last executing test programs: 3m6.663581614s ago: executing program 2 (id=230): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001d00070f"], 0x24}}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) socket(0x10, 0x803, 0x0) (async) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x400401, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000140)=0x2e) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000cc0)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r13 = socket$kcm(0x11, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r13, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r14, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) (async) r15 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r16, {0xc, 0x7}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000010}, 0x4041080) 3m6.622359309s ago: executing program 2 (id=231): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x100) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000001400)) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x3}, {0x0, 0xfff1}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) getpeername$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000600), 0x200800, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x1f, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xa0e, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x3f}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x117}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x89f1d00a02fdf5c1}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x7a, &(0x7f0000000780)=""/122, 0x41100, 0x27, '\x00', r7, 0x25, r2, 0x8, &(0x7f0000000800)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0x9, 0xe869, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000880)=[r2, r2, r2, r2, r2, r2, r2, r2, 0x1], &(0x7f00000008c0)=[{0x3, 0x5, 0x4, 0xb}, {0x1, 0x4, 0x10, 0x7}, {0x3, 0x4, 0x4, 0xb}, {0x1, 0x3, 0x5, 0x2}], 0x10, 0xffffffff}, 0x94) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000240)={0x0, @dev, @loopback}, &(0x7f0000000280)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x24c, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x16000}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder0\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x4}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xbd}, @ETHTOOL_A_BITSET_MASK={0x94, 0x5, "06b591583a4674f51482266e0c16d169f6cd87e58c3e8344d86fa8b9dfe70f780c65ebb458858d3660eb9abb9573d4f54ddcbe121ff42fcd29f9ef28d54188454d6d6a74032878da5335f568438a6fb17d6d80f48430a8c58f82ed3fcfbd1eaa338d2158e3ce2f70559ae232cc936b6f7142fdab2e0a4d5085ac5e904e95ad0b3a380522a3eea81bd98bf95589f33c63"}, @ETHTOOL_A_BITSET_MASK={0x77, 0x5, "b911eb1ca0e4fd3dc363d863388f8ae5ef834443989c2c47d0eeae04b8e45c93741ea3a46bd47333904135031b35aeddb82dcb55733ac3c1b9bba6403d40a16d4e65d3366749434fe48b6c3ca38ba40b3f44d2f8c4548e9053215b81e936a49997dca1c0bc06567fe28f7ff15e1d72bdec0d62"}, @ETHTOOL_A_BITSET_VALUE={0x34, 0x4, "356ddb07eb218e4342eb195327091fe668f32b17575cfc5f4c661c8c2f6e18d1189a438661e6b0370d784885bf3cb08f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x10000884}, 0x4) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xb0, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x0) 3m6.562360337s ago: executing program 2 (id=232): r0 = socket(0x1e, 0x3, 0x200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x4, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8924, &(0x7f00000000c0)={'batadv0\x00', 0x1}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8001) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0xc, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={&(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908c2a5726f2c50c9eb720e93d3e5b49fae5ab325f9ef326cf8bad0db853cbb8235b0c803c417ede8f7b85eaad8aea5b2fe9813fee217a97a980d39d7a1efef815bf2bfe6823e664dc7dcd285d91c9e4ab6ee36a00b300ffd69f9eb85d6f8c7b5c176084bccbdea02f34326a0123f31e282ee", 0xb2}, {&(0x7f00000006c0)="080c0434", 0x4}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfab2e5708062c659e44272215dba2195d826f9fd3b46efe6524229e48a311e4aab2a2e5f89c3d8", 0x9a}, {&(0x7f0000000880)="a1755527af3bc7c4671ac86bf0a2338efb5db19ac572af50ea485d175761731e22c55a759161b4a9abe65d440cccf63983cbbcac2913f2df6e269ebe5875", 0x3e}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000000000000000000001000000ff000056df27bb76a0c4c02a354f90106d3a00000000001400000000000000000000000200000057020000000000001400000000000000000000000200000009000000000000001100000000000000000000000100000001000000000000001cfe83fe", @ANYRES32=r4, @ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002ac1414bb00000006ffffffff000000000000000000000003441435230a01010200000001ffffffff00000007444477937f00000100000007ac1e000100000008ac14143200000005e0000002000000f77f00000100000200ac1414bb00000401ac1414aa0000e7a6ac1414aa000000b6010014000000000000000000000002000000020000000000000014"], 0x1a0}, 0x41) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfff1, 0x1}, {0x5, 0x8}, {0xffeb, 0xfff1}}, [{0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x400}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) socket$inet6(0xa, 0x1, 0x9) 3m6.367211321s ago: executing program 2 (id=233): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20180, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, &(0x7f0000000040)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/../file0/../file0/../file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r3 = openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01864c1, &(0x7f0000000280)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01864c1, &(0x7f00000000c0)={r4}) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r5, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x80000000, 0x5, 0x6, 0x3, 0x900000}, &(0x7f0000000540)=0x98) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000580)={0x0, 0x3, 0x51, 0x1, 0x9, 0x7, 0x7, 0x10, {r6, @in6={{0xa, 0x4e22, 0x91e, @loopback, 0x3}}, 0x3e, 0x9, 0x6, 0x6, 0x3}}, &(0x7f0000000680)=0xb0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') 3m6.303388324s ago: executing program 2 (id=235): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r3, @ANYBLOB="18005a80140001800500010030000000050002"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x7e4adf5b182a807}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xef1, 0x6}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x804c0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r3]) r6 = syz_open_dev$vim2m(&(0x7f0000000440), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000500)={0x9, 0x2, 0x80, "913a7ec7c118bee03d296684a40215057a740f261ac302c09a59928a887629c3", 0x51424752}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x90000, &(0x7f0000000200)=ANY=[@ANYRESHEX=r5, @ANYRES8=r5, @ANYRES32=r5], 0x0, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000600602050700ffff8080060045060058060500000d2f9078ac1e00010a0101020421880b00000003040008000c0086dd080088be00000004131049050100000000000001080022eb000000000000040100099b1b0800655800000002"], 0x66) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$TUNSETSNDBUF(r8, 0x400454d4, &(0x7f0000000400)=0x3ff) 3m6.104047663s ago: executing program 2 (id=238): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) io_setup(0x66, &(0x7f0000000400)=0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, r2, &(0x7f00000000c0)='-5', 0x2, 0x0, 0x0, 0x4}]) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a1c0)=ANY=[], 0x3bfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0585605, &(0x7f00000005c0)={0x1, 0x1, @raw_data=[0x97e, 0x0, 0x1012, 0xfffffffe, 0xfffffffd, 0x0, 0xfffffffe, 0x6, 0x0, 0x40000002, 0x4, 0x0, 0x2000, 0x2, 0x0, 0x20000]}) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) r8 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) write(r8, &(0x7f00000000c0)='ic', 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) syz_usb_ep_write(r6, 0x81, 0x6a, &(0x7f0000000180)="ca0d5409d86fa7f86028b36ab7c64046aac015f200b17de3f50bfec6dde5280ef2ce814f74bf9990fc3e2e317c41b03a424a2c51d30f816cfb30eb226205937ff993cbd9cee2ff8efa862388cd157347f88547141282d260ec3b728a9cda408316250943a85e802713f3") preadv(r7, &(0x7f0000002140)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, 0xffff3702, 0x1) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r9, 0x11, 0xb, 0x0, &(0x7f0000000340)) sendmsg$inet6(r9, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e22, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)}, 0x40440c0) 3m5.84106259s ago: executing program 32 (id=238): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) io_setup(0x66, &(0x7f0000000400)=0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, r2, &(0x7f00000000c0)='-5', 0x2, 0x0, 0x0, 0x4}]) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a1c0)=ANY=[], 0x3bfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0585605, &(0x7f00000005c0)={0x1, 0x1, @raw_data=[0x97e, 0x0, 0x1012, 0xfffffffe, 0xfffffffd, 0x0, 0xfffffffe, 0x6, 0x0, 0x40000002, 0x4, 0x0, 0x2000, 0x2, 0x0, 0x20000]}) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) r8 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) write(r8, &(0x7f00000000c0)='ic', 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) syz_usb_ep_write(r6, 0x81, 