1: config 0 interface 213 altsetting 2 endpoint 0xE is Bulk; changing to Interrupt [ 1420.641070][T16328] usb 4-1: config 0 interface 213 altsetting 2 has an endpoint descriptor with address 0x35, changing to 0x5 [ 1420.653408][T16328] usb 4-1: config 0 interface 213 altsetting 2 endpoint 0x5 has invalid maxpacket 55139, setting to 8 [ 1420.665463][T16328] usb 4-1: config 0 interface 213 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 8 [ 1420.677239][T16328] usb 4-1: config 0 interface 213 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 1420.688065][T16328] usb 4-1: config 0 interface 213 altsetting 2 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 1420.701302][T16328] usb 4-1: config 0 interface 213 has no altsetting 0 [ 1420.710241][T16328] usb 4-1: New USB device found, idVendor=1f4d, idProduct=0102, bcdDevice=24.66 [ 1420.719459][T16328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.727483][T16328] usb 4-1: Product: ᐇ [ 1420.731656][T16328] usb 4-1: Manufacturer: ࢩᨽ㘍ᝏ쇾଩㟟瀄僶俌爽ῄ鮺횿摝ᒺꜢ钖퇘൧쌽䢎ꁖ뫸Ꭺ⛱巎繠걧蓚ﴃ뗇⦨㽂꬝啱뎋郅겈塻㈣ﵗྻ兪ꜛ嚿⌉ﱁ풋쭑뵅悇烑捴뇡 [ 1420.751028][T16328] usb 4-1: SerialNumber: Л [ 1420.759384][T16328] usb 4-1: config 0 descriptor?? [ 1420.766300][T30213] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1420.774362][T30213] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1420.779133][T16323] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1420.792236][T16323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.800523][T16323] usb 6-1: Product: syz [ 1420.804954][T16323] usb 6-1: Manufacturer: syz [ 1420.809602][T16323] usb 6-1: SerialNumber: syz [ 1420.984957][T30213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1421.001577][T30213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1421.034608][T16328] usb 4-1: USB disconnect, device number 92 [ 1421.229906][T16323] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1421.243204][T16323] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1421.446094][T30248] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6195'. [ 1421.665311][T29163] Bluetooth: hci4: SCO packet for unknown connection handle 172 [ 1421.819694][T30264] syzkaller1: entered promiscuous mode [ 1421.835264][T30264] syzkaller1: entered allmulticast mode [ 1422.082818][T30288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6201'. [ 1422.723989][T16328] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1422.896521][T16328] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1422.911152][T16328] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1422.926752][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.928907][T16328] usb 7-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 1422.933403][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.974810][T16328] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.008092][T30308] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6206'. [ 1423.011135][T30315] binder: 30313:30315 ioctl c4009420 200000000900 returned -22 [ 1423.034612][T16328] usb 7-1: config 0 descriptor?? [ 1423.047340][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1423.047355][ T30] audit: type=1326 audit(1778473002.101:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30306 comm="syz.3.6206" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b4079cdd9 code=0x0 [ 1423.382431][T29163] Bluetooth: hci5: SCO packet for unknown connection handle 172 [ 1423.488777][T16328] stadia 0003:18D1:9400.0050: unbalanced delimiter at end of report description [ 1423.540582][T16328] stadia 0003:18D1:9400.0050: parse failed [ 1423.550034][T16328] stadia 0003:18D1:9400.0050: probe with driver stadia failed with error -22 [ 1423.691405][T30291] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6202'. [ 1423.706400][T30291] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6202'. [ 1423.717596][T16328] usb 7-1: USB disconnect, device number 21 [ 1424.016471][T30361] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6213'. [ 1424.300606][T30370] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 30370 comm: syz.3.6215) [ 1424.345242][ T30] audit: type=1800 audit(1778473003.391:2889): pid=30370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6215" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=161385 res=0 errno=0 [ 1426.562094][T30461] loop3: detected capacity change from 0 to 5 [ 1426.573960][T30461] Dev loop3: unable to read RDB block 5 [ 1426.579728][T30461] loop3: unable to read partition table [ 1426.586217][T30461] loop3: partition table beyond EOD, truncated [ 1426.592712][T30461] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1426.781963][T16323] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 1426.798137][T16323] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1426.842916][T16323] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1426.871915][T16323] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1426.896436][T16323] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1426.910147][T16323] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1426.937490][T16323] usb 6-1: USB disconnect, device number 122 [ 1426.952959][T16328] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1427.113103][T16328] usb 7-1: Using ep0 maxpacket: 16 [ 1427.137847][T16328] usb 7-1: config 0 has no interfaces? [ 1427.148971][T16328] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1427.185850][T16328] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.216352][T29163] Bluetooth: hci4: SCO packet for unknown connection handle 172 [ 1427.218218][T16328] usb 7-1: Product: syz [ 1427.231199][T16328] usb 7-1: Manufacturer: syz [ 1427.236846][T16328] usb 7-1: SerialNumber: syz [ 1427.249534][T30500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6230'. [ 1427.283133][T16328] usb 7-1: config 0 descriptor?? [ 1427.517494][T16323] usb 7-1: USB disconnect, device number 22 [ 1427.622953][T29754] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1427.784550][T29754] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.805944][T29754] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1427.824306][T29754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.854176][T29754] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1428.273212][T30543] loop3: detected capacity change from 0 to 5 [ 1428.280841][T30543] Dev loop3: unable to read RDB block 5 [ 1428.286507][T30543] loop3: unable to read partition table [ 1428.294559][T30543] loop3: partition table beyond EOD, truncated [ 1428.301057][T30543] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1428.567575][T29163] Bluetooth: hci0: SCO packet for unknown connection handle 172 [ 1428.687676][T30566] openvswitch: netlink: IP tunnel dst address not specified [ 1428.704597][T30566] tipc: Enabled bearer , priority 0 [ 1429.433058][T29754] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 1429.441448][T29754] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 1429.449067][T29754] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 1429.457490][T29754] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 1430.160586][T30593] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1430.167135][T30593] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1430.193142][T30593] vhci_hcd vhci_hcd.0: Device attached [ 1430.249350][T30598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6247'. [ 1430.331163][T30610] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6247'. [ 1430.435490][T14810] usb 4-1: USB disconnect, device number 93 [ 1430.443182][T16334] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 1430.463259][T16335] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1430.623832][T16335] usb 7-1: device descriptor read/64, error -71 [ 1430.649530][T30624] loop3: detected capacity change from 0 to 5 [ 1430.658219][T30624] Dev loop3: unable to read RDB block 5 [ 1430.684018][T30624] loop3: unable to read partition table [ 1430.699043][T30624] loop3: partition table beyond EOD, truncated [ 1430.707469][T30624] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1430.857381][T30633] syzkaller0: entered promiscuous mode [ 1430.863910][T30633] syzkaller0: entered allmulticast mode [ 1430.896730][T16335] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1430.984027][T30638] 8021q: adding VLAN 0 to HW filter on device team0 [ 1431.037566][T30638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1431.052976][T16335] usb 7-1: device descriptor read/64, error -71 [ 1431.163367][T30638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1431.172554][T30638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1431.183423][T16335] usb usb7-port1: attempt power cycle [ 1431.190162][T30638] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1431.200732][T30638] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1431.218252][T30638] veth1_vlan: left promiscuous mode [ 1431.225262][T30638] veth0_vlan: left promiscuous mode [ 1431.231141][T30638] veth0_vlan: entered promiscuous mode [ 1431.240783][T30638] veth1_vlan: entered promiscuous mode [ 1431.254451][T30638] veth1_macvtap: left promiscuous mode [ 1431.260888][T30638] veth0_macvtap: left promiscuous mode [ 1431.268268][T30638] veth0_macvtap: entered promiscuous mode [ 1431.276951][T30638] veth1_macvtap: entered promiscuous mode [ 1431.287953][T30638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1431.297150][T30638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1431.306383][T30638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1431.318138][T30638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1431.329889][T30638] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1431.339387][T30638] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1431.350213][T30638] ipip0: left promiscuous mode [ 1431.452627][T29163] Bluetooth: hci4: SCO packet for unknown connection handle 172 [ 1431.517771][T15188] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.532576][T15188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1431.542799][T16335] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1431.556292][T15188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.563405][T15188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1431.571564][T16335] usb 7-1: device descriptor read/8, error -71 [ 1431.652318][T13780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.667790][T13780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.676644][T30658] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6254'. [ 1431.688795][T13780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.701383][T13780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.732638][T15190] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1431.833610][T16335] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1431.853539][T16335] usb 7-1: device descriptor read/8, error -71 [ 1431.963317][T16335] usb usb7-port1: unable to enumerate USB device [ 1431.973151][T29754] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1432.123127][T29754] usb 6-1: Using ep0 maxpacket: 8 [ 1432.132004][T29754] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1432.143844][T29754] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1432.153681][T29754] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1432.163633][T29754] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1432.176761][T29754] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1432.185898][T29754] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.411219][T29754] usb 6-1: GET_CAPABILITIES returned 0 [ 1432.417022][T29754] usbtmc 6-1:16.0: can't read capabilities [ 1432.524293][T30673] netlink: 'syz.3.6256': attribute type 31 has an invalid length. [ 1432.880884][T30685] netlink: 15 bytes leftover after parsing attributes in process `syz.3.6258'. [ 1432.965443][T30689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1432.975545][T30689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1433.170451][T30594] vhci_hcd: connection reset by peer [ 1433.187496][T15190] vhci_hcd vhci_hcd.6: stop threads [ 1433.199906][T15190] vhci_hcd vhci_hcd.6: release socket [ 1433.214989][T15190] vhci_hcd vhci_hcd.6: disconnect device [ 1433.901111][T30715] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1434.094195][T29163] Bluetooth: hci4: SCO packet for unknown connection handle 172 [ 1434.212090][T30740] syzkaller0: entered promiscuous mode [ 1434.226006][T30740] syzkaller0: entered allmulticast mode [ 1434.303312][T29754] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1434.364436][T30755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6267'. [ 1434.444722][T29754] usb 7-1: device descriptor read/64, error -71 [ 1434.702959][T16336] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1434.703017][T29754] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1434.741601][T16335] usb 6-1: USB disconnect, device number 123 [ 1434.853744][T16336] usb 4-1: Using ep0 maxpacket: 32 [ 1434.861974][T16336] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1434.862544][T29754] usb 7-1: device descriptor read/64, error -71 [ 1434.870752][T16336] usb 4-1: config 0 has no interface number 0 [ 1434.900461][T16336] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1434.925991][T30785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6270'. [ 1434.936825][T16336] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1434.948123][T30785] netlink: 'syz.5.6270': attribute type 1 has an invalid length. [ 1434.956011][T16336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.964078][T30785] netlink: 'syz.5.6270': attribute type 2 has an invalid length. [ 1434.971814][T16336] usb 4-1: Product: syz [ 1434.976117][T16336] usb 4-1: Manufacturer: syz [ 1434.983277][T29754] usb usb7-port1: attempt power cycle [ 1434.993688][T16336] usb 4-1: SerialNumber: syz [ 1435.001072][T16336] usb 4-1: config 0 descriptor?? [ 1435.323048][T29754] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1435.345204][T29754] usb 7-1: device descriptor read/8, error -71 [ 1435.543170][T16334] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1435.582975][T29754] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1435.603371][T29754] usb 7-1: device descriptor read/8, error -71 [ 1435.633320][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1435.714153][T29754] usb usb7-port1: unable to enumerate USB device [ 1435.901018][T30795] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1435.907268][T30795] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1435.913403][T30795] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1435.919571][T30795] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1435.925649][T30795] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1435.934527][T30795] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1436.423159][T16335] usb 6-1: new low-speed USB device number 124 using dummy_hcd [ 1436.466043][T30822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6274'. [ 1436.475273][T30822] netlink: 29 bytes leftover after parsing attributes in process `syz.1.6274'. [ 1436.484815][T30822] tipc: Invalid UDP bearer configuration [ 1436.484855][T30822] tipc: Enabling of bearer rejected, failed to enable media [ 1436.573252][T16335] usb 6-1: Invalid ep0 maxpacket: 64 [ 1436.596382][T30828] kvm: kvm [30827]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1436.605247][T30828] kvm: kvm [30827]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1436.702977][T16335] usb 6-1: new low-speed USB device number 125 using dummy_hcd [ 1436.836774][T16336] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1436.844951][T16336] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1436.864291][T16336] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1436.872023][T16335] usb 6-1: Invalid ep0 maxpacket: 64 [ 1436.887304][T16335] usb usb6-port1: attempt power cycle [ 1436.894151][T16336] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1436.910423][T16336] usb 4-1: USB disconnect, device number 94 [ 1437.153104][T29163] Bluetooth: hci0: command 0x0406 tx timeout [ 1437.243855][T16335] usb 6-1: new low-speed USB device number 126 using dummy_hcd [ 1437.275168][T16335] usb 6-1: Invalid ep0 maxpacket: 64 [ 1437.413189][T16335] usb 6-1: new low-speed USB device number 127 using dummy_hcd [ 1437.445287][T16335] usb 6-1: Invalid ep0 maxpacket: 64 [ 1437.459949][T16335] usb usb6-port1: unable to enumerate USB device [ 1437.752921][T16335] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 1437.925093][T16335] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1437.944678][T16335] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1437.957231][T29163] Bluetooth: hci2: command 0x0c1a tx timeout [ 1437.957264][T22591] Bluetooth: hci5: command 0x0c1a tx timeout [ 1437.963509][T29163] Bluetooth: hci4: command 0x0c1a tx timeout [ 1437.989072][T16335] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1438.021328][T16335] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1438.046344][T16335] usb 4-1: config 1 has no interface number 0 [ 1438.061636][T16335] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1438.091102][T16335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.446283][T16335] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1438.538435][T30892] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1438.638069][T16335] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 1438.657443][T16335] snd_usb_pod 4-1:1.1: invalid control EP [ 1438.668058][T16328] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1438.688530][T16335] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 1438.697739][T16335] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1438.706161][T16335] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1438.718544][T16335] usb 4-1: USB disconnect, device number 95 [ 1438.822978][T16328] usb 7-1: device descriptor read/64, error -71 [ 1438.907970][T30921] netlink: 264 bytes leftover after parsing attributes in process `syz.3.6290'. [ 1439.083456][T16328] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1439.243603][T16328] usb 7-1: device descriptor read/64, error -71 [ 1439.375477][T16328] usb usb7-port1: attempt power cycle [ 1439.662914][T14810] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1439.742966][T16328] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1439.783557][T16328] usb 7-1: device descriptor read/8, error -71 [ 1439.844799][T14810] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1439.872940][T14810] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1439.898017][T14810] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1439.917527][T14810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.033212][T29163] Bluetooth: hci2: command 0x0c1a tx timeout [ 1440.039587][T16328] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1440.073751][T16328] usb 7-1: device descriptor read/8, error -71 [ 1440.143352][T30956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6295'. [ 1440.162196][T14810] usb 6-1: GET_CAPABILITIES returned 0 [ 1440.173363][T14810] usbtmc 6-1:16.0: can't read capabilities [ 1440.198103][T16328] usb usb7-port1: unable to enumerate USB device [ 1440.373585][T29754] usb 6-1: USB disconnect, device number 2 [ 1440.459604][T30977] loop3: detected capacity change from 0 to 5 [ 1440.474286][T30977] Dev loop3: unable to read RDB block 5 [ 1440.480052][T30977] loop3: unable to read partition table [ 1440.486593][T30977] loop3: partition table beyond EOD, truncated [ 1440.493802][T30977] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1440.933511][T31013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6303'. [ 1441.147238][T31062] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6307'. [ 1441.252984][T16336] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1441.366258][T31082] fuse: Unknown parameter 'r^4iWf;ootmode' [ 1441.414261][T16336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1441.425241][T16336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 1441.436938][T16336] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1441.446100][T16336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.456397][T16336] usb 6-1: config 0 descriptor?? [ 1441.679905][T16336] ath6kl: Failed to submit usb control message: -71 [ 1441.688515][T16336] ath6kl: unable to send the bmi data to the device: -71 [ 1441.698704][T16336] ath6kl: Unable to send get target info: -71 [ 1441.708439][T16336] ath6kl: Failed to init ath6kl core: -71 [ 1441.716211][T16336] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1441.736761][T16336] usb 6-1: USB disconnect, device number 3 [ 1442.114808][T29163] Bluetooth: hci2: command 0x0c1a tx timeout [ 1442.308199][T31125] netlink: 'syz.5.6315': attribute type 12 has an invalid length. [ 1442.413072][T16336] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1442.563027][T16336] usb 7-1: Using ep0 maxpacket: 8 [ 1442.569699][T16336] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 1442.581352][T16336] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1442.595135][T16336] usb 7-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 1442.604321][T16336] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.615684][T16336] usb 7-1: config 0 descriptor?? [ 1442.763142][T16328] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1442.836571][T31119] tipc: Enabled bearer , priority 0 [ 1442.845413][T31119] syzkaller0: entered promiscuous mode [ 1442.850895][T31119] syzkaller0: entered allmulticast mode [ 1442.887421][T31119] tipc: Resetting bearer [ 1442.913268][T16328] usb 6-1: Using ep0 maxpacket: 16 [ 1442.920356][T16328] usb 6-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1442.931658][T16328] usb 6-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1442.941625][T16328] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1442.948547][T16328] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 1442.958344][T16328] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.970309][T16328] usb 6-1: config 0 descriptor?? [ 1443.109311][T31118] tipc: Resetting bearer [ 1443.137536][T31118] tipc: Disabling bearer [ 1443.180681][T31129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1443.190783][T31129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1443.204335][T16336] usbhid 7-1:0.0: can't add hid device: -71 [ 1443.210491][T16336] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1443.222635][T16336] usb 7-1: USB disconnect, device number 35 [ 1443.517699][T16328] usbhid 6-1:0.0: can't add hid device: -71 [ 1443.526398][T16328] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1443.540585][T16328] usb 6-1: USB disconnect, device number 4 [ 1444.035264][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1444.236563][T31191] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1444.474226][T16336] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1444.633321][T16328] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1444.662925][T16336] usb 7-1: Using ep0 maxpacket: 16 [ 1444.679679][T16336] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1444.696820][T16336] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.716043][T16336] usb 7-1: Product: syz [ 1444.724737][T16336] usb 7-1: Manufacturer: syz [ 1444.733741][T16323] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1444.744054][T16336] usb 7-1: SerialNumber: syz [ 1444.760282][T16336] usb 7-1: config 0 descriptor?? [ 1444.776802][T16336] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1444.795297][T16328] usb 6-1: Using ep0 maxpacket: 8 [ 1444.809303][T16328] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.832314][T16328] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1444.856617][T16328] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1444.876892][T16328] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.895075][T16328] usb 6-1: Product: syz [ 1444.905434][T16328] usb 6-1: Manufacturer: syz [ 1444.917212][T16323] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1444.927038][T16323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.936960][T16328] usb 6-1: SerialNumber: syz [ 1444.963980][T16323] usb 4-1: config 0 descriptor?? [ 1445.440297][T31221] syz.3.6326: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1445.458872][T31221] CPU: 0 UID: 0 PID: 31221 Comm: syz.3.6326 Tainted: G L syzkaller #0 PREEMPT(full) [ 1445.458899][T31221] Tainted: [L]=SOFTLOCKUP [ 1445.458906][T31221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1445.458919][T31221] Call Trace: [ 1445.458926][T31221] [ 1445.458934][T31221] dump_stack_lvl+0xe8/0x150 [ 1445.458962][T31221] warn_alloc+0x249/0x340 [ 1445.458998][T31221] ? __pfx_warn_alloc+0x10/0x10 [ 1445.459045][T31221] __vmalloc_node_range_noprof+0x132/0x1750 [ 1445.459073][T31221] ? __mutex_trylock_common+0x158/0x260 [ 1445.459102][T31221] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1445.459133][T31221] ? trace_contention_end+0x3d/0x140 [ 1445.459161][T31221] ? __mutex_lock+0x319/0x1550 [ 1445.459197][T31221] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1445.459222][T31221] ? tomoyo_path_number_perm+0x219/0x630 [ 1445.459247][T31221] ? dvb_demux_do_ioctl+0x320/0x540 [ 1445.459277][T31221] ? __pfx___mutex_lock+0x10/0x10 [ 1445.459305][T31221] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1445.459333][T31221] vmalloc_noprof+0xb2/0xe0 [ 1445.459358][T31221] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1445.459386][T31221] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1445.459419][T31221] dvb_demux_do_ioctl+0x45d/0x540 [ 1445.459447][T31221] dvb_usercopy+0x199/0x2e0 [ 1445.459470][T31221] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1445.459496][T31221] ? __pfx_dvb_usercopy+0x10/0x10 [ 1445.459528][T31221] ? __fget_files+0x3a0/0x420 [ 1445.459550][T31221] ? __fget_files+0x2a/0x420 [ 1445.459576][T31221] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1445.459601][T31221] dvb_demux_ioctl+0x29/0x40 [ 1445.459626][T31221] __se_sys_ioctl+0xfc/0x170 [ 1445.459652][T31221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.459681][T31221] do_syscall_64+0x15f/0xf80 [ 1445.459708][T31221] ? trace_irq_disable+0x3b/0x140 [ 1445.459736][T31221] ? clear_bhb_loop+0x40/0x90 [ 1445.459757][T31221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.459772][T31221] RIP: 0033:0x7f5b4079cdd9 [ 1445.459791][T31221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1445.459806][T31221] RSP: 002b:00007f5b4169d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1445.459829][T31221] RAX: ffffffffffffffda RBX: 00007f5b40a16180 RCX: 00007f5b4079cdd9 [ 1445.459843][T31221] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000007 [ 1445.459856][T31221] RBP: 00007f5b40832d69 R08: 0000000000000000 R09: 0000000000000000 [ 1445.459867][T31221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1445.459878][T31221] R13: 00007f5b40a16218 R14: 00007f5b40a16180 R15: 00007f5b40b3fa48 [ 1445.459908][T31221] [ 1445.460348][T31221] Mem-Info: [ 1445.731969][T16323] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1445.739818][T31221] active_anon:10536 inactive_anon:3 isolated_anon:0 [ 1445.739818][T31221] active_file:21208 inactive_file:40816 isolated_file:0 [ 1445.739818][T31221] unevictable:768 dirty:247 writeback:0 [ 1445.739818][T31221] slab_reclaimable:9571 slab_unreclaimable:122827 [ 1445.739818][T31221] mapped:33242 shmem:3351 pagetables:1903 [ 1445.739818][T31221] sec_pagetables:0 bounce:0 [ 1445.739818][T31221] kernel_misc_reclaimable:0 [ 1445.739818][T31221] free:1266180 free_pcp:8820 free_cma:0 [ 1445.786694][T31221] Node 0 active_anon:42144kB inactive_anon:12kB active_file:84656kB inactive_file:163064kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132792kB dirty:984kB writeback:0kB shmem:11868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14588kB pagetables:7452kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1445.828648][T31221] Node 1 active_anon:0kB inactive_anon:0kB active_file:176kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:176kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1445.866313][T16336] ssu100 7-1:0.0: probe with driver ssu100 failed with error -71 [ 1445.881259][T16336] usb 7-1: USB disconnect, device number 36 [ 1445.887844][T31221] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1445.937867][T31221] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1445.945235][T31221] Node 