last executing test programs: 1m32.841755051s ago: executing program 1 (id=1829): rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}, 0x68, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) unshare(0x6a040000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x20049009}, 0x2000c000) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x20049009}, 0x2000c000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000540)=[@in={0x2, 0x4e26, @multicast1}, @in6={0xa, 0x4e21, 0xd, @mcast1, 0x1000}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, @in6={0xa, 0x4e23, 0xdfe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, @in6={0xa, 0x7ff, 0x2, @mcast1, 0x5}, @in6={0xa, 0x4e21, 0x7, @local, 0x400}], 0xac) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000540)=[@in={0x2, 0x4e26, @multicast1}, @in6={0xa, 0x4e21, 0xd, @mcast1, 0x1000}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, @in6={0xa, 0x4e23, 0xdfe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, @in6={0xa, 0x7ff, 0x2, @mcast1, 0x5}, @in6={0xa, 0x4e21, 0x7, @local, 0x400}], 0xac) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x398, 0xffffffff, 0x0, 0x250, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'ip6tnl0\x00', 'nr0\x00', {}, {}, 0x2f}, 0x74000002, 0xe8, 0x110, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x5, 0x6, 0x1, 0x7, 0x3, 0x3], 0x1, 0xb}, {0x4, [0x2, 0x4, 0x2, 0x4, 0x8, 0x4], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x398, 0xffffffff, 0x0, 0x250, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'ip6tnl0\x00', 'nr0\x00', {}, {}, 0x2f}, 0x74000002, 0xe8, 0x110, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x5, 0x6, 0x1, 0x7, 0x3, 0x3], 0x1, 0xb}, {0x4, [0x2, 0x4, 0x2, 0x4, 0x8, 0x4], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) write$UHID_CREATE2(r1, &(0x7f0000000000)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYBLOB="94010000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf25010000001400020077673200000000000000000000000000240003000000000000000000000000000000000000000000000000000000000000000000480108805400008024000200935fcc0d76a5bcfce584052ea21b4b2622057154ff788c325f3b596e54307c08080003000300000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696bf000008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39222400020082a3fee8508b9dedc00d8ccb9cfa517d48a03e6112bfa9074c524b2a05708654a400098028000080060001000a00000014000200fe880000000000000000000000000101050003000300000040000080060001000a0000001400020000000000000000000000ffff7f00000105000300030000000600010002000000080002007f00000105000300010000000c000080060001acb2b8a26a48a69e44cf7d0bba90350a3e5aaae19d12995880e4d2fa3210684409197926bda8c840de211bde8a9f17898346b890d1ea4d2e6a9592b3fcb139a4cfc49f1e1f64d9952cdc2678e8edd92bebcc7a9e2137eebe7e6ab2a1725db0f29647040bee1d61f066cd5a3f03746b3b158b444abff22e620824fcb71c52fb494cdd21d4c8"], 0x194}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x845}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r5], 0x1c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="6c00000000090104000000003ade820000000000000006080005400000001a080005400000001309000100737900000508000540800000170c0004800800014000000006080003400000090508000540000000010900010073797a3000"/111], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb25026a747e0114370595e4bb0b0489b1dc73", 0x2e}], 0x1}, 0x20048020) syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050186dd6000000600202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa84000201000000008802036c00"/86], 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x15) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x3, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000400)={0x1, {{0xa, 0x2, 0xfffffe00, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x0, @local, 0xc71}}}, 0x108) (async) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000400)={0x1, {{0xa, 0x2, 0xfffffe00, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x0, @local, 0xc71}}}, 0x108) r7 = io_uring_setup(0x5dd8, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x87}) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000000000), 0x1) (async) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000000000), 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x7, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1m32.149210788s ago: executing program 1 (id=1836): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$FS_IOC_GETFSUUID(r3, 0x80111500, &(0x7f0000000100)) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r5, 0x308c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xdaf}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet(r3, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r6, 0x4bfa, 0x100004004) (async) ioctl$VT_ACTIVATE(r6, 0x4bfa, 0x100004004) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r1, 0x410, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r1, 0x410, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fd/3\x00') 1m31.199713799s ago: executing program 1 (id=1842): socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xd8}, 0x2080) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0xd40, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m30.993153849s ago: executing program 1 (id=1845): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x203a2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x12) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/234, 0xea}], 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) 1m30.859711576s ago: executing program 1 (id=1846): syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x2710, 0xd590d43a7b6986ec, 0x9000, 0x1000, &(0x7f0000001000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x2710, 0xd590d43a7b6986ec, 0x9000, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = socket$kcm(0x10, 0x3, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x6, 0x6361, 0x1, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="0503222ed3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x13}) (async) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x13}) writev(r2, &(0x7f0000000780)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) (async) writev(r2, &(0x7f0000000780)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r9, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000500)={r11}, &(0x7f0000000580)=0x8) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) (async) r13 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r12) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r12) sendmsg$GTP_CMD_GETPDP(r12, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r13, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8c0}, 0x20000000) 1m30.645521188s ago: executing program 1 (id=1847): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000000c0), 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80040, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000027c0000040042801c0001800600060088a80000100004"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$TUNSETOWNER(r3, 0x400454cc, 0x0) write$char_usb(r2, &(0x7f0000000240)="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", 0xa) syz_usb_disconnect(r1) 1m30.483374839s ago: executing program 32 (id=1847): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000000c0), 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80040, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000027c0000040042801c0001800600060088a80000100004"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$TUNSETOWNER(r3, 0x400454cc, 0x0) write$char_usb(r2, &(0x7f0000000240)="394222117c9cfee292c87634860ffb4b9cbd26ef63b66c80f4b2c5aedfb3e13f651b4afcacdd49045d0e4977dcc21f87de3f3c8d59476469ca316845f5b240ef868321abee651a3eae92b078d8f4e2c0a060dce7add1bfc2fcb21f29a4157273e18a4ec02e3f846280a6b3e66c6a00a05e5422c1c5af4bc6136612a5724e20760659bd3d7b21a0f6cab432b19f5b0d0a97b25687e0472329c099d035952f7852e4405130bf9fdf5da96d0a18af364a754bcefc99b4db1e90b28e1a68d5fd6154a76bd860bd77169a7ce167666e9b39c3469cc03700f319a2b151cd27e161640e91da38f94de08bbba1e821d780364abb22d6dfda81a9b463b8f009b805fc26e02a844b75ff694441766beae5", 0xa) syz_usb_disconnect(r1) 36.87111956s ago: executing program 3 (id=2177): syz_usb_connect(0x5, 0x4c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100335fe6510ca1a8eb232920102030109023a00010d019002090432a70201039e08090588061000060408082387ac33afe3410725010305f8040905070200020402660725"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x100) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000001c0)=0x6, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000001380)={0x3, 'rose0\x00', {0x3}, 0x7}) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000002440)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)="57cd4e", 0x3}, {&(0x7f0000000580)="3222f0476ed4765dc271a2c4fc02", 0xe}, {&(0x7f00000004c0)="9ec2fac086b46ea75227701aa4233597d8f5829cf3b7347f318edeece819b98e0dfc0ce47063b8f43f765ab2f7ffd018c2005e9f3f8c8c274bacde84922bfc0c6295a0a3d3f7c26773699d40b16775d8a6301526dcaebb7817fda3d495b115a5b9a13ff72966bc42a8aab4a4d3fe6164", 0x70}], 0x3, &(0x7f0000001a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000801}], 0x1, 0x40) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x12c0, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x11f0, 0xffffffff, 0xffffffff, 0x11f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0xfd}, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x3c, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xd, 0x8030, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xff], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x0, 0x0, 0x47}, 0x0, 0x1100, 0x1120, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x4, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1320) (async) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) (async) landlock_restrict_self(r4, 0x0) (async) landlock_restrict_self(r4, 0x0) (async) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r6, &(0x7f0000000000)='.\x00', 0x0) (async) openat(r6, &(0x7f0000001340)='./file0\x00', 0x40, 0x20) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) (async) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x424, 0x3, 0x3}, 0x18, 0x0) (async) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) (async) recvmmsg(r2, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/64, 0x40}, {&(0x7f00000034c0)=""/240, 0xf0}], 0x3}, 0xf}], 0x2, 0x2101, 0x0) 35.708349525s ago: executing program 3 (id=2185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000001c0)={0x0, 0x80000, r2}) bind$xdp(r3, &(0x7f0000000140)={0x2c, 0xfb5756b229c94ab4}, 0x10) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}, 0x1, 0x0, 0x0, 0x48010}, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="08000800060009"], 0xfce) 35.242507437s ago: executing program 3 (id=2186): socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$inet_tcp(0x2, 0x1, 0x0) fsopen(&(0x7f0000000340)='hugetlbfs\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}, 0x2080) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0xd40, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 35.075263788s ago: executing program 3 (id=2187): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', 0x80801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000380)={[&(0x7f00000000c0)=',.]\x00', &(0x7f0000000100)='\x00', &(0x7f0000000180)='/dev/media#\x00', &(0x7f00000001c0)='()\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='/%});@@\x00', &(0x7f00000002c0)='$\x00']}, 0x1000) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$media(&(0x7f0000000000), 0xbb6e, 0x202000) 34.831748599s ago: executing program 3 (id=2188): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402000000002d7b0902240001000000000904000000030002"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x40900, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd, 0x0, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = gettid() r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x1, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000300)={0x0, 0xffffffffffffffdf, &(0x7f00000003c0)={&(0x7f00000001c0)={0x6c, r7, 0x1, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e26, 0x44, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7f25}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffffffc, @mcast2, 0x20005}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) read$FUSE(r5, &(0x7f0000002640)={0x2020}, 0x2020) 34.57418229s ago: executing program 3 (id=2189): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r2}, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r4) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYRES64=r3, @ANYRES8=r4, @ANYRESDEC=r0], 0x1c}], 0x1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newtfilter={0xf8, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0x9}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0xc8, 0x2, [@TCA_BASIC_ACT={0xc4, 0x3, [@m_connmark={0xc0, 0x1, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x401, 0x0, 0x6, 0x4, 0x6}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7a2, 0x5, 0xffffffffffffffff, 0x7, 0x80}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x3985, 0x1, 0x5db978fb, 0x8}, 0x94a4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x4, 0xdd40, 0x401}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1c00, 0xff, 0x3, 0xe77, 0x8}, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r8, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x1}], 0x1}, 0x4011) 34.281545318s ago: executing program 33 (id=2189): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r2}, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r4) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYRES64=r3, @ANYRES8=r4, @ANYRESDEC=r0], 0x1c}], 0x1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newtfilter={0xf8, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0x9}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0xc8, 0x2, [@TCA_BASIC_ACT={0xc4, 0x3, [@m_connmark={0xc0, 0x1, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x401, 0x0, 0x6, 0x4, 0x6}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7a2, 0x5, 0xffffffffffffffff, 0x7, 0x80}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x3985, 0x1, 0x5db978fb, 0x8}, 0x94a4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x4, 0xdd40, 0x401}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1c00, 0xff, 0x3, 0xe77, 0x8}, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r8, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x1}], 0x1}, 0x4011) 6.067943555s ago: executing program 6 (id=2365): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x7) close_range(r1, 0xffffffffffffffff, 0x2000000000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002e000100030000007a00000008000000", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="04000080"], 0x24}], 0x1}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r4, 0xc0104811, &(0x7f0000000040)={0x3, 0x666, 0x7, 0x1}) 5.124483148s ago: executing program 0 (id=2375): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_clone(0x4001000, 0x0, 0x0, &(0x7f0000019100), 0x0, 0x0) 5.05847238s ago: executing program 0 (id=2377): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000400)) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/45, 0x304000, 0x1800, 0x0, 0x3}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@updpolicy={0xc4, 0x13, 0xcb23c9c9931e99e9, 0x70bd26, 0x0, {{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x1, 0xa, 0x0, 0x10, 0xc, 0x0, 0xee01}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x10, 0x0, 0x1, 0x1}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0xa8}}]}, 0xc4}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 4.994169975s ago: executing program 2 (id=2378): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030002ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0xe, r0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 4.989663004s ago: executing program 0 (id=2379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a20000000000a01030000000040000001010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a300000000014007880080002400000008008000140000000050900010073797a310000000038000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000c000480"], 0xc0}, 0x1, 0x0, 0x0, 0x4041}, 0x0) 4.883531388s ago: executing program 2 (id=2380): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) r1 = epoll_create(0x7) unshare(0xc040400) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x31) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x1, 0x3, 0x40b8, 0x9, 0x1000, 0x4b, 0x0, 0x4, 0x0, 0x1, 0x0, 0x6, 0x5, 0xfffffffffffffffe, 0x1], 0x0, 0x1019c4}) ioctl$KVM_RUN(r7, 0xae80, 0x0) write$tun(r2, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="cd59d1e04919847e25f487dcfab39dd87659dd3774096adda0441e7f6d38eecaa595dec4097fab0dd805bb3fe9ce67fba691f9f26d802337f3f9870a63a20093c1a530b53deca09e57ced190d5f4478d4a2fcf5769e8ed722a25c39326086b3f282b96b9d384fa191e63191a5a05821757308df683fa3e89b4c5084e7fecb9ca32f58ac6d113c72a4dd14a5d6f7fd21b9632453eb1fcfd6c7e6f655f1d59ae980270d1892cc50c68fad0428c7346f7a8c40d46be7086c250493e60369400ae95cae6f3e3850cdae7a7855b6952d2d58c5306f53c91f9c585e06ebc5bcc38935db59659ade07c7dd4aba59fc1c2ea5e09da7dab80289fc7655d", @ANYRES32, @ANYRES64=r1, @ANYRESDEC=r6, @ANYRES16=r6, @ANYRESHEX=r1], 0x48) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$BLKSECDISCARD(r9, 0x127d, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0x7, 0x0, r8}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000340), 0xffff, r10}, 0x38) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0xa0000001}) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r11, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r11, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r11, 0x84, 0x1a, &(0x7f0000000100), &(0x7f0000000200)=0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) 4.883183877s ago: executing program 0 (id=2381): r0 = syz_open_dev$vim2m(0x0, 0x401, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x0, 0x1, 0x4, 0x0, 0xfffffff9, {0x0, 0xea60}, {0x1, 0xc, 0x9, 0x48, 0x3, 0x8}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x496000}) 4.843110537s ago: executing program 0 (id=2382): sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x2, 0x4000) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES64=r0, @ANYBLOB="00022dbd7000fbdbdf25120000000c009900ff0f0000540000000500130101b889f87b5bee00adcfb5219800000006001a0102000071e460c7540a99c8000800a4000100000018001300ec6cec82c8019b160496a4928301300fa48b0c12"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000884) add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x3, 0x2, "a23cfa355c349d2900", '\x00', "02050201", "50fb45c5", ["8b0b35cb03004900004000", "8e1500", "1c2a4d003c970300", "ff81000000008000"]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0, 0x3a}], 0x1, 0x8, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ac0)={r3, 0x20, &(0x7f0000000a80)={&(0x7f0000000880)=""/210, 0xd2, 0x0, &(0x7f0000000980)=""/237, 0xed}}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) r7 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r7, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r7, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000000780)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8219cbba0d5a4a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6d6701048ff17f46097b1ee07231e9ec5ab6950ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xe7}, {&(0x7f0000000500)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0xfffffffffffffd98}, {&(0x7f00000002c0)="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", 0x1e0}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x1, 0x0) getsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f0000000600), &(0x7f0000000640)=0x4) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x69, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r8, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 4.520847996s ago: executing program 5 (id=2383): r0 = syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYBLOB="12011003a9372540f30c1010db26010203010902f50101030250070904"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="201000000000040014000300"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000040)={0x2, 0x76, "2622fe010064acddf3479a9d78fa72252ab904d914e0273b70d2f3dec4765a34634042e583800367445ae2fccae6e0b58b4ac89ae1840d399cb4a39352c8eb48027e0b6cc1076ff9daa988c5722add50161ca7859c36d5599517b3562e862358269e7ba49190e4ab1d6346a87bba7d325e090d4b5cae"}) memfd_create(&(0x7f0000000540)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5', 0x6) (async) r2 = memfd_create(&(0x7f0000000540)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5', 0x6) fallocate(r2, 0x0, 0x0, 0x400001) (async) fallocate(r2, 0x0, 0x0, 0x400001) lseek(r2, 0x0, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f00000000c0)=ANY=[@ANYBLOB="790000000300000000000080000000008909000000000000e8bc01504b455fc97f0346955f8b7f7cb48e74d8e70395b1dacdb57b2fdae27b3962f5159586de8fde132abd863b84239f4d450349c1f972bb8b452c84818a174d2c8107ebe2789b6665c965f64b4b18aceb46e4198de0b0e8425452738d198c9e"]) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000070000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc10466554b0470571f00000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x40040c0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file1'}, 0xb) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file1'}, 0xb) r4 = fsopen(&(0x7f0000000200)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000000240)='./file1\x00') bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) pipe2(&(0x7f0000000040), 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6072b2af00042f00fe800000000000000000000000000000ff02000000006558001090780200"/70], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100003b7431087d077a6210000102030109022400010000000009040000020338b20009050e"], 0x0) 3.939624681s ago: executing program 2 (id=2388): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) fcntl$setflags(r0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3, 0x4, 0x4, 0x8}, 0x50) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r3, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x0, 0x0, 0xfd8b, 0x20000000000005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r4 = syz_usb_connect(0x6, 0x24, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2], 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='L', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) 