0x6a, &(0x7f0000000180)="ca0d5409d86fa7f86028b36ab7c64046aac015f200b17de3f50bfec6dde5280ef2ce814f74bf9990fc3e2e317c41b03a424a2c51d30f816cfb30eb226205937ff993cbd9cee2ff8efa862388cd157347f88547141282d260ec3b728a9cda408316250943a85e802713f3") preadv(r7, &(0x7f0000002140)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, 0xffff3702, 0x1) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r9, 0x11, 0xb, 0x0, &(0x7f0000000340)) sendmsg$inet6(r9, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e22, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)}, 0x40440c0) 2m42.135869188s ago: executing program 5 (id=351): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@initdev, @in=@dev}}, {{@in6=@dev}, 0x0, @in6=@private1}}, &(0x7f00000001c0)=0xe8) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$sysfs(0xffffff9c, &(0x7f00000002c0)='/sys/kernel/kexec_crash_loaded', 0x0, 0x0) fsetxattr$security_capability(r5, &(0x7f0000000140), &(0x7f0000000580)=@v3={0x3000000, [{0x40}], 0xee00}, 0x14, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x7f, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0xfff, 0xb3, 0x39da], 0x30000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x30000, 0x8, 0x9, 0x1, 0xe5, 0x40, 0x2d, 0x0, 0x30, 0x19}, {0x1, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x3, 0x3, 0x3, 0x1}, {0x2000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x7, 0x81}, {0x30000, 0xdddd0000, 0x3, 0x5d, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x7, 0x81}, {0xa000, 0x9000, 0x10, 0x2, 0x3, 0x7, 0xab, 0x7f, 0x47, 0xeb, 0xf7, 0x82}, {0xffffffff, 0x80a0000, 0xf, 0x8, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xc, 0x1, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0xb000, 0xe, 0x85, 0xf, 0x7, 0x1, 0x5, 0x5, 0x3, 0x7, 0x9}, {0xfec00000, 0x3ff}, {0x10000, 0x7fff}, 0x8004003f, 0x0, 0x6000, 0x42024, 0xb, 0x1, 0x50000, [0x6840000000000002, 0x3, 0x94, 0xff]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xc7, 0x0, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 2m41.97728345s ago: executing program 5 (id=352): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8000, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r2, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000000c00)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab52a2d2132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064dd2f9ac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454c08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92d5f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e13c4a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b670400d59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac655ff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe194e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b6dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d5773502000000b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x130, 0xfffffffffffffffe, 0x2, {0x2, 0x5, 0x0, '\x00', {0x200, 0x0, 0xadf, 0x10, r4, 0x0, 0x4000, '\x00', 0x8, 0xfffffffffffffff7, 0x2, 0x3, {0x8, 0xff}, {0x4000000000006, 0xb}, {0x2000004, 0xd}, {0xfff, 0x9fe}, 0x1, 0x6, 0x8, 0x7}}}}) write$FUSE_INIT(r2, &(0x7f0000000000)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x20, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000100)=0x8b, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e22, @multicast2}]}, &(0x7f0000000280)=0x10) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000400)=@x86={0x3, 0x4, 0x6, 0x0, 0x9, 0x8, 0x27, 0x1, 0x1, 0x7, 0x9, 0x1, 0x0, 0x3, 0x5, 0x3, 0x8, 0x10, 0x3, '\x00', 0x1, 0x1000000000000ab5}) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x8080000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x58000, 0xb000, 0xc, 0x0, 0xfc, 0x1, 0x0, 0x0, 0x3, 0x7}, {0x2000, 0x5000, 0x1f, 0xff, 0x7, 0x4, 0x4, 0xfd, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0xe, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0xfc, 0x7, 0x10}, {0xeeee8000, 0x8000000, 0x9, 0x0, 0x4, 0x8, 0x0, 0x3, 0xfc, 0x3c}, {0x0, 0x0, 0xf, 0xfd, 0x8, 0x0, 0x2, 0x0, 0x40, 0x0, 0x5}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x13}, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x2, 0xca, 0x4, 0x0, 0x0, 0x3}, {0x80a0000}, {0xdddd1000}, 0xddf8fffb, 0x0, 0x10000, 0x50, 0x0, 0xf801, 0x0, [0x80000000, 0x0, 0x1]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x3, 0x100000, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000080)=ANY=[], 0x10}, 0x20008041) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = gettid() sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c000000100005ff2abd7000000000000000004a", @ANYRES32=0x0, @ANYBLOB="942a000004000600140012800900010076657468000000000400028008001300", @ANYRES32=r9, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008091) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x10001) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x0, @tick=0x5, 0xf7, {0xda, 0xc}, 0x9, 0x1, 0x6}) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r10, 0x7b1, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x55b4}) r11 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYRES8=r8], 0x0) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001f0000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) 2m38.837590798s ago: executing program 5 (id=371): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001800200028bd7000fddbdf2502141006fe7500040020000008000400", @ANYRES32=0x0, @ANYBLOB="0800100000380000080006000300000006001c004e2121b7be0c1680080001000d000000"], 0x48}, 0x1, 0x0, 0x0, 0x4884}, 0x4085) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000003c0)=@arm64={0x8, 0x9, 0x5, '\x00', 0xf7}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000140)={r0, &(0x7f0000000040)='\x00', 0x24002, &(0x7f0000000080)={@align=0x1, {0x2, 0x7, 0x7, 0x6}}, 0x6, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000080)={{0xf, 0x1}, 0x1, 0x2, 0x2, {0x0, 0xb}, 0x6, 0x6}) (async) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000180)=0x8) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x2, 0x0, @ioapic={0x0, 0x1, 0x2, 0xfffffffe, 0x0, [{0x2, 0x4, 0x3}, {0x9, 0x8, 0x9, '\x00', 0xf}, {0xff, 0x7f, 0xd3, '\x00', 0xe9}, {0xfd, 0x5, 0xf5, '\x00', 0x13}, {0x7, 0x9, 0xf5, '\x00', 0xb4}, {0xf, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc, '\x00', 0x6}, {0x7f, 0x1, 0x4a, '\x00', 0x8}, {0xc, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xfb, 0x1, 0xff, '\x00', 0x1}, {0xd, 0x5, 0x26}, {0xcf, 0xf, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x1, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x4, 0xe, 0x2, '\x00', 0xe9}, {0x7, 0x2, 0x1, '\x00', 0xc2}, {0x2, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0x10, 0x87, '\x00', 0x7d}, {0x10, 0x9, 0x92, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0xa}]}}) 2m38.459819739s ago: executing program 5 (id=373): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0x8) r2 = socket$inet(0x2, 0x80001, 0x84) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="1632800e13", 0x5}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m37.266258612s ago: executing program 5 (id=376): mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) (async) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x91}) (async) r1 = syz_usb_connect(0x4, 0x24, &(0x7f00000007c0)=ANY=[@ANYRES32=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={0x0}, 0x18) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYRES8=r0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io(r1, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) (async, rerun: 64) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000200)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r1, @ANYBLOB="00008000000000001800348005"], 0x38}, 0x1, 0x300, 0x0, 0x4}, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, r0, r0], 0x3) (async) r2 = socket(0x10, 0x3, 0x5) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) (async) syz_clone(0x40001080, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x21, 0x2, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) (async) socket(0xa, 0x3, 0xff) syz_open_procfs(0x0, &(0x7f0000000500)='net/vlan/config\x00') (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r4, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r5, &(0x7f0000000180), 0x0, 0x2, 0x0) (async, rerun: 32) socket$inet6(0x10, 0x4, 0x5) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2m37.003921892s ago: executing program 5 (id=378): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002020000102505a1a440000000010109026c0001010100000904000003020200000705067200442105240000000d240f0100000000010029c50005240101091524120000a317a88b045e4f01a607c0ffcb7e392a152412ff07a317a88b045e4f01a607c0ffcb7e392a09058202000400000009050302"], 0x0) openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000400)={&(0x7f0000000000)=[{0x4, 0x8c01, 0x45, &(0x7f00000007c0)="253ae1ff09423e082b90f4bf0aa5025a01c8d0fae52c8745ffb6c9b07820ba0a7da757dc4f648ed7aed50713c965c3403169b921fe2c0b9370e56e21421bd29fcb0c911af3"}], 0x1}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x8880) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x163042) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f0000000140)={0x8, "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"}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) io_uring_setup(0x3c93, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x18, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {0x1b}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r5, 0x402, 