0 DMA32 free:1117956kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42144kB inactive_anon:12kB active_file:84656kB inactive_file:163064kB unevictable:1536kB writepending:984kB zspages:0kB present:3129332kB managed:2552616kB mlocked:0kB bounce:0kB free_pcp:29744kB local_pcp:16216kB free_cma:0kB [ 1445.985100][T31221] lowmem_reserve[]: 0 0 0 0 0 [ 1445.989870][T31221] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 1446.040718][T31221] lowmem_reserve[]: 0 0 0 0 0 [ 1446.049079][T31221] Node 1 Normal free:3936796kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:176kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:2048kB free_cma:0kB [ 1446.085201][T31221] lowmem_reserve[]: 0 0 0 0 0 [ 1446.093513][T31221] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1446.107843][T31221] Node 0 DMA32: 11208*4kB (UME) 9636*8kB (UME) 7240*16kB (UME) 612*32kB (UME) 488*64kB (UME) 568*128kB (UME) 612*256kB (UME) 310*512kB (UME) 111*1024kB (UM) 8*2048kB (UME) 76*4096kB (UM) = 1118016kB [ 1446.130323][T31221] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1446.144179][T31221] Node 1 Normal: 3*4kB (UM) 6*8kB (UM) 4*16kB (U) 9*32kB (UM) 8*64kB (UM) 11*128kB (UM) 5*256kB (UM) 4*512kB (UM) 1*1024kB (U) 3*2048kB (UM) 958*4096kB (UM) = 3936796kB [ 1446.161966][T31221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1446.172556][T31221] Node 0 hugepages_total=5 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 1446.182136][T31221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1446.191909][T31221] Node 1 hugepages_total=3 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1446.201711][T31221] 65374 total pagecache pages [ 1446.207030][T31221] 3 pages in swap cache [ 1446.211263][T31221] Free swap = 124984kB [ 1446.215981][T31221] Total swap = 124996kB [ 1446.220193][T31221] 2097051 pages RAM [ 1446.224497][T31221] 0 pages HighMem/MovableOnly [ 1446.229224][T31221] 427115 pages reserved [ 1446.233542][T31221] 0 pages cma reserved [ 1446.529092][T31260] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6327'. [ 1447.050761][T29754] usb 6-1: USB disconnect, device number 5 [ 1447.530469][T16323] [drm:udl_init] *ERROR* Selecting channel failed [ 1447.618035][T31348] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6334'. [ 1447.623486][T16323] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1447.661600][T16323] [drm] Initialized udl on minor 2 [ 1447.675539][T16323] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1447.748672][T16323] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1447.816633][T29754] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1447.939022][T16323] usb 4-1: USB disconnect, device number 96 [ 1447.974984][T29754] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1448.014974][T29754] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1448.149461][T31391] input: syz0 as /devices/virtual/input/input307 [ 1448.186511][T31391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6340'. [ 1448.199624][T31391] syzkaller0: entered promiscuous mode [ 1448.207029][T31391] syzkaller0: entered allmulticast mode [ 1448.223473][T16319] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1448.353979][T31405] syzkaller1: entered promiscuous mode [ 1448.359595][T31405] syzkaller1: entered allmulticast mode [ 1448.373880][T16323] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1448.385239][T31414] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6342'. [ 1448.403168][T16319] usb 7-1: Using ep0 maxpacket: 32 [ 1448.416365][T16319] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 1448.439307][T16319] usb 7-1: config 0 has no interface number 0 [ 1448.459407][T16319] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1448.474514][T16319] usb 7-1: config 0 interface 85 has no altsetting 0 [ 1448.484700][T16319] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1448.494632][T16319] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.502671][T16319] usb 7-1: Product: syz [ 1448.508342][T16319] usb 7-1: Manufacturer: syz [ 1448.521655][T16319] usb 7-1: SerialNumber: syz [ 1448.533808][T16319] usb 7-1: config 0 descriptor?? [ 1448.564802][T16323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1448.576209][T16323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1448.586148][T16323] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 1448.595595][T16323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.612113][T16323] usb 4-1: config 0 descriptor?? [ 1448.757191][T16319] appletouch 7-1:0.85: Failed to read mode from device. [ 1448.766196][T16319] appletouch 7-1:0.85: probe with driver appletouch failed with error -5 [ 1448.787776][T16319] usb 7-1: USB disconnect, device number 37 [ 1448.916322][ T1223] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1449.043657][T16323] hid_parser_main: 237 callbacks suppressed [ 1449.043680][T16323] arvo 0003:1E7D:30D4.0051: unknown main item tag 0x0 [ 1449.059573][ T1223] usb 6-1: device descriptor read/64, error -71 [ 1449.073357][T16323] arvo 0003:1E7D:30D4.0051: unknown main item tag 0x0 [ 1449.081415][T16323] arvo 0003:1E7D:30D4.0051: unknown main item tag 0x0 [ 1449.112540][T16323] arvo 0003:1E7D:30D4.0051: unknown main item tag 0x0 [ 1449.132459][T16323] arvo 0003:1E7D:30D4.0051: unknown main item tag 0x0 [ 1449.155737][T16323] arvo 0003:1E7D:30D4.0051: unknown main item tag 0x0 [ 1449.163658][T16323] arvo 0003:1E7D:30D4.0051: unknown main item tag 0x0 [ 1449.187838][T16323] arvo 0003:1E7D:30D4.0051: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 1449.233089][T16319] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1449.326982][ T1223] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1449.422110][T31482] syzkaller0: entered promiscuous mode [ 1449.426030][T16319] usb 7-1: Using ep0 maxpacket: 32 [ 1449.429641][T31482] syzkaller0: entered allmulticast mode [ 1449.443410][T16319] usb 7-1: too many configurations: 65, using maximum allowed: 8 [ 1449.454132][T16319] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1449.462025][T16319] usb 7-1: can't read configurations, error -61 [ 1449.483194][ T1223] usb 6-1: device descriptor read/64, error -71 [ 1449.492818][T31353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1449.507139][T31353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1449.542576][T31353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1449.556128][T31353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1449.593174][ T1223] usb usb6-port1: attempt power cycle [ 1449.623349][T16319] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1449.655543][T16332] usb 4-1: USB disconnect, device number 97 [ 1449.783034][T16319] usb 7-1: Using ep0 maxpacket: 32 [ 1449.788729][T16319] usb 7-1: too many configurations: 65, using maximum allowed: 8 [ 1449.798263][T16319] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1449.805883][T16319] usb 7-1: can't read configurations, error -61 [ 1449.812508][T16319] usb usb7-port1: attempt power cycle [ 1449.933043][ T1223] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1449.960541][ T1223] usb 6-1: device descriptor read/8, error -71 [ 1450.152946][T16319] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1450.177789][T16319] usb 7-1: Using ep0 maxpacket: 32 [ 1450.186936][T16319] usb 7-1: too many configurations: 65, using maximum allowed: 8 [ 1450.197260][T16319] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1450.205328][ T1223] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1450.215107][T16319] usb 7-1: can't read configurations, error -61 [ 1450.234683][ T1223] usb 6-1: device descriptor read/8, error -71 [ 1450.353327][T16319] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1450.361147][ T1223] usb usb6-port1: unable to enumerate USB device [ 1450.383396][T16319] usb 7-1: Using ep0 maxpacket: 32 [ 1450.389099][T16319] usb 7-1: too many configurations: 65, using maximum allowed: 8 [ 1450.399989][T16319] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1450.407625][T16319] usb 7-1: can't read configurations, error -61 [ 1450.414252][T16319] usb usb7-port1: unable to enumerate USB device [ 1450.482949][T16332] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1450.633864][T16332] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1450.642799][T16332] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1450.651966][T16332] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1450.663197][T16332] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1450.670914][T16332] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1450.680717][T16332] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1450.691763][T16332] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1450.699631][T16332] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1450.708740][T16332] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1450.719739][T16332] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1450.728041][T16332] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1450.737155][T16332] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1450.748285][T16332] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1450.756568][T16332] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1450.765506][T16332] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1450.776585][T16332] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1450.784785][T16332] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1450.793770][T16332] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1450.804690][T16332] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1450.812188][T16332] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1450.821179][T16332] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1450.832137][T16332] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1450.839953][T16332] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1450.849356][T16332] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1450.860360][T16332] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1450.869160][T16332] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1450.878415][T16332] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1450.887700][T16332] usb 4-1: Product: syz [ 1450.891949][T16332] usb 4-1: Manufacturer: syz [ 1450.896643][T16332] usb 4-1: SerialNumber: syz [ 1450.903517][T16332] usb 4-1: config 0 descriptor?? [ 1450.916572][T16332] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1451.073611][T15182] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1451.138779][T16319] usb 4-1: USB disconnect, device number 98 [ 1451.151573][T16319] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1451.993611][ T1223] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1452.096185][T31572] macvlan0: entered promiscuous mode [ 1452.106217][T31572] netlink: 'syz.1.6355': attribute type 2 has an invalid length. [ 1452.114870][T31572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6355'. [ 1452.132992][T16319] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1452.164623][ T1223] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.184513][ T1223] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1452.196643][ T1223] usb 4-1: config 1 has no interface number 0 [ 1452.203881][ T1223] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1452.217312][ T1223] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1452.230527][ T1223] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1452.240592][ T1223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.249568][ T1223] usb 4-1: Product: syz [ 1452.255660][ T1223] usb 4-1: Manufacturer: syz [ 1452.260554][ T1223] usb 4-1: SerialNumber: syz [ 1452.306207][T16319] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1452.316457][T16319] usb 6-1: not running at top speed; connect to a high speed hub [ 1452.343361][T16319] usb 6-1: config 129 has an invalid interface number: 80 but max is 0 [ 1452.361215][T16319] usb 6-1: config 129 has an invalid interface number: 5 but max is 0 [ 1452.374803][T16319] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1452.386505][T16319] usb 6-1: config 129 has no interface number 0 [ 1452.394743][T16319] usb 6-1: config 129 has no interface number 1 [ 1452.408565][T16319] usb 6-1: config 129 interface 80 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1452.424221][T16319] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1452.444598][T16319] usb 6-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1452.460282][T16319] usb 6-1: config 129 interface 80 has no altsetting 0 [ 1452.468828][T16319] usb 6-1: config 129 interface 5 has no altsetting 0 [ 1452.499593][T16319] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1452.519932][T31581] netlink: 80 bytes leftover after parsing attributes in process `syz.6.6357'. [ 1452.532516][T16319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.588292][T16319] usb 6-1: SerialNumber: syz [ 1452.874432][T31550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.895185][T31550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.964030][T16319] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1452.980835][T16319] usb 6-1: MIDIStreaming interface descriptor not found [ 1453.117040][T16319] usb 6-1: USB disconnect, device number 10 [ 1453.150285][ T1223] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 1453.165798][ T1223] cdc_ncm 4-1:1.1: bind() failure [ 1453.200723][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1453.235654][ T1223] usb 4-1: USB disconnect, device number 99 [ 1453.545965][ T30] audit: type=1326 audit(1778473032.601:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31652 comm="syz.5.6359" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d6f9cdd9 code=0x7ffc0000 [ 1453.572387][ T30] audit: type=1326 audit(1778473032.601:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31652 comm="syz.5.6359" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d6f9cdd9 code=0x7ffc0000 [ 1453.626225][ T30] audit: type=1326 audit(1778473032.601:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31652 comm="syz.5.6359" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f69d6f9cdd9 code=0x7ffc0000 [ 1453.706098][ T30] audit: type=1326 