3.04206584s ago: executing program 6 (id=2392): r0 = syz_open_dev$vim2m(0x0, 0x401, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x0, 0x1, 0x4, 0x0, 0xfffffff9, {0x0, 0xea60}, {0x1, 0xc, 0x9, 0x48, 0x3, 0x8}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x496000}) 2.984949194s ago: executing program 6 (id=2393): syz_clone(0x2211, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xfa}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}, 0x1, 0x0, 0x0, 0x10010}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="10797fcd6c7704e11e05000000000000009ff075475e4b94", 0x18) r2 = accept$alg(r0, 0x0, 0x0) readv(r2, &(0x7f0000001000)=[{&(0x7f0000000000)=""/27, 0x1b}, {&(0x7f0000000440)=""/61, 0x3d}], 0x2) r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000080)={0x0, 0x4, 0x10000, 0x0, 0x0, 0x1, 0x2}) sendmmsg$alg(r2, &(0x7f0000003880)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)="9c98d425afe56f214f063263de94ff93031f0603", 0x14}, {&(0x7f0000000040)="0ac0d4f6e32e92fb", 0x8}], 0x2, 0x0, 0x0, 0x400c000}], 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x5, 0x31, 0xffffffffffffffff, 0x33443000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1001, 0x1}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000c511fd93e756e400642fc1566b0000100000", @ANYRES32=0x0, @ANYBLOB="0198000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x2004c084}, 0x8000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x8000ffa1}, {0xfffffff9, 0x80500}]}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x3}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x3, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) epoll_create1(0x0) 2.841369304s ago: executing program 6 (id=2394): socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xf0}, 0x2080) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0xd40, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.717228511s ago: executing program 0 (id=2395): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x152}) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000080)=0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000004c0)="3e0fc73bbaf80c66b8a03d618866efbafc0c66ed660fc7744e66b9800000c00f326635010000000f300f01d1660f388012650fc75a050f009f00000f019d8800baf80c66b84891138466efbafc0c66b80200000066ef", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x552, 0x7, 0xe51, 0xfffffffffffffff0, 0x5479, 0x1035, 0x200000000006, 0x502e, 0x32a, 0xfffffffffffffffe, 0x100000002, 0xfffffffffffff800, 0xfff, 0x4, 0x800000068], 0x2000, 0x8c095}) ioctl$KVM_RUN(r7, 0xae80, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x6, 0x0, 0x81, 0x5}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x408000, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r8, 0x5) r9 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCOUTQ(r9, 0x5411, &(0x7f0000000040)) r10 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12011001001a5000000000000142aa760c963a327a09022400010000e00b0904000f020300000009210c00fc8672702df3b993c2601088add4946b840120ffffc238c55a84bd89d0ce4088cc421cb20a8233700b492e53ccd01ebfe90b9d5529d785070000000000000001974246507ddf4e8d78b39a303536a61a52f38bd720b0b0540a5f68317d85f3a5407b"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) read$hidraw(0xffffffffffffffff, &(0x7f0000000540)=""/92, 0x5c) getsockopt$inet6_tcp_buf(r8, 0x6, 0x1c, &(0x7f0000000200)=""/42, &(0x7f0000000300)=0x2a) syz_usb_control_io(r10, &(0x7f0000000b00)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="40243f0000003f231ba57fb04d4f1e07d695f268e872852798b2974b1fc634f26cda14d95e6688adb139e26a477975a81c7f29ce7c2ca48762ec4e1bd8919a607e2779bc94303c7ed684929df5f7042a481c607b20cbd3f9fb157479ee"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) 2.714303012s ago: executing program 6 (id=2396): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/3465], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmmsg$inet(r2, &(0x7f0000001dc0)=[{{&(0x7f00000012c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, &(0x7f0000001340)=[{&(0x7f0000001300)="a8d6fb956e9b564a2c21326acf23d51b06cabf79d8801247ce49c79979e89e", 0x1f}], 0x1, &(0x7f0000001380)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5a}}, @ip_retopts={{0x54, 0x0, 0x7, {[@rr={0x7, 0x7, 0x94, [@multicast1]}, @lsrr={0x83, 0x23, 0xe9, [@local, @local, @loopback, @broadcast, @empty, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x15}]}, @lsrr={0x83, 0x17, 0x86, [@dev={0xac, 0x14, 0x14, 0x3a}, @local, @broadcast, @multicast1, @local]}]}}}], 0x70}}, {{&(0x7f0000001400)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000001700)=[{&(0x7f0000001440)="8f9ce3a64b4aefd774b341afb33c237de327d4a497bf11c92e796d0c9c6d8b97c0ead33a9a24d9d7ba799daf288878fa5fed807ed9136778adebec332eaa600cb18a9eed3018d27137ecf51e34b231a750e9c135c4758a2e05af453491851f24e06ea1415a137c619118733944db96ae0bc2ffc2e7885bd2474ca2290df34bbb314a4caf0d3a7015f466e4d2aeeea57962c8cbc95bc2db1c37a65e2875800cf5cdad21cd60f698ea7c784223d0b606b136641af71bf3300ce41492e9edfcba46036c22bdeae1d552ace919732a9f50210c48de184ca250f5524bc17a0cefa5ceeb", 0xe1}, {&(0x7f0000001540)="bfc2373df598872c5db937dc3c6874cbe15b30a7012ac4697de3ba82a17662d73bcfc7f6ff3d10e9e403ec59b84e44a5b7b98a9420bb6203b91d36d5d7452d0d2e3e93bf21b9cab962b5913b4b54e04498b6bcb8f96f5bcffc5ac18093ba468b4351642cec27e961b27ae63a450ce4ffbbc747698b5c1ad919618fb47eae1033f80c5f8cdb74da2bdca486aa0aeb15476177e640159cbf96414ea753b1a9da0b6c67b42ba5c9927b20b571e5965b8ae84ae347943b4cf0c4b176dc6b0f4d0298e7deace26f7da47cbde609b0ccd60319e62107b1314b891c9c80f3a0bacad6e9451c21af1a0f7c94c37ccc4a0176cd3860abe6bf19f570", 0xf7}, {&(0x7f0000001640)="f0b8d19e88ca9ddee19454037dd9a6c4224a0e204157a095bdccab91eed2587eeca2ab5f3d8fd1ac1aaa80823c0b37c6ab54fb89145c704e44bf814ae6b87c0111c7faf3893ff84c676008a47ec1e1a1f21bd087fd5b9a52ae399b7225bb77d6a196088362f4c613ce8005f8db6c2593c920cdbf962fdfbd013a66", 0x7b}, {&(0x7f00000016c0)="61355b75d728b22f49ab9fbb1ccd0cce163cde72db52", 0x16}], 0x4, &(0x7f0000001740)=[@ip_retopts={{0x78, 0x0, 0x7, {[@rr={0x7, 0x13, 0x7f, [@loopback, @multicast2, @loopback, @rand_addr=0x64010102]}, @end, @end, @noop, @ssrr={0x89, 0x23, 0x43, [@broadcast, @loopback, @private=0xa010102, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010102, @loopback]}, @timestamp={0x44, 0x20, 0xab, 0x0, 0x4, [0x4, 0x2f, 0x2, 0x6, 0x2, 0xb2f0, 0xfffff000]}, @ssrr={0x89, 0xb, 0xe, [@broadcast, @remote]}, @noop]}}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001880)="b3baf0f72feea24e38803944eeb4be895e2f2207c556588301b8ffbe126b2907f10caec01e47fe3d45a0f1a89bbd1057cd231d0fd90cd6e24841b9acca1f8ab1876fdec0097fbc1ed28fa4d1239f8274afb3defe7c4e444ff7bb", 0x5a}, {&(0x7f0000001900)="61584fdf156a962f97d2fea6b40078764e90194d8f13c41bcd6ae8d33fbf767fd0c6eb4c12b6b7096081e686caf747d003e32b2aa3869b7522be6627f3481015824742e03bdcc186bd6b0582ffcc8900f3af3a0dbb072f533304824785e0db9c0a848606979cdc66057bd36dfde8266be08eda888715d533b579d414a398348a3bc61b9f86e1a93dc5f92526cc94328d39593ff9f4ce581f3770beba65fc2716c37994171703a183354ec2395b6a97de30ead9636386c6fa49d4c355eab284ce0a503f7cffeaedddaf", 0xc9}, {&(0x7f0000001a00)="b1d30e3ba72fa5d43c0e258e56a7a92305bae718e7c48c4785f4bb98a3a9b5c3dc96bd2aa3c54fd3d27efe02601f52dc9e3a36bff5f70160515f3d3b0c20f069a23c52e6d5991efb3411f4aa8b08214365354a5e2ecb922a158a074e5ac5b64f344764f440b268de68e33eb565fbd395c0656a6c8c7abacdc0ab09fd69e9d135a8f941ec81a7da0b01089b58b69d2907bd6532351654e59583922fe1837daf2103a1aee7", 0xa4}, {&(0x7f0000001ac0)="647873ef2f0ef886a9fb0331a7e279f516cf1cf3fbe320b424b55d4b7f725a8064a6c713d1f2e4cc0587e2262f4d5fda011c6402a1da388d1338e72d923b3a5cb3446cd5234a43c0cfecec1f491432c7e44d81f5de58773746eeb457099b02846f7b62a47a9c213c640dad9048c42f3eded1d15c4c6ac9786afe2bb8ae37236f809b0791237c3022b0dd174ae91dfe7809c4c9aeeca4af58d216e329ea7e7f563183592594948f22a968614ebe10dc8b2baaf52f3ba9c94dc1340ed0086f8698b5", 0xc1}, {&(0x7f0000001bc0)="13253c0ef809e111847ff139d8bc28ecbe7183cd6339918809ef002a6eabbf275841b8e08c0652c3a344d187f0769838332bb444dd0735dc81c630a275a948aefd4c6c51eee179207eae566cd31b307c4fb1f47f50a043d4348b0ea4989d6a9116b94a", 0x63}, {&(0x7f0000001c40)="c673cec7b43abc40674dd13df866ccd211e319de886d95084bb836a55c7f13f413833717c140f34f20d2da9f1db1beb81258ffd7eebb4efa23b5ab572d8bdbdf223e93d0b7a20a5024a06a73c24709f8403bc9a1042933ac2af193bd2983de6725417b28cc3a86843c8bc772", 0x6c}], 0x6, &(0x7f0000001d40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9b}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x48}}], 0x3, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000900)=@sack_info={r4, 0xfffffff8, 0xb}, &(0x7f0000000940)=0xc) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') statx(r5, 0x0, 0x1000, 0x100, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f00000011c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001180)={&(0x7f0000001080)={0xd0, 0x3, 0x7, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xdb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffff8000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3259}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8000000000000000}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x21}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5914}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r4, 0x3}, 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r5, &(0x7f0000001280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, r6, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) 2.607604219s ago: executing program 6 (id=2397): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) munlockall() getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x48004}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x5, @remote, 0xff}, 0x1c) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r0, @ANYRES64=r2, @ANYRESDEC=r3, @ANYRESOCT=r0], 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000540)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) syz_usb_control_io$uac2(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.036943188s ago: executing program 5 (id=2399): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES32], 0x18, 0x40044}}], 0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x8000) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000200), 0x16ec, 0x88100) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f0000000380)={&(0x7f00000002c0)="3501aec6ba573485dc9ebc421f7bbf04d5b0d9aa7769f9c056e0c6609bf9c8111aaa9cbbfb9a4e581f04106b008857e4b8ea0ca18a3a977691529bf2f56bac1f0ad2aa3a7a44959152caddbe39d8275ef91b68f299b4d61f020204e87feb608d4f579388e1239746a44cb8e5fe34faa9c3d5d8232dd5ffa3e2188dc15a471fb1fb4f45ce2267e023ccced7b15f", 0x8d}) 1.843766125s ago: executing program 4 (id=2400): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) r1 = signalfd(r0, &(0x7f0000000040)={[0x6]}, 0x8) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000080)={'broute\x00', 0x0, 0x0, 0x0, [0x5, 0x7, 0x1, 0xfff, 0x1, 0x8d8]}, &(0x7f0000000100)=0x78) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140)=@int=0x7, 0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file0\x00'}) write$rfkill(r2, &(0x7f00000001c0)={0xfffffffa, 0x8, 0x2, 0x1, 0x1}, 0x8) r3 = fsmount(r1, 0x1, 0x72) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000200)={0x0, 0xf55a, 0x3, [0x0, 0xff72, 0xdded]}, &(0x7f0000000240)=0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000280)={r6, 0x1ff}, &(0x7f00000002c0)=0x8) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000300)={0x0, {}, 0x0, {}, 0x7, 0xa, 0x1a, 0x0, "8903d62a3ddbf743c56590133bc561d102a7cb5fe263eb12c0a6777c6826783117b80f08a9615ad0b8817133b4f40769bae2310b9f528a17075bf0086ec56675", "822803d034e59effea29ae0b59691837911662615a3ea10d21dfc0e9a1fcb01c", [0xc, 0x101]}) socket$nl_generic(0x10, 0x3, 0x10) readlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/227, 0xe3) r7 = syz_io_uring_complete(0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r7, 0xf504, 0x0) bind$inet(r5, &(0x7f0000000500)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0xb5, 0x1, 0x1a, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x10, 0x7889, 0xf37f}}) statx(r1, &(0x7f0000000600)='./file0\x00', 0x2000, 0x20, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x0, 0x4e20, 0x9, 0x2, 0x0, 0x80, 0x32, r8, r9}, {0x8001, 0x2, 0xbf, 0x5, 0xe, 0x4, 0x8, 0x7}, {0xd79a, 0x101, 0x6, 0xe}, 0xac, 0x6e6bb0, 0x2, 0x0, 0x7, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d3, 0xc3}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3506, 0x2, 0x2, 0x5, 0x0, 0x5, 0x3ff}}, 0xe8) clock_settime(0x4, &(0x7f0000000840)={0x0, 0x989680}) setsockopt$inet_MCAST_LEAVE_GROUP(r7, 0x0, 0x2d, &(0x7f0000000880)={0x7fffffff, {{0x2, 0x4e21, @remote}}}, 0x88) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000940)={0x0, 0x1, 0x4}) ioctl$SNDCTL_TMR_TIMEBASE(r3, 0xc0045401, &(0x7f0000000980)=0x2ef) bind$inet6(r2, &(0x7f00000009c0)={0xa, 0x4e21, 0x8bb0, @empty, 0xfe9}, 0x1c) ioctl$KVM_GET_API_VERSION(r3, 0xae00, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000a00)=0x7, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@ipv6_newaddr={0x3c, 0x14, 0x400, 0x70bd29, 0x25dfdbfc, {0xa, 0x80, 0x48, 0xfd, r8}, [@IFA_CACHEINFO={0x14, 0x6, {0x6, 0xb, 0x100, 0x2}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x40860) 1.839711903s ago: executing program 5 (id=2401): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000040)) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x400, 0x0, &(0x7f0000000080)=0x9}) (async) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000100)={0x9, 0x7, 0x497, 0x614}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x0, @raw_data="893f23cb0e1001f9694840aaa636d0d6afe63968c63f847609a9d2ecfc0cb8b0439267c5936f9ae84948d07150ea6419dfd6ad761712ef5b7d3cda7adc3cc8cbd0240419d6e582228fa8d8f12e92c500149c6c94d64ede841bba00ab4043eed8d07f4d27c874e03ebc61eac7582fdb874e240b4a93db4b7e353523cf0a1f94191b83f5c06b06d60466a74ee6c57fb1c4780a8d164d86cd061fbdf68f76ae1a0702c23ea7d59904137da2b88d83bb1b2ef4a6dfe4cf8b9ebae9a3e6fa5eb54cf25bff697d24bdc702"}) (async) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x440400, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000280)=0x6, 0x4) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, r3, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2b}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x843}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x367db8d6127e1a56}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x35f}]}, 0x60}, 0x1, 0x0, 0x0, 0x20001080}, 0x4) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2, {0x68b}}, './file0\x00'}) (async, rerun: 32) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r2) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r5, 0x8, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000700)={0x0, 0x0}) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000780)={r6, 0x2, r8, 0x1}) readlink(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)=""/111, 0x6f) (async) r9 = open(&(0x7f0000000880)='./file0\x00', 0x80000, 0x0) ioctl$UFFDIO_ZEROPAGE(r9, 0xc020aa04, &(0x7f00000008c0)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r8, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, 0x2, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x28}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040001}, 0x40) (async) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x94) (async) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x94, 0x1, 0x9, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFCTH_TUPLE={0x4c, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x66}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x4000080) prctl$PR_SCHED_CORE(0x3e, 0x2, r7, 0x2, &(0x7f0000000d00)) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r10, 0x0, 0x2, &(0x7f0000000d40)=""/29, &(0x7f0000000d80)=0x1d) (async) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000dc0)='/dev/video#\x00', &(0x7f0000000e00)="3fdd4b36b089967c74ab10479babebf096a285", 0x13) (async) ioctl$TIOCEXCL(r4, 0x540c) (async) socket(0x21, 0x5, 0x36) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000e40)={0x2, 0x0, 0x77, 0x9, 0xa80000}) 1.772365028s ago: executing program 4 (id=2402): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x7) close_range(r1, 0xffffffffffffffff, 0x2000000000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002e000100030000007a00000008000000", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="04000080"], 0x24}], 0x1}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r4, 0xc0104811, &(0x7f0000000040)={0x3, 0x666, 0x7, 0x1}) 1.771519358s ago: executing program 5 (id=2403): r0 = syz_open_dev$vim2m(0x0, 0x401, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x0, 0x1, 0x4, 0x0, 0xfffffff9, {0x0, 0xea60}, {0x1, 0xc, 0x9, 0x48, 0x3, 0x8}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x496000}) 1.715606062s ago: executing program 5 (id=2404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c800600f344562600000600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000000)='./file0\x00', r7, 0x4000, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x7, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x1}, {0x0, 0x1}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x64, 0x2, [@TCA_BASIC_ACT={0x60, 0x3, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x89a8, 0x4, 0x6, 0x5}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 1.616662277s ago: executing program 5 (id=2405): r0 = add_key$user(&(0x7f00000006c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000008c0)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7977ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc30eb919f98f0c8eeedbb598bc77f0ea766d13268eb19b0cfd6d9624efc20e49f72912e99e06f832a5d6a336636bcef1293071e0a88f8453a5e3f66a", 0xc4, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="01f400000000000051fa6dd4f9", 0xd, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, 0x0, 0x0, 0x0) (async) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r2, 0x0, 0x0, 0x80800) (async) r3 = accept4(r2, 0x0, 0x0, 0x80800) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000580)={0x24, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x68, @string={0x68, 0x3, "f7d589081fb71a3c151a32c1b4a870ab1284429683a07f86bd6143f4b0481d425bbcc7edc9a6452f479d3b75814ef5908f996b31b93c9785d1bade896056fa8b8c21d39b5de28fe482c818968a996217601660030981edd1ac806ee8c2c7881b2c573c4fc637"}}, 0x0, 0x0}, 0x0) syz_usb_ep_write(r4, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") (async) syz_usb_ep_write(r4, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") sendmsg$kcm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000340)="2915cc", 0x3}, {&(0x7f0000000380)="d935b92a56954049e7949559e0f014bc1b524a709e3b2ee336ec3cca84654a578a0624e2827f5b7fc90121939452f09ad6b58e398e6238d58b53f95d640297f685eee1250360ae8300ed3a171583f587ab758655012afff1aec55d6272aa8f1a3417240396e93aa9d8a265e79a391721ef278bdf4211c6af6e55fe6965ad0363e85863abc88c0a654f1fa4c8766b020b514b60ce9ff3fe1521072d02b3bd773d0ddafc4abd5ef9ec2303097442601e19f4f3eeca9af6d366735d615c14", 0xbd}, {&(0x7f0000000440)="80502cc9462af8685a044e2d703e06595d0920a70d92dd5b25c1cefff60f9f6d706fc431948f704557097c6c1282396854a658cfb737b1ba6e067369eaea67b824d60e5ead0032ee32a010789a965122a15ffbd8a441ac7f1b6b7eb1897d639642854a5e0e30aafc93a3b6ab7a9e7853c88b0b7057c6ddbba736736f42c28e639cda0444ca123c3b4b02990bffaca1328bbe36d4fe4cd8b8a285e1cf3a385f791f5666171791eda0e3c0265a6e32549ffc88ed6a7ae6e8e98a0d9fa306ad2b1e7338eaec688e3229d66d49b9377e2f59cd4fa9b8c442db1384b810921e31582e56", 0xe1}, {&(0x7f0000000540)="1dcef4bec24df2b56bcecda0c3", 0xd}, {&(0x7f0000000580)="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", 0x632}], 0x5}, 0x8084) (async) sendmsg$kcm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000340)="2915cc", 0x3}, {&(0x7f0000000380)="d935b92a56954049e7949559e0f014bc1b524a709e3b2ee336ec3cca84654a578a0624e2827f5b7fc90121939452f09ad6b58e398e6238d58b53f95d640297f685eee1250360ae8300ed3a171583f587ab758655012afff1aec55d6272aa8f1a3417240396e93aa9d8a265e79a391721ef278bdf4211c6af6e55fe6965ad0363e85863abc88c0a654f1fa4c8766b020b514b60ce9ff3fe1521072d02b3bd773d0ddafc4abd5ef9ec2303097442601e19f4f3eeca9af6d366735d615c14", 0xbd}, {&(0x7f0000000440)="80502cc9462af8685a044e2d703e06595d0920a70d92dd5b25c1cefff60f9f6d706fc431948f704557097c6c1282396854a658cfb737b1ba6e067369eaea67b824d60e5ead0032ee32a010789a965122a15ffbd8a441ac7f1b6b7eb1897d639642854a5e0e30aafc93a3b6ab7a9e7853c88b0b7057c6ddbba736736f42c28e639cda0444ca123c3b4b02990bffaca1328bbe36d4fe4cd8b8a285e1cf3a385f791f5666171791eda0e3c0265a6e32549ffc88ed6a7ae6e8e98a0d9fa306ad2b1e7338eaec688e3229d66d49b9377e2f59cd4fa9b8c442db1384b810921e31582e56", 0xe1}, {&(0x7f0000000540)="1dcef4bec24df2b56bcecda0c3", 0xd}, {&(0x7f0000000580)="767f1affddd286b142c2302159d3b1bc0aaf9a9a59cd0e78a1466e069e8faa65fb8ffd3cf2830c4b3cd3dd1ac402ad8cb8cd8272477879a9e97eec0b531bf780d20c68437bed97e4e1f1fe6c806c73bbef30bd645f803b03ff15eb6368ec8e1fb4e62f942cecc41e92ed61fbad1a2c66cab87133c13758bb03290ebf5be1cca5c62def78a01bb421fcd09cf4cb27d9ef37facd1e97d27d4a558f218162effbdc4304ef3f74186649d4697b6844e98d693e95bf4d38dec2bf4ef57acc6ac605534574248c1f8babc0b989dea5206a70ead565b1ebaca133f6f64702d30171784ea163bd7dcfcaaebbce74b548af75ac1873c5dc00bfd0251613b804a4dd81cd381cc0a38440b02fc2d235bd061e79b46c5c2058bc64c56cbfc964b158ac3916c383b91def99c332bb7c052ec7694958376f60de1de0bafa784d4725287a92a1a08aceee8a9f492c3720278cc6079ed95579bf306c4cef30f702fbe5f15b4b066a8f55a31bc5bb95bff2e1953b903132b8181c4033e2595d0324ec4a6a1b5428be4425de3202c12e685a70997d838c765c160c84f9f50c2d375a6425434d9bde11a1f169d49100bd68b20db4f790c09dfc0e31379050edb2fc9af60ada641c8ece16beb02bcbe9673f23e537ff16c8d436fd4108c843ca0649390d516ab190c236c7900ce85e1be3f68459e4dcd8463c8b8adcafc016dac95a5c0100747e8373f8f12b6761e28e0a5e768dd85a0bf4985e26bda364ab9a1f6117723146f489f39a5446aa655b08cb1aebe7d8e94298a1a4f5ac908b3852fab0ebd5d27d70220e9a1283e4972d73d92cd07c9e51f488af709549b03c47b78c47c00f2102e48ac04fd493be0e3ed3a173ba331c3fc50d08111a29effde8d434370560e733ca3b972e47155833b7efa599d601060e6cc8e0e08cc79825ab7c6b17e7467bed997a0c48687f4f00e78cf00f2858d1a6afc156ce415f55c855cc04bd7d9d711ce41ee051e23ec6637d140b44e9fbf1b8f59083588787f1726224a46b6931a492e1e36e9b63edb9a8e3f7eb031ad5011d918a80f93095afa3bbdb663886a5db46ccd422808f7a1c23d87d239ec4d769445d0cedb28eb0799f40a44e5953f05942211148ded34a49c2ef565ad9ebf51851b16473c900063157078ffec161edbbda5bbbe64308b3296056e60dc925a01d81f31c3b815fee83a367538aece5d5207bd2c2c1cc3038cdf0ed767a5f7c7d16407b98f61c702c4f22d4ab926ad86b8bc878dcd08bca381988c01b8fb03c3327517d2372068e263339edb268f2e1fb2a80a10e696baf7a51386fd8b38b3e740d838b72cf860799eb9cf01784f30a0e4a2cf2b62be523e57a1b84ea8bf69f13d8024e17d7f86e2372a8bdda17303134660c0c1d4ec87e65baf334908cffdc02af271f573f84a7e8e7aeb4112e466740184eb8709c22ea9a6940a4784318463a9d6b0769d031b2c60b6c118a7abe94ceb2cd61ecda03703fdb4489a8e4713e8bf0700bf648451fdb138d8df69f94e63c60c9e2739a3b5a0cee8f73ea85831b46ca93219846711fb773403b1f406aca25159c0566152cadc750663271b1007abd2f2b706b21e789d39c798b0cd891d1aec40ac96f334b621a92ab2aa0c57d51b055ce611a80c6385bc351dabbcc7a850fb197738cbd858972bd60adc7df396f7f4d1f09517efeb55fb798f0fc1f749b6076f10d4cc2a41ac6a82a6f918a3e27264d0f3afac7450f13e263efb82291568647a33de5451e0ec75629986373ee323742d3d5ecfedb8f178b66709fa8734658f048a22c9fa803f7e8ce3ba520579f38e6c80f0f3edd813f62bf0da936c0b6b757818ae7bbb26f782a88811dcf64b98687a85de544628b61b13e692e144da3e21dd1537991ab33d983f78579f9ba69e75af154636ccbd109b0a96ad9230b28f78d96674318d6ec3cdb4cbe5fbe0542336a72a8f219a4dc2667900b81ca04f1d300513db849f432d3968ccfe6e6c387e900756f3d3833519472993a2962276b0d8ab189485d897961bb1938e884f21ba390a4b4ae0d1d740d1625b437b3c40e8ffb1fe1ca1daf368350a40f6a5c9cf1b2a0f18a046832d069e87cd502fb62aab2efc5ec0a86927d289ba37f7e695ec47ed8c4c6b0ecd345410144dc005655ea5cb8e4e13e58ad55e04ffb3e232ae7e753db7bba72b2a742ef93d9e6bf992b65e965d97e3bf562c2fc5be6aa999fd5d38eb9a59861e02ad6e2", 