0x8000003d) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049ee) write$binfmt_elf32(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4604070001010000000000000002000600030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000f30000007f00000004"], 0x58) close(r6) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_GET_CPSTAT(r1, 0x80186e83, &(0x7f0000000100)) rseq(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@map, 0xffffffffffffffff, 0x17}, 0x20) 2m21.611910119s ago: executing program 33 (id=378): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002020000102505a1a440000000010109026c0001010100000904000003020200000705067200442105240000000d240f0100000000010029c50005240101091524120000a317a88b045e4f01a607c0ffcb7e392a152412ff07a317a88b045e4f01a607c0ffcb7e392a09058202000400000009050302"], 0x0) openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000400)={&(0x7f0000000000)=[{0x4, 0x8c01, 0x45, &(0x7f00000007c0)="253ae1ff09423e082b90f4bf0aa5025a01c8d0fae52c8745ffb6c9b07820ba0a7da757dc4f648ed7aed50713c965c3403169b921fe2c0b9370e56e21421bd29fcb0c911af3"}], 0x1}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x8880) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x163042) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f0000000140)={0x8, "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"}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) io_uring_setup(0x3c93, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x18, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {0x1b}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r5, 0x402, 0x8000003d) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049ee) write$binfmt_elf32(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4604070001010000000000000002000600030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000f30000007f00000004"], 0x58) close(r6) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_GET_CPSTAT(r1, 0x80186e83, &(0x7f0000000100)) rseq(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@map, 0xffffffffffffffff, 0x17}, 0x20) 17.913316107s ago: executing program 1 (id=1130): r0 = socket$inet(0x2, 0x80001, 0x84) listen(r0, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc1ea35512) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f0707ce204e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) write$binfmt_script(r3, &(0x7f0000000180), 0x4) copy_file_range(r3, &(0x7f00000008c0)=0x4, r2, &(0x7f0000000100), 0x8, 0x0) 17.826771024s ago: executing program 1 (id=1131): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x140}, 0x80) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24d01, 0x8) io_setup(0xd, &(0x7f00000001c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000780)=[&(0x7f0000000580)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r4, &(0x7f00000000c0)='!', 0x1, 0x3000000000000502}]) dup3(r4, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x1ff, 0xbd, &(0x7f00000003c0)=""/189, 0x0, 0x64, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9}, 0xfffffffffffffdf5, 0x0, r4}, 0x94) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="be76d662ad71d1e999ba023735a29a635c9323ecdd7c9a03010000e8e13eb84bb35c9c7ae1a13232ae3c3079d8a86ee971b62b5ae5e16151e4d612ef7313aace404c755cef018b07184df49bda5b817aa09df22d33185ca9438ab3d81bb8d4bc4e720b579ef9e8fa42e8d178be29885a6f202b0d977b6f5d"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0xffffffffffffff0b) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x7d, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x80000000}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) 14.666530351s ago: executing program 1 (id=1147): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x2400c854) r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000c00)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000aa401042a00ff0f00001324030500010206020280000007001000d8000d24090202000000007b8f"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x1, "ec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x8a, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1, 0x1ff, 0x7) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0x800, 0xa00}) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_usb_connect(0x5, 0x7b, &(0x7f0000000c80)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="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"], 0x0) 12.850394959s ago: executing program 6 (id=1156): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x206, 0x10b481) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)="356fa7673e9128c5d5f78ee326dd6d662c189494f610e379eb63659f6532e1c75f", 0x21, 0x0, &(0x7f00000000c0)={0x2, 0xce1e, @loopback}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xf6ca0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = fanotify_init(0x200, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) fanotify_mark(r4, 0x400, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) pipe2$watch_queue(0x0, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e1d, 0x1, @mcast1={0xff, 0x5}, 0x8}, 0x7a) recvmmsg(r5, &(0x7f0000000140), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0xfd3, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x2000001}, 0x0) 12.443723704s ago: executing program 1 (id=1157): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04fcff80000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 11.912676797s ago: executing program 6 (id=1159): recvmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/87, 0x57}], 0x1}, 0xe}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/44, 0x2c}], 0x1}, 0x7}], 0x2, 0x40, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r1, &(0x7f0000000040)=""/60, 0xdb, 0x40, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa14, 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000004, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x100f, 0x2, 0x4, 0x0, 0x0, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11.557283713s ago: executing program 1 (id=1161): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) openat$ptp0(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe0000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x45, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000200)="0f01c8c4031d4974a13c3167f341e30526440f23fe0f07f2aff3daa434b15e991a8f6878c0983e465f374f4a0fc768b9c422b2f54107", 0x36}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x2, 0x30000}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = socket(0x15, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x255fdbff, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x8, 0xfff1}, {0x4, 0xfff1}}}, 0x24}}, 0x240080c8) 11.414267135s ago: executing program 1 (id=1163): r0 = fanotify_init(0x4, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fanotify_mark(r0, 0x400, 0x40000038, 0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00') socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/key-users\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) pipe2$watch_queue(0x0, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000040)=""/108) socket(0x25, 0x6, 0x3) sysfs$1(0x1, &(0x7f0000000140)='\\]&\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_to_batadv\x00'}) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000080)={0x7, 0x102, 0x6, {0x0, 0xfffffff8, 0x8, 0x10}}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x4028af11, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) r6 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) 11.005112152s ago: executing program 34 (id=1163): r0 = fanotify_init(0x4, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fanotify_mark(r0, 0x400, 0x40000038, 0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00') socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/key-users\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) pipe2$watch_queue(0x0, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000040)=""/108) socket(0x25, 0x6, 0x3) sysfs$1(0x1, &(0x7f0000000140)='\\]&\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_to_batadv\x00'}) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000080)={0x7, 0x102, 0x6, {0x0, 0xfffffff8, 0x8, 0x10}}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x4028af11, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) r6 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) 9.711326701s ago: executing program 6 (id=1168): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x3000) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000004800010025bd7000fedbdf250a003800", @ANYRES32=0x0, @ANYBLOB="00000000080002000200000014000100ff01"], 0x38}, 0x1, 0xba01, 0x0, 0x10}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8, 0x0, 0x6, 0x1, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000300)={{0xf}, 0x1, 0x0, 0x2, {0x8}}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r4, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000040)={0x18, r4}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TCGETA(r9, 0x5405, 0xffffffffffffffff) recvmmsg(r8, &(0x7f0000001640), 0x0, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x8810) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) 7.409139839s ago: executing program 0 (id=1175): r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r0}, &(0x7f0000000000)=""/50, 0x32, &(0x7f0000000100)={&(0x7f0000000080)={'sha384\x00'}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x6, 