audit(1778473032.601:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31652 comm="syz.5.6359" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d6f9cdd9 code=0x7ffc0000 [ 1453.838513][ T30] audit: type=1326 audit(1778473032.601:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31652 comm="syz.5.6359" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d6f9cdd9 code=0x7ffc0000 [ 1453.931397][ T30] audit: type=1326 audit(1778473032.621:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31652 comm="syz.5.6359" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f69d6f9cdd9 code=0x7ffc0000 [ 1454.014281][ T30] audit: type=1326 audit(1778473032.621:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31652 comm="syz.5.6359" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d6f9cdd9 code=0x7ffc0000 [ 1454.073058][ T30] audit: type=1326 audit(1778473032.621:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31652 comm="syz.5.6359" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d6f9cdd9 code=0x7ffc0000 [ 1454.099687][ T30] audit: type=1326 audit(1778473032.621:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31652 comm="syz.5.6359" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f69d6f9cdd9 code=0x7ffc0000 [ 1454.134921][ T30] audit: type=1326 audit(1778473033.121:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31652 comm="syz.5.6359" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d6f9cdd9 code=0x7ffc0000 [ 1454.863827][ T1223] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1454.924702][T31740] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6370'. [ 1454.976542][T31752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6370'. [ 1455.047336][ T1223] usb 6-1: Using ep0 maxpacket: 16 [ 1455.055208][ T1223] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1455.057345][ T1223] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1455.057372][ T1223] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.057391][ T1223] usb 6-1: Product: syz [ 1455.057404][ T1223] usb 6-1: Manufacturer: syz [ 1455.057417][ T1223] usb 6-1: SerialNumber: syz [ 1455.060288][ T1223] usb 6-1: config 0 descriptor?? [ 1455.063793][ T1223] hub 6-1:0.0: bad descriptor, ignoring hub [ 1455.063818][ T1223] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1455.086954][ T1223] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1455.099880][T31763] loop9: detected capacity change from 0 to 2640 [ 1455.100478][T31763] buffer_io_error: 11 callbacks suppressed [ 1455.100491][T31763] Buffer I/O error on dev loop9, logical block 0, async page read [ 1455.100595][T31763] Buffer I/O error on dev loop9, logical block 0, async page read [ 1455.100723][T31763] Buffer I/O error on dev loop9, logical block 0, async page read [ 1455.106254][T31763] Buffer I/O error on dev loop9, logical block 0, async page read [ 1455.106374][T31763] Buffer I/O error on dev loop9, logical block 0, async page read [ 1455.106475][T31763] Buffer I/O error on dev loop9, logical block 0, async page read [ 1455.108882][T31763] Buffer I/O error on dev loop9, logical block 0, async page read [ 1455.108981][T31763] Buffer I/O error on dev loop9, logical block 0, async page read [ 1455.109046][T31763] ldm_validate_partition_table(): Disk read failed. [ 1455.109087][T31763] Buffer I/O error on dev loop9, logical block 0, async page read [ 1455.109179][T31763] Buffer I/O error on dev loop9, logical block 0, async page read [ 1455.109945][T31763] Dev loop9: unable to read RDB block 0 [ 1455.110407][T31763] loop9: unable to read partition table [ 1455.112990][T31763] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 1455.188546][T16336] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1455.196217][ T1223] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1455.239513][ T4055] udevd[4055]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1455.334415][T16336] usb 4-1: Using ep0 maxpacket: 16 [ 1455.336377][T16336] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1455.336410][T16336] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1455.336443][T16336] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1455.336467][T16336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.339383][T16336] usb 4-1: config 0 descriptor?? [ 1455.389653][ T1223] usb 6-1: USB disconnect, device number 11 [ 1455.548606][T31743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6369'. [ 1455.735915][T31818] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6374'. [ 1455.792427][T31743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1455.804415][T31743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1455.841691][T16336] usbhid 4-1:0.0: can't add hid device: -71 [ 1455.849331][T16336] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1455.861491][T16336] usb 4-1: USB disconnect, device number 100 [ 1456.173640][T16328] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1456.312966][T16328] usb 7-1: device descriptor read/64, error -71 [ 1456.563152][T16328] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1456.713346][T16328] usb 7-1: device descriptor read/64, error -71 [ 1456.834086][T16328] usb usb7-port1: attempt power cycle [ 1456.955628][T31898] loop3: detected capacity change from 0 to 5 [ 1456.963306][T31898] Dev loop3: unable to read RDB block 5 [ 1456.968960][T31898] loop3: unable to read partition table [ 1456.975736][T31898] loop3: partition table beyond EOD, truncated [ 1456.981931][T31898] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1457.164641][T31909] geneve2: entered promiscuous mode [ 1457.175585][T31909] geneve2: entered allmulticast mode [ 1457.183080][T16328] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1457.204145][T16328] usb 7-1: device descriptor read/8, error -71 [ 1457.442946][T16328] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1457.475274][T16328] usb 7-1: device descriptor read/8, error -71 [ 1457.594209][T16328] usb usb7-port1: unable to enumerate USB device [ 1457.732316][T31922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6391'. [ 1457.750251][T31922] vlan2: entered promiscuous mode [ 1457.756129][T31922] gretap0: entered promiscuous mode [ 1458.013865][T31941] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 1458.181558][T31952] netlink: 348 bytes leftover after parsing attributes in process `syz.1.6395'. [ 1458.204152][T31952] netlink: 348 bytes leftover after parsing attributes in process `syz.1.6395'. [ 1458.213527][T16328] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1458.343564][T16328] usb 7-1: device descriptor read/64, error -71 [ 1458.447035][T29163] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 1458.592987][T16328] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1458.733493][T16328] usb 7-1: device descriptor read/64, error -71 [ 1458.854080][T16328] usb usb7-port1: attempt power cycle [ 1459.078078][T31987] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 1459.113001][T31988] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 1459.265696][T31992] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1459.563263][ T1223] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1459.563444][T16328] usb usb7-port1: Cannot enable. Maybe the USB cable is bad? [ 1459.702988][T16328] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1459.713354][ T1223] usb 6-1: Using ep0 maxpacket: 16 [ 1459.721242][ T1223] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1459.723518][T16328] usb 7-1: device descriptor read/8, error -71 [ 1459.743959][ T1223] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1459.763344][ T1223] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1459.773410][ T1223] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.781447][ T1223] usb 6-1: Product: syz [ 1459.785927][ T1223] usb 6-1: Manufacturer: syz [ 1459.791418][ T1223] usb 6-1: SerialNumber: syz [ 1459.809575][ T1223] usb 6-1: 0:2 : does not exist [ 1459.843704][T16328] usb usb7-port1: unable to enumerate USB device [ 1460.014841][ T1223] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1460.028599][ T1223] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1460.046219][ T1223] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1460.079234][ T1223] usb 6-1: USB disconnect, device number 12 [ 1460.107334][ T4055] udevd[4055]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1460.142983][T29754] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1460.303060][T29754] usb 4-1: Using ep0 maxpacket: 8 [ 1460.312130][T29754] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1460.321370][T29754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.329443][T29754] usb 4-1: Product: syz [ 1460.333762][T29754] usb 4-1: Manufacturer: syz [ 1460.338374][T29754] usb 4-1: SerialNumber: syz [ 1460.345595][T29754] usb 4-1: config 0 descriptor?? [ 1460.563289][T29754] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1460.673712][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1460.793005][T16328] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1460.944655][T16328] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1460.955883][T16328] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1460.965998][T16328] usb 6-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1460.975148][T16328] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.985845][T16328] usb 6-1: config 0 descriptor?? [ 1461.607421][T16328] hid-led 0003:1D34:000A.0052: probe with driver hid-led failed with error -71 [ 1461.634452][T16328] usb 6-1: USB disconnect, device number 13 [ 1462.321859][T32023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1462.351222][T32023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1462.356912][T32084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6411'. [ 1462.714329][T32095] input: syz1 as /devices/virtual/input/input315 [ 1462.851753][T29754] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1462.931536][T29754] usb 4-1: USB disconnect, device number 101 [ 1463.156953][T32123] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6414'. [ 1463.194907][T32123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6414'. [ 1463.239288][T32120] netlink: set zone limit has 4 unknown bytes [ 1463.637707][T32154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6419'. [ 1463.648688][T32154] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6419'. [ 1463.676986][T32155] hsr0: entered promiscuous mode [ 1463.695147][T32155] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6420'. [ 1463.716042][T32155] hsr_slave_0: left promiscuous mode [ 1463.729448][T32155] hsr_slave_1: left promiscuous mode [ 1463.744062][T32155] hsr0 (unregistering): left promiscuous mode [ 1463.786899][T32157] ip6tnl0: Caught tx_queue_len zero misconfig [ 1463.946795][T32167] program syz.5.6422 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1464.051005][T32179] batadv0: entered promiscuous mode [ 1464.060684][T32179] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1464.068970][T32179] batadv0: left promiscuous mode [ 1464.153358][T16328] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1464.178023][T32188] input: syz1 as /devices/virtual/input/input316 [ 1464.315069][T16328] usb 7-1: Using ep0 maxpacket: 8 [ 1464.339919][T16328] usb 7-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1464.361184][T16328] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1464.371711][T16328] usb 7-1: Product: syz [ 1464.376007][T16328] usb 7-1: Manufacturer: syz [ 1464.380637][T16328] usb 7-1: SerialNumber: syz [ 1464.388513][T16328] usb 7-1: config 0 descriptor?? [ 1464.397502][T16328] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1464.592959][ T1223] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1464.745244][ T1223] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1464.762081][ T1223] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.774343][ T1223] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 1464.789051][ T1223] usb 6-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1464.806544][ T1223] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.815383][ T1223] usb 6-1: Product: syz [ 1464.819579][ T1223] usb 6-1: Manufacturer: syz [ 1464.824317][ T1223] usb 6-1: SerialNumber: syz [ 1465.032988][T29754] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1465.057625][ T1223] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1465.074127][ T1223] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1465.141681][ T1223] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1465.153738][ T1223] usb 6-1: USB disconnect, device number 14 [ 1465.188740][T16306] udevd[16306]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1465.208245][T29754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1465.217412][T16328] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 1465.221573][T29754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1465.228556][T16328] sq905 7-1:0.0: probe with driver sq905 failed with error -71 [ 1465.240456][T29754] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1465.264182][T29754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.266572][T16328] usb 7-1: USB disconnect, device number 50 [ 1465.300641][T29754] usb 4-1: config 0 descriptor?? [ 1465.612161][T29163] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 1465.626372][T29163] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 1465.726088][T29754] playstation 0003:054C:0DF2.0053: unknown main item tag 0x0 [ 1465.746702][T29754] playstation 0003:054C:0DF2.0053: unknown main item tag 0x0 [ 1465.763522][T29754] playstation 0003:054C:0DF2.0053: unknown main item tag 0x0 [ 1465.781171][T29754] playstation 0003:054C:0DF2.0053: unknown main item tag 0x0 [ 1465.789442][T29754] playstation 0003:054C:0DF2.0053: unknown main item tag 0x0 [ 1465.804781][T29754] playstation 0003:054C:0DF2.0053: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 1465.922180][T32210] netlink: 27 bytes leftover after parsing attributes in process `syz.3.6429'. [ 1466.043128][T16328] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1466.141364][T29754] playstation 0003:054C:0DF2.0053: Failed to retrieve feature with reportID 32: -71 [ 1466.167794][T29754] playstation 