0x632}], 0x5}, 0x8084) syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), r3) 1.17192635s ago: executing program 4 (id=2406): socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xf0}, 0x2080) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0xd40, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.074045485s ago: executing program 4 (id=2407): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', '{', 0x20, 0x400}, 0x2b, 0x0) add_key$user(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 1.005947151s ago: executing program 4 (id=2408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x2, 0x3]}]}, 0x70}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000022680)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="18010000daffffff052bab08725f1a9316fe9069315e23a5a3409e3611e0b733dc55f5aa91580328dd07b2de3ce759459cd768f979621c2cac89dc380b5b1a538a0eda2207bd299db83fa07a93fe22564cdcba9354999509edce86a541dea618cd663148", @ANYRES64=r1, @ANYBLOB="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"], 0x118) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="8d19b21e5d0c9600b6e29ae680d132e4c1fb44687e524a3303", 0x19) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c0016800800b6008847"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) preadv(r4, &(0x7f0000000540)=[{&(0x7f0000000440)=""/241, 0xf1}], 0x1, 0x101, 0x50) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0x9}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x20036}, @TCA_RED_PARMS={0x14, 0x1, {0x2, 0x0, 0x2, 0x10, 0x5, 0x0, 0x1}}]}}]}, 0x150}}, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) close(r11) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) (async, rerun: 32) dup3(r8, r3, 0x0) (rerun: 32) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r12, 0x10000000000) 791.927975ms ago: executing program 2 (id=2409): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a400000000308000340000001300c000b40000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r4, &(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x3}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x2}}, 0x10) bind$tipc(r2, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 155.523893ms ago: executing program 2 (id=2410): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) close(r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2e, 0x20, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001000)=@new_dev={0x4, 0x632, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x5}}}, &(0x7f00000010c0)) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x31, 0x4, 0xfffffffffffffffa, 0x6, 0x8e335, 0xb}) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = fsmount(r2, 0x1, 0x0) fchdir(r4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0}]) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r6 = socket$packet(0x11, 0x3, 0x300) ppoll(&(0x7f0000000000)=[{r6, 0x2210}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0xffffffff}, 0x7, 0x0, &(0x7f0000000040), 0x5, 0x0}}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) 94.124677ms ago: executing program 2 (id=2411): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000180)={0x1d, r3, 0x40001, {0x2, 0x0, 0x6}, 0x1}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048081) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x25, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, 0x0, 0xd231c4f959ad4808) syz_open_dev$dri(0x0, 0x1, 0x2200) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r6, 0x2270, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 0s ago: executing program 4 (id=2412): select(0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)={0x0, 0xea60}) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}, 0xc35}}, {{0xa, 0x0, 0x7, @empty, 0x321}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000001bc0)=""/126, 0x7e}], 0x1, 0x111, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x60, 0x0, &(0x7f00000001c0)=[@register_looper, @clear_death={0x400c630f, 0x2}, @release, @decrefs={0x40046307, 0x1}, @register_looper, @increfs_done={0x40106308, 0x2}, @request_death, @enter_looper, @acquire, @decrefs={0x40046307, 0x1}], 0x26, 0x0, &(0x7f0000000240)="6b62e512ea3f12502893fa9251b2a59af6a4ccf30a82328ca9c58d28d9a2e194f42e5530abf8"}) r4 = socket$inet(0x2, 0x1, 0x100) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = semget$private(0x0, 0x3, 0x80) semctl$IPC_RMID(r7, 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f00000021c0)='./file0\x00', 0x4) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="400100001a0001"], 0x140}}, 0x844) r9 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000440), 0x28400, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000780)=ANY=[@ANYRES8=r0, @ANYRESDEC=r7, @ANYRESDEC=r0, @ANYBLOB="55b5e49884276fb3cfd25363df82ab0f", @ANYRES64=r3, @ANYRESHEX=r0, @ANYBLOB="38481be635dc0902668eacb5cb8bc8c08823e85ade0f76357d00f1d671c07f6d166385830daec0a0d10de039c1a374676f9d43b62a11a1ed5f2dd5afa2f84ebe3e1f2ddb169c45490131b3d82fe793f9c46e77a8d7767682ae0b1650332cd0755512a8cbefef0a646bc61d6e0220019644f3dcc7a40eab0a28615eac2f03f0bf7171e8431773313c26b8eefb29361b6d699ddd51fbbc33d933838d1ed70345f62fc0b5e5e30a35b2d78286471a", @ANYBLOB="c68e07bdd31d75f2a0788b5dff25355b0763370f2a5cbbdd9c942d7c439490a149793618ee521303b5a02b0678db58d721c0038e09fc3d2deaaed814409ea016e37f247780cf5ba004b21790ed58774532d78ed2b0f91fb86f3f34ae3c1147ead29dbbaca280616aeaebfd8a5cbf5fb3d26adc9267794a91371d1319ca10cd98081ae610ecceed6dedb5de747ac4ce6530666d6fe950122e43ca49240f95a51ede72cf583c3409ea7b0ffcb99cbfe91f86ae5d933f5dbd9632fe414dbd66696f33d25e059e5aa605b60a0d076d1a35d2127081176ecd6ec7e93a3a5c652e1693c93de1b2dfb9bd29"]) read$FUSE(r10, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r10, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r11, r12, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r9, {0xee00, r12}}, './file0\x00'}) socket$inet(0x2, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast2, @in=@remote}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000000400)=0xe4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x11, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) kernel console output (not intermixed with test programs): -16 [ 420.534701][T13320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.559733][T13320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.594886][ T30] audit: type=1326 audit(1780903450.659:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13323 comm="syz.3.2014" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b139ce59 code=0x7ffc0000 [ 420.644048][ T30] audit: type=1326 audit(1780903450.659:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13323 comm="syz.3.2014" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b139ce59 code=0x7ffc0000 [ 420.672739][ T30] audit: type=1326 audit(1780903450.659:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13323 comm="syz.3.2014" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b139ce59 code=0x7ffc0000 [ 420.699084][ T30] audit: type=1326 audit(1780903450.659:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13323 comm="syz.3.2014" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b139ce59 code=0x7ffc0000 [ 420.728660][ T30] audit: type=1326 audit(1780903450.659:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13323 comm="syz.3.2014" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f31b139ce59 code=0x7ffc0000 [ 420.755856][ T30] audit: type=1326 audit(1780903450.659:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13323 comm="syz.3.2014" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b139ce59 code=0x7ffc0000 [ 420.783136][ T30] audit: type=1326 audit(1780903450.659:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13323 comm="syz.3.2014" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b139ce59 code=0x7ffc0000 [ 420.809516][ T30] audit: type=1326 audit(1780903450.689:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13323 comm="syz.3.2014" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b139ce59 code=0x7ffc0000 [ 420.837207][ T30] audit: type=1326 audit(1780903450.689:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13323 comm="syz.3.2014" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b139ce59 code=0x7ffc0000 [ 420.865305][ T30] audit: type=1326 audit(1780903450.709:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13323 comm="syz.3.2014" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f31b139ce59 code=0x7ffc0000 [ 420.894251][ T808] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 420.934379][T13327] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2014'. [ 421.050185][ T808] usb 1-1: Using ep0 maxpacket: 32 [ 421.062270][ T808] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 421.081642][ T808] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 421.091014][ T808] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 421.122273][ T808] usb 1-1: config 1 has no interface number 0 [ 421.143901][ T808] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 421.166817][ T808] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 421.193402][ T808] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 421.204188][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.226157][ T808] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 421.305432][T13340] netlink: 'syz.4.2019': attribute type 1 has an invalid length. [ 421.399116][T13333] Set syz1 is full, maxelem 65536 reached [ 421.433703][ T808] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 421.591437][ T5708] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 421.658283][T13350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.669261][T13350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.771743][ T5708] usb 4-1: Using ep0 maxpacket: 16 [ 421.793906][ T5708] usb 4-1: unable to get BOS descriptor or descriptor too short [ 421.808507][ T5708] usb 4-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 421.831478][ T5708] usb 4-1: New USB device found, idVendor=5fc9, idProduct=0061, bcdDevice=76.09 [ 421.850359][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.872824][ T5708] usb 4-1: Product: Ð’ [ 421.885813][ T5708] usb 4-1: Manufacturer: ဉ [ 421.892900][ T5715] usb 1-1: USB disconnect, device number 66 [ 421.900574][ T5708] usb 4-1: SerialNumber: î˜é€§èžá¯ ìƒœì‘‹ë©»ê»”ì« î¯ê¾ìŸ‚ë‘‘ì–齘烆áŸê¥êŒµî»à¬°à©‰ä¦‘긴뽬춸븖짌 [ 421.913866][ T5715] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 421.959731][T13358] 8021q: adding VLAN 0 to HW filter on device bond3 [ 421.969598][T13358] bond0: (slave bond3): Enslaving as an active interface with an up link [ 422.070149][ T5726] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 422.224250][ T5726] usb 6-1: unable to get BOS descriptor or descriptor too short [ 422.243215][ T5726] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 16, setting to 8 [ 422.259539][ T5726] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 422.272223][ T5726] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 422.285033][ T5726] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 32, setting to 8 [ 422.296750][ T5726] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 86, changing to 4 [ 422.308923][ T5726] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 0 [ 422.321365][ T5726] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 64, setting to 8 [ 422.336293][ T5726] usb 6-1: string descriptor 0 read error: -22 [ 422.344277][ T5726] usb 6-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 0.40 [ 422.353863][ T5726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.367435][T13356] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 422.375216][T13356] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 422.386883][ T5726] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 422.548316][ T5726] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 422.603300][T13372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.621537][T13372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.651401][T13356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.700529][T13356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.775079][T13376] sctp: [Deprecated]: syz.2.2030 (pid 13376) Use of int in maxseg socket option. [ 422.775079][T13376] Use struct sctp_assoc_value instead [ 422.778249][ T5700] usb 6-1: USB disconnect, device number 12 [ 423.297585][T13380] Set syz1 is full, maxelem 65536 reached [ 423.393324][ T5790] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 423.572983][ T5790] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.587077][ T5790] usb 3-1: config 0 interface 0 has no altsetting 0 [ 423.596514][ T5790] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 423.606317][ T5790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.615189][ T5790] usb 3-1: Product: syz [ 423.620028][ T5790] usb 3-1: Manufacturer: syz [ 423.625361][ T5790] usb 3-1: SerialNumber: syz [ 423.631903][ T5708] usb 4-1: USB disconnect, device number 127 [ 423.648487][ T5790] usb 3-1: config 0 descriptor?? [ 423.673370][ T5790] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 423.682120][ T5726] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 423.711348][T13399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.721553][ T5790] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 423.722752][T13399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.740958][ T5790] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 423.752202][ T5715] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 423.756920][ T5790] usb 3-1: media controller created [ 423.785223][ T5790] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 423.841798][ T5726] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.854905][ T5726] usb 6-1: config 0 interface 0 has no altsetting 0 [ 423.862740][ T5726] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 423.876484][ T5790] DVB: Unable to find symbol tda10046_attach() [ 423.882967][ T5726] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.891258][ T5790] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 423.902945][ T5726] usb 6-1: config 0 descriptor?? [ 423.907943][ T5790] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 423.920475][ T5715] usb 1-1: Using ep0 maxpacket: 8 [ 423.935012][ T5715] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.947383][ T5715] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.957646][ T5715] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 423.973190][ T5715] usb 1-1: config 0 interface 0 has no altsetting 0 [ 423.979854][ T5715] usb 1-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 423.991458][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.006777][ T5715] usb 1-1: config 0 descriptor?? [ 424.135778][ T5790] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 424.161594][ T5790] usb 3-1: USB disconnect, device number 20 [ 424.250355][ T5708] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 424.334167][ T5726] lua 0003:1E7D:2C2E.0026: unknown main item tag 0x0 [ 424.345098][ T5726] lua 0003:1E7D:2C2E.0026: unknown main item tag 0x0 [ 424.352239][ T5726] lua 0003:1E7D:2C2E.0026: unknown main item tag 0x0 [ 424.358996][ T5726] lua 0003:1E7D:2C2E.0026: unknown main item tag 0x0 [ 424.365896][ T5726] lua 0003:1E7D:2C2E.0026: unknown main item tag 0x0 [ 424.372909][ T5726] lua 0003:1E7D:2C2E.0026: unknown main item tag 0x0 [ 424.379618][ T5726] lua 0003:1E7D:2C2E.0026: unknown main item tag 0x0 [ 424.386521][ T5726] lua 0003:1E7D:2C2E.0026: unknown main item tag 0x0 [ 424.394032][ T5726] lua 0003:1E7D:2C2E.0026: unknown main item tag 0x0 [ 424.400790][ T5726] lua 0003:1E7D:2C2E.0026: unknown main item tag 0x0 [ 424.410044][ T5726] lua 0003:1E7D:2C2E.0026: hidraw0: USB HID v0.20 Device [HID 1e7d:2c2e] on usb-dummy_hcd.5-1/input0 [ 424.426922][ T5708] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 424.436557][ T5708] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 424.449377][ T5708] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 424.459410][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.468060][ T5708] usb 4-1: Product: syz [ 424.472983][ T5708] usb 4-1: Manufacturer: syz [ 424.477687][ T5708] usb 4-1: SerialNumber: syz [ 424.488476][ T5708] usb 4-1: config 0 descriptor?? [ 424.503678][ T5708] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 424.543746][T13394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.555899][T13394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.694684][ T5715] usbhid 1-1:0.0: can't add hid device: -71 [ 424.712646][ T5715] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 424.736818][ T5715] usb 1-1: USB disconnect, device number 67 [ 424.970443][ T5726] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 425.120166][ T5726] usb 3-1: Using ep0 maxpacket: 16 [ 425.142714][ T5726] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.154861][ T5726] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 425.165453][ T5726] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 425.175235][ T5726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 425.183451][ T5726] usb 3-1: SerialNumber: syz [ 425.195874][ T5726] usb 3-1: 0:2 : does not exist [ 425.399467][T13421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.411385][T13421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.480802][ T5726] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 425.506738][ T5726] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 425.537051][ T5726] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 425.573942][ T5726] usb 3-1: USB disconnect, device number 21 [ 425.601878][ T5944] udevd[5944]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 426.324483][ T5746] usb 4-1: USB disconnect, device number 2 [ 426.446759][ T5726] usb 6-1: USB disconnect, device number 13 [ 426.566049][T13449] netlink: 'syz.0.2051': attribute type 12 has an invalid length. [ 426.704773][ T30] kauditd_printk_skb: 944 callbacks suppressed [ 426.704788][ T30] audit: type=1326 audit(1780903456.769:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.4.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fe79ce59 code=0x7ffc0000 [ 426.753034][T13454] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2052'. [ 426.768869][ T30] audit: type=1326 audit(1780903456.809:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.4.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fe79ce59 code=0x7ffc0000 [ 426.811912][ T30] audit: type=1326 audit(1780903456.809:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.4.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fe79ce59 code=0x7ffc0000 [ 426.841970][ T30] audit: type=1326 audit(1780903456.809:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.4.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fe79ce59 code=0x7ffc0000 [ 426.869509][ T30] audit: type=1326 audit(1780903456.809:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.4.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fe0fe79ce59 code=0x7ffc0000 [ 426.896228][ T30] audit: type=1326 audit(1780903456.809:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.4.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fe79ce59 code=0x7ffc0000 [ 426.920602][ T5726] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 426.947372][ T30] audit: type=1326 audit(1780903456.809:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.4.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fe79ce59 code=0x7ffc0000 [ 426.972985][ T5708] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 426.990922][ T30] audit: type=1326 audit(1780903456.809:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.4.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fe79ce59 code=0x7ffc0000 [ 427.017282][ T30] audit: type=1326 audit(1780903456.809:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.4.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe0fe79ce59 code=0x7ffc0000 [ 427.047549][ T30] audit: type=1326 audit(1780903456.809:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.4.