0x6, 0x1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000400)=0x1, 0x7, 0x3) prctl$PR_SET_NAME(0xf, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000080)=0x3ba, 0x5, 0x2) 6.605929827s ago: executing program 0 (id=1180): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x8) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'virt_wifi0\x00', 'gre0\x00'}, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x0, 0x88}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r3}) (async) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) (async) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0x4, 0x5}) (async) close_range(r1, r4, 0x0) 6.55850819s ago: executing program 0 (id=1181): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000880)={0x2c, &(0x7f0000000600)={0x40, 0xc, 0xe, "2b4eb1f61e86500bbb65ef3df46e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x3, 0x82003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000500)={&(0x7f0000000240)=[{0x77, 0x1, 0x0, 0x0}], 0x1}) 4.299602886s ago: executing program 4 (id=1185): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x5, 0x4, 0x20, 0x80, 0x6, 0xd, 0x7, 0x2, 0x31, 0xa2, 0xb, 0x81, 0x84}, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1c, 0x200000000000021f, &(0x7f0000000380)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000ac0), 0x10, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x11, 0x0, &(0x7f0000000280)="61b8830dd60bce478705a3594763fcac13", 0x0, 0xe697, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x19) (async, rerun: 32) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (rerun: 32) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r8, 0x3) (async) r9 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r9, 0x40085112, &(0x7f0000000000)=@v={0x93, 0xe, 0x90, 0x7, @generic=0x20, 0x4}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, 0xb}, {0xa, 0x0, 0x9, @mcast1}, 0xffffffffffffffff, 0x9}}, 0x48) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000b80)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000b40)=0xe8) (async) close(r1) (async, rerun: 64) ioctl$SNDCTL_TMR_TEMPO(r9, 0xc0045405, &(0x7f0000000b00)=0xb5) (rerun: 64) r11 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x40c00) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="300020000000000082", @ANYRES16=0x0, @ANYRESHEX=r10, @ANYRES32=0x0, @ANYRESOCT=r3], 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x4000104) readv(r11, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x3c0, 0xffffffff, 0x0, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@ah={{0x30}, {[0xfffffc00, 0x401]}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1, 0x0, 0x9}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x3, 0x5, 0x4, 0x1, 0x6], 0x1}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x7, 0xe, [0x2d, 0x3, 0x3, 0x11, 0x1e, 0x1c, 0x38, 0x21, 0x1, 0x40, 0x3, 0x2f, 0x28, 0x7, 0x13, 0x16], 0x2, 0x8, 0x2}}}, {{@ip={@multicast1, @local, 0xff000000, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x1d, 0x2, 0x3a}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0xfffffbff, 0x225], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x4, 0x6, 0x5, 0x2, 0xb], 0x3, 0x3}, {0x3, [0x4, 0x1, 0x4, 0x0, 0x5, 0x6], 0x2, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) 4.048882431s ago: executing program 4 (id=1187): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x31835003, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x41}, @private1={0xfc, 0x1, '\x00', 0xfd}, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0x7, 0x7}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x85, 0xfffffffffffffffe, r3}, 0x10) syz_usb_connect$uac1(0x0, 0x7c, &(0x7f0000002480)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x2a39, 0x3fd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x3, 0x1, 0x2, 0x80, 0xb, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2, 0x3, 0x7, {0x7, 0x25, 0x1, 0x0, 0x80, 0xfff7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x101, 0x42, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xd6, 0x89, 0xf2, {0x7, 0x25, 0x1, 0xc, 0x8, 0x1fd}}}}}}}}]}}, &(0x7f0000002880)={0xa, &(0x7f0000002540)={0xa, 0x6, 0x300, 0x7, 0x8, 0x80, 0xf7, 0x5}, 0x7a, &(0x7f0000002580)={0x5, 0xf, 0x7a, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x3, 0xf, 0x1, [0x30, 0xcf, 0xc000]}, @generic={0x34, 0x10, 0x4, "1f61d88175c809b36470f618a8be5711c3861fa707e71bd4c02b139f434b39645ad1d0529e1dc34c102cf0fa381003e485"}, @ss_container_id={0x14, 0x10, 0x4, 0x74, "b04f96b7c852891351369e85423f0ca0"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x93, 0x6, 0x81, 0x5, 0xb}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x3, 0x3, 0xdc}]}, 0x6, [{0x4, &(0x7f0000002600)=@lang_id={0x4, 0x3, 0x443}}, {0x2, &(0x7f0000002280)=ANY=[@ANYBLOB="0900d101d3ac3723bd9d1e6fa8d7860218ead51431802542258dd6fc519fcc0029833ffc67a21668d4e8bbd709e521a028f1eea41155951a15ce2572f5afec017b5a7575312a9bf77d8ffe"]}, {0x5f, &(0x7f00000026c0)=@string={0x5f, 0x3, "6f9e07776435b2982e607b1fb299337b2c164f3743d3d5475bb2479076b7683992cbcd37e24d6eb3c1e6a64585315cd133b2917572197ef8bf6e779f6291fbdff76af2b30401331ad4d89f7826c3ab00634dd823a08939e66e4496432f"}}, {0x5f, &(0x7f0000002740)=@string={0x5f, 0x3, "573ce9edf49a8f82aa7397c6763a8d2fc309485c03cd07bb9943bb08b1e21b88ad3130c68491d3ae6820f0738792a9ca609997b5d5f507b7d19cb8e5f8f8425ed4770b8628f6ef2d8d4f58966b85cf02f236e50dd67a19144ae607ad00"}}, {0x80, &(0x7f00000027c0)=@string={0x80, 0x3, "451456a55e8683838d4ca9833583120fc09983a41650ab00b1c1669fe8afa6601b9eeda84ae538f70291a9f915fa59646f3ba51da30e265c3c2fbf83320a9e0785af51a581295bcb96f36b7523a010ede80fc61c042c8612e379b5a4b241028dfe5aa20885c5807653ad33563eea44d8f49a3ff878aea799dcf7566d2c7c"}}, {0x4, &(0x7f0000002840)=@lang_id={0x4, 0x3, 0x80a}}]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r4, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cd042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x13, r5, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r6, 0x0, 0xb, &(0x7f00000001c0)=""/2, &(0x7f0000000340)=0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x22023500, 0x0, 0xff4e, 0x0, 0x0, 0x0) 3.363367487s ago: executing program 6 (id=1188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) (async) syz_usb_control_io$printer(r10, 0x0, 0x0) syz_usb_control_io$lan78xx(r10, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="200c02"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r10, 0x0, &(0x7f0000001040)={0x34, &(0x7f0000001380)=ANY=[@ANYBLOB="200304"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$rtl8150(r10, &(0x7f0000000440)={0x14, &(0x7f00000001c0)={0x0, 0x3, 0x57, {0x57, 0x22, "7f061c8c861f1b702093bc0098ce6bbaa1d2995ed29a8b5fc3acf9d38035b8f0f89ac93b07d684199b4d0e47d7149af9d90079cda1aeefd8a08c2d06d212cb244f525f889155917269cf1b2baef72400743f681a89"}}, &(0x7f0000000340)={0x0, 0x3, 0x78, @string={0x78, 0x3, "e1107fdc120d3759f2951599d550679e0b874b8290226b2521576930160111bcd29e0c5c6199c1664c23a2e9a0c3f74afd9849554ec5aa54c6abcb7ce9021fdd9c361a8d1141706ce2115c4491084c48fd9ac04b3a49db704a8526cd27b53b4b220eb982b954d10fcc7afe49554e50bfaf1d7fdf21e3"}}}, &(0x7f00000007c0)={0x2c, &(0x7f0000000580)={0x40, 0xc, 0xd4, "72e1d805946e1854c3022e0e8929a6b4b73bf65b5e76554b4fa5b7aa78beb9eb9a444bce73537b4db61000799d0f4e9ecf9a394a08436b36c2a11202c15b6a08a57811e45723c7077e6ba09ce8188f28d5b15169f81c3488a5dbae07637961ab808af95f2a5988917f9423019627261f089c77ca2a04a2ff7f8abafd96fa3c7a7acb576d26aa8e1b77d60e3957462f7c56ef4c30c1fb2eaabf3d7ab37146330418b0477cfc3c4784669953b27d8071971ecb46c53973fdbc24e4f483ee1580d4306acfe5574d8771a9126ba1c09433e6a0abfdb8"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000740)={0xc0, 0x5, 0x5, "5494cb1c4d"}, &(0x7f0000000780)={0x40, 0x5, 0x4, "f008ed40"}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.646878826s ago: executing program 6 (id=1190): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) (async) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="fdad33e6ca760847fba74a40dcd71361", 0x10}, {&(0x7f0000000200)="ec07129266fdedc595c52c9492e87ff2638aa32f2c3db01abb560b1cb750272819e96aa2ab49619b6c2bbb399d45ffdf8c13cea08cf91c7c8a67ebc547a1d3b367ed6b8c86226fc9e766cb3eea7ea94d0ddbc78ce389e3d588cebd9a5255da6a9832ea61e612062e962590efd8c1b1a95c9cf4db6a632ef43124fc4876ea9b39bd2617e6a716a51175229ce076da7b51fc777af57b664c932e22ba044099ccdf4149fb322bf157dc0dbb375ab95273fb0d4f5ec11801770b922589d611f606a6a4e973448aa9ee44237c8f7e92f09abaaef29b97cc16ba94d66a50eab1170c8b779a222424aca69bc0b3781f76ed", 0xee}], 0x2) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e23, 0xfffffffe, @loopback={0xfec0ffffffffffff}, 0x80000000}], 0x1c) (async) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback={0xfec0}, 0x80000001}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) pselect6(0x40, &(0x7f0000004600)={0x2, 0x0, 0x8, 0x7, 0xffffffffffffffe8, 0x401, 0xffffffff}, 0x0, &(0x7f0000004680)={0x9, 0xfff, 0xd3, 0x5, 0x7, 0x400, 0x9, 0xa1}, &(0x7f00000046c0)={0x0, 0x989680}, 0x0) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) io_setup(0x6, &(0x7f0000000000)=0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xe, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7eff, 0xf, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xe3, 0x10, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x7a, @string={0x7a, 