0003:054C:0DF2.0053: Failed to retrieve DualSense firmware info: -71 [ 1466.199569][T29754] playstation 0003:054C:0DF2.0053: Failed to get firmware info from DualSense [ 1466.213313][T16328] usb 7-1: Using ep0 maxpacket: 32 [ 1466.220649][T29754] playstation 0003:054C:0DF2.0053: Failed to create dualsense. [ 1466.242425][T16328] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1466.256187][T29754] playstation 0003:054C:0DF2.0053: probe with driver playstation failed with error -71 [ 1466.269078][T16328] usb 7-1: config 0 has no interface number 0 [ 1466.281451][T29754] usb 4-1: USB disconnect, device number 102 [ 1466.283657][T16328] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1466.296510][T32277] binder: 32274:32277 ioctl c0306201 200000000080 returned -14 [ 1466.298340][T16328] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1466.325055][T16328] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.325853][T32277] binder: BINDER_SET_CONTEXT_MGR already set [ 1466.335563][T16328] usb 7-1: Product: syz [ 1466.345788][T16328] usb 7-1: Manufacturer: syz [ 1466.350428][T16328] usb 7-1: SerialNumber: syz [ 1466.362336][T16328] usb 7-1: config 0 descriptor?? [ 1466.371662][T32277] binder: 32274:32277 ioctl 4018620d 200000000040 returned -16 [ 1466.617515][T16328] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1466.667949][T16328] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1466.683848][T16319] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1466.727136][T16328] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1466.771665][T16328] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1466.817820][T16328] usb 7-1: USB disconnect, device number 51 [ 1466.865051][T16319] usb 6-1: Using ep0 maxpacket: 8 [ 1466.903669][T16319] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 1466.935237][T16319] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 1466.973641][T16319] usb 6-1: config 0 has no interface number 0 [ 1466.997179][T16319] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1467.055488][T16319] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1467.090581][T16319] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1467.129876][T32331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6441'. [ 1467.137215][T16319] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 1467.160702][T16319] usb 6-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 1467.198647][T22591] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1467.223436][T22591] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1467.232823][T22591] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1467.248950][T22591] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1467.257581][T22591] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1467.301259][T16319] usb 6-1: Product: syz [ 1467.306099][T16319] usb 6-1: Manufacturer: syz [ 1467.317998][T16319] usb 6-1: config 0 descriptor?? [ 1467.329277][T32290] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1467.605548][T26637] syz_tun (unregistering): left allmulticast mode [ 1467.632947][T16332] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1467.796039][T15195] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1467.808840][T16332] usb 4-1: Using ep0 maxpacket: 32 [ 1467.813301][ T30] kauditd_printk_skb: 96 callbacks suppressed [ 1467.813316][ T30] audit: type=1326 audit(1778473046.861:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32413 comm="syz.1.6445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fedf019cdd9 code=0x0 [ 1467.820292][T16332] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1467.820318][T16332] usb 4-1: config 0 has no interface number 0 [ 1467.859027][T16332] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1467.870074][T16332] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1467.884210][T16332] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1467.893521][T16332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.901571][T16332] usb 4-1: Product: syz [ 1467.905840][T16332] usb 4-1: Manufacturer: syz [ 1467.910438][T16332] usb 4-1: SerialNumber: syz [ 1467.925226][T16332] usb 4-1: config 0 descriptor?? [ 1467.997580][T15195] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1468.016911][T32290] kvm: user requested TSC rate below hardware speed [ 1468.036840][T16319] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.21/input/input317 [ 1468.235000][T15195] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1468.312157][T32344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1468.329741][T32344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1468.361432][T32344] bridge_slave_0: entered allmulticast mode [ 1468.376300][T16336] usb 6-1: USB disconnect, device number 15 [ 1468.376389][ C0] keyspan_remote 6-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 1468.398882][T16332] appletouch 4-1:0.85: Geyser mode initialized. [ 1468.409310][T32344] bridge_slave_0: entered promiscuous mode [ 1468.432759][T16332] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input318 [ 1468.445605][T32344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1468.458563][T32344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1468.478373][T32344] bridge_slave_1: entered allmulticast mode [ 1468.496378][T32344] bridge_slave_1: entered promiscuous mode [ 1468.665545][T15195] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1468.692220][T32344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1468.700772][T32344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1468.728189][T32516] batadv0: entered promiscuous mode [ 1468.729589][T32516] macsec1: entered promiscuous mode [ 1468.740226][T32516] macsec1: entered allmulticast mode [ 1468.741612][T32516] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1468.752464][T32516] batadv0: left promiscuous mode [ 1468.836380][T32344] team0: Port device team_slave_0 added [ 1468.852372][T32344] team0: Port device team_slave_1 added [ 1468.856151][T16332] usb 4-1: USB disconnect, device number 103 [ 1468.919506][T16332] appletouch 4-1:0.85: input: appletouch disconnected [ 1468.936863][T32344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1468.960061][T32344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1468.987244][T32344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1469.061801][T32566] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6446'. [ 1469.096639][T32344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1469.105315][T32344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1469.134598][T32344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1469.286237][T15195] bridge_slave_1: left allmulticast mode [ 1469.293516][T15195] bridge_slave_1: left promiscuous mode [ 1469.299531][T15195] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.308649][T15195] bridge_slave_0: left allmulticast mode [ 1469.314610][T22591] Bluetooth: hci3: command tx timeout [ 1469.321178][T15195] bridge_slave_0: left promiscuous mode [ 1469.327048][T15195] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.630055][T15195] bond2 (unregistering): (slave geneve3): Releasing active interface [ 1469.645018][T22591] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1469.658191][T22591] Bluetooth: hci2: Injecting HCI hardware error event [ 1469.666705][T22591] Bluetooth: hci2: hardware error 0x00 [ 1469.734160][T29754] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 1469.884472][T32620] random: crng reseeded on system resumption [ 1469.938246][T29754] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1469.954747][T15195]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1469.966250][T29754] usb 4-1: not running at top speed; connect to a high speed hub [ 1469.978408][T15195]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1469.979820][T29754] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.999588][T15195]  (unregistering): (slave team0): Releasing backup interface [ 1470.002033][T29754] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1470.022185][T15195]  (unregistering): (slave dummy0): Releasing backup interface [ 1470.023821][T29754] usb 4-1: string descriptor 0 read error: -22 [ 1470.039318][T29754] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1470.048684][T29754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.068334][T15195]  (unregistering): Released all slaves [ 1470.075777][T29754] usb 4-1: 0:2 : does not exist [ 1470.085961][T15195] bond1 (unregistering): Released all slaves [ 1470.110507][T15195] bond2 (unregistering): Released all slaves [ 1470.209367][T32622] tipc: Started in network mode [ 1470.225925][T32622] tipc: Node identity 06bcd762edfa, cluster identity 4711 [ 1470.267150][T32622] tipc: Enabled bearer , priority 0 [ 1470.307479][T32344] hsr_slave_0: entered promiscuous mode [ 1470.337881][T32344] hsr_slave_1: entered promiscuous mode [ 1470.348039][T32344] debugfs: 'hsr0' already exists in 'hsr' [ 1470.357278][T32344] Cannot create hsr debugfs directory [ 1470.367399][T32622] tipc: Disabling bearer [ 1470.381192][T15195] : left promiscuous mode [ 1470.525847][T15195] : left promiscuous mode [ 1470.630692][T15195] tipc: Left network mode [ 1470.730767][T15195] IPVS: stopping backup sync thread 7369 ... [ 1471.008423][T29754] usb 4-1: 5:0: bogus dB values (-11523/-10690), disabling dB reporting [ 1471.045255][T29754] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1471.110475][T29754] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1471.171501][T29754] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 1471.294662][ T30] audit: type=1326 audit(1778473050.341:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32764 comm="syz.1.6458" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf019cdd9 code=0x7ffc0000 [ 1471.350872][T29754] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1471.393547][T29163] Bluetooth: hci3: command tx timeout [ 1471.410859][ T30] audit: type=1326 audit(1778473050.351:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32764 comm="syz.1.6458" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf019cdd9 code=0x7ffc0000 [ 1471.459188][T29754] usb 4-1: USB disconnect, device number 104 [ 1471.486971][ T30] audit: type=1326 audit(1778473050.381:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32764 comm="syz.1.6458" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf019cdd9 code=0x7ffc0000 [ 1471.515042][ T30] audit: type=1326 audit(1778473050.381:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32764 comm="syz.1.6458" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf019cdd9 code=0x7ffc0000 [ 1471.546327][ T30] audit: type=1326 audit(1778473050.391:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32764 comm="syz.1.6458" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fedf015d60e code=0x7ffc0000 [ 1471.635734][ T30] audit: type=1326 audit(1778473050.391:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32764 comm="syz.1.6458" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fedf019ca6b code=0x7ffc0000 [ 1471.662219][ T30] audit: type=1326 audit(1778473050.391:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32764 comm="syz.1.6458" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fedf019ca6b code=0x7ffc0000 [ 1471.716671][T22591] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1471.723116][ T30] audit: type=1326 audit(1778473050.411:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32764 comm="syz.1.6458" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fedf019ca6b code=0x7ffc0000 [ 1471.723165][ T30] audit: type=1326 audit(1778473050.411:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32764 comm="syz.1.6458" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fedf019ca6b code=0x7ffc0000 [ 1471.918945][ T335] netlink: 'syz.5.6460': attribute type 1 has an invalid length. [ 1472.021602][ T335] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1472.081127][ T343] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1472.097348][ T388] syzkaller0: entered promiscuous mode [ 1472.102815][ T388] syzkaller0: entered allmulticast mode [ 1472.227241][ T335] syzkaller0: entered promiscuous mode [ 1472.233035][ T335] syzkaller0: entered allmulticast mode [ 1472.364050][T15195] pim6reg (unregistering): left allmulticast mode [ 1472.552989][T15195] team0 (unregistering): Port device vlan0 removed [ 1472.638507][T15195] team0 (unregistering): Port device team_slave_1 removed [ 1472.653019][T15195] team0 (unregistering): Port device team_slave_0 removed [ 1473.190646][T32344] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1473.242372][T32344] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1473.254831][T32344] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1473.300912][T32344] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1473.324008][T32344] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1473.339515][T32344] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1473.346709][T16336] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1473.356468][T32344] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1473.376168][T32344] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1473.394992][T15195] IPVS: stop unused estimator thread 0... [ 1473.473530][T22591] Bluetooth: hci3: command tx timeout [ 1473.513253][T16336] usb 4-1: Using ep0 maxpacket: 32 [ 1473.526058][T16336] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 1473.551429][T16336] usb 4-1: config 0 has no interface number 0 [ 1473.570108][T16336] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1473.606233][T16336] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1473.629502][T32344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1473.637989][T16336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.665153][T16336] usb 4-1: Product: syz [ 1473.676554][T16336] usb 4-1: Manufacturer: syz [ 1473.684220][T16336] usb 4-1: SerialNumber: syz [ 1473.690326][T32344] 8021q: adding VLAN 0 to HW filter on device team0 [ 1473.705782][T16336] usb 4-1: config 0 descriptor?? [ 