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fe79ce59 code=0x7ffc0000 [ 427.080311][ T5726] usb 6-1: Using ep0 maxpacket: 16 [ 427.110433][ T5726] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.128387][ T5726] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 427.145076][T13462] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 427.159471][ T5726] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 427.176263][T13461] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 427.184537][ T5708] usb 1-1: unable to get BOS descriptor or descriptor too short [ 427.188990][ T5726] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 60930, setting to 1024 [ 427.205000][ T5708] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.217437][ T5708] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 427.233027][ T5708] usb 1-1: string descriptor 0 read error: -22 [ 427.239702][ T5708] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 427.243039][ T5726] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 427.266148][ T5726] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 427.266201][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.291342][ T5726] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 427.313433][ T5726] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 427.324984][ T5726] usb 6-1: SerialNumber: syz [ 427.325791][ T5708] usb 1-1: selecting invalid altsetting 1 [ 427.334615][T13448] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 427.350470][ T5708] usb 1-1: unit 3 not found! [ 427.374009][T13448] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 427.616751][ T5726] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 427.636918][ T5708] usb 1-1: cannot request logical cluster ID: 0 (err: -71) [ 427.670871][ T5726] usb 6-1: USB disconnect, device number 14 [ 427.680515][ T5708] usb 1-1: invalid MIXER UNIT descriptor 6 [ 427.777980][ T5708] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 427.791604][ T5708] usb 1-1: USB disconnect, device number 68 [ 427.847155][ T5650] udevd[5650]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 427.996482][T13500] netlink: 'syz.4.2062': attribute type 62 has an invalid length. [ 428.079939][T13507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2066'. [ 428.289484][T13513] xt_ecn: cannot match TCP bits for non-tcp packets [ 428.750598][ T5708] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 428.938663][ T5708] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 428.962452][ T5708] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 33320, setting to 64 [ 428.981252][ T5708] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 428.997226][ T5708] usb 1-1: config 0 interface 0 has no altsetting 0 [ 429.021052][ T5708] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 429.035644][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.065602][ T5708] usb 1-1: config 0 descriptor?? [ 429.073137][T13520] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 429.230338][ T5693] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 429.340180][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 429.410397][ T5693] usb 6-1: Using ep0 maxpacket: 8 [ 429.424518][ T5693] usb 6-1: unable to get BOS descriptor or descriptor too short [ 429.449957][ T5693] usb 6-1: string descriptor 0 read error: -22 [ 429.462558][ T5693] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 429.484878][ T5693] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.510695][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 429.525940][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.546283][ T5708] hid_parser_main: 26 callbacks suppressed [ 429.546304][ T5708] elecom 0003:056E:010D.0027: unknown main item tag 0x0 [ 429.563416][ T5693] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 429.572018][ T24] usb 3-1: config 0 has no interfaces? [ 429.577776][ T24] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 429.587932][ T5708] elecom 0003:056E:010D.0027: unknown main item tag 0x0 [ 429.604302][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.613479][ T5708] elecom 0003:056E:010D.0027: unknown main item tag 0x0 [ 429.621608][ T5708] elecom 0003:056E:010D.0027: unknown main item tag 0x0 [ 429.630355][T13534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.636715][ T5708] elecom 0003:056E:010D.0027: unknown main item tag 0x0 [ 429.648384][ T24] usb 3-1: config 0 descriptor?? [ 429.680312][ T5708] elecom 0003:056E:010D.0027: hidraw0: USB HID v1.01 Device [HID 056e:010d] on usb-dummy_hcd.0-1/input0 [ 429.682711][T13534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.748000][T13528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.772186][ T5708] usb 1-1: USB disconnect, device number 69 [ 430.136763][ T5726] usb 3-1: USB disconnect, device number 22 [ 430.240399][ T5746] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 430.414759][ T5746] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 430.431565][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.449822][ T5746] usb 4-1: Product: syz [ 430.454180][ T5746] usb 4-1: Manufacturer: syz [ 430.459929][ T5746] usb 4-1: SerialNumber: syz [ 430.471897][ T5746] usb 4-1: config 0 descriptor?? [ 430.890229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 431.070277][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 431.118172][ T5746] usb 4-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 431.155331][ T5746] usb 4-1: Firmware version (0.0) predates our first public release. [ 431.183730][ T5746] usb 4-1: Please update to version 0.2 or newer [ 431.208554][T13556] netlink: 'syz.2.2077': attribute type 16 has an invalid length. [ 431.238807][T13556] netlink: 'syz.2.2077': attribute type 17 has an invalid length. [ 431.271170][T13556] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2077'. [ 431.327725][ T5746] usb 4-1: Firmware: build Ô [ 431.359937][ T5693] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 431.563418][ T5746] usb 4-1: USB disconnect, device number 3 [ 431.608399][ T5693] usb 6-1: USB disconnect, device number 15 [ 431.804812][ T30] kauditd_printk_skb: 369 callbacks suppressed [ 431.804829][ T30] audit: type=1326 audit(1780903461.869:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13532 comm="syz.4.2073" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe0fe79ce59 code=0x7ffc0000 [ 431.855485][T13563] loop5: detected capacity change from 0 to 7 [ 431.879365][T13563] Dev loop5: unable to read RDB block 7 [ 431.908973][T13563] loop5: unable to read partition table [ 431.930752][T13563] loop5: partition table beyond EOD, truncated [ 431.946234][T13563] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 431.961020][ T24] usb 3-1: device descriptor read/64, error -71 [ 432.125055][T13565] loop5: detected capacity change from 0 to 7 [ 432.143740][T13567] tipc: Enabling of bearer rejected, failed to enable media [ 432.161154][T13565] loop5: p1 p4 [ 432.165187][T13565] loop5: partition table partially beyond EOD, truncated [ 432.185653][T13565] loop5: p1 start 12298 is beyond EOD, truncated [ 432.202083][T13565] loop5: p4 start 33554432 is beyond EOD, truncated [ 432.220222][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 432.411642][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 432.423187][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.439378][ T24] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 432.464008][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.498141][T13575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.529362][ T24] usb 3-1: config 0 descriptor?? [ 432.547384][T13578] sctp: [Deprecated]: syz.0.2085 (pid 13578) Use of int in max_burst socket option deprecated. [ 432.547384][T13578] Use struct sctp_assoc_value instead [ 432.563478][T13575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.620700][ T5746] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 432.760205][ T5746] usb 6-1: device descriptor read/64, error -71 [ 433.000305][ T5746] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 433.130825][ T5746] usb 6-1: device descriptor read/64, error -71 [ 433.251400][T13584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.253348][ T5746] usb usb6-port1: attempt power cycle [ 433.273477][T13584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.640284][ T5746] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 433.680764][ T5746] usb 6-1: device descriptor read/8, error -71 [ 433.921731][ T5746] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 433.962810][ T5746] usb 6-1: device descriptor read/8, error -71 [ 434.080642][ T5746] usb usb6-port1: unable to enumerate USB device [ 434.473645][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 434.479868][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 434.508662][ T24] usb 3-1: USB disconnect, device number 24 [ 434.766990][T13618] loop3: detected capacity change from 0 to 7 [ 434.777299][T13618] Dev loop3: unable to read RDB block 7 [ 434.786395][T13618] loop3: unable to read partition table [ 434.792330][T13618] loop3: partition table beyond EOD, truncated [ 434.798621][T13618] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 434.981632][ T5708] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 435.020472][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 435.170672][ T5708] usb 1-1: Using ep0 maxpacket: 8 [ 435.183597][ T5708] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 435.200201][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.213660][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 435.230103][ T5708] usb 1-1: Product: syz [ 435.235804][ T24] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 435.245014][ T5708] usb 1-1: Manufacturer: syz [ 435.260136][ T5708] usb 1-1: SerialNumber: syz [ 435.264786][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.280832][ T5708] usb 1-1: config 0 descriptor?? [ 435.293521][ T24] usb 3-1: config 0 descriptor?? [ 435.313842][T13616] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 435.437906][T13627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2101'. [ 435.491477][ T5708] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 435.517771][T13629] input: syz1 as /devices/virtual/input/input43 [ 435.573866][T13631] kvm: emulating exchange as write [ 435.606795][T13633] fuse: Unknown parameter ' ' [ 435.747944][ T24] asus 0003:0B05:1ABE.0028: unknown main item tag 0x0 [ 435.761649][ T24] asus 0003:0B05:1ABE.0028: unknown main item tag 0x0 [ 435.774153][ T24] asus 0003:0B05:1ABE.0028: unknown main item tag 0x0 [ 435.782234][ T24] asus 0003:0B05:1ABE.0028: unknown main item tag 0x0 [ 435.789053][ T24] asus 0003:0B05:1ABE.0028: unexpected long global item [ 435.796960][ T24] asus 0003:0B05:1ABE.0028: Asus hid parse failed: -22 [ 435.804553][ T24] asus 0003:0B05:1ABE.0028: probe with driver asus failed with error -22 [ 435.842545][T13636] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2103'. [ 435.861060][ T5726] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 436.020304][ T5726] usb 4-1: Using ep0 maxpacket: 32 [ 436.029599][ T5726] usb 4-1: unable to get BOS descriptor or descriptor too short [ 436.043347][ T5726] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 247, changing to 7 [ 436.057230][ T5726] usb 4-1: New USB device found, idVendor=0763, idProduct=1033, bcdDevice= 0.40 [ 436.068673][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.082251][ T5726] usb 4-1: Product: syz [ 436.089159][ T5726] usb 4-1: Manufacturer: syz [ 436.094815][ T5726] usb 4-1: SerialNumber: syz [ 436.125003][ T5708] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 436.144638][ T5708] usb 1-1: USB disconnect, device number 70 [ 436.276974][T13648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.286731][T13648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.298806][T13648] netlink: 'syz.4.2107': attribute type 1 has an invalid length. [ 436.309110][T13648] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2107'. [ 436.334045][ T5726] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 436.348323][ T5726] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 436.357277][ T5726] usb 4-1: unit 3 not found! [ 436.362008][ T5726] usb 4-1: unit 8 not found! [ 436.447705][ T5726] usb 4-1: USB disconnect, device number 4 [ 436.459094][ T24] usb 3-1: USB disconnect, device number 25 [ 436.468088][T13650] FAULT_INJECTION: forcing a failure. [ 436.468088][T13650] name failslab, interval 1, probability 0, space 0, times 0 [ 436.485026][T13650] CPU: 1 UID: 0 PID: 13650 Comm: syz.5.2108 Tainted: G L syzkaller #0 PREEMPT(full) [ 436.485051][T13650] Tainted: [L]=SOFTLOCKUP [ 436.485057][T13650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 436.485072][T13650] Call Trace: [ 436.485079][T13650] [ 436.485090][T13650] dump_stack_lvl+0xe8/0x150 [ 436.485115][T13650] should_fail_ex+0x412/0x560 [ 436.485138][T13650] should_failslab+0xa8/0x100 [ 436.485153][T13650] ? skb_clone+0x212/0x3a0 [ 436.485169][T13650] kmem_cache_alloc_noprof+0x87/0x650 [ 436.485190][T13650] ? __netlink_lookup+0xc6/0x8b0 [ 436.485207][T13650] skb_clone+0x212/0x3a0 [ 436.485226][T13650] __netlink_deliver_tap+0x404/0x850 [ 436.485258][T13650] ? netlink_deliver_tap+0x2e/0x1b0 [ 436.485280][T13650] netlink_deliver_tap+0x19c/0x1b0 [ 436.485302][T13650] netlink_unicast+0x730/0x8e0 [ 436.485330][T13650] netlink_sendmsg+0x813/0xb40 [ 436.485354][T13650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.485372][T13650] ? aa_sock_msg_perm+0xf1/0x1b0 [ 436.485396][T13650] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 436.485420][T13650] ____sys_sendmsg+0x972/0x9f0 [ 436.485436][T13650] ? __might_fault+0xaf/0x130 [ 436.485462][T13650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 436.485487][T13650] ? import_iovec+0x73/0xa0 [ 436.485510][T13650] ___sys_sendmsg+0x2a5/0x360 [ 436.485525][T13650] ? __lock_acquire+0x6b5/0x2cf0 [ 436.485546][T13650] ? __pfx____sys_sendmsg+0x10/0x10 [ 436.485596][T13650] ? __fget_files+0x2a/0x420 [ 436.485614][T13650] ? __fget_files+0x3a0/0x420 [ 436.485642][T13650] __x64_sys_sendmsg+0x1bd/0x2a0 [ 436.485662][T13650] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 436.485688][T13650] ? __pfx_ksys_write+0x10/0x10 [ 436.485718][T13650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.485736][T13650] do_syscall_64+0x174/0x580 [ 436.485756][T13650] ? trace_irq_disable+0x3b/0x140 [ 436.485778][T13650] ? clear_bhb_loop+0x40/0x90 [ 436.485798][T13650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.485815][T13650] RIP: 0033:0x7f3ba079ce59 [ 436.485831][T13650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.485844][T13650] RSP: 002b:00007f3ba169e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.485861][T13650] RAX: ffffffffffffffda RBX: 00007f3ba0a15fa0 RCX: 00007f3ba079ce59 [ 436.485872][T13650] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 436.485881][T13650] RBP: 00007f3ba169e090 R08: 0000000000000000 R09: 0000000000000000 [ 436.485891][T13650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.485900][T13650] R13: 00007f3ba0a16038 R14: 00007f3ba0a15fa0 R15: 00007f3ba0b3fa48 [ 436.485923][T13650] [ 436.884916][ T5645] udevd[5645]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 436.911553][T13656] netlink: 'syz.0.2109': attribute type 39 has an invalid length. [ 437.144778][T13664] netlink: 'syz.4.2111': attribute type 12 has an invalid length. [ 437.250161][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 437.256362][T13650] Set syz1 is full, maxelem 65536 reached [ 437.327799][T13669] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 437.385969][T13675] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2114'. [ 437.424731][ T24] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 437.436687][ T5708] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 437.449905][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.461789][ T24] usb 3-1: Product: syz [ 437.467110][ T24] usb 3-1: Manufacturer: syz [ 437.472377][ T24] usb 3-1: SerialNumber: syz [ 437.483658][ T24] usb 3-1: config 0 descriptor?? [ 437.503089][ T24] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 437.622991][ T5708] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 437.647558][ T5708] usb 4-1: config 1 has no interface number 0 [ 437.660727][ T5708] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 437.670186][ T5708] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 437.698784][ T5708] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 240, changing to 7 [ 437.723629][ T5708] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 437.749608][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.787816][ T5708] usb 4-1: Product: syz [ 437.806348][ T5708] usb 4-1: Manufacturer: syz [ 437.818770][ T5708] usb 4-1: SerialNumber: syz [ 437.821255][T13684] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2117'. [ 438.058636][T13688] netlink: 'syz.5.2118': attribute type 1 has an invalid length. [ 438.069037][ T5708] usb 4-1: 1:0 : does not exist [ 438.077869][ T5708] usb 4-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 438.087744][T13688] netlink: 'syz.5.2118': attribute type 1 has an invalid length. [ 438.108956][ T5708] usb 4-1: 1:3 : does not exist [ 438.123060][ T5708] usb 4-1: 1:4 : does not exist [ 438.144036][ T5708] usb 4-1: incorrect wMaxPacketSize 0x210 for BADD profile [ 438.279003][ T5708] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 438.322975][ T5708] usb 4-1: USB disconnect, device number 5 [ 438.394300][ T6531] udevd[6531]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.542195][T13658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.589126][T13658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.630685][ T24] gspca_sunplus: reg_w_riv err -110 [ 438.646578][ T24] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 438.716745][T13697] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2120'. [ 438.737451][T13699] loop5: detected capacity change from 0 to 7 [ 438.781834][T13699] loop5: p1 p4 [ 438.781870][T13699] loop5: partition table partially beyond EOD, truncated [ 438.782044][T13699] loop5: p1 start 12298 is beyond EOD, truncated [ 438.782063][T13699] loop5: p4 start 33554432 is beyond EOD, truncated [ 439.047904][ T30] audit: type=1326 audit(1780903469.109:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13657 comm="syz.2.2110" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e4b79ce59 code=0x0 [ 439.176919][T13715] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2126'. [ 439.234279][T13719] syzkaller0: entered promiscuous mode [ 439.239814][T13719] syzkaller0: entered allmulticast mode [ 439.704019][T13733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.722778][T13734] netlink: 'syz.4.2131': attribute type 28 has an invalid length. [ 439.732884][T13733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.750534][T13734] netlink: 'syz.4.2131': attribute type 3 has an invalid length. [ 439.768550][T13734] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2131'. [ 439.853599][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.863696][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.161380][ T5708] usb 3-1: USB disconnect, device number 26 [ 440.265287][T13759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.305233][T13761] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2137'. [ 440.314982][T13759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.840311][ T5726] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 440.850475][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 441.004361][ T10] usb 4-1: device descriptor read/64, error -71 [ 441.061063][ T5726] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 441.086269][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.103145][ T5726] usb 3-1: Product: syz [ 441.115075][ T5726] usb 3-1: Manufacturer: syz [ 441.129306][ T5726] usb 3-1: SerialNumber: syz [ 441.270599][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 441.424537][ T10] usb 4-1: device descriptor read/64, error -71 [ 441.442057][T13790] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2144'. [ 441.466751][T13790] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2144'. [ 441.560933][ T10] usb usb4-port1: attempt power cycle [ 441.621146][ T5726] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 441.651166][ T5726] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 441.743075][T13797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.771393][ T809] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 441.783534][T13797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.824287][T13797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.835209][T13797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.843654][ T5708] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 441.853646][T13797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.873477][T13797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.912554][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 441.940199][ T809] usb 6-1: Using ep0 maxpacket: 32 [ 441.946224][ T10] usb 4-1: device descriptor read/8, error -71 [ 441.961209][ T809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.973502][ T809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.983778][ T809] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 441.993458][ T809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.004929][ T809] usb 6-1: config 0 descriptor?? [ 442.010528][ T5708] usb 1-1: Using ep0 maxpacket: 8 [ 442.014647][ T809] hub 6-1:0.0: USB hub found [ 442.026996][ T5708] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.051214][ T5708] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 442.070332][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.092827][ T5708] usb 1-1: config 0 descriptor?? [ 442.104791][ T5708] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 442.200247][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 442.214335][ T809] hub 6-1:0.0: 1 port detected [ 442.221370][ T10] usb 4-1: device descriptor read/8, error -71 [ 442.331248][ T10] usb usb4-port1: unable to enumerate USB device [ 442.420661][T13790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.445566][T13790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.481412][ T809] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 442.489975][ T809] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 442.508165][ T809] usbhid 6-1:0.0: can't add hid device: -71 [ 442.516136][ T809] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 442.552283][ T809] usb 6-1: USB disconnect, device number 20 [ 443.081800][T13805] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2149'. [ 443.107784][ T5708] gspca_vc032x: reg_r err -32 [ 443.112558][T13795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.118036][T13795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.132696][ T5708] vc032x 1-1:0.0: probe with driver vc032x failed with error -32 [ 443.205395][ T5708] usb 1-1: USB disconnect, device number 71 [ 443.297776][ T5726] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 443.318036][T13812] loop5: detected capacity change from 0 to 7 [ 443.318122][ T5726] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 443.331562][T13812] loop5: p1 p4 [ 443.337627][ T5726] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 443.342158][T13812] loop5: partition table partially beyond EOD, truncated [ 443.349833][ T5726] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 443.366341][T13812] loop5: p1 start 12298 is beyond EOD, truncated [ 443.378657][T13812] loop5: p4 start 33554432 is beyond EOD, truncated [ 443.381588][ T5726] usb 3-1: USB disconnect, device number 27 [ 443.498188][T13814] tipc: Started in network mode [ 443.522291][T13814] tipc: Node identity 4, cluster identity 4711 [ 443.547282][T13814] tipc: Node number set to 4 [ 443.890531][ T5708] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 444.050658][ T5726] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 444.065629][ T5708] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 444.079373][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.087517][ T5708] usb 4-1: Product: syz [ 444.094467][ T5708] usb 4-1: Manufacturer: syz [ 444.100949][ T5708] usb 4-1: SerialNumber: syz [ 444.113414][ T5708] usb 4-1: config 0 descriptor?? [ 444.213469][ T5726] usb 1-1: unable to get BOS descriptor or descriptor too short [ 444.222151][ T5726] usb 1-1: not running at top speed; connect to a high speed hub [ 444.233243][ T5726] usb 1-1: config 9 has an invalid interface number: 65 but max is 0 [ 444.244420][ T5726] usb 1-1: config 9 has no interface number 0 [ 444.254719][ T5726] usb 1-1: config 9 interface 65 has no altsetting 0 [ 444.265030][ T5726] usb 1-1: New USB device found, idVendor=12d1, idProduct=ccef, bcdDevice=e5.56 [ 444.275113][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.283504][ T5726] usb 1-1: Product: syz [ 444.288014][ T5726] usb 1-1: Manufacturer: syz [ 444.293431][ T5726] usb 1-1: SerialNumber: syz [ 444.512348][ T5726] cdc_mbim 1-1:9.65: More than one union descriptor, skipping ... [ 444.530957][ T5726] cdc_mbim 1-1:9.65: CDC Union missing and no IAD found [ 444.551338][ T5726] cdc_mbim 1-1:9.65: bind() failure [ 444.551489][T13832] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 444.563356][T13832] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 444.566735][ T5726] usb 1-1: USB disconnect, device number 72 [ 444.647050][T13832] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 444.678918][ T5708] usb 4-1: f81604_read: reg: 105 failed: -EPIPE [ 444.686989][ T5708] f81604 4-1:0.0: Setting termination of CH#0 failed: -EPIPE [ 444.694956][ T5708] f81604 4-1:0.0: probe with driver f81604 failed with error -32 [ 445.527982][T13835] Set syz1 is full, maxelem 65536 reached [ 445.774138][T13847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.783128][T13847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.860205][ T10] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 446.011794][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 446.018894][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 446.027211][ T10] usb 1-1: config 0 has no interface number 0 [ 446.035792][ T10] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 446.047834][ T10] usb 1-1: config 0 interface 1 has no altsetting 0 [ 446.058450][ T10] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 446.068000][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.076610][ T10] usb 1-1: Product: syz [ 446.081101][ T10] usb 1-1: Manufacturer: syz [ 446.085776][ T10] usb 1-1: SerialNumber: syz [ 446.103385][ T10] usb 1-1: config 0 descriptor?? [ 446.112456][T13849] loop5: detected capacity change from 0 to 7 [ 446.122104][T13849] loop5: p1 p4 [ 446.125617][T13849] loop5: partition table partially beyond EOD, truncated [ 446.133577][T13849] loop5: p1 start 12298 is beyond EOD, truncated [ 446.139949][T13849] loop5: p4 start 33554432 is beyond EOD, truncated [ 446.352266][ T10] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 446.366324][ T10] cx231xx 1-1:0.1: Failed to read PCB config [ 446.373253][ T10] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 446.383918][ T10] usb 1-1: USB disconnect, device number 73 [ 446.460208][T13477] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 446.572392][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 446.594672][T13477] usb 3-1: device descriptor read/64, error -71 [ 446.654707][ T5726] usb 4-1: USB disconnect, device number 10 [ 446.810218][ T5708] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 446.853673][T13477] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 446.993129][T13477] usb 3-1: device descriptor read/64, error -71 [ 446.999900][ T5708] usb 1-1: Using ep0 maxpacket: 32 [ 447.013404][ T5708] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 447.030506][ T5726] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 447.040127][ T5708] usb 1-1: config 0 has no interface number 0 [ 447.055814][ T5708] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 447.080125][ T5708] usb 1-1: config 0 interface 1 has no altsetting 0 [ 447.094773][ T5708] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 447.116042][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.141769][T13477] usb usb3-port1: attempt power cycle [ 447.149556][ T5708] usb 1-1: Product: syz [ 447.156172][ T5708] usb 1-1: Manufacturer: syz [ 447.167659][ T5708] usb 1-1: SerialNumber: syz [ 447.190609][ T5726] usb 4-1: Using ep0 maxpacket: 16 [ 447.202398][ T5708] usb 1-1: config 0 descriptor?? [ 447.206852][ T5726] usb 4-1: unable to get BOS descriptor or descriptor too short [ 447.232648][ T5726] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 447.246628][ T5726] usb 4-1: config 13 has no interface number 0 [ 447.266229][ T5726] usb 4-1: config 13 interface 50 altsetting 158 bulk endpoint 0x8 has invalid maxpacket 16 [ 447.288390][ T5726] usb 4-1: config 13 interface 50 has no altsetting 0 [ 447.320160][ T5726] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 447.336173][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.357163][ T5726] usb 4-1: Product: syz [ 447.362483][ T5726] usb 4-1: Manufacturer: syz [ 447.367259][ T5726] usb 4-1: SerialNumber: syz [ 447.376615][T13860] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 447.427800][ T5708] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 447.462603][ T5708] cx231xx 1-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 447.510189][T13477] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 447.550821][T13477] usb 3-1: device descriptor read/8, error -71 [ 447.591496][ T5708] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 447.610600][ T5708] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 447.621736][T13860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.630510][ T5708] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 447.630884][ T5708] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 447.644103][T13860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.662303][ T5708] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 447.680563][ T5708] cx231xx 1-1:0.1: Failed to set devmode to analog: error: -32 [ 447.698402][T13860] ip6tnl2: entered allmulticast mode [ 447.707166][T13860] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2167'. [ 447.733758][ T5726] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 447.755413][ T5726] usb 4-1: MIDIStreaming interface descriptor not found [ 447.776414][ T5708] i2c i2c-3: Added multiplexed i2c bus 5 [ 447.808763][ T5708] i2c i2c-3: Added multiplexed i2c bus 6 [ 447.814773][T13883] netlink: 'syz.4.2173': attribute type 10 has an invalid length. [ 447.815022][T13477] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 447.835300][ T5708] cx231xx 1-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 447.851865][ T5708] cx231xx 1-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 447.880778][T13477] usb 3-1: device descriptor read/8, error -71 [ 447.884492][T13883] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.889523][T13871] Set syz1 is full, maxelem 65536 reached [ 447.897011][ T5726] usb 4-1: USB disconnect, device number 11 [ 447.914356][T13883] bond0: (slave team0): Enslaving as an active interface with an up link [ 447.996484][ T5645] udevd[5645]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 448.017074][ T5708] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 448.028900][T13477] usb usb3-port1: unable to enumerate USB device [ 448.069367][ T5708] usb 1-1: USB disconnect, device number 74 [ 448.499037][ T30] audit: type=1326 audit(1780903478.559:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.5.2176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba079ce59 code=0x7ffc0000 [ 448.538585][T13892] ip6erspan0: entered allmulticast mode [ 448.539016][ T30] audit: type=1326 audit(1780903478.599:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.5.2176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba079ce59 code=0x7ffc0000 [ 448.539056][ T30] audit: type=1326 audit(1780903478.599:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.5.2176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba079ce59 code=0x7ffc0000 [ 448.539095][ T30] audit: type=1326 audit(1780903478.599:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.5.2176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba079ce59 code=0x7ffc0000 [ 448.539129][ T30] audit: type=1326 audit(1780903478.599:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.5.2176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3ba079ce59 code=0x7ffc0000 [ 448.539163][ T30] audit: type=1326 audit(1780903478.599:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.5.2176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba079ce59 code=0x7ffc0000 [ 448.539199][ T30] audit: type=1326 audit(1780903478.599:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.5.2176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba079ce59 code=0x7ffc0000 [ 448.539237][ T30] audit: type=1326 audit(1780903478.599:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.5.2176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba079ce59 code=0x7ffc0000 [ 448.539273][ T30] audit: type=1326 audit(1780903478.599:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.5.2176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ba079ce59 code=0x7ffc0000 [ 448.539309][ T30] audit: type=1326 audit(1780903478.599:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.5.2176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba079ce59 code=0x7ffc0000 [ 448.600509][ T809] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 448.681421][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 448.990438][ T809] usb 4-1: Using ep0 maxpacket: 16 [ 448.998472][ T809] usb 4-1: unable to get BOS descriptor or descriptor too short [ 449.007257][ T809] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 449.017077][ T809] usb 4-1: config 13 has no interface number 0 [ 449.023728][ T809] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 449.051732][ T809] usb 4-1: config 13 interface 50 has no altsetting 0 [ 449.073391][ T809] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 449.085864][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.094906][ T809] usb 4-1: Product: syz [ 449.103833][ T809] usb 4-1: Manufacturer: syz [ 449.112404][ T809] usb 4-1: SerialNumber: syz [ 449.134195][T13890] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 449.141741][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 449.304640][ T10] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 449.314388][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.323228][ T10] usb 6-1: Product: syz [ 449.327610][ T10] usb 6-1: Manufacturer: syz [ 449.332950][ T10] usb 6-1: SerialNumber: syz [ 449.341968][ T10] usb 6-1: config 0 descriptor?? [ 449.438968][ T809] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 449.446379][ T809] usb 4-1: MIDIStreaming interface descriptor not found [ 449.571909][ T809] usb 4-1: USB disconnect, device number 12 [ 449.630416][ T5746] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 449.669289][ T5645] udevd[5645]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 449.686398][ T24] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 449.820194][ T5746] usb 3-1: Using ep0 maxpacket: 32 [ 449.831320][ T5746] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 449.839821][ T5746] usb 3-1: config 0 has no interface number 0 [ 449.846362][ T5746] usb 3-1: config 0 interface 12 has no altsetting 0 [ 449.856884][ T5746] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 449.867703][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.876803][ T5746] usb 3-1: Product: syz [ 449.883671][ T5746] usb 3-1: Manufacturer: syz [ 449.883683][ T24] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 449.888363][ T5746] usb 3-1: SerialNumber: syz [ 449.908158][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.911272][ T5746] usb 3-1: config 0 descriptor?? [ 449.931667][ T24] usb 1-1: Product: syz [ 449.937292][ T24] usb 1-1: Manufacturer: syz [ 449.942599][ T24] usb 1-1: SerialNumber: syz [ 449.961164][ T24] usb 1-1: config 0 descriptor?? [ 450.184652][T13913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.185869][T13913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.205374][ T24] usb 1-1: USB disconnect, device number 75 [ 450.284036][T13929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.288861][T13929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.616524][ T10] usb 6-1: unexpected transceiver, part 0xd4 version 0x03 [ 450.692405][ T9235] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.703990][ T9235] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.819300][ T9235] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.830759][ T9235] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.903350][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 451.007058][ T9235] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.018130][ T9235] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.031716][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 451.046132][T13936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.055660][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 451.058200][T13936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.075600][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 451.085609][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 451.094023][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 451.179304][ T9235] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.192221][ T9235] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.410613][T13477] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 451.538396][ T9235] pimreg3: left allmulticast mode [ 451.583727][T13477] usb 1-1: Using ep0 maxpacket: 32 [ 451.605139][T13477] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 451.635057][T13477] usb 1-1: config 0 interface 0 has no altsetting 0 [ 451.647855][T13477] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 451.670167][T13477] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.689946][T13477] usb 1-1: config 0 descriptor?? [ 451.699598][ T10] usb 6-1: Firmware version (0.0) predates our first public release. [ 451.734266][ T10] usb 6-1: Please update to version 0.2 or newer [ 451.755251][ T10] usb 6-1: atusb_probe: initialization failed, error = -19 [ 452.001053][T13960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2194'. [ 452.068745][ T5708] usb 6-1: USB disconnect, device number 21 [ 452.120514][T13939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.138200][T13939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.169133][T13477] corsair-psu 0003:1B1C:1C09.0029: unknown main item tag 0x0 [ 452.182149][T13477] corsair-psu 0003:1B1C:1C09.0029: unknown main item tag 0x0 [ 452.194704][T13477] corsair-psu 0003:1B1C:1C09.0029: unknown main item tag 0x0 [ 452.206138][T13477] corsair-psu 0003:1B1C:1C09.0029: unknown main item tag 0x0 [ 452.224519][T13477] corsair-psu 0003:1B1C:1C09.0029: unknown main item tag 0x0 [ 452.244358][T13477] corsair-psu 0003:1B1C:1C09.0029: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 452.339120][ T9235] bond1 (unregistering): (slave gretap1): Releasing active interface [ 452.582893][ T5746] f81534 3-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 452.598242][ T5746] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 452.605792][ T5746] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 452.612041][T13477] corsair-psu 0003:1B1C:1C09.0029: unable to initialize device (-110) [ 452.626168][ T5746] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 452.642361][T13477] corsair-psu 0003:1B1C:1C09.0029: probe with driver corsair-psu failed with error -110 [ 452.667104][ T5746] usb 3-1: USB disconnect, device number 32 [ 452.714275][ T9235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.742933][ T9235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.758995][ T9235] bond0 (unregistering): Released all slaves [ 452.774745][ T9235] bond1 (unregistering): Released all slaves [ 453.002612][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 453.030281][ T9235] tipc: Left network mode [ 453.130261][ T50] Bluetooth: hci2: command tx timeout [ 453.238387][T13975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.269799][T13975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.445260][T13937] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.454896][T13937] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.463092][T13937] bridge_slave_0: entered allmulticast mode [ 453.503046][T13937] bridge_slave_0: entered promiscuous mode [ 453.521218][T13937] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.535869][T13937] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.561903][T13937] bridge_slave_1: entered allmulticast mode [ 453.569864][T13937] bridge_slave_1: entered promiscuous mode [ 453.747650][T13937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.771360][T13937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.883285][T13937] team0: Port device team_slave_0 added [ 453.928136][T13937] team0: Port device team_slave_1 added [ 454.000692][T14003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2201'. [ 454.031391][T13477] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 454.039504][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 454.065721][T13937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.074354][T13937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.110806][T13937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.133607][T13937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.141833][T13937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.168333][T13937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.200199][T13477] usb 6-1: Using ep0 maxpacket: 32 [ 454.205589][ T809] usb 1-1: USB disconnect, device number 76 [ 454.219624][T13477] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 454.228864][T13477] usb 6-1: config 0 has no interface number 0 [ 454.242313][T13477] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 454.279842][T13477] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.308043][T13477] usb 6-1: Product: syz [ 454.323731][T13477] usb 6-1: Manufacturer: syz [ 454.339957][T13477] usb 6-1: SerialNumber: syz [ 454.366553][T13477] usb 6-1: config 0 descriptor?? [ 454.390376][T13477] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 454.391630][T14009] netlink: 'syz.4.2203': attribute type 16 has an invalid length. [ 454.421881][T13937] hsr_slave_0: entered promiscuous mode [ 454.424075][T14009] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.2203'. [ 454.433690][T13477] usb 6-1: selecting invalid altsetting 1 [ 454.442464][T14009] netlink: 'syz.4.2203': attribute type 10 has an invalid length. [ 454.458227][T14009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.458231][T13937] hsr_slave_1: entered promiscuous mode [ 454.462705][T13937] debugfs: 'hsr0' already exists in 'hsr' [ 454.489684][T13937] Cannot create hsr debugfs directory [ 454.492841][T14009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.498774][T13477] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 454.531159][T13477] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 454.554633][T13477] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 454.576460][ T9235] hsr_slave_0: left promiscuous mode [ 454.577173][T13477] usb 6-1: media controller created [ 454.599249][ T9235] hsr_slave_1: left promiscuous mode [ 454.606311][T13477] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 454.622497][ T9235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.640184][ T9235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.661220][ T9235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.672227][ T9235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.689886][ T9235] veth1_macvtap: left promiscuous mode [ 454.706706][T13477] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 454.712661][ T9235] veth0_macvtap: left promiscuous mode [ 454.719591][ T9235] veth1_vlan: left promiscuous mode [ 454.725289][ T9235] veth0_vlan: left promiscuous mode [ 454.741610][T13477] zl10353_read_register: readreg error (reg=127, ret==-71) [ 454.750035][T13477] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 454.760322][ T10] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 454.840666][T13477] usb 6-1: USB disconnect, device number 22 [ 454.934855][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 454.941693][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.961510][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 454.994821][ T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 455.010395][ T809] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 455.019468][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.053781][ T10] usb 1-1: config 0 descriptor?? [ 455.185550][ T809] usb 3-1: Invalid ep0 maxpacket: 32 [ 455.211895][ T50] Bluetooth: hci2: command tx timeout [ 455.332631][ T809] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 455.358719][T14033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.457664][T14033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.520544][ T809] usb 3-1: Invalid ep0 maxpacket: 32 [ 455.552638][ T809] usb usb3-port1: attempt power cycle [ 455.579048][T14034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.587713][ T9235] team0 (unregistering): Port device team_slave_1 removed [ 455.617524][T14034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.738810][T14034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.784693][T14034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.868675][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 455.899491][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 455.930332][ T809] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 455.968525][ T10] usb 1-1: USB disconnect, device number 77 [ 455.976484][ T809] usb 