0x3, "7c44e29909f553f5fc36c92502efb5ffe02642f0b4d85cce22005808d7c901e23a83831015978638d6f7e7c4c6792247d0425e182107053470c4ada5a5e3cc2e30a3901093c7fc5d3be6c8995fd2878c8b2df7f92ca06777e69d7ee08887ac96ab512be06700506680d43eefdf7ac84f6f7118d552258db0"}}}, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000001980), 0x124100, 0x0) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp\x00') ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) io_submit(r2, 0x3, &(0x7f0000001b40)=[&(0x7f0000001840)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000000840)="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", 0x1000, 0x7, 0x0, 0x1}, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x8, 0x7, r1, &(0x7f0000001880)="a9f45ec2851d08f4857eb1147073ca19f0a93e14d2210ee83d2dba0869114234307802a822927eb2e69309780f1f934af6cb7c3326d292e41485ca3bf7ebec8eb64f1276b21068ab8abb8d470be84a80a80b45d94ad55569c1a5e7af863939bd5e4b487ed45d2a3dc627b0ec571e52d93a0fd98f1a8471f7365bf08f7a4c025edaf3a374c85e4c5ce2e08e0ea3c6bfd1042a3106b1738c11749ffafdc1cd348f2e68797839e0d10a1b5ea54339fbd1d41e9ae664f9f44efbd59124de145880af8c4695598e8384685643318db3181a3361b651515ec1af5a9c0443c7cb9774999d4e265b361d5e3d435e7d159bc628a2", 0xf0, 0x6, 0x0, 0x0, r4}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x8, 0x5, r0, &(0x7f0000001a00)="83710385cb84a9c8cef35f0887d4065d0f48f4f3298aed7446c5f7b39d2ed78ca15e70d654f42d0ce8f7c7dd1f323ddc20bfd473e5f9aa4f5c58bf5136c5a37b08589230bd06d53128e82c73d523bb108188dce3b5b887acec5b2325ced565b1bcf2acecfd8f7114b743de3ab77b4099ceb2b9009d6819cd71731327802e2e2fdeb612e1def31ad62536be492a81d63f862fc597ef42a81ad42097e05d90e963a40d218bf07f30a74afee8631e25f15da75d7748fd11149b1be8d38647e1227ee4c2768735c021bd84502a2ae1febf970f33cb8b8ebe9eec0cc4739815edc4d18af7238fcc902552fe10ef16e3798420549f42", 0xf3, 0xbf5c, 0x0, 0x1, r5}]) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000200801032abd7000fbdbdf25020000000000000800000000"], 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e1e, @broadcast}}) 2.440189447s ago: executing program 3 (id=1191): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x103482) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) write$binfmt_script(r3, &(0x7f0000000000)={'#! ', './file0'}, 0xb) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_int(r4, &(0x7f0000001500)=0xffffffffffffffff, 0x12) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={r5}, &(0x7f0000000100)=0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x4000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r10 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r10) recvmmsg(r10, &(0x7f0000007e80)=[{{0x0, 0x0, 0x0}, 0x1ff}, {{0x0, 0x0, 0x0}, 0x400}], 0x2, 0x2, 0x0) r11 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbf8, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8173}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x591) 2.400936323s ago: executing program 4 (id=1192): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x66000080) (async) unshare(0x66000080) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x38, 0x18, 0x1, 0x0, 0x255fdbfb, {0xa, 0x14, 0x0, 0x0, 0xff, 0x4, 0x0, 0x3, 0x2c00}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_GATEWAY={0x14, 0x5, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000090}, 0x50) r2 = syz_io_uring_setup(0x3e17, &(0x7f0000000240)={0x0, 0x4e36, 0x800, 0x3, 0x27c}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000400)=[0x10001, 0x7fff], 0x2) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, 0x0) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0xffffffffffffffa0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80041, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80041, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000040)=[r2, r0, r4, r2, r2, r0, r5], 0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) ioctl$OCFS2_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0xf2c8, 0x6, 0x1, 0x3e}) (async) ioctl$OCFS2_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0xf2c8, 0x6, 0x1, 0x3e}) epoll_create1(0x0) (async) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000010c0)={0x30000015}) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000180)=0x8, 0x4) getsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f0000000200)=""/16, &(0x7f00000000c0)=0x10) (async) getsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f0000000200)=""/16, &(0x7f00000000c0)=0x10) writev(r4, &(0x7f0000000680)=[{&(0x7f00000001c0)="73a9cd98e342e19a498484ad738045a1", 0x10}, {&(0x7f0000000340)="fb320ae675a11765657a68dd0ade67eb9b388ef0b7d7d0044254978a63997d119155dc67831600bf02957dced9ee557a94a73942378e331f6e6e5daa3daf6f914059f413f4d5246bc537396759b3823f90585567c6fc871dde4dc285cc8ff75ed9d48206ee97ab518920b25ac6", 0x6d}, {&(0x7f0000000440)="20bd11efb4f2805c4800d1fe14c4291a8de9b85b69a9b93506aba9e4dd67390ce210fb1e3de7e92dee9b2bf93bf70b6131787f68c80f2859f37daadd78571c8d5a535755998c948089c2d32a108aa3aa654220c61e5f60406a25c51e6b61cb54643792620df52c315f3fe135928e03da96251116d0e2054268834bc64767dbee83c239014cff0f3ced1ad490603ed4517f6f340cac40edd4a7a06b922b4755", 0x9f}, {&(0x7f0000000500)="5d24c1e653329adce1031075e285776bb79252887ea18faae4ef59894a6150028853e90e1c09219ac04d3f9858e967c96d57a75f449e363b4129321580da465e1cf08cdc7813f8f3a94ea95f0246838ab0a81f7ffb31cd544d8b1c714419c816424ba7c1ffad0f25206466dd88391e58b2bd8e089eff4723addb3d4e7c61791900cb4bb9e31d2843e6040deff4f83514ee008d75db8a2f09802ca7aedfd0a329681fb730256212e5d68010c999f0aefd5538285df668cfa10c93c9a8d04f2ee08f95e6331b2cddae6b", 0xc9}, {&(0x7f0000000600)="7ed3b1769a6247d1fe44feb517cc5664c187f29556db5d34be3eb0743459fed98532f2eb26f114013f3fc4e2358de405adc199dc3a3afd7d265240726514cd2b37041ce50549c1d405ae", 0x4a}], 0x5) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000300)=0x208, 0xc1df0ff0dfb6053) 2.255854328s ago: executing program 0 (id=1193): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_io_uring_setup(0x356e, &(0x7f0000000180)={0x0, 0x7be7, 0x40, 0x2, 0x29f}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000740)) syz_open_procfs(0x0, &(0x7f0000000080)='net/connector\x00') set_mempolicy(0x4005, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xed\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000240)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) socket$igmp(0x2, 0x3, 0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) accept$unix(r3, &(0x7f0000000280)=@abs, 0x0) ptrace(0x10, r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000832000/0x4000)=nil, 0x4000, 0xe) 1.929304985s ago: executing program 3 (id=1194): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0xe502, 0x1, 0x6, 0x9, 0x4, 0x401, 0x359c, 0x8, 0x375, 0xffff, 0x101, 0x8}}, &(0x7f0000000580)={0x20, 0x85, 0x4, 0x23}, &(0x7f00000005c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0x720a}, &(0x7f0000000640)={0x20, 0x89, 0x2}}) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in=@remote, @in6=@remote}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000040)={&(0x7f00000001c0)=[{0x2, 0xb010, 0x0, 0x0}, {0x5, 0xc010, 0x0, 0x0}, {0x8000, 0x4000, 0xd9, &(0x7f00000000c0)="4c0667fca019232b9e3eab7efc3ae65a28a2057b8bf846a7fe005e87c4d42d00a674c82fcbe57c358526f5703566510649a9ac071d9adb2d7651520a63787fda17bb2e70451f1257e124171a8b16e708163830422ac735ffcbe4403bd54236647e4e25bfd7017b0a015a8c2affc86e5054c18c728d3131e3317d7f73f72489c81688ad27cb7c766742752517cc5e0e0089276a8561d288f777f2e4b8cf7ed222dc9f330440003a4ec4fd2d86f962e9682b0e08b4a6b21efc19084786958f6b50eb5c9deaeeffbf3f8c84be3fafb9202094fd48aec6fabdd2da"}], 0x3}) 1.916175938s ago: executing program 6 (id=1195): preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x10000019, 0x6, 0x5327, 0xffffffffffff7df6, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000800)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c0738221c2d0f1a9e6cd502efaad467e0e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff2", 0x96}], 0x1}, 0x440c1) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000640)=@get={0x1, &(0x7f0000000740)=""/164}) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r4, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) unshare(0x40000400) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$SG_IO(r1, 0x2285, &(0x7f00000006c0)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) migrate_pages(0x0, 0x5, 0x0, 0x0) 1.348021614s ago: executing program 0 (id=1196): r0 = socket$nl_generic(0x10, 0x3, 0x10) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x4888}, 0x4040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000000980)=""/90, 0x5a}, {&(0x7f0000001840)=""/4104, 0x1008}], 0x3}, 0x70001}], 0x1, 0x102, 0x0) 1.151400282s ago: executing program 3 (id=1197): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de90f6007009021200010000000009040000000202"], 0x0) (async) syz_usb_connect$uac1(0x2, 0xc8, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x3, 0x1, 0x8, 0x10, 0xe, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x22}, [@extension_unit={0xd, 0x24, 0x8, 0x2, 0x7, 0xe1, "ea4773eda53c"}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x11}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x3, '\\'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x7, 0x1, 0x7f, 0x9, "8b0e", "87e3cc"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x1, 0xfb, 0x3, "", "5189"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x4, 0xeb, 0x6, "93", "fd32"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xd, 