1473.731896][T15190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.739104][T15190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1473.786387][T15182] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.793588][T15182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1473.893486][T14810] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1473.906945][ T4055] udevd[4055]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1473.923894][T32344] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1474.009966][T32344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1474.084807][T14810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1474.101684][T14810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1474.120123][T14810] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1474.132010][T14810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.145129][T32344] veth0_vlan: entered promiscuous mode [ 1474.154347][T14810] usb 6-1: config 0 descriptor?? [ 1474.182520][T32344] veth1_vlan: entered promiscuous mode [ 1474.233260][T32344] veth0_macvtap: entered promiscuous mode [ 1474.247085][T32344] veth1_macvtap: entered promiscuous mode [ 1474.280934][T32344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1474.327920][T32344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1474.357640][T13780] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.367856][T13780] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.379455][T13780] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.390946][ T499] xfrm0: entered allmulticast mode [ 1474.397660][ T499] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6467'. [ 1474.418485][T13780] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.581501][T14810] cm6533_jd 0003:0D8C:0022.0054: unknown main item tag 0x0 [ 1474.616801][T14810] cm6533_jd 0003:0D8C:0022.0054: unknown main item tag 0x0 [ 1474.646291][T14810] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0054/input/input319 [ 1474.672268][T15188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1474.697007][T15188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1474.720356][T14810] cm6533_jd 0003:0D8C:0022.0054: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 1474.866139][T13780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1474.876039][T14810] usb 6-1: USB disconnect, device number 16 [ 1474.942093][T13780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1475.061930][ T520] fido_id[520]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1475.493100][T14810] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1475.552972][T22591] Bluetooth: hci3: command tx timeout [ 1475.646687][T14810] usb 7-1: config 0 has an invalid interface number: 81 but max is 0 [ 1475.655082][T14810] usb 7-1: config 0 has no interface number 0 [ 1475.661837][T14810] usb 7-1: too many endpoints for config 0 interface 81 altsetting 143: 84, using maximum allowed: 30 [ 1475.673082][T14810] usb 7-1: config 0 interface 81 altsetting 143 has 0 endpoint descriptors, different from the interface descriptor's value: 84 [ 1475.686490][T14810] usb 7-1: config 0 interface 81 has no altsetting 0 [ 1475.695507][T14810] usb 7-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 1475.704723][T14810] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.712713][T14810] usb 7-1: Product: syz [ 1475.721417][T14810] usb 7-1: Manufacturer: syz [ 1475.726148][T14810] usb 7-1: SerialNumber: syz [ 1475.732755][T14810] usb 7-1: config 0 descriptor?? [ 1475.992350][T14810] peak_usb 7-1:0.81: probe with driver peak_usb failed with error 81 [ 1476.024964][T14810] usb 7-1: USB disconnect, device number 52 [ 1476.300742][T19076] usb 4-1: USB disconnect, device number 105 [ 1476.503330][T16319] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1476.673413][T16319] usb 6-1: Using ep0 maxpacket: 32 [ 1476.686933][T16319] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1476.703167][T16319] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1476.712690][T16319] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1476.757291][T16319] usb 6-1: Product: syz [ 1476.775515][T16319] usb 6-1: Manufacturer: syz [ 1476.795345][T16319] usb 6-1: SerialNumber: syz [ 1476.817284][T16319] usb 6-1: config 0 descriptor?? [ 1476.830907][ T577] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1477.132365][ T578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.150548][ T578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.625536][ T610] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6477'. [ 1477.636017][ T610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6477'. [ 1477.719831][ T611] bridge0: port 3(vlan2) entered blocking state [ 1477.727484][ T611] bridge0: port 3(vlan2) entered disabled state [ 1477.734363][ T611] vlan2: entered allmulticast mode [ 1477.741404][ T611] bond0: entered allmulticast mode [ 1477.750245][ T611] bridge0: entered allmulticast mode [ 1477.762729][ T611] vlan2: left allmulticast mode [ 1477.770467][ T611] bond0: left allmulticast mode [ 1477.778350][ T611] bridge0: left allmulticast mode [ 1478.081809][ T636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1478.154283][ T639] fuse: Unknown parameter 'oup_id' [ 1478.321095][ T649] netlink: 356 bytes leftover after parsing attributes in process `syz.6.6482'. [ 1479.020662][T14810] usb 6-1: USB disconnect, device number 17 [ 1479.867185][ T720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6494'. [ 1479.898336][ T720] loop2: detected capacity change from 0 to 7 [ 1479.915105][ T720] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1479.938135][ T720] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1479.959982][ T720] Dev loop2: unable to read RDB block 7 [ 1479.978821][ T720] loop2: unable to read partition table [ 1479.999732][ T720] loop2: partition table beyond EOD, truncated [ 1480.024450][ T720] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1480.294823][ T726] fuse: Unknown parameter 'uCA_q%܏' [ 1480.673548][T16332] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 1480.848875][T16332] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 1480.880582][T16332] usb 4-1: config 8 has no interface number 0 [ 1480.891960][T16332] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1480.903947][T16332] usb 4-1: config 8 interface 223 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1480.925724][T16332] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1480.938616][T16332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.947783][T16332] usb 4-1: Product: syz [ 1480.951986][T16332] usb 4-1: Manufacturer: syz [ 1480.970532][T16332] usb 4-1: SerialNumber: syz [ 1481.012444][ T745] netlink: 'syz.5.6497': attribute type 22 has an invalid length. [ 1481.025866][ T752] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6498'. [ 1481.225402][T16332] usb 4-1: USB disconnect, device number 106 [ 1481.406887][ T802] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6499'. [ 1481.615018][ T830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1482.423056][ T1223] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1482.582988][ T1223] usb 4-1: Using ep0 maxpacket: 8 [ 1482.603350][ T1223] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1482.637051][ T1223] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1482.651674][ T1223] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1482.663504][ T1223] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1482.677275][ T1223] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1482.693278][ T1223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.897732][ T880] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1482.909965][ T1223] usb 4-1: GET_CAPABILITIES returned 0 [ 1482.919857][ T1223] usbtmc 4-1:16.0: can't read capabilities [ 1483.170574][ T844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6504'. [ 1483.194705][T14810] usb 4-1: USB disconnect, device number 107 [ 1483.274736][ T1223] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1483.434781][ T1223] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 1483.447827][ T1223] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 1483.460366][ T1223] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1483.469250][ T1223] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1483.480562][ T1223] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1483.489533][ T1223] usb 6-1: Product: syz [ 1483.494125][ T1223] usb 6-1: Manufacturer: syz [ 1483.498843][ T1223] usb 6-1: SerialNumber: syz [ 1483.512655][ T1223] usb 6-1: config 0 descriptor?? [ 1483.518813][ T889] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1483.529615][ T1223] usb 6-1: selecting invalid altsetting 0 [ 1483.762690][ T889] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1483.772727][ T889] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1483.782320][ T889] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1483.809183][T14810] usb 6-1: USB disconnect, device number 18 [ 1483.838386][ T954] FAULT_INJECTION: forcing a failure. [ 1483.838386][ T954] name failslab, interval 1, probability 0, space 0, times 0 [ 1483.855236][ T954] CPU: 0 UID: 0 PID: 954 Comm: syz.3.6513 Tainted: G L syzkaller #0 PREEMPT(full) [ 1483.855262][ T954] Tainted: [L]=SOFTLOCKUP [ 1483.855269][ T954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1483.855278][ T954] Call Trace: [ 1483.855286][ T954] [ 1483.855293][ T954] dump_stack_lvl+0xe8/0x150 [ 1483.855317][ T954] should_fail_ex+0x412/0x560 [ 1483.855343][ T954] should_failslab+0xa8/0x100 [ 1483.855368][ T954] __kmalloc_noprof+0xe8/0x760 [ 1483.855393][ T954] ? tomoyo_encode+0x28b/0x550 [ 1483.855418][ T954] tomoyo_encode+0x28b/0x550 [ 1483.855447][ T954] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1483.855472][ T954] ? tomoyo_domain+0xd7/0x130 [ 1483.855499][ T954] ? tomoyo_path_number_perm+0x219/0x630 [ 1483.855518][ T954] tomoyo_path_number_perm+0x246/0x630 [ 1483.855536][ T954] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1483.855553][ T954] ? __lock_acquire+0x6b5/0x2cf0 [ 1483.855583][ T954] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1483.855617][ T954] ? __fget_files+0x2a/0x420 [ 1483.855637][ T954] ? __fget_files+0x2a/0x420 [ 1483.855653][ T954] ? __fget_files+0x3a0/0x420 [ 1483.855679][ T954] ? __fget_files+0x2a/0x420 [ 1483.855700][ T954] security_file_ioctl+0xc3/0x2a0 [ 1483.855719][ T954] __se_sys_ioctl+0x47/0x170 [ 1483.855741][ T954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.855757][ T954] do_syscall_64+0x15f/0xf80 [ 1483.855774][ T954] ? trace_irq_disable+0x3b/0x140 [ 1483.855793][ T954] ? clear_bhb_loop+0x40/0x90 [ 1483.855810][ T954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.855823][ T954] RIP: 0033:0x7f5b4079cdd9 [ 1483.855838][ T954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1483.855851][ T954] RSP: 002b:00007f5b416df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1483.855867][ T954] RAX: ffffffffffffffda RBX: 00007f5b40a15fa0 RCX: 00007f5b4079cdd9 [ 1483.855877][ T954] RDX: 0000000000000000 RSI: 000000004008ae48 RDI: 0000000000000004 [ 1483.855885][ T954] RBP: 00007f5b416df090 R08: 0000000000000000 R09: 0000000000000000 [ 1483.855893][ T954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1483.855901][ T954] R13: 00007f5b40a16038 R14: 00007f5b40a15fa0 R15: 00007f5b40b3fa48 [ 1483.855925][ T954] [ 1483.855958][ T954] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1484.152955][ T1223] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1484.209441][ T973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1484.221492][ T973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.313007][ T1223] usb 7-1: Using ep0 maxpacket: 16 [ 1484.327544][ T1223] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1484.351913][ T1223] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1484.365833][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.372192][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.380376][ T5720] kworker/1:5 (5720) used greatest stack depth: 15808 bytes left [ 1484.388243][ T1223] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1484.388268][ T1223] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1484.388291][ T1223] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1484.389581][ T1223] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1484.473396][ T1223] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1484.492918][ T1223] usb 7-1: Manufacturer: syz [ 1484.499449][ T1223] usb 7-1: config 0 descriptor?? [ 1484.662994][T16332] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1484.784760][ T1223] rc_core: IR keymap rc-hauppauge not found [ 1484.791011][ T1223] Registered IR keymap rc-empty [ 1484.796496][ T1223] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1484.822981][ T1223] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1484.835230][T16332] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1484.844617][T16332] usb 4-1: config 0 has no interface number 0 [ 1484.845588][ T1223] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1484.863320][T16332] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1484.865858][ T1223] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input326 [ 1484.889474][T16332] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1484.899994][T16332] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1484.914060][T16332] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1484.915137][ T1223] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1484.923622][T16332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.944169][T16332] usb 4-1: config 0 descriptor?? [ 1484.949538][ T1223] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1484.973208][ T1223] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1484.996014][ T1223] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1485.023082][ T1223] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1485.043147][ T1223] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1485.064070][ T1223] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1485.082994][ T1223] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1485.104242][ T1223] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1485.123006][ T1223] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1485.146899][ T1223] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1485.156459][ T1223] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1485.358478][ T990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1485.383585][ T990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1485.700029][T16332] input: HID 28bd:0042 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0042.0055/input/input327 [ 1485.821641][T16332] uclogic 0003:28BD:0042.0055: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.3-1/input1 [ 1485.912260][ T990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1485.943393][ T990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1486.039686][T16332] usb 7-1: USB disconnect, device number 53 [ 1486.102545][T16336] usb 4-1: USB disconnect, device number 108 [ 1487.453843][T30569] tipc: Resetting bearer [ 1487.520187][ T1120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6522'. [ 1487.678866][T29163] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1487.827258][T29163] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1487.854879][T29163] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1487.864761][T29163] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1487.872725][T29163] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1488.544246][T30569] tipc: Disabling bearer [ 1488.723206][T16336] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1488.906827][T16336] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1488.918642][T16336] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1488.929679][T16336] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1488.944524][T16336] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1488.953919][T16336] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.978279][T16336] usb 7-1: config 0 descriptor?? [ 1489.259547][T16336] plantronics 0003:047F:FFFF.0056: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1489.355803][T16323] usb 7-1: USB disconnect, device number 54 [ 1489.398056][ T1151] fido_id[1151]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1489.820340][ T30] audit: type=1326 audit(1778473068.861:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1167 comm="syz.6.6526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b20f9cdd9 code=0x7ffc0000 [ 1489.880179][ T30] audit: type=1326 audit(1778473068.901:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1167 comm="syz.6.6526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b20f9cdd9 code=0x7ffc0000 [ 1489.940358][ T30] audit: type=1326 audit(1778473068.911:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1167 comm="syz.6.6526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9b20f9cdd9 code=0x7ffc0000 [ 1489.971122][T29163] Bluetooth: hci1: command tx timeout [ 1489.987439][ T1187] create_pit_timer: 3 callbacks suppressed [ 1489.987456][ T1187] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1490.072108][ T30] audit: type=1326 audit(1778473068.911:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1167 comm="syz.6.6526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b20f9cdd9 code=0x7ffc0000 [ 1490.165520][ T30] audit: type=1326 audit(1778473068.911:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1167 comm="syz.6.6526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b20f9cdd9 code=0x7ffc0000 [ 1490.283110][ T30] audit: type=1326 audit(1778473068.971:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1167 comm="syz.6.6526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b20f9ca6b code=0x7ffc0000 [ 1490.352352][ T30] audit: type=1326 audit(1778473069.211:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1167 comm="syz.6.6526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b20f9ca6b code=0x7ffc0000 [ 1490.385086][ T30] audit: type=1326 audit(1778473069.251:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1167 comm="syz.6.6526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b20f9ca6b code=0x7ffc0000 [ 1490.414216][ T30] audit: type=1326 audit(1778473069.261:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1167 comm="syz.6.6526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b20f9ca6b code=0x7ffc0000 [ 1490.443329][ T30] audit: type=1326 audit(1778473069.281:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1167 comm="syz.6.6526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b20f9ca6b code=0x7ffc0000 [ 1492.034658][T29163] Bluetooth: hci1: command tx timeout [ 1492.874477][T16332] usb 7-1: new full-speed USB device number 55 using dummy_hcd [ 1493.024652][ T1281] FAULT_INJECTION: forcing a failure. [ 1493.024652][ T1281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1493.040108][T16332] usb 7-1: device descriptor read/64, error -71 [ 1493.067316][ T1281] CPU: 1 UID: 0 PID: 1281 Comm: syz.0.6534 Tainted: G L syzkaller #0 PREEMPT(full) [ 1493.067345][ T1281] Tainted: [L]=SOFTLOCKUP [ 1493.067352][ T1281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1493.067363][ T1281] Call Trace: [ 1493.067371][ T1281] [ 1493.067379][ T1281] dump_stack_lvl+0xe8/0x150 [ 1493.067406][ T1281] should_fail_ex+0x412/0x560 [ 1493.067433][ T1281] _copy_to_user+0x31/0xb0 [ 1493.067460][ T1281] simple_read_from_buffer+0xe1/0x170 [ 1493.067487][ T1281] proc_fail_nth_read+0x1bb/0x230 [ 1493.067512][ T1281] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1493.067538][ T1281] ? rw_verify_area+0x2a6/0x4d0 [ 1493.067561][ T1281] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1493.067584][ T1281] vfs_read+0x20c/0xa70 [ 1493.067616][ T1281] ? __pfx___mutex_lock+0x10/0x10 [ 1493.067643][ T1281] ? __pfx_vfs_read+0x10/0x10 [ 1493.067667][ T1281] ? __fget_files+0x2a/0x420 [ 1493.067690][ T1281] ? __fget_files+0x3a0/0x420 [ 1493.067710][ T1281] ? __fget_files+0x2a/0x420 [ 1493.067739][ T1281] ksys_read+0x150/0x270 [ 1493.067765][ T1281] ? __pfx_ksys_read+0x10/0x10 [ 1493.067787][ T1281] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1493.067814][ T1281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.067834][ T1281] do_syscall_64+0x15f/0xf80 [ 1493.067857][ T1281] ? trace_irq_disable+0x3b/0x140 [ 1493.067882][ T1281] ? clear_bhb_loop+0x40/0x90 [ 1493.067905][ T1281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.067924][ T1281] RIP: 0033:0x7f4487b5d60e [ 1493.067948][ T1281] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1493.067964][ T1281] RSP: 002b:00007f4488aa4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1493.067983][ T1281] RAX: ffffffffffffffda RBX: 00007f4488aa56c0 RCX: 00007f4487b5d60e [ 1493.067996][ T1281] RDX: 000000000000000f RSI: 00007f4488aa50a0 RDI: 0000000000000005 [ 1493.068008][ T1281] RBP: 00007f4488aa5090 R08: 0000000000000000 R09: 0000000000000000 [ 1493.068018][ T1281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1493.068028][ T1281] R13: 00007f4487e16038 R14: 00007f4487e15fa0 R15: 00007f4487f3fa48 [ 1493.068058][ T1281] [ 1493.503974][T16332] usb 7-1: new full-speed USB device number 56 using dummy_hcd [ 1493.633536][T16332] usb 7-1: device descriptor read/64, error -71 [ 1493.744145][T16332] usb usb7-port1: attempt power cycle [ 1494.123441][T29163] Bluetooth: hci1: command tx timeout [ 1494.143289][T16332] usb 7-1: new full-speed USB device number 57 using dummy_hcd [ 1494.225929][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1494.235960][T16332] usb 7-1: device descriptor read/8, error -71 [ 1494.277776][ T1130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.332890][ T1130] bridge_slave_0: entered allmulticast mode [ 1494.346739][ T1130] bridge_slave_0: entered promiscuous mode [ 1494.385678][T16336] IPVS: starting estimator thread 0... [ 1494.392180][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.412658][ T1130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.492986][ T1362] IPVS: using max 29 ests per chain, 69600 per kthread [ 1494.507868][ T1130] bridge_slave_1: entered allmulticast mode [ 1494.523148][T16332] usb 7-1: new full-speed USB device number 58 using dummy_hcd [ 1494.576307][ T1130] bridge_slave_1: entered promiscuous mode [ 1494.593347][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1494.611486][T16332] usb 7-1: device descriptor read/8, error -71 [ 1494.769324][T16332] usb usb7-port1: unable to enumerate USB device [ 1496.192953][T29163] Bluetooth: hci1: command tx timeout [ 1496.307072][ T1130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1496.555670][ T1130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1496.585705][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1496.585722][ T30] audit: type=1326 audit(1778473075.631:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1398 comm="syz.6.6540" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b20f9cdd9 code=0x0 [ 1496.895851][ T1130] team0: Port device team_slave_0 added [ 1496.964135][ T1130] team0: Port device team_slave_1 added [ 1497.127324][ T30] audit: type=1326 audit(1778473076.181:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1398 comm="syz.6.6540" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b20f9cdd9 code=0x7ffc0000 [ 1498.395431][ T30] audit: type=1326 audit(1778473076.181:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1398 comm="syz.6.6540" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b20f9cdd9 code=0x7ffc0000 [ 1498.611103][ T30] audit: type=1326 audit(1778473076.231:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1398 comm="syz.6.6540" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9b20f9cdd9 code=0x7ffc0000 [ 1498.679281][ T1130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1498.733138][ T1130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1498.902795][ T1130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1498.936584][ T30] audit: type=1326 audit(1778473077.641:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1398 comm="syz.6.6540" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b20f9cdd9 code=0x7ffc0000 [ 1499.086609][ T30] audit: type=1326 audit(1778473077.641:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1398 comm="syz.6.6540" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b20f9cdd9 code=0x7ffc0000 [ 1499.238441][ T30] audit: type=1326 audit(1778473077.641:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1398 comm="syz.6.6540" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b20f9cdd9 code=0x7ffc0000 [ 1499.380643][ T1130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1499.390806][ T30] audit: type=1326 audit(1778473077.641:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1398 comm="syz.6.6540" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b20f9cdd9 code=0x7ffc0000 [ 1499.557083][ T1130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1499.736332][ T1130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1499.747065][T16336] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1499.905641][T16336] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.947230][T16336] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1499.998624][T16336] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 1500.019449][T16336] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.060001][T16336] usb 6-1: Product: syz [ 1500.066269][T16336] usb 6-1: Manufacturer: syz [ 1500.091700][T16336] usb 6-1: SerialNumber: syz [ 1500.228009][T16336] usb 6-1: 0:1 : does not exist [ 1500.981525][T14810] IPVS: starting estimator thread 0... [ 1501.144076][ T1492] IPVS: using max 27 ests per chain, 64800 per kthread [ 1501.982160][T16336] usb 6-1: 3:0: failed to get current value for ch 0 (-71) [ 1502.030062][T16336] usb 6-1: unit 13 not found! [ 1502.112004][ T1130] hsr_slave_0: entered promiscuous mode [ 1502.140239][ T1130] hsr_slave_1: entered promiscuous mode [ 1502.151974][ T1531] FAULT_INJECTION: forcing a failure. [ 1502.151974][ T1531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1502.177663][ T1130] debugfs: 'hsr0' already exists in 'hsr' [ 1502.191405][T16336] usb 6-1: USB disconnect, device number 19 [ 1502.201568][ T1130] Cannot create hsr debugfs directory [ 1502.211719][ T1531] CPU: 1 UID: 0 PID: 1531 Comm: syz.0.6549 Tainted: G L syzkaller #0 PREEMPT(full) [ 1502.211748][ T1531] Tainted: [L]=SOFTLOCKUP [ 1502.211755][ T1531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1502.211765][ T1531] Call Trace: [ 1502.211772][ T1531] [ 1502.211778][ T1531] dump_stack_lvl+0xe8/0x150 [ 1502.211805][ T1531] should_fail_ex+0x412/0x560 [ 1502.211831][ T1531] _copy_to_user+0x31/0xb0 [ 1502.211856][ T1531] simple_read_from_buffer+0xe1/0x170 [ 1502.211896][ T1531] proc_fail_nth_read+0x1bb/0x230 [ 1502.211930][ T1531] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1502.211955][ T1531] ? rw_verify_area+0x2a6/0x4d0 [ 1502.211977][ T1531] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1502.212001][ T1531] vfs_read+0x20c/0xa70 [ 1502.212023][ T1531] ? irqentry_exit+0x218/0x760 [ 1502.212052][ T1531] ? __pfx_vfs_read+0x10/0x10 [ 1502.212083][ T1531] ? rep_movs_alternative+0x1e/0x90 [ 1502.212110][ T1531] ksys_read+0x150/0x270 [ 1502.212135][ T1531] ? __pfx_ksys_read+0x10/0x10 [ 1502.212166][ T1531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.212185][ T1531] do_syscall_64+0x15f/0xf80 [ 1502.212207][ T1531] ? trace_irq_disable+0x3b/0x140 [ 1502.212231][ T1531] ? clear_bhb_loop+0x40/0x90 [ 1502.212252][ T1531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.212270][ T1531] RIP: 0033:0x7f4487b5d60e [ 1502.212286][ T1531] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1502.212302][ T1531] RSP: 002b:00007f4488aa4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1502.212321][ T1531] RAX: ffffffffffffffda RBX: 00007f4488aa56c0 RCX: 00007f4487b5d60e [ 1502.212334][ T1531] RDX: 000000000000000f RSI: 00007f4488aa50a0 RDI: 0000000000000006 [ 1502.212345][ T1531] RBP: 00007f4488aa5090 R08: 0000000000000000 R09: 0000000000000000 [ 1502.212356][ T1531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1502.212367][ T1531] R13: 00007f4487e16038 R14: 00007f4487e15fa0 R15: 00007f4487f3fa48 [ 1502.212396][ T1531] [ 1502.829829][ T4055] udevd[4055]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1517.091048][ C1] sched: DL replenish lagged too much [ 1546.053108][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.072973][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1566.292119][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1596.849368][T22591] Bluetooth: hci3: command 0x0406 tx timeout [ 1607.380403][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.393841][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.672867][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1607.679834][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1482/1:b..l [ 1607.688437][ C1] rcu: (detected by 1, t=10503 jiffies, g=293389, q=470469 ncpus=2) [ 1607.696515][ C1] task:syz.6.6547 state:R running task stack:26656 pid:1482 tgid:1475 ppid:32344 task_flags:0x40044c flags:0x00080001 [ 1607.711702][ C1] Call Trace: [ 1607.714996][ C1] [ 1607.717934][ C1] __schedule+0x1821/0x5740 [ 1607.722480][ C1] ? __pfx___schedule+0x10/0x10 [ 1607.727359][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1607.732391][ C1] irqentry_exit+0x14f/0x760 [ 1607.736987][ C1] ? trace_irq_disable+0x3b/0x140 [ 1607.742025][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1607.748106][ C1] RIP: 0010:unwind_next_frame+0x534/0x2550 [ 1607.753928][ C1] Code: 0f b6 04 08 84 c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 49 8d 47 fc 48 0f 47 d8 4d 0f 46 ef 48 39 dd 76 a2 7b fd ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 7c cc 4c 89 ff 48 [ 1607.773540][ C1] RSP: 0018:ffffc9000461f298 EFLAGS: 00000202 [ 1607.779619][ C1] RAX: ffffffff9051790c RBX: ffffffff90517910 RCX: ffffffff90517914 [ 1607.787593][ C1] RDX: ffffffff90517910 RSI: ffffffff90d160da RDI: ffffffff8c28af00 [ 1607.795569][ C1] RBP: ffffffff90517914 R08: 0000000000000001 R09: ffffffff8e95cd60 [ 1607.803547][ C1] R10: ffffc9000461f3b8 R11: ffffffff81b0ebd0 R12: ffffffff821af9a1 [ 1607.811529][ C1] R13: ffffffff90517910 R14: ffffc9000461f368 R15: ffffffff90517910 [ 1607.819512][ C1] ? tear_down_vmas+0x311/0x520 [ 1607.824374][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1607.830548][ C1] ? unwind_next_frame+0xd5/0x2550 [ 1607.835673][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1607.840789][ C1] ? tear_down_vmas+0x312/0x520 [ 1607.845648][ C1] ? tear_down_vmas+0x312/0x520 [ 1607.850510][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1607.856691][ C1] arch_stack_walk+0x11b/0x150 [ 1607.861477][ C1] ? tear_down_vmas+0x312/0x520 [ 1607.866340][ C1] stack_trace_save+0xa9/0x100 [ 1607.871114][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1607.876494][ C1] ? stack_depot_save_flags+0x33/0x810 [ 1607.881964][ C1] kasan_save_track+0x3e/0x80 [ 1607.886649][ C1] ? kasan_save_track+0x3e/0x80 [ 1607.891506][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 1607.896275][ C1] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1607.901829][ C1] ? kmem_cache_free+0x156/0x650 [ 1607.906775][ C1] ? tear_down_vmas+0x312/0x520 [ 1607.911681][ C1] __kasan_kmalloc+0x93/0xb0 [ 1607.916277][ C1] __kmalloc_cache_noprof+0x31c/0x660 [ 1607.921662][ C1] ? kmem_cache_free+0x156/0x650 [ 1607.926604][ C1] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1607.932160][ C1] ? tear_down_vmas+0x312/0x520 [ 1607.937013][ C1] kmem_cache_free+0x156/0x650 [ 1607.941790][ C1] tear_down_vmas+0x312/0x520 [ 1607.946486][ C1] exit_mmap+0x4b6/0x9e0 [ 1607.950740][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1607.955518][ C1] ? uprobe_clear_state+0x53/0x3f0 [ 1607.960653][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1607.965351][ C1] ? uprobe_clear_state+0x2bc/0x3f0 [ 1607.970565][ C1] __mmput+0x118/0x430 [ 1607.974639][ C1] exit_mm+0x18e/0x250 [ 1607.978722][ C1] do_exit+0x6a2/0x22c0 [ 1607.982890][ C1] ? __pfx_do_exit+0x10/0x10 [ 1607.987485][ C1] ? cgroup1_freezing+0x20/0x350 [ 1607.992425][ C1] ? cgroup1_freezing+0x20/0x350 [ 1607.997372][ C1] do_group_exit+0x21b/0x2d0 [ 1608.001967][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1608.007175][ C1] get_signal+0x1284/0x1330 [ 1608.011697][ C1] arch_do_signal_or_restart+0xbc/0x840 [ 1608.017260][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1608.023437][ C1] ? exc_page_fault+0x6a/0xc0 [ 1608.028135][ C1] exit_to_user_mode_loop+0x8c/0x4d0 [ 1608.033422][ C1] ? rcu_is_watching+0x15/0xb0 [ 1608.038193][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.044264][ C1] do_syscall_64+0x33e/0xf80 [ 1608.048869][ C1] ? trace_irq_disable+0x3b/0x140 [ 1608.053903][ C1] ? clear_bhb_loop+0x40/0x90 [ 1608.058584][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.064486][ C1] RIP: 0033:0x7f9b20f5d60e [ 1608.068906][ C1] RSP: 002b:00007f9b1f1f4e28 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1608.077326][ C1] RAX: 0000000000000020 RBX: 00007f9b1f1f66c0 RCX: 00007f9b20f5d60e [ 1608.085310][ C1] RDX: 0000000000000020 RSI: 00007f9b1f1f4fe0 RDI: 000000000000000a [ 1608.093283][ C1] RBP: 0000000000000000 R08: 00007f9b1f1f4ea4 R09: 000000000000000c [ 1608.101261][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 1608.109236][ C1] R13: 00007f9b1f1f4ef8 R14: 00007f9b1f1f4fe0 R15: 0000000000000000 [ 1608.117226][ C1] [ 1608.120250][ C1] rcu: rcu_preempt kthread starved for 201 jiffies! g293389 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1608.131362][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1608.141332][ C1] rcu: RCU grace-period kthread stack dump: [ 1608.147224][ C1] task:rcu_preempt state:R running task stack:26880 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1608.160723][ C1] Call Trace: [ 1608.164005][ C1] [ 1608.166941][ C1] __schedule+0x1821/0x5740 [ 1608.171453][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1608.176423][ C1] ? __pfx___schedule+0x10/0x10 [ 1608.181292][ C1] ? schedule+0x90/0x360 [ 1608.185551][ C1] schedule+0x164/0x360 [ 1608.189717][ C1] schedule_timeout+0x158/0x2c0 [ 1608.194580][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1608.199958][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1608.205257][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1608.211072][ C1] ? prepare_to_swait_event+0x340/0x370 [ 1608.216631][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 1608.221487][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1608.226692][ C1] ? rcu_gp_init+0x1315/0x15b0 [ 1608.231463][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1608.237620][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1608.242905][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1608.248114][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1608.253934][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1608.258538][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1608.263741][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1608.269553][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 1608.274500][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 1608.279539][ C1] kthread+0x388/0x470 [ 1608.283620][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1608.288818][ C1] ? __pfx_kthread+0x10/0x10 [ 1608.293414][ C1] ret_from_fork+0x514/0xb70 [ 1608.298013][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1608.303136][ C1] ? __switch_to+0xc79/0x1410 [ 1608.307825][ C1] ? __pfx_kthread+0x10/0x10 [ 1608.312423][ C1] ret_from_fork_asm+0x1a/0x30 [ 1608.317204][ C1] [ 1608.320222][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1608.326550][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1608.331753][ C0] NMI backtrace for cpu 0 [ 1608.331776][ C0] CPU: 0 UID: 0 PID: 15192 Comm: kworker/u8:47 Tainted: G L syzkaller #0 PREEMPT(full) [ 1608.331797][ C0] Tainted: [L]=SOFTLOCKUP [ 1608.331803][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1608.331814][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 1608.331841][ C0] RIP: 0010:filter_irq_stacks+0x86/0xa0 [ 1608.331864][ C0] Code: 0f 92 c1 48 3d 4b ac ab 8b 0f 93 c0 08 c8 74 11 48 ff c3 49 83 c7 08 49 39 dc 75 ae 44 89 e3 eb 06 ff c3 eb 02 31 db 89 d8 5b <41> 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc cc cc cc cc cc cc cc cc [ 1608.331878][ C0] RSP: 0018:ffffc90000007050 EFLAGS: 00000246 [ 1608.331891][ C0] RAX: 000000000000001a RBX: 0000000000000000 RCX: 0000000000000001 [ 1608.331901][ C0] RDX: 0000000000000000 RSI: 000000000000001a RDI: ffffc900000070d0 [ 1608.331911][ C0] RBP: ffffc90000007300 R08: 000000000000001e R09: ffffffff8e95cd60 [ 1608.331923][ C0] R10: ffffc90000006fd8 R11: ffffffff81b0ebd0 R12: 000000000000001a [ 1608.331934][ C0] R13: dffffc0000000000 R14: ffffc900000070d0 R15: ffffc900000071a0 [ 1608.331945][ C0] FS: 0000000000000000(0000) GS:ffff88812528d000(0000) knlGS:0000000000000000 [ 1608.331958][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1608.331969][ C0] CR2: 00007f4487f3eccc CR3: 000000007e912000 CR4: 00000000003526f0 [ 1608.331983][ C0] Call Trace: [ 1608.331989][ C0] [ 1608.331997][ C0] stack_depot_save_flags+0x33/0x810 [ 1608.332026][ C0] kasan_save_track+0x4f/0x80 [ 1608.332045][ C0] ? kasan_save_track+0x3e/0x80 [ 1608.332062][ C0] ? kasan_save_free_info+0x46/0x50 [ 1608.332078][ C0] ? __kasan_slab_free+0x5c/0x80 [ 1608.332096][ C0] ? kmem_cache_free+0x182/0x650 [ 1608.332115][ C0] ? nft_synproxy_eval_v6+0x352/0x4e0 [ 1608.332131][ C0] ? nft_synproxy_do_eval+0x3ce/0x580 [ 1608.332144][ C0] ? nft_do_chain+0x48d/0x1ae0 [ 1608.332159][ C0] ? nft_do_chain_inet+0x360/0x4b0 [ 1608.332174][ C0] ? nf_hook_slow+0xc5/0x220 [ 1608.332194][ C0] ? NF_HOOK+0x21f/0x3c0 [ 1608.332213][ C0] ? ip6_input+0x16a/0x270 [ 1608.332232][ C0] ? NF_HOOK+0x336/0x3c0 [ 1608.332250][ C0] ? process_backlog+0x7dd/0x1950 [ 1608.332267][ C0] ? __napi_poll+0xae/0x340 [ 1608.332282][ C0] ? net_rx_action+0x627/0xf70 [ 1608.332297][ C0] ? handle_softirqs+0x22a/0x840 [ 1608.332312][ C0] ? do_softirq+0x76/0xd0 [ 1608.332326][ C0] ? __local_bh_enable_ip+0xf8/0x130 [ 1608.332340][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1ac7/0x2cb0 [ 1608.332356][ C0] ? ieee80211_iface_work+0x845/0x1380 [ 1608.332372][ C0] ? cfg80211_wiphy_work+0x2cf/0x460 [ 1608.332391][ C0] ? process_scheduled_works+0xb5d/0x1860 [ 1608.332407][ C0] ? worker_thread+0xa53/0xfc0 [ 1608.332421][ C0] ? kthread+0x388/0x470 [ 1608.332438][ C0] ? ret_from_fork+0x514/0xb70 [ 1608.332453][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1608.332485][ C0] ? nft_synproxy_eval_v6+0x352/0x4e0 [ 1608.332499][ C0] kasan_save_free_info+0x46/0x50 [ 1608.332515][ C0] __kasan_slab_free+0x5c/0x80 [ 1608.332534][ C0] kmem_cache_free+0x182/0x650 [ 1608.332558][ C0] nft_synproxy_eval_v6+0x352/0x4e0 [ 1608.332575][ C0] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 1608.332591][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1608.332609][ C0] nft_synproxy_do_eval+0x3ce/0x580 [ 1608.332627][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1608.332642][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1608.332659][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1608.332678][ C0] nft_do_chain+0x48d/0x1ae0 [ 1608.332694][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1608.332714][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1608.332747][ C0] nft_do_chain_inet+0x360/0x4b0 [ 1608.332763][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1608.332777][ C0] ? nf_nat_ipv6_local_in+0x157/0x660 [ 1608.332804][ C0] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 1608.332822][ C0] ? lock_acquire+0x106/0x350 [ 1608.332841][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1608.332861][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1608.332876][ C0] nf_hook_slow+0xc5/0x220 [ 1608.332899][ C0] NF_HOOK+0x21f/0x3c0 [ 1608.332919][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 1608.332939][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1608.332958][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1608.332978][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 1608.333003][ C0] ip6_input+0x16a/0x270 [ 1608.333029][ C0] ? ip6_input+0x23/0x270 [ 1608.333050][ C0] NF_HOOK+0x336/0x3c0 [ 1608.333069][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1608.333089][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1608.333108][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1608.333128][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1608.333153][ C0] ? process_backlog+0x3eb/0x1950 [ 1608.333169][ C0] process_backlog+0x7dd/0x1950 [ 1608.333195][ C0] __napi_poll+0xae/0x340 [ 1608.333209][ C0] ? skb_defer_free_flush+0x233/0x260 [ 1608.333226][ C0] net_rx_action+0x627/0xf70 [ 1608.333243][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1608.333267][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1608.333288][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1608.333310][ C0] ? try_to_wake_up+0x7f2/0x1380 [ 1608.333334][ C0] handle_softirqs+0x22a/0x840 [ 1608.333350][ C0] ? do_softirq+0x76/0xd0 [ 1608.333367][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1ac7/0x2cb0 [ 1608.333383][ C0] do_softirq+0x76/0xd0 [ 1608.333397][ C0] [ 1608.333402][ C0] [ 1608.333408][ C0] __local_bh_enable_ip+0xf8/0x130 [ 1608.333423][ C0] ieee80211_ibss_rx_queued_mgmt+0x1ac7/0x2cb0 [ 1608.333444][ C0] ? kthread+0x388/0x470 [ 1608.333463][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1608.333477][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf0f/0x2cb0 [ 1608.333493][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1608.333519][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1608.333544][ C0] ? kcov_remote_start+0x17f/0x7a0 [ 1608.333568][ C0] ieee80211_iface_work+0x845/0x1380 [ 1608.333589][ C0] cfg80211_wiphy_work+0x2cf/0x460 [ 1608.333609][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1608.333625][ C0] process_scheduled_works+0xb5d/0x1860 [ 1608.333654][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1608.333672][ C0] ? assign_work+0x3d5/0x5e0 [ 1608.333689][ C0] worker_thread+0xa53/0xfc0 [ 1608.333716][ C0] kthread+0x388/0x470 [ 1608.333734][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1608.333748][ C0] ? __pfx_kthread+0x10/0x10 [ 1608.333766][ C0] ret_from_fork+0x514/0xb70 [ 1608.333783][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1608.333798][ C0] ? __switch_to+0xc79/0x1410 [ 1608.333819][ C0] ? __pfx_kthread+0x10/0x10 [ 1608.333836][ C0] ret_from_fork_asm+0x1a/0x30 [ 1608.333860][ C0]