3-1: Invalid ep0 maxpacket: 32 [ 456.111622][ T809] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 456.150985][ T809] usb 3-1: Invalid ep0 maxpacket: 32 [ 456.168408][ T809] usb usb3-port1: unable to enumerate USB device [ 456.220982][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 456.610384][T14047] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2210'. [ 456.639890][T14046] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2210'. [ 456.805954][T14058] netlink: 'syz.0.2212': attribute type 10 has an invalid length. [ 456.814338][ T9235] IPVS: stop unused estimator thread 0... [ 456.858223][T14058] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2212'. [ 457.290827][ T50] Bluetooth: hci2: command tx timeout [ 457.333940][T13937] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 457.358096][T13937] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 457.366387][T13937] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 457.379589][T13937] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 457.389374][T13937] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 457.401983][T13937] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 457.411491][T13937] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 457.420416][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 457.449075][T13937] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 457.558964][T14092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2217'. [ 457.583838][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.598115][ T10] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 457.611931][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.624523][ T10] usb 6-1: config 0 descriptor?? [ 457.664676][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 457.668063][T13937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.738194][T13937] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.781534][ T9239] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.788741][ T9239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.822248][ T9239] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.829435][ T9239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.888137][ T5294] 8021q: adding VLAN 0 to HW filter on device eth4 [ 457.981046][ T809] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 458.030528][T13937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.051961][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 458.067328][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 458.125998][T13937] veth0_vlan: entered promiscuous mode [ 458.140574][ T809] usb 1-1: Using ep0 maxpacket: 16 [ 458.154100][T13937] veth1_vlan: entered promiscuous mode [ 458.157327][ T809] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 458.169393][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.189437][ T809] usb 1-1: Product: syz [ 458.216990][ T809] usb 1-1: Manufacturer: syz [ 458.233873][ T809] usb 1-1: SerialNumber: syz [ 458.288683][ T809] r8152-cfgselector 1-1: Unknown version 0x0000 [ 458.309038][ T809] r8152-cfgselector 1-1: config 0 descriptor?? [ 458.373924][T13937] veth0_macvtap: entered promiscuous mode [ 458.409210][T13937] veth1_macvtap: entered promiscuous mode [ 458.502802][T13937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.512856][T14115] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2220'. [ 458.530948][T14114] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2220'. [ 458.541382][T13937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.584353][ T9239] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.615685][ T9239] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.634305][ T9239] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.643325][ T9239] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.825833][ T5726] r8152-cfgselector 1-1: USB disconnect, device number 78 [ 458.912469][ T10] pwc: recv_control_msg error -71 req 04 val 1000 [ 458.938662][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 458.960729][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 458.973342][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 458.978268][ T9239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.990991][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 459.006562][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 459.019156][ T9239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.023918][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 459.054727][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 459.071159][T14122] tipc: Enabling of bearer rejected, failed to enable media [ 459.071908][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 459.081982][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.101078][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 459.105348][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.116866][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 459.136181][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 459.147954][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 459.171026][T14118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.186388][T14118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.195831][ T10] pwc: Registered as video103. [ 459.204614][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input44 [ 459.240970][T14118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.246033][T14125] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2190'. [ 459.251821][ T10] usb 6-1: USB disconnect, device number 23 [ 459.269109][T14118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.298122][T14118] wg1: MTU too low for tipc bearer [ 459.333017][T14118] tipc: Enabling of bearer rejected, failed to enable media [ 459.350491][ T24] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 459.373087][ T50] Bluetooth: hci2: command tx timeout [ 459.526484][T14133] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2225'. [ 459.545877][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 459.555570][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 459.567415][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 459.575642][ T24] usb 3-1: can't read configurations, error -61 [ 459.609755][T14139] netlink: 'syz.0.2227': attribute type 11 has an invalid length. [ 459.622738][T14139] netlink: 'syz.0.2227': attribute type 4 has an invalid length. [ 459.630801][T14139] netlink: 199780 bytes leftover after parsing attributes in process `syz.0.2227'. [ 459.642366][T14139] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2227'. [ 459.712518][ T24] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 459.864225][T14150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.883769][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 459.892786][T14150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.894094][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 459.920932][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 459.938421][ T24] usb 3-1: can't read configurations, error -61 [ 459.946132][ T24] usb usb3-port1: attempt power cycle [ 460.020534][ T5693] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 460.052996][T14160] fuse: Invalid rootmode [ 460.090389][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 460.169395][T14162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2233'. [ 460.182355][T14162] fuse: Unknown parameter 'gr^³®¤u00000000000000000000' [ 460.191671][ T5693] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.202068][ T5693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 460.213140][ T5693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 460.224421][ T5693] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 460.238700][ T5693] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 460.241480][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 460.248216][ T5693] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 460.257168][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 460.261791][ T5693] usb 1-1: Manufacturer: syz [ 460.271337][ T10] usb 6-1: config 16 has an invalid descriptor of length 198, skipping remainder of the config [ 460.285787][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 460.287384][ T5693] usb 1-1: config 0 descriptor?? [ 460.299195][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 460.304050][ T24] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 460.321734][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.341676][ T10] usbtmc 6-1:16.0: bulk endpoints not found [ 460.354444][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 460.366044][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 460.378169][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 460.387789][ T24] usb 3-1: can't read configurations, error -61 [ 460.520238][ T24] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 460.538107][ T10] usb 6-1: USB disconnect, device number 24 [ 460.552971][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 460.562386][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 460.575119][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 460.584396][ T24] usb 3-1: can't read configurations, error -61 [ 460.592087][ T24] usb usb3-port1: unable to enumerate USB device [ 460.610275][ T5693] rc_core: IR keymap rc-hauppauge not found [ 460.617386][ T5693] Registered IR keymap rc-empty [ 460.623163][ T5693] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 460.642071][ T5693] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 460.661453][ T5693] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 460.674635][ T5693] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input45 [ 460.691183][ T5693] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 460.710619][ T5693] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 460.740802][ T5693] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 460.760532][ T5693] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 460.780633][ T5693] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 460.810960][ T5693] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 460.841432][ T5693] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 460.860524][ T5693] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 460.890807][ T5693] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 460.921005][ T5693] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 460.944799][ T5693] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 460.964227][ T5693] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 461.003037][ T5693] usb 1-1: USB disconnect, device number 79 [ 461.224618][T14175] usb usb7: usbfs: process 14175 (syz.5.2235) did not claim interface 0 before use [ 461.491426][T14188] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 462.008300][T14198] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2244'. [ 462.123355][T14200] xt_hashlimit: size too large, truncated to 1048576 [ 462.909118][T14219] netlink: 'syz.0.2250': attribute type 4 has an invalid length. [ 463.090428][T13477] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 463.240739][T13477] usb 6-1: device descriptor read/64, error -71 [ 463.361306][T14227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2253'. [ 463.501524][T13477] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 463.624925][T14233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2254'. [ 463.644401][T14233] team0: entered promiscuous mode [ 463.661331][T13477] usb 6-1: device descriptor read/64, error -71 [ 463.671726][T14233] team_slave_0: entered promiscuous mode [ 463.689347][T14233] team_slave_1: entered promiscuous mode [ 463.805236][T13477] usb usb6-port1: attempt power cycle [ 463.985924][T14239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.030004][T14239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.192182][T13477] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 464.232312][T14249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.241695][T13477] usb 6-1: device descriptor read/8, error -71 [ 464.291540][T14249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.402545][T14252] loop2: detected capacity change from 0 to 7 [ 464.437882][T14252] loop2: [ 464.446318][T14252] loop2: partition table partially beyond EOD, truncated [ 464.460251][ T5693] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 464.520585][T13477] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 464.550903][T13477] usb 6-1: device descriptor read/8, error -71 [ 464.572576][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 464.572591][ T30] audit: type=1800 audit(1780903494.629:2531): pid=14252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2260" name="/" dev="fuse" ino=1 res=0 errno=0 [ 464.609487][ T4999] loop2: [ 464.612766][ T4999] loop2: partition table partially beyond EOD, truncated [ 464.680525][T13477] usb usb6-port1: unable to enumerate USB device [ 464.774954][T14259] syzkaller0: entered promiscuous mode [ 464.798379][T14259] syzkaller0: entered allmulticast mode [ 464.830776][T14259] tipc: Enabled bearer , priority 0 [ 464.853933][T14261] vivid-004: disconnect [ 464.877275][T14260] vivid-004: reconnect [ 464.970818][T14258] tipc: Resetting bearer [ 465.034699][T14258] tipc: Disabling bearer [ 465.100537][ T24] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 465.198662][T14269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.241577][T14269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.250419][ T24] usb 1-1: device descriptor read/64, error -71 [ 465.350166][ T5693] usb 3-1: device descriptor read/64, error -71 [ 465.510239][ T24] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 465.590187][ T5693] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 465.640157][ T24] usb 1-1: device descriptor read/64, error -71 [ 465.740138][ T5693] usb 3-1: Using ep0 maxpacket: 8 [ 465.746955][ T5693] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.757345][ T5693] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 465.766638][ T24] usb usb1-port1: attempt power cycle [ 465.776143][ T5693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.788097][ T5693] usb 3-1: config 0 descriptor?? [ 465.796963][ T5693] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 465.926775][T14275] fuse: Bad value for 'user_id' [ 465.937438][T14275] fuse: Bad value for 'user_id' [ 466.015643][T14280] binder: 14278:14280 ioctl c0145608 200000000140 returned -22 [ 466.026185][T14280] tipc: Enabling of bearer rejected, failed to enable media [ 466.066213][T14284] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2272'. [ 466.083537][T14286] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2272'. [ 466.120246][ T24] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 466.163579][ T24] usb 1-1: device descriptor read/8, error -71 [ 466.385029][T14296] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2274'. [ 466.420419][ T24] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 466.453524][ T5693] gspca_vc032x: reg_r err -32 [ 466.465519][ T24] usb 1-1: device descriptor read/8, error -71 [ 466.476312][ T5693] vc032x 3-1:0.0: probe with driver vc032x failed with error -32 [ 466.602185][ T24] usb usb1-port1: unable to enumerate USB device [ 466.639847][T14304] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2276'. [ 466.842304][T14313] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2279'. [ 466.924422][T14298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.940613][T14298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.020213][ T5726] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 467.172872][ T5726] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 467.183852][ T5726] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.195166][ T5726] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.205047][ T5726] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 467.219600][ T5726] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 467.228761][ T5726] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 467.237187][ T5726] usb 6-1: Manufacturer: syz [ 467.244156][ T5726] usb 6-1: config 0 descriptor?? [ 467.664331][ T5726] appleir 0003:05AC:8243.002A: unknown main item tag 0x0 [ 467.682280][ T5726] appleir 0003:05AC:8243.002A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 467.704261][T14326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.719915][T14326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.016637][ T5693] usb 3-1: USB disconnect, device number 42 [ 468.394049][ T5693] usb 6-1: USB disconnect, device number 29 [ 468.750208][ T5693] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 468.920243][ T5693] usb 6-1: Using ep0 maxpacket: 32 [ 468.928320][ T5693] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 468.937913][ T5693] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.948988][ T5693] usb 6-1: config 0 descriptor?? [ 469.157297][ T5693] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 469.177000][ T5693] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 469.188640][ T5693] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 469.195958][ T5693] usb 6-1: media controller created [ 469.208845][ T5693] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 469.390336][ T24] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 469.475547][T14390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.485764][T14391] netlink: 'syz.0.2301': attribute type 3 has an invalid length. [ 469.507617][ T5693] az6027: usb out operation failed. (-71) [ 469.510487][T14390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.516981][T14391] netlink: 'syz.0.2301': attribute type 1 has an invalid length. [ 469.538016][ T5693] az6027: usb out operation failed. (-71) [ 469.548401][ T5693] stb0899_attach: Driver disabled by Kconfig [ 469.555713][ T5693] az6027: no front-end attached [ 469.555713][ T5693] [ 469.570006][ T5693] az6027: usb out operation failed. (-71) [ 469.580669][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 469.593547][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.606294][ T5693] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 469.625143][ T5693] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input46 [ 469.636479][ T24] usb 3-1: Product: syz [ 469.651055][T14391] 8021q: adding VLAN 0 to HW filter on device bond2 [ 469.661816][ T24] usb 3-1: Manufacturer: syz [ 469.666514][ T24] usb 3-1: SerialNumber: syz [ 469.679648][ T5693] dvb-usb: schedule remote query interval to 400 msecs. [ 469.710613][ T24] usb 3-1: config 0 descriptor?? [ 469.731640][ T5693] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 469.747582][ T24] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 469.766139][T14395] bond2: (slave veth0_to_bond): making interface the new active one [ 469.784376][ T5693] usb 6-1: USB disconnect, device number 30 [ 469.801597][T14395] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 469.839457][T14396] bond2: entered promiscuous mode [ 469.860394][T14396] veth0_to_bond: entered promiscuous mode [ 469.871411][T14396] bond2: entered allmulticast mode [ 469.885716][ T5693] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 469.886868][T14396] veth0_to_bond: entered allmulticast mode [ 469.948670][T14391] macvlan0: entered promiscuous mode [ 469.954538][T14391] macvlan0: entered allmulticast mode [ 469.965520][T14391] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 469.983042][T14391] bond2: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 470.151958][ T24] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input47 [ 470.202855][T14412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.239411][T14412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.355294][ T809] usb 3-1: USB disconnect, device number 43 [ 470.400162][ T5726] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 470.440804][T14424] kvm: apic: phys broadcast and lowest prio [ 470.572171][ T5726] usb 6-1: Using ep0 maxpacket: 16 [ 470.580796][ T5726] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.600674][ T5726] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.611239][ T5726] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 470.624630][ T5726] usb 6-1: New USB device found, idVendor=045e, idProduct=07c2, bcdDevice= 0.00 [ 470.634281][ T5726] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.651003][ T5726] usb 6-1: config 0 descriptor?? [ 470.700176][ T10] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 470.814804][T14438] netlink: 'syz.6.2309': attribute type 4 has an invalid length. [ 470.854907][ T10] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 470.878226][ T10] usb 1-1: config 0 has no interface number 0 [ 470.898718][ T10] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 470.922841][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.951899][ T10] usb 1-1: Product: syz [ 470.965200][ T10] usb 1-1: Manufacturer: syz [ 470.990428][ T10] usb 1-1: SerialNumber: syz [ 471.013550][ T10] usb 1-1: config 0 descriptor?? [ 471.147451][ T5726] hid-generic 0003:045E:07C2.002B: unknown main item tag 0x0 [ 471.164169][ T5726] hid-generic 0003:045E:07C2.002B: unknown main item tag 0x0 [ 471.171746][ T5726] hid-generic 0003:045E:07C2.002B: unknown main item tag 0x0 [ 471.179171][ T5726] hid-generic 0003:045E:07C2.002B: unknown main item tag 0x0 [ 471.187102][ T5726] hid-generic 0003:045E:07C2.002B: unknown main item tag 0x0 [ 471.203137][ T5726] hid-generic 0003:045E:07C2.002B: unknown main item tag 0x0 [ 471.214838][ T5726] hid-generic 0003:045E:07C2.002B: unknown main item tag 0x0 [ 471.222728][ T5726] hid-generic 0003:045E:07C2.002B: unknown main item tag 0x0 [ 471.230462][ T5726] hid-generic 0003:045E:07C2.002B: unknown main item tag 0x0 [ 471.248682][ T5726] hid-generic 0003:045E:07C2.002B: unbalanced collection at end of report description [ 471.271943][ T10] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 471.279436][ T5726] hid-generic 0003:045E:07C2.002B: probe with driver hid-generic failed with error -22 [ 471.338521][T14465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.350743][T14465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.350749][ T24] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 471.356055][T14444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.400572][T14444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.502047][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 471.521278][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.525405][T14410] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 471.525405][T14410] The task syz.5.2304 (14410) triggered the difference, watch for misbehavior. [ 471.535997][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.570010][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 471.572814][T14410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.586563][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 471.594694][T14410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.629430][ T24] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 471.637684][ T24] usb 3-1: Manufacturer: syz [ 471.648336][ T24] usb 3-1: config 0 descriptor?? [ 472.074144][ T24] appleir 0003:05AC:8243.002C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 472.213792][T14491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.226533][T14491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.277860][ T10] gspca_m5602: Failed to find a sensor [ 472.294601][ T10] ALi m5602 1-1:0.88: ALi m5602 webcam failed [ 472.313425][ T10] usb 1-1: USB disconnect, device number 84 [ 472.903662][ T24] usb 3-1: USB disconnect, device number 44 [ 473.152416][T14504] loop2: detected capacity change from 0 to 7 [ 473.175259][T14504] loop2: [ 473.179539][ T24] usb 6-1: USB disconnect, device number 31 [ 473.180194][T14504] loop2: partition table partially beyond EOD, truncated [ 473.210590][ T5790] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 473.383177][ T5790] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 473.408968][ T5790] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 473.419607][ T5790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.434066][ T5790] usb 1-1: config 0 descriptor?? [ 473.438992][T14508] loop5: detected capacity change from 0 to 6 [ 473.456693][T14508] Dev loop5: unable to read RDB block 6 [ 473.463180][T14508] loop5: unable to read partition table [ 473.470922][T14508] loop5: partition table beyond EOD, truncated [ 473.477477][T14508] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 473.496472][T14511] ip6gre1: entered allmulticast mode [ 473.511953][T14511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2324'. [ 473.631019][T14515] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2325'. [ 473.642689][ T5790] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 473.853751][ T5790] [drm:udl_init] *ERROR* Selecting channel failed [ 473.931974][ T5693] hid_parser_main: 12 callbacks suppressed [ 473.932089][ T5693] hid-generic 0006:0008:0001.002D: unknown main item tag 0x0 [ 473.958170][ T5790] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 473.966629][T14525] loop5: detected capacity change from 0 to 7 [ 473.977308][ T5693] hid-generic 0006:0008:0001.002D: unknown main item tag 0x0 [ 473.986263][ T5790] [drm] Initialized udl on minor 2 [ 473.996953][T14525] loop5: p1 p4 [ 474.002299][T14525] loop5: partition table partially beyond EOD, truncated [ 474.012078][ T5693] hid-generic 0006:0008:0001.002D: unknown main item tag 0x0 [ 474.017491][ T5790] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 474.030219][ T5693] hid-generic 0006:0008:0001.002D: unknown main item tag 0x0 [ 474.030269][ T5693] hid-generic 0006:0008:0001.002D: unknown main item tag 0x0 [ 474.030293][ T5693] hid-generic 0006:0008:0001.002D: unknown main item tag 0x0 [ 474.030316][ T5693] hid-generic 0006:0008:0001.002D: unknown main item tag 0x0 [ 474.030338][ T5693] hid-generic 0006:0008:0001.002D: unknown main item tag 0x0 [ 474.030367][ T5693] hid-generic 0006:0008:0001.002D: unknown main item tag 0x0 [ 474.030389][ T5693] hid-generic 0006:0008:0001.002D: unknown main item tag 0x0 [ 474.061950][T14525] loop5: p1 start 12298 is beyond EOD, truncated [ 474.061974][T14525] loop5: p4 start 33554432 is beyond EOD, truncated [ 474.064813][ T5693] hid-generic 0006:0008:0001.002D: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 474.221489][ T5790] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 474.230621][ T5726] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 474.247464][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 474.257910][ T5790] usb 1-1: USB disconnect, device number 85 [ 474.276552][ T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 474.278025][T14530] SET target dimension over the limit! [ 474.338426][T14533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.348788][T14533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.364663][T14534] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2331'. [ 474.392107][ T5726] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 474.408232][ T5726] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.420330][ T5726] usb 3-1: config 0 has no interface number 0 [ 474.441413][ T5726] usb 3-1: config 0 interface 2 has no altsetting 0 [ 474.467779][ T5726] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 474.497598][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.515846][ T5726] usb 3-1: Product: syz [ 474.525442][ T5726] usb 3-1: Manufacturer: syz [ 474.539159][ T5726] usb 3-1: SerialNumber: syz [ 474.552968][ T5726] usb 3-1: config 0 descriptor?? [ 474.826521][T14549] loop2: detected capacity change from 0 to 7 [ 474.833819][T14549] loop2: [ 474.836810][T14549] loop2: partition table partially beyond EOD, truncated [ 474.935040][T14553] fuse: Bad value for 'fd' [ 474.971565][T14555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.983419][T14555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.062317][ T5693] usb 3-1: USB disconnect, device number 45 [ 475.068863][ T5693] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 475.721069][T14572] fuse: Bad value for 'fd' [ 475.930188][ T5693] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 476.082629][ T5693] usb 3-1: config 1 has an invalid interface number: 128 but max is 1 [ 476.091822][ T5693] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.103352][T13477] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 476.111620][ T5693] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 476.121119][ T5693] usb 3-1: config 1 has no interface number 0 [ 476.127891][ T5693] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 476.139735][ T5693] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.152683][ T5693] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 476.161882][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.170946][ T5693] usb 3-1: Product: syz [ 476.175311][ T5693] usb 3-1: Manufacturer: syz [ 476.180000][ T5693] usb 3-1: SerialNumber: syz [ 476.197863][ T5693] cdc_wdm 3-1:1.128: skipping garbage [ 476.207102][ T5693] cdc_wdm 3-1:1.128: cdc-wdm0: USB WDM device [ 476.213682][ T5693] cdc_wdm 3-1:1.128: Unknown control protocol [ 476.282160][T13477] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 476.293325][T13477] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.305636][T13477] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.316696][T13477] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 476.336904][T13477] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 476.346528][T13477] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 476.356830][T13477] usb 1-1: Manufacturer: syz [ 476.367171][T13477] usb 1-1: config 0 descriptor?? [ 476.399628][ T5693] usb 3-1: USB disconnect, device number 46 [ 476.680913][T14582] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 476.696535][T14582] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 476.703813][T14582] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 476.717320][T14582] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 476.931447][ T30] audit: type=1326 audit(1780903506.999:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.5.2350" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ba079ce59 code=0x0 [ 477.309207][T13477] usbhid 1-1:0.0: can't add hid device: -71 [ 477.324565][T13477] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 477.354788][T13477] usb 1-1: USB disconnect, device number 86 [ 477.395430][T14603] syzkaller0: entered promiscuous mode [ 477.401321][T14603] syzkaller0: entered allmulticast mode [ 477.411425][ T5726] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 477.500466][ T5790] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 477.551593][ T5726] usb 3-1: device descriptor read/64, error -71 [ 477.651759][T14605] loop5: detected capacity change from 0 to 7 [ 477.661048][ T5790] usb 6-1: Using ep0 maxpacket: 32 [ 477.666456][T14605] loop5: p1 p4 [ 477.669950][T14605] loop5: partition table partially beyond EOD, truncated [ 477.676726][ T5790] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 477.677870][T14605] loop5: p1 start 12298 is beyond EOD, truncated [ 477.697934][ T5790] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 477.707607][T14605] loop5: p4 start 33554432 is beyond EOD, truncated [ 477.712362][ T5790] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 477.728216][ T5790] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 477.742033][ T5790] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 477.800566][ T5726] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 477.817298][ T5790] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 477.829673][ T5790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.853167][ T5790] usb 6-1: Product: syz [ 477.862963][ T5790] usb 6-1: Manufacturer: syz [ 477.879017][ T5790] usb 6-1: SerialNumber: syz [ 477.904884][ T5790] usb 6-1: config 0 descriptor?? [ 477.940544][ T5726] usb 3-1: device descriptor read/64, error -71 [ 478.050710][ T5726] usb usb3-port1: attempt power cycle [ 478.339864][ T5790] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 478.357038][ T5790] input input48: Device does not respond to id packet M [ 478.376818][ T5790] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 478.390166][ T5726] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 478.397920][ T5790] input input48: Device does not respond to id packet P [ 478.411338][ T5790] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 478.417709][ T5790] input input48: Device does not respond to id packet B [ 478.421035][ T5726] usb 3-1: device descriptor read/8, error -71 [ 478.441493][ T5790] input input48: Limiting number of effects to 32 (device reports 85) [ 478.656316][ T5790] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 478.666637][ T5790] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 478.674787][ T5790] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 478.681222][ T5726] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 478.689531][ T5790] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 478.716016][ T5726] usb 3-1: device descriptor read/8, error -71 [ 478.731477][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 478.731513][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 478.757250][ T5790] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input48 [ 478.861075][ T5726] usb usb3-port1: unable to enumerate USB device [ 478.871456][ T5790] usb 6-1: USB disconnect, device number 32 [ 478.877642][ T4984] iforce 6-1:0.0: usb_submit_urb failed -19 [ 478.912215][ T4984] iforce 6-1:0.0: usb_submit_urb failed -19 [ 478.913391][T14624] syzkaller0: entered promiscuous mode [ 478.935455][T14624] syzkaller0: entered allmulticast mode [ 478.944362][ T4984] iforce 6-1:0.0: usb_submit_urb failed -19 [ 478.967339][T14624] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2363'. [ 479.073140][ T5693] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 479.172634][T14635] syzkaller0: entered promiscuous mode [ 479.178261][T14635] syzkaller0: entered allmulticast mode [ 479.241557][ T5693] usb 1-1: Using ep0 maxpacket: 8 [ 479.256359][ T5693] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 479.265760][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.276829][ T5693] usb 1-1: Product: syz [ 479.282052][ T5693] usb 1-1: Manufacturer: syz [ 479.286683][ T5693] usb 1-1: SerialNumber: syz [ 479.297169][ T5693] usb 1-1: config 0 descriptor?? [ 479.305994][ T5693] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 479.315125][ T5693] dvb-usb: bulk message failed: -22 (2/0) [ 479.328818][ T5693] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 479.339942][ T5693] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 479.349304][ T5693] usb 1-1: media controller created [ 479.358176][T14639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.368253][ T5693] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 479.378228][T14639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.504218][ T5693] dvb-usb: bulk message failed: -22 (1/0) [ 479.530706][ T24] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 479.539379][ T5693] DVB: Unable to find symbol mt352_attach() [ 479.545916][ T5693] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 479.600333][ T5693] rc_core: IR keymap rc-dvico-portable not found [ 479.606742][ T5693] Registered IR keymap rc-empty [ 479.616465][ T5693] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 479.628504][ T5693] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input49 [ 479.641923][ T5693] dvb-usb: schedule remote query interval to 100 msecs. [ 479.648893][ T5693] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 479.693563][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.705273][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 479.705311][T14626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.719110][ T24] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 479.732819][T14626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.755446][ T5693] dvb-usb: bulk message failed: -22 (1/0) [ 479.761980][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 479.776041][ T24] usb 6-1: SerialNumber: syz [ 479.781679][ T5693] usb 1-1: USB disconnect, device number 87 [ 479.857126][ T5693] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 479.922444][T14652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2372'. [ 479.932196][T14652] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2372'. [ 480.009645][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2373'. [ 480.022308][T14637] syzkaller1: entered promiscuous mode [ 480.027879][T14637] syzkaller1: entered allmulticast mode [ 480.103603][T14665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.115170][T14665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.567418][ T24] usb 6-1: 0:2 : does not exist [ 480.613770][ T24] usb 6-1: USB disconnect, device number 33 [ 480.630398][T13477] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 480.689434][ T5944] udevd[5944]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 480.763446][ T30] audit: type=1326 audit(1780903510.829:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14684 comm="syz.4.2385" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fe79ce59 code=0x7ffc0000 [ 480.788831][ T30] audit: type=1326 audit(1780903510.829:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14684 comm="syz.4.2385" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fe79ce59 code=0x7ffc0000 [ 480.810356][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 480.814670][ T30] audit: type=1326 audit(1780903510.829:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14684 comm="syz.4.2385" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe0fe79ce59 code=0x7ffc0000 [ 480.849578][T13477] usb 1-1: Using ep0 maxpacket: 16 [ 480.855914][ T30] audit: type=1326 audit(1780903510.829:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14684 comm="syz.4.2385" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fe79ce59 code=0x7ffc0000 [ 480.883521][T13477] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.895172][T13477] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 480.906600][ T30] audit: type=1326 audit(1780903510.829:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14684 comm="syz.4.2385" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fe79ce59 code=0x7ffc0000 [ 480.936066][T13477] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 480.950576][T13477] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 480.965550][T13477] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 480.979102][ T30] audit: type=1326 audit(1780903510.829:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14684 comm="syz.4.2385" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe0fe79ce59 code=0x7ffc0000 [ 481.004622][ T30] audit: type=1326 audit(1780903510.829:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14684 comm="syz.4.2385" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fe79ce59 code=0x7ffc0000 [ 481.029606][ T30] audit: type=1326 audit(1780903510.829:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14684 comm="syz.4.2385" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe0fe79ce59 code=0x7ffc0000 [ 481.055148][T13477] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 481.064356][ T24] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 481.070298][ T30] audit: type=1326 audit(1780903510.829:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14684 comm="syz.4.2385" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fe79ce59 code=0x7ffc0000 [ 481.078133][T13477] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 481.108395][T13477] usb 1-1: Manufacturer: syz [ 481.121068][T13477] usb 1-1: config 0 descriptor?? [ 481.262841][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 481.276740][ T24] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 481.292786][ T24] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 481.302708][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.312818][ T24] usb 6-1: Product: syz [ 481.317231][ T24] usb 6-1: Manufacturer: syz [ 481.322119][ T24] usb 6-1: SerialNumber: syz [ 481.392631][T13477] rc_core: IR keymap rc-hauppauge not found [ 481.398572][T13477] Registered IR keymap rc-empty [ 481.403845][T13477] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 481.433025][T13477] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 481.464067][T13477] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 481.482100][T13477] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input50 [ 481.496792][T13477] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 481.520339][T13477] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 481.536116][T14681] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2383'. [ 481.545895][T13477] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 481.563904][T14681] team0 (unregistering): Port device team_slave_0 removed [ 481.574917][T14681] team0 (unregistering): Port device team_slave_1 removed [ 481.583055][T13477] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 481.623050][T13477] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 481.650202][T13477] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 481.670278][T13477] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 481.690315][T13477] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 481.714548][T13477] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 481.740222][T13477] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 481.773847][T13477] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 481.783918][T13477] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 481.838330][ T5726] usb 1-1: USB disconnect, device number 88 [ 482.035731][T14709] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 482.042344][T14709] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 482.052272][T14709] vhci_hcd vhci_hcd.0: Device attached [ 482.059295][T14709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.068198][T14709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.078580][T14710] vhci_hcd: connection closed [ 482.079237][ T3311] vhci_hcd vhci_hcd.4: stop threads [ 482.089723][ T3311] vhci_hcd vhci_hcd.4: release socket [ 482.099017][ T3311] vhci_hcd vhci_hcd.4: disconnect device [ 482.296415][ T24] usb 6-1: USB disconnect, device number 34 [ 482.440834][ T24] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 482.480245][T14722] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 482.609578][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 482.632327][ T24] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 482.650484][ T24] usb 6-1: can't read configurations, error -71 [ 482.679021][T14730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2398'. [ 482.689036][T14729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2398'. [ 482.701770][T14729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.714766][T14729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.740164][ T5726] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 482.870738][ T5726] usb 1-1: device descriptor read/64, error -71 [ 482.890613][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 483.110341][ T5726] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 483.167993][T14734] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2399'. [ 483.189960][T14734] dummy0: left promiscuous mode [ 483.197775][T14734] bridge1: port 1(dummy0) entered blocking state [ 483.204569][T14734] bridge1: port 1(dummy0) entered disabled state [ 483.212852][T14734] dummy0: entered allmulticast mode [ 483.219277][T14734] dummy0: entered promiscuous mode [ 483.231095][T14734] netlink: 'syz.5.2399': attribute type 10 has an invalid length. [ 483.239014][T14734] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2399'. [ 483.248128][ T5726] usb 1-1: device descriptor read/64, error -71 [ 483.254072][T14734] bridge1: port 1(dummy0) entered blocking state [ 483.261058][T14734] bridge1: port 1(dummy0) entered forwarding state [ 483.268558][T14734] dummy0: left allmulticast mode [ 483.273912][T14734] bridge1: port 1(dummy0) entered disabled state [ 483.360902][ T5726] usb usb1-port1: attempt power cycle [ 483.415623][T14744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.435006][T14744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.710280][ T5726] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 483.730777][ T5726] usb 1-1: device descriptor read/8, error -71 [ 483.920134][ T24] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 483.971138][ T5726] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 484.002369][ T5726] usb 1-1: device descriptor read/8, error -71 [ 484.083870][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.105312][ T24] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 484.111194][ T5726] usb usb1-port1: unable to enumerate USB device [ 484.125575][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.136141][T14756] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 484.136934][ T24] usb 6-1: config 0 descriptor?? [ 484.271729][T14759] binder: 14757:14759 unknown command 0 [ 484.277491][T14759] binder: 14757:14759 ioctl c0306201 200000000080 returned -22 [ 484.285782][T14759] binder: 14757:14759 unknown command 0 [ 484.292012][T14759] binder: 14757:14759 ioctl c0306201 200000000080 returned -22 [ 484.300349][T14759] binder: 14757:14759 unknown command 0 [ 484.306027][T14759] binder: 14757:14759 ioctl c0306201 200000000080 returned -22 [ 484.314525][T14759] binder: 14757:14759 unknown command 0 [ 484.320826][T14759] binder: 14757:14759 ioctl c0306201 200000000080 returned -22 [ 484.328760][T14759] binder: 14757:14759 unknown command 0 [ 484.350668][T14759] binder: 14757:14759 ioctl c0306201 200000000080 returned -22 [ 484.365474][T14759] binder: 14757:14759 unknown command 0 [ 484.381858][T14759] binder: 14757:14759 ioctl c0306201 200000000080 returned -22 [ 484.393506][T14759] binder: 14757:14759 unknown command 0 [ 484.410630][T14759] binder: 14757:14759 ioctl c0306201 200000000080 returned -22 [ 484.418303][T14759] binder: 14757:14759 unknown command 0 [ 484.430693][T14759] binder: 14757:14759 ioctl c0306201 200000000080 returned -22 [ 484.440203][T14759] binder: 14757:14759 unknown command 0 [ 484.451890][T14759] binder: 14757:14759 ioctl c0306201 200000000080 returned -22 [ 484.470515][T14759] binder: 14757:14759 unknown command 0 [ 484.477593][T14759] binder: 14757:14759 ioctl c0306201 200000000080 returned -22 [ 484.500205][T14759] binder: 14757:14759 unknown command 0 [ 484.505801][T14759] binder: 14757:14759 ioctl c0306201 200000000080 returned -22 [ 484.520195][T14759] binder: 14757:14759 unknown command 0 [ 484.530382][T14759] binder: 14757:14759 ioctl c0306201 200000000080 returned -22 [ 484.550473][T14759] binder: 14757:14759 unknown command 0 [ 484.560133][T14759] binder: 14757:14759 ioctl c0306201 200000000080 returned -22 [ 484.566353][ T24] keytouch 0003:0926:3333.002E: fixing up Keytouch IEC report descriptor [ 484.580217][T14759] binder: 14757:14759 unknown command 0 [ 484.591842][T14759] binder: 14757:14759 ioctl c0306201 200000000080 returned -22 [ 484.598960][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.002E/input/input51 [ 484.610697][T14759] binder: 14757:14759 unknown command 0 [ 484.620128][T14759] binder: 14757:14759 ioctl c0306201 200000000080 returned -22 [ 484.640206][T14759] binder: 14757:14759 unknown command 0 [ 484.655059][T14759] binder: 14757:14759 ioctl c0306201 200000000080 returned -22 [ 484.668701][T14759] binder: 14757:14759 unknown command 0 [ 484.674954][T14759] binder: 14757:14759 ioctl c0306201 200000000080 returned -22 [ 484.711553][T14759] binder: 14757:14759 unknown command 0 [ 484.730482][T14759] binder: 14757:14759 ioctl c0306201 200000000080 returned -22 [ 484.743159][T14759] binder: 14757:14759 unknown command 0 [ 484.762464][T14759] binder: 14757:14759 ioctl c0306201 200000000080 returned -22 [ 484.773808][T14759] binder: 14757:14759 unknown command 0 [ 484.792277][T14759] binder: 14757:14759 ioctl c0306201 200000000080 returned -22 [ 484.802835][T14764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2409'. [ 484.807783][ T24] keytouch 0003:0926:3333.002E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 484.812634][T14759] binder: 14757:14759 unknown command 0 [ 484.830725][T14764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2409'. [ 484.842164][T14759] binder: 14757:14759 ioctl c0306201 200000000080 returned -22 [ 484.849891][T14759] binder: 14757:14759 unknown command 0 [ 484.893426][T14759] binder: 14757:14759 ioctl c0306201 200000000080 returned -22 [ 484.919860][T14759] binder: 14757:14759 unknown command 0 [ 484.950421][T14759] binder: 14757:14759 ioctl c0306201 200000000080 returned -22 [ 484.970635][T14759] binder: 14757:14759 unknown command 0 [ 484.977700][T14759] binder: 14757:14759 ioctl c0306201 200000000080 returned -22 [ 485.000455][T14759] binder: 14757:14759 unknown command 0 [ 485.006375][T14759] binder: 14757:14759 ioctl c0306201 200000000080 returned -22 [ 485.018694][T14759] binder: 14757:14759 unknown command 0 [ 485.032569][T14759] binder: 14757:14759 ioctl c0306201 200000000080 returned -22 [ 485.043838][T14769] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2410'. [ 485.129995][ C1] [ 485.132373][ C1] ======================================================== [ 485.139618][ C1] WARNING: possible irq lock inversion dependency detected [ 485.146873][ C1] syzkaller #0 Tainted: G L [ 485.152901][ C1] -------------------------------------------------------- [ 485.160140][ C1] syz-executor/5648 just changed the state of lock: [ 485.166774][ C1] ffff88807c078230 (&dev->event_lock#2){..-.}-{3:3}, at: input_event+0x71/0xc0 [ 485.175940][ C1] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 485.183938][ C1] (tasklist_lock){.+.+}-{3:3} [ 485.183959][ C1] [ 485.183959][ C1] [ 485.183959][ C1] and interrupts could create inverse lock ordering between them. [ 485.183959][ C1] [ 485.203017][ C1] [ 485.203017][ C1] other info that might help us debug this: [ 485.211074][ C1] Chain exists of: [ 485.211074][ C1] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 485.211074][ C1] [ 485.224734][ C1] Possible interrupt unsafe locking scenario: [ 485.224734][ C1] [ 485.233097][ C1] CPU0 CPU1 [ 485.238497][ C1] ---- ---- [ 485.243891][ C1] lock(tasklist_lock); [ 485.248117][ C1] local_irq_disable(); [ 485.254868][ C1] lock(&dev->event_lock#2); [ 485.262132][ C1] lock(&client->buffer_lock); [ 485.269487][ C1] [ 485.272979][ C1] lock(&dev->event_lock#2); [ 485.277829][ C1] [ 485.277829][ C1] *** DEADLOCK *** [ 485.277829][ C1] [ 485.285955][ C1] 2 locks held by syz-executor/5648: [ 485.291245][ C1] #0: ffff88807d53c698 (&sb->s_type->i_lock_key#10){+.+.}-{3:3}, at: d_instantiate+0x63/0xb0 [ 485.301660][ C1] #1: ffff888056bcd560 (&lockref->lock){+.+.}-{3:3}, at: d_instantiate+0x72/0xb0 [ 485.310925][ C1] [ 485.310925][ C1] the shortest dependencies between 2nd lock and 1st lock: [ 485.320311][ C1] -> (tasklist_lock){.+.+}-{3:3} { [ 485.325802][ C1] HARDIRQ-ON-R at: [ 485.330240][ C1] lock_acquire+0x106/0x350 [ 485.337132][ C1] _raw_read_lock+0x36/0x50 [ 485.344125][ C1] __do_wait+0xde/0x740 [ 485.350666][ C1] do_wait+0x1e7/0x510 [ 485.357095][ C1] kernel_wait+0xd6/0x1c0 [ 485.363785][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 485.372065][ C1] process_scheduled_works+0xb5d/0x1860 [ 485.379960][ C1] worker_thread+0xa53/0xfc0 [ 485.386881][ C1] kthread+0x389/0x470 [ 485.393287][ C1] ret_from_fork+0x514/0xb70 [ 485.400236][ C1] ret_from_fork_asm+0x1a/0x30 [ 485.407348][ C1] SOFTIRQ-ON-R at: [ 485.411661][ C1] lock_acquire+0x106/0x350 [ 485.418495][ C1] _raw_read_lock+0x36/0x50 [ 485.425336][ C1] __do_wait+0xde/0x740 [ 485.431829][ C1] do_wait+0x1e7/0x510 [ 485.438233][ C1] kernel_wait+0xd6/0x1c0 [ 485.444896][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 485.453129][ C1] process_scheduled_works+0xb5d/0x1860 [ 485.461007][ C1] worker_thread+0xa53/0xfc0 [ 485.467936][ C1] kthread+0x389/0x470 [ 485.474337][ C1] ret_from_fork+0x514/0xb70 [ 485.481259][ C1] ret_from_fork_asm+0x1a/0x30 [ 485.488358][ C1] INITIAL USE at: [ 485.492588][ C1] lock_acquire+0x106/0x350 [ 485.499332][ C1] _raw_write_lock_irq+0x3d/0x50 [ 485.506517][ C1] copy_process+0x2b4c/0x4440 [ 485.513437][ C1] kernel_clone+0x2d7/0x940 [ 485.520191][ C1] user_mode_thread+0x110/0x180 [ 485.527299][ C1] rest_init+0x23/0x300 [ 485.533792][ C1] start_kernel+0x38a/0x3e0 [ 485.540648][ C1] x86_64_start_reservations+0x24/0x30 [ 485.548397][ C1] x86_64_start_kernel+0x143/0x1c0 [ 485.555764][ C1] common_startup_64+0x13e/0x147 [ 485.562957][ C1] INITIAL READ USE at: [ 485.567620][ C1] lock_acquire+0x106/0x350 [ 485.574801][ C1] _raw_read_lock+0x36/0x50 [ 485.581990][ C1] __do_wait+0xde/0x740 [ 485.588844][ C1] do_wait+0x1e7/0x510 [ 485.595595][ C1] kernel_wait+0xd6/0x1c0 [ 485.602608][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 485.611191][ C1] process_scheduled_works+0xb5d/0x1860 [ 485.619415][ C1] worker_thread+0xa53/0xfc0 [ 485.626686][ C1] kthread+0x389/0x470 [ 485.633437][ C1] ret_from_fork+0x514/0xb70 [ 485.640705][ C1] ret_from_fork_asm+0x1a/0x30 [ 485.648150][ C1] } [ 485.650979][ C1] ... key at: [] tasklist_lock+0x18/0x40 [ 485.659180][ C1] ... acquired at: [ 485.663316][ C1] _raw_read_lock+0x36/0x50 [ 485.667988][ C1] send_sigio+0x101/0x370 [ 485.672484][ C1] dnotify_handle_event+0x169/0x440 [ 485.677865][ C1] fsnotify+0x1831/0x1ae0 [ 485.682360][ C1] path_openat+0x15c2/0x3860 [ 485.687115][ C1] do_file_open+0x23e/0x4a0 [ 485.691781][ C1] do_sys_openat2+0x113/0x200 [ 485.696620][ C1] __x64_sys_openat+0x138/0x170 [ 485.701632][ C1] do_syscall_64+0x174/0x580 [ 485.706449][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.712522][ C1] [ 485.714834][ C1] -> (&f_owner->lock){....}-{3:3} { [ 485.720295][ C1] INITIAL USE at: [ 485.724445][ C1] lock_acquire+0x106/0x350 [ 485.731043][ C1] _raw_write_lock_irq+0x3d/0x50 [ 485.738067][ C1] __f_setown+0x67/0x370 [ 485.744391][ C1] fcntl_dirnotify+0x3f9/0x6a0 [ 485.751234][ C1] do_fcntl+0x77e/0x1a20 [ 485.757555][ C1] __se_sys_fcntl+0xc8/0x150 [ 485.764224][ C1] do_syscall_64+0x174/0x580 [ 485.770886][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.778852][ C1] INITIAL READ USE at: [ 485.783427][ C1] lock_acquire+0x106/0x350 [ 485.790438][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 485.798151][ C1] send_sigio+0x38/0x370 [ 485.804904][ C1] dnotify_handle_event+0x169/0x440 [ 485.812612][ C1] fsnotify+0x1831/0x1ae0 [ 485.819452][ C1] path_openat+0x15c2/0x3860 [ 485.826558][ C1] do_file_open+0x23e/0x4a0 [ 485.833573][ C1] do_sys_openat2+0x113/0x200 [ 485.840757][ C1] __x64_sys_openat+0x138/0x170 [ 485.848119][ C1] do_syscall_64+0x174/0x580 [ 485.855216][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.863615][ C1] } [ 485.866356][ C1] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 485.875572][ C1] ... acquired at: [ 485.879618][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 485.884988][ C1] send_sigio+0x38/0x370 [ 485.889401][ C1] kill_fasync+0x24d/0x4d0 [ 485.893984][ C1] sock_wake_async+0x137/0x160 [ 485.899021][ C1] sk_wake_async+0x184/0x280 [ 485.903831][ C1] unix_release_sock+0x74f/0xc80 [ 485.908933][ C1] unix_release+0x92/0xd0 [ 485.913424][ C1] sock_close+0xc3/0x240 [ 485.917829][ C1] __fput+0x44f/0xa60 [ 485.921981][ C1] task_work_run+0x1d9/0x270 [ 485.926737][ C1] get_signal+0x11eb/0x1330 [ 485.931407][ C1] arch_do_signal_or_restart+0xbc/0x840 [ 485.937161][ C1] exit_to_user_mode_loop+0xa9/0x680 [ 485.942634][ C1] do_syscall_64+0x353/0x580 [ 485.947389][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.953440][ C1] [ 485.955748][ C1] -> (&new->fa_lock){....}-{3:3} { [ 485.961037][ C1] INITIAL USE at: [ 485.965090][ C1] lock_acquire+0x106/0x350 [ 485.971491][ C1] _raw_write_lock_irq+0x3d/0x50 [ 485.978334][ C1] fasync_remove_entry+0xf1/0x1c0 [ 485.985259][ C1] sock_fasync+0x85/0xf0 [ 485.991403][ C1] __fput+0x890/0xa60 [ 485.997284][ C1] task_work_run+0x1d9/0x270 [ 486.003778][ C1] exit_to_user_mode_loop+0x193/0x680 [ 486.011049][ C1] do_syscall_64+0x353/0x580 [ 486.017539][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.025330][ C1] INITIAL READ USE at: [ 486.029820][ C1] lock_acquire+0x106/0x350 [ 486.036655][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 486.044195][ C1] kill_fasync+0x199/0x4d0 [ 486.050948][ C1] sock_wake_async+0x137/0x160 [ 486.058051][ C1] af_alg_wmem_wakeup+0x3c0/0x440 [ 486.065503][ C1] aead_recvmsg+0x10ed/0x1160 [ 486.072517][ C1] sock_recvmsg+0x172/0x1b0 [ 486.079355][ C1] ____sys_recvmsg+0x1e6/0x4a0 [ 486.086449][ C1] ___sys_recvmsg+0x215/0x590 [ 486.093467][ C1] do_recvmmsg+0x334/0x800 [ 486.100218][ C1] __x64_sys_recvmmsg+0x198/0x250 [ 486.107572][ C1] do_syscall_64+0x174/0x580 [ 486.114490][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.122716][ C1] } [ 486.125374][ C1] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 486.134224][ C1] ... acquired at: [ 486.138186][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 486.143553][ C1] kill_fasync+0x199/0x4d0 [ 486.148138][ C1] evdev_pass_values+0x627/0xbd0 [ 486.153322][ C1] evdev_events+0x1e6/0x340 [ 486.157984][ C1] input_pass_values+0x288/0x890 [ 486.163079][ C1] input_event_dispose+0x330/0x6b0 [ 486.168357][ C1] input_inject_event+0x1dc/0x330 [ 486.173546][ C1] evdev_write+0x325/0x4c0 [ 486.178123][ C1] vfs_write+0x29a/0xb90 [ 486.182557][ C1] ksys_write+0x150/0x270 [ 486.187055][ C1] do_syscall_64+0x174/0x580 [ 486.191808][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.197887][ C1] [ 486.200193][ C1] -> (&client->buffer_lock){....}-{3:3} { [ 486.206002][ C1] INITIAL USE at: [ 486.209964][ C1] lock_acquire+0x106/0x350 [ 486.216190][ C1] _raw_spin_lock+0x2e/0x40 [ 486.222422][ C1] evdev_pass_values+0xb9/0xbd0 [ 486.229001][ C1] evdev_events+0x1e6/0x340 [ 486.235228][ C1] input_pass_values+0x288/0x890 [ 486.241885][ C1] input_event_dispose+0x330/0x6b0 [ 486.248736][ C1] input_inject_event+0x1dc/0x330 [ 486.255485][ C1] evdev_write+0x325/0x4c0 [ 486.261622][ C1] vfs_write+0x29a/0xb90 [ 486.267591][ C1] ksys_write+0x150/0x270 [ 486.273650][ C1] do_syscall_64+0x174/0x580 [ 486.279961][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.287577][ C1] } [ 486.290150][ C1] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 486.298511][ C1] ... acquired at: [ 486.302442][ C1] _raw_spin_lock+0x2e/0x40 [ 486.307117][ C1] evdev_pass_values+0xb9/0xbd0 [ 486.312125][ C1] evdev_events+0x1e6/0x340 [ 486.316788][ C1] input_pass_values+0x288/0x890 [ 486.321883][ C1] input_event_dispose+0x330/0x6b0 [ 486.327171][ C1] input_inject_event+0x1dc/0x330 [ 486.332368][ C1] evdev_write+0x325/0x4c0 [ 486.336950][ C1] vfs_write+0x29a/0xb90 [ 486.341357][ C1] ksys_write+0x150/0x270 [ 486.345853][ C1] do_syscall_64+0x174/0x580 [ 486.350603][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.356656][ C1] [ 486.358962][ C1] -> (&dev->event_lock#2){..-.}-{3:3} { [ 486.364518][ C1] IN-SOFTIRQ-W at: [ 486.368482][ C1] lock_acquire+0x106/0x350 [ 486.374656][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 486.381500][ C1] input_event+0x71/0xc0 [ 486.387387][ C1] hidinput_hid_event+0x13df/0x1ec0 [ 486.394331][ C1] hid_process_event+0x4be/0x620 [ 486.400908][ C1] hid_report_raw_event+0xed6/0x1850 [ 486.407849][ C1] __hid_input_report+0x45c/0x590 [ 486.414517][ C1] hid_irq_in+0x495/0x710 [ 486.420577][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 486.427637][ C1] dummy_timer+0xbc0/0x4650 [ 486.433858][ C1] __hrtimer_run_queues+0x3c0/0xa20 [ 486.440698][ C1] hrtimer_run_softirq+0x17a/0x240 [ 486.447451][ C1] handle_softirqs+0x22a/0x840 [ 486.453851][ C1] __irq_exit_rcu+0xca/0x220 [ 486.460079][ C1] irq_exit_rcu+0x9/0x30 [ 486.465957][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 486.473230][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 486.480847][ C1] __d_instantiate+0x375/0x6e0 [ 486.487261][ C1] d_instantiate+0x7d/0xb0 [ 486.493319][ C1] alloc_file_pseudo+0x107/0x240 [ 486.499897][ C1] sock_alloc_file+0xb8/0x2e0 [ 486.506216][ C1] __sys_socket+0x13c/0x1b0 [ 486.512362][ C1] __x64_sys_socket+0x7a/0x90 [ 486.518679][ C1] do_syscall_64+0x174/0x580 [ 486.524906][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.532439][ C1] INITIAL USE at: [ 486.536324][ C1] lock_acquire+0x106/0x350 [ 486.542377][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 486.549135][ C1] input_inject_event+0xa4/0x330 [ 486.555636][ C1] kbd_led_trigger_activate+0xbc/0x100 [ 486.562758][ C1] led_trigger_set+0x535/0x960 [ 486.569134][ C1] led_trigger_set_default+0x260/0x2a0 [ 486.576157][ C1] led_classdev_register_ext+0x787/0x9c0 [ 486.583354][ C1] input_leds_connect+0x517/0x790 [ 486.589947][ C1] input_register_device+0xce0/0x1140 [ 486.596878][ C1] atkbd_connect+0x71e/0xa10 [ 486.603084][ C1] serio_driver_probe+0x82/0xb0 [ 486.609484][ C1] really_probe+0x267/0xaf0 [ 486.615601][ C1] __driver_probe_device+0x1ef/0x380 [ 486.622440][ C1] driver_probe_device+0x4f/0x240 [ 486.629018][ C1] __driver_attach+0x34c/0x640 [ 486.635335][ C1] bus_for_each_dev+0x23b/0x2c0 [ 486.641795][ C1] serio_handle_event+0x1af/0xf80 [ 486.648368][ C1] process_scheduled_works+0xb5d/0x1860 [ 486.655462][ C1] worker_thread+0xa53/0xfc0 [ 486.661601][ C1] kthread+0x389/0x470 [ 486.667223][ C1] ret_from_fork+0x514/0xb70 [ 486.673360][ C1] ret_from_fork_asm+0x1a/0x30 [ 486.679678][ C1] } [ 486.682159][ C1] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 486.691172][ C1] ... acquired at: [ 486.694955][ C1] mark_lock+0x115/0x190 [ 486.699357][ C1] __lock_acquire+0x689/0x2cf0 [ 486.704278][ C1] lock_acquire+0x106/0x350 [ 486.708941][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 486.714305][ C1] input_event+0x71/0xc0 [ 486.718711][ C1] hidinput_hid_event+0x13df/0x1ec0 [ 486.724076][ C1] hid_process_event+0x4be/0x620 [ 486.729177][ C1] hid_report_raw_event+0xed6/0x1850 [ 486.734631][ C1] __hid_input_report+0x45c/0x590 [ 486.739828][ C1] hid_irq_in+0x495/0x710 [ 486.744323][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 486.749860][ C1] dummy_timer+0xbc0/0x4650 [ 486.754545][ C1] __hrtimer_run_queues+0x3c0/0xa20 [ 486.759926][ C1] hrtimer_run_softirq+0x17a/0x240 [ 486.765207][ C1] handle_softirqs+0x22a/0x840 [ 486.770143][ C1] __irq_exit_rcu+0xca/0x220 [ 486.774917][ C1] irq_exit_rcu+0x9/0x30 [ 486.779326][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 486.785126][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 486.791270][ C1] __d_instantiate+0x375/0x6e0 [ 486.796199][ C1] d_instantiate+0x7d/0xb0 [ 486.800782][ C1] alloc_file_pseudo+0x107/0x240 [ 486.805880][ C1] sock_alloc_file+0xb8/0x2e0 [ 486.810718][ C1] __sys_socket+0x13c/0x1b0 [ 486.815384][ C1] __x64_sys_socket+0x7a/0x90 [ 486.820221][ C1] do_syscall_64+0x174/0x580 [ 486.824972][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.831032][ C1] [ 486.833341][ C1] [ 486.833341][ C1] stack backtrace: [ 486.839218][ C1] CPU: 1 UID: 0 PID: 5648 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 486.839242][ C1] Tainted: [L]=SOFTLOCKUP [ 486.839248][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 486.839259][ C1] Call Trace: [ 486.839268][ C1] [ 486.839341][ C1] dump_stack_lvl+0xe8/0x150 [ 486.839390][ C1] print_irq_inversion_bug+0x1d2/0x1e0 [ 486.839412][ C1] mark_lock_irq+0x3d2/0x420 [ 486.839432][ C1] mark_lock+0x115/0x190 [ 486.839449][ C1] __lock_acquire+0x689/0x2cf0 [ 486.839468][ C1] ? save_trace+0x2c4/0x390 [ 486.839517][ C1] ? lockdep_unlock+0x5d/0xd0 [ 486.839531][ C1] ? mark_lock+0x180/0x190 [ 486.839549][ C1] ? input_event+0x71/0xc0 [ 486.839569][ C1] lock_acquire+0x106/0x350 [ 486.839584][ C1] ? input_event+0x71/0xc0 [ 486.839605][ C1] ? __bfs+0x153/0x290 [ 486.839620][ C1] ? __pfx_usage_match+0x10/0x10 [ 486.839639][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 486.839664][ C1] ? input_event+0x71/0xc0 [ 486.839683][ C1] input_event+0x71/0xc0 [ 486.839705][ C1] hidinput_hid_event+0x13df/0x1ec0 [ 486.839727][ C1] ? __pfx_hidinput_hid_event+0x10/0x10 [ 486.839745][ C1] ? __wake_up_common_lock+0x190/0x1f0 [ 486.839770][ C1] hid_process_event+0x4be/0x620 [ 486.839787][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 486.839804][ C1] hid_report_raw_event+0xed6/0x1850 [ 486.839835][ C1] __hid_input_report+0x45c/0x590 [ 486.839860][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 486.839884][ C1] hid_irq_in+0x495/0x710 [ 486.839907][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 486.839927][ C1] dummy_timer+0xbc0/0x4650 [ 486.839968][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 486.839992][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 486.840017][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 486.840057][ C1] __hrtimer_run_queues+0x3c0/0xa20 [ 486.840084][ C1] hrtimer_run_softirq+0x17a/0x240 [ 486.840106][ C1] handle_softirqs+0x22a/0x840 [ 486.840123][ C1] ? __irq_exit_rcu+0xca/0x220 [ 486.840141][ C1] __irq_exit_rcu+0xca/0x220 [ 486.840156][ C1] irq_exit_rcu+0x9/0x30 [ 486.840170][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 486.840186][ C1] [ 486.840192][ C1] [ 486.840198][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 486.840215][ C1] RIP: 0010:__d_instantiate+0x375/0x6e0 [ 486.840239][ C1] Code: 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 c0 6b e7 ff 41 be 28 04 00 00 4d 03 37 4c 89 f0 48 c1 e8 03 42 0f b6 04 28 <84> c0 0f 85 5b 02 00 00 41 8b 2e 89 ee 81 e6 00 00 00 08 41 0f 94 [ 486.840288][ C1] RSP: 0018:ffffc90003cefcf0 EFLAGS: 00000a02 [ 486.840304][ C1] RAX: 0000000000000000 RBX: ffff888056bcd490 RCX: ffff888012313e00 [ 486.840317][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 486.840326][ C1] RBP: 0000000000000001 R08: ffff888056bcd54b R09: 1ffff1100ad79aa9 [ 486.840337][ C1] R10: dffffc0000000000 R11: ffffed100ad79aaa R12: 1ffff1100ad79a93 [ 486.840350][ C1] R13: dffffc0000000000 R14: ffff88807d53ca28 R15: ffff888056bcd4f8 [ 486.840370][ C1] d_instantiate+0x7d/0xb0 [ 486.840391][ C1] alloc_file_pseudo+0x107/0x240 [ 486.840411][ C1] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 486.840429][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 486.840452][ C1] ? _raw_spin_unlock+0x28/0x50 [ 486.840476][ C1] sock_alloc_file+0xb8/0x2e0 [ 486.840494][ C1] ? __sys_socket+0x12b/0x1b0 [ 486.840515][ C1] __sys_socket+0x13c/0x1b0 [ 486.840535][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.840551][ C1] __x64_sys_socket+0x7a/0x90 [ 486.840571][ C1] do_syscall_64+0x174/0x580 [ 486.840587][ C1] ? trace_irq_disable+0x3b/0x140 [ 486.840625][ C1] ? clear_bhb_loop+0x40/0x90 [ 486.840642][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.840658][ C1] RIP: 0033:0x7fe0fe79e6c7 [ 486.840672][ C1] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.840686][ C1] RSP: 002b:00007fe0feb3f6c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 486.840702][ C1] RAX: ffffffffffffffda RBX: 00007fe0fe9e7460 RCX: 00007fe0fe79e6c7 [ 486.840713][ C1] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 486.840723][ C1] RBP: 00007fe0feb3fdec R08: 0000000000000000 R09: 0000000000000000 [ 486.840733][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000020b [ 486.840743][ C1] R13: 00000000000927c0 R14: 0000000000000000 R15: 00007fe0feb3fe40 [ 486.840758][ C1] [ 487.321627][ T24] usb 6-1: USB disconnect, device number 37 [ 487.453196][T14781] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2412'.