0x7f, 0x9, {0x7, 0x25, 0x1, 0x4, 0x4, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x10, 0x0, 0x7f, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0xbec, 0x8, 0x48}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xf, 0x2, 0xf9, 0xc, 'E'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x1, 0xe, {0x7, 0x25, 0x1, 0xc, 0x9, 0x2}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x5, 0x4, 0xb0, 0x40, 0x6}, 0x65, &(0x7f0000000180)={0x5, 0xf, 0x65, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "0b184556c4b8e9613908f236c33e2282"}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x4, 0xf, 0x1, [0x3f0f]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "813e52b0356cfb425ce9a867a0e350b8"}, @ssp_cap={0x10, 0x10, 0xa, 0x3d, 0x1, 0x757, 0xf00, 0x2, [0x3f30]}, @ptm_cap={0x3}, @generic={0x15, 0x10, 0xf, "504fc28e2ab7e76c8aca154aefe8ca160879"}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41a}}, {0x25, &(0x7f0000000240)=@string={0x25, 0x3, "8ac4b28f414438c3f0050433a546586028c554065de0d7dd795de630094ea751ef45a7"}}, {0x94, &(0x7f0000000280)=@string={0x94, 0x3, "59770333b19d274a8dde99fbcd1201b6f6e070531fa259c0bba43071f9b82749f7f3ebc4d7d1d5ce86b73193a81dce033cd3e918e59e36aa47e6971caa6b391a8bb704af993bd86c77d09277f7d4a9c4c87dbcd744e89c9b2968ccd52c9e01857fc5303eeb6c7e96dd1741b3f514833174079867226689083c9ddcfb3dae3dbec2f5c36d8e2b93981b4f43a029012d65550a"}}, {0x97, &(0x7f0000000340)=@string={0x97, 0x3, "16fcee65a224798ce1cedf026927563187b3a2b21bc7240ee284fc16987560dcde38f9fd8d0b0d5283e5ed0fb1091c5287791e4a70345dd5e037e27ab557dce207e0b3286b9dc7be220b7dd4bbed4454c756600de318cfc0cd77eb224cf1369f5c6e6310e35e8f7ab8b8b8a110a7009067a83a52680f5a4a0ec181eadab27ce9ac74f412875894e31c8cbf5d478072dd4946f60316"}}]}) r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$rtl8150(r0, &(0x7f0000000600)={0x14, &(0x7f0000000480)={0x0, 0xc, 0x13, {0x13, 0xc, "b7cc751c59b82a93df1daea0a639f47156"}}, &(0x7f00000004c0)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}}, &(0x7f0000000780)={0x2c, &(0x7f0000000640)={0x0, 0xe, 0x21, "1fbde7bd670689bd71e61558115a9b565e7db29ecef6fed30d8f5839734546f895"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000700)={0xc0, 0x5, 0x2, "67a8"}, &(0x7f0000000740)={0x40, 0x5, 0x1, "8e"}}) 1.13062935s ago: executing program 4 (id=1198): ftruncate(0xffffffffffffffff, 0xc17a) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (rerun: 64) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) (async, rerun: 64) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) (async, rerun: 64) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x2800c054}, 0x24004854) (async, rerun: 32) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) open(&(0x7f00000002c0)='./file1\x00', 0x5238c2, 0x183) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) (async, rerun: 64) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000240)={0x0, 0x2d, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) (rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.empty_time\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180), 0xfea7) (async) mmap(&(0x7f00004df000/0x3000)=nil, 0x3000, 0x3, 0x28011, r1, 0x6583d000) (async) r5 = openat$cgroup_ro(r3, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r3], 0x4}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async) sendfile(r6, r5, 0x0, 0x100000002) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 951.251431ms ago: executing program 4 (id=1199): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x2002, @loopback, 0xafe}}, 0x17, 0x1, 0x101, 0x8000, 0x90, 0x7f, 0x8}, 0x9c) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a"], 0xe0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="180000001200210325"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0xc080) mremap(&(0x7f0000812000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r2, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=""/96, 0x60}, 0x9}], 0x1, 0x40000002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x10000005, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f00000005c0)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 793.807733ms ago: executing program 4 (id=1200): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r2}, 0x0) close(r2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hidraw(&(0x7f00000002c0), 0x0, 0x8240) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010027bd7000ffdbdf250a00004000000007060000000c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ef5e0008006a29e6"], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) read$hidraw(r3, &(0x7f0000002340)=""/147, 0x93) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='\b') 530.202698ms ago: executing program 0 (id=1201): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) (async) syz_usb_control_io$uac3(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 419.468814ms ago: executing program 3 (id=1202): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) r2 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0xc16d, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2, 0x4}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0xffff0001}]}}]}, 0x40}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) symlinkat(0x0, r4, &(0x7f0000000140)='./file0\x00') syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c050}, 0x4800) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, 0x0, 0x40) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac0000000000000000000000004b53445200", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 282.021292ms ago: executing program 3 (id=1203): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x48, r1, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0xfd40, 0x3, r2}, @val={0xc, 0x99, {0x8c, 0x25}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x0, 0x57, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000010) syz_emit_ethernet(0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000002aaaaaa8aaaaa86dd608a00009db137301b9bd4ac2e00000000bbfe8000000000000000000000000000aa11000005000000000000000000000000000000ce293d007d376d80c2891af7a101082cc554c75145ae3ceacfb018f218da3aa73f0b9838f215fe6763db7c39f801", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780002"], 0x0) epoll_create1(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0xfffc}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r4 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES8=r4, @ANYRESHEX=r0, @ANYRES64=0x0], 0x48) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {0x0}, {&(0x7f00000005c0)="f2b314c96d50", 0x6}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x400, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000540)="a22caaffe37d4620d1a9427c00787b63b26c5b83ef8ce8f8fe823d77c642dd73361c1f115fdce55de92bede6e812191b9780a257fa4fb3", 0x37}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be3176d26e449b7ad2d1c9471c13851aba1592ac", 0x9e}, {&(0x7f00000006c0)="138b9f129daf1d79da8ee1c8c74f2040f7892fe9", 0x14}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000001000)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70ab992", 0x5d}], 0x5}}], 0x2, 0x810) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x2000888c}, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) 0s ago: executing program 3 (id=1204): r0 = socket$packet(0x11, 0x3, 0x300) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="f30f09b800228ed00f20e06635080000000f22e00f21a1f30fc7b400000f20c06635100000000f22c0646664660f380817f2660f35bad104527c000000650fc7af95de8ec0", 0x45}], 0x1, 0x3, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r5, 0x41145}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x12}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008043}, 0x4) sendto$packet(r0, &(0x7f00000003c0)="8b", 0x1, 0x20000081, &(0x7f0000000200)={0x11, 0x9900, r5, 0x1, 0x4, 0x6, @local}, 0x14) kernel console output (not intermixed with test programs): ubj=unconfined pid=8449 comm="syz.3.689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2c99ce59 code=0x7ffc0000 [ 219.204175][ T29] audit: type=1326 audit(1779754727.567:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.3.689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2c99ce59 code=0x7ffc0000 [ 219.275807][ T29] audit: type=1326 audit(1779754727.577:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.3.689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e2c95d68e code=0x7ffc0000 [ 219.336686][ T29] audit: type=1326 audit(1779754727.597:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.3.689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e2c99caeb code=0x7ffc0000 [ 219.392199][ T29] audit: type=1326 audit(1779754727.597:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.3.689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e2c99caeb code=0x7ffc0000 [ 219.444417][ T29] audit: type=1326 audit(1779754727.767:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.3.689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2c99ce59 code=0x7ffc0000 [ 219.495827][ T29] audit: type=1326 audit(1779754727.767:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.3.689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2c99ce59 code=0x7ffc0000 [ 219.858947][ T8467] netlink: 28 bytes leftover after parsing attributes in process `syz.6.692'. [ 219.914053][ T5702] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 220.101204][ T5702] usb 5-1: Using ep0 maxpacket: 16 [ 220.134425][ T5702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.186277][ T5702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.211614][ T5702] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 220.282711][ T5702] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 220.304256][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.348270][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.696'. [ 220.348882][ T5702] usb 5-1: config 0 descriptor?? [ 220.372279][ T8483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.410258][ T8483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.451992][ T8483] syz_tun: entered allmulticast mode [ 220.517281][ T8483] .`: entered promiscuous mode [ 220.522123][ T8483] bond_slave_0: entered promiscuous mode [ 220.543226][ T8483] bond_slave_1: entered promiscuous mode [ 220.557373][ T8483] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 220.602182][ T8483] dummy0: entered promiscuous mode [ 220.808288][ T8497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.698'. [ 220.964024][ T1222] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 221.134658][ T1222] usb 2-1: too many configurations: 53, using maximum allowed: 8 [ 221.160472][ T1222] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 221.172469][ T1222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.185475][ T1222] usb 2-1: Product: syz [ 221.189833][ T1222] usb 2-1: Manufacturer: syz [ 221.194594][ T1222] usb 2-1: SerialNumber: syz [ 221.431880][ T1222] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 221.445843][ T1222] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 221.457436][ T1222] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 221.468484][ T1222] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 221.483690][ T1222] usb 2-1: USB disconnect, device number 58 [ 222.160086][ T5702] usbhid 5-1:0.0: can't add hid device: -71 [ 222.182845][ T5702] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 222.228203][ T5702] usb 5-1: USB disconnect, device number 41 [ 222.605178][ T8512] batadv_slave_1: entered promiscuous mode [ 222.613368][ T8512] netlink: 'syz.4.704': attribute type 3 has an invalid length. [ 222.626438][ T8511] batadv_slave_1: left promiscuous mode [ 222.941967][ T8523] xt_hashlimit: size too large, truncated to 1048576 [ 223.367624][ T8536] netlink: 'syz.4.710': attribute type 1 has an invalid length. [ 223.417843][ T8539] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 223.483520][ T8536] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.499030][ T8543] netlink: 140 bytes leftover after parsing attributes in process `syz.0.711'. [ 224.318207][ T8562] netlink: 36 bytes leftover after parsing attributes in process `syz.0.717'. [ 225.245776][ T8582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.723'. [ 225.694524][ T47] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 225.894032][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 225.909283][ T47] usb 1-1: unable to get BOS descriptor or descriptor too short [ 225.925838][ T47] usb 1-1: config 236 has an invalid interface number: 181 but max is 0 [ 225.939870][ T47] usb 1-1: config 236 has no interface number 0 [ 225.958017][ T47] usb 1-1: New USB device found, idVendor=2304, idProduct=0229, bcdDevice=d7.12 [ 225.978369][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.993824][ T47] usb 1-1: Product: syz [ 226.014007][ T47] usb 1-1: Manufacturer: syz [ 226.023091][ T47] usb 1-1: SerialNumber: syz [ 226.055090][ T1222] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 226.210869][ T8591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.236460][ T1222] usb 5-1: too many configurations: 70, using maximum allowed: 8 [ 226.236797][ T8591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.258670][ T1222] usb 5-1: config index 0 descriptor too short (expected 65016, got 133) [ 226.266219][ T8587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.280173][ T1222] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.293377][ T8587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.313468][ T1222] usb 5-1: config index 1 descriptor too short (expected 65016, got 133) [ 226.330126][ T1222] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.333824][ T8587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.355651][ T1222] usb 5-1: config index 2 descriptor too short (expected 65016, got 133) [ 226.371646][ T1222] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.383558][ T1222] usb 5-1: config index 3 descriptor too short (expected 65016, got 133) [ 226.406115][ T8587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.414753][ T1222] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.428282][ T8587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.439540][ T1222] usb 5-1: config index 4 descriptor too short (expected 65016, got 133) [ 226.448672][ T1222] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.461141][ T8587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.479105][ T1222] usb 5-1: config index 5 descriptor too short (expected 65016, got 133) [ 226.497358][ T8587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.506120][ T1222] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.527644][ T8587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.539001][ T1222] usb 5-1: config index 6 descriptor too short (expected 65016, got 133) [ 226.550127][ T1222] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.567644][ T8587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.596138][ T8591] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.604450][ T8591] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.613345][ T8587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.624567][ T1222] usb 5-1: config index 7 descriptor too short (expected 65016, got 133) [ 226.633844][ T1222] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.670670][ T8591] .`: left promiscuous mode [ 226.682352][ T1222] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 226.704676][ T8591] bond_slave_0: left promiscuous mode [ 226.712105][ T1222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.722499][ T8598] netlink: 36 bytes leftover after parsing attributes in process `syz.1.728'. [ 226.737455][ T8591] bond_slave_1: left promiscuous mode [ 226.748623][ T1222] usb 5-1: Product: syz [ 226.760677][ T47] usb-storage 1-1:236.181: USB Mass Storage device detected [ 226.768058][ T1222] usb 5-1: Manufacturer: syz [ 226.768079][ T1222] usb 5-1: SerialNumber: syz [ 226.771332][ T8591] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 226.793268][ T1222] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 226.825483][ T8591] dummy0: left promiscuous mode [ 226.842340][ T5694] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 226.931213][ T47] dvb-usb: found a 'Pinnacle PCTV Dual DVB-T Diversity Stick' in cold state, will try to load a firmware [ 226.957813][ T47] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 226.966867][ T47] dib0700: firmware download failed at 7 with -22 [ 226.991069][ T47] usb 1-1: USB disconnect, device number 72 [ 227.009545][ T8591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.023364][ T8591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.052328][ T8607] binder: 8599:8607 unknown command 0 [ 227.060302][ T8607] binder: 8599:8607 ioctl c0306201 200000000080 returned -22 [ 227.115941][ T8591] bond0: left promiscuous mode [ 227.120739][ T8591] bridge1: left promiscuous mode [ 227.139987][ T285] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.151813][ T285] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.164177][ T5680] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 227.171996][ T285] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.181401][ T285] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.336878][ T5680] usb 2-1: config 1 has an invalid descriptor of length 99, skipping remainder of the config [ 227.343093][ T8613] netlink: 60 bytes leftover after parsing attributes in process `syz.0.732'. [ 227.360470][ T5680] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 227.372026][ T5680] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 227.386535][ T5680] usb 2-1: config 1 has an invalid descriptor of length 99, skipping remainder of the config [ 227.399026][ T5680] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 227.408886][ T5680] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 227.427335][ T5680] usb 2-1: config 1 has an invalid descriptor of length 99, skipping remainder of the config [ 227.441859][ T5680] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 227.451023][ T5680] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 227.473112][ T5680] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 227.488272][ T5680] usb 2-1: New USB device strings: Mfr=6, Product=2, SerialNumber=3 [ 227.506103][ T5680] usb 2-1: Product: syz [ 227.510380][ T5680] usb 2-1: Manufacturer: syz [ 227.518393][ T5680] usb 2-1: SerialNumber: syz [ 227.536917][ T5680] cdc_ncm 2-1:1.0: skipping garbage [ 227.546661][ T5680] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 227.553828][ T8619] xt_l2tp: invalid flags combination: 8 [ 227.562788][ T5680] cdc_ncm 2-1:1.0: bind() failure [ 227.567316][ T8616] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 227.577851][ T8619] xt_l2tp: invalid flags combination: 8 [ 227.578117][ T8616] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 227.592632][ T8619] xt_l2tp: invalid flags combination: 8 [ 227.604623][ T8616] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 227.605915][ T8622] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 227.619838][ T8619] xt_l2tp: invalid flags combination: 8 [ 227.623606][ T8616] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 227.626415][ T8619] xt_l2tp: invalid flags combination: 8 [ 227.633745][ T8616] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 227.655540][ T8616] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 227.663659][ T8616] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 227.672138][ T8616] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 227.680730][ T8616] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 227.711915][ T8616] kvm: requested 44419 ns i8254 timer period limited to 200000 ns [ 228.115038][ T5694] usb 5-1: Service connection timeout for: 256 [ 228.127881][ T5694] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 228.170186][ T5694] ath9k_htc: Failed to initialize the device [ 228.265577][ T5694] usb 5-1: ath9k_htc: USB layer deinitialized [ 228.440479][ T5680] usb 5-1: USB disconnect, device number 42 [ 228.688630][ T8645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.716935][ T8645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.729437][ T8646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.749121][ T8646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.960467][ T8658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.969290][ T8658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.142865][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.743'. [ 229.190563][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.744'. [ 229.199665][ T8665] netlink: 'syz.0.744': attribute type 30 has an invalid length. [ 229.214705][ T67] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.225840][ T67] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.235823][ T67] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.246096][ T67] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.411599][ T8677] netlink: 24 bytes leftover after parsing attributes in process `syz.0.747'. [ 229.513768][ T8680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.522814][ T8680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.624128][ T47] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 229.654342][ T5710] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 229.784171][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 229.792917][ T47] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.807147][ T47] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.818872][ T5710] usb 1-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 229.819902][ T47] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 229.837345][ T47] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 229.837785][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.845832][ T47] usb 5-1: Product: syz [ 229.859526][ T47] usb 5-1: Manufacturer: syz [ 229.870652][ T5710] usb 1-1: Product: syz [ 229.873059][ T47] hub 5-1:4.0: USB hub found [ 229.878152][ T5710] usb 1-1: Manufacturer: syz [ 229.894037][ T5710] usb 1-1: SerialNumber: syz [ 229.905071][ T5710] usb 1-1: config 0 descriptor?? [ 229.918305][ T5710] usb 1-1: selecting invalid altsetting 1 [ 229.934032][ T5710] technisat-usb2: could not set alternate setting to 0 [ 230.071032][ T47] hub 5-1:4.0: 2 ports detected [ 230.116199][ T5710] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 230.145617][ T5710] usb 1-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2 [ 230.160008][ T5710] usb 1-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw [ 230.477251][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.746'. [ 230.489574][ T8674] bridge0: port 3(netdevsim0) entered blocking state [ 230.497857][ T8674] bridge0: port 3(netdevsim0) entered disabled state [ 230.507010][ T8674] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 230.565885][ T8674] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 230.589549][ T8674] bridge0: port 3(netdevsim0) entered blocking state [ 230.597712][ T8674] bridge0: port 3(netdevsim0) entered forwarding state [ 230.612518][ T5629] usb 2-1: USB disconnect, device number 59 [ 230.645310][ T47] hub 5-1:4.0: set hub depth failed [ 230.674660][ T47] usb 5-1: USB disconnect, device number 43 [ 230.775306][ T8692] .`: (slave dummy0): Releasing backup interface [ 230.786892][ T8692] bridge_slave_0: left allmulticast mode [ 230.792680][ T8692] bridge_slave_0: left promiscuous mode [ 230.799847][ T8692] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.814368][ T8692] bridge_slave_1: left allmulticast mode [ 230.820022][ T8692] bridge_slave_1: left promiscuous mode [ 230.828446][ T8692] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.841618][ T8692] .`: (slave bond_slave_0): Releasing backup interface [ 230.852666][ T8692] .`: (slave bond_slave_1): Releasing backup interface [ 230.863115][ T8692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.872611][ T8692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.881336][ T8692] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 231.128567][ T8701] syzkaller0: entered promiscuous mode [ 231.134303][ T8701] syzkaller0: entered allmulticast mode [ 231.554213][ T5680] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 231.575078][ T47] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 231.650815][ T8714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.659931][ T8714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.714118][ T5680] usb 2-1: Using ep0 maxpacket: 32 [ 231.727247][ T5680] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 231.739282][ T5680] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 231.748473][ T5680] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.758316][ T5680] usb 2-1: Product: syz [ 231.762535][ T5680] usb 2-1: Manufacturer: syz [ 231.767487][ T5680] usb 2-1: SerialNumber: syz [ 231.772354][ T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.783505][ T47] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 231.793638][ T5680] usb 2-1: config 0 descriptor?? [ 231.821776][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.836736][ T47] usb 5-1: config 0 descriptor?? [ 231.841778][ T5680] cdc_ether 2-1:0.0: Descriptor too short [ 231.859240][ T47] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 231.871526][ T5680] usb 2-1: unsupported MDLM descriptors [ 232.037862][ T5680] usb 2-1: USB disconnect, device number 60 [ 232.073044][ T47] usb 5-1: USB disconnect, device number 44 [ 232.522913][ T8730] netdevsim netdevsim3 : renamed from netdevsim0 [ 232.952588][ T8741] pimreg: tun_chr_ioctl cmd 1074025677 [ 232.958324][ T8741] pimreg: linktype set to 825 [ 233.004098][ T5679] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 233.128758][ T8748] pimreg: tun_chr_ioctl cmd 2150657669 [ 233.164027][ T5679] usb 5-1: Using ep0 maxpacket: 32 [ 233.172495][ T5679] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 233.181819][ T5679] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.192127][ T5679] usb 5-1: Product: syz [ 233.200213][ T5679] usb 5-1: Manufacturer: syz [ 233.204921][ T5679] usb 5-1: SerialNumber: syz [ 233.211563][ T5679] usb 5-1: config 0 descriptor?? [ 233.219942][ T5679] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 233.227884][ T5679] dvb-usb: bulk message failed: -22 (2/0) [ 233.238378][ T5679] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 233.248474][ T5679] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 233.256885][ T5679] usb 5-1: media controller created [ 233.285946][ T5679] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 233.310564][ T5679] usb 5-1: selecting invalid altsetting 7 [ 233.317396][ T5679] cxusb: set interface failed [ 233.322278][ T5679] dvb-usb: bulk message failed: -22 (1/0) [ 233.362307][ T5679] DVB: Unable to find symbol lgdt330x_attach() [ 233.382469][ T5679] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 233.465513][ T5679] rc_core: IR keymap rc-dvico-portable not found [ 233.471944][ T5679] Registered IR keymap rc-empty [ 233.480831][ T5679] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 233.493904][ T5679] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input24 [ 233.505646][ T5679] dvb-usb: schedule remote query interval to 100 msecs. [ 233.512831][ T5679] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 233.526074][ T5679] usb 5-1: USB disconnect, device number 45 [ 233.586844][ T5679] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 234.374062][ T5680] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 234.454042][ T47] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 234.524204][ T5680] usb 2-1: Using ep0 maxpacket: 32 [ 234.532251][ T5680] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.545110][ T5680] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.556926][ T5680] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 234.567362][ T5680] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 234.576905][ T5680] usb 2-1: Product: syz [ 234.581096][ T5680] usb 2-1: Manufacturer: syz [ 234.592723][ T5680] hub 2-1:4.0: USB hub found [ 234.626128][ T47] usb 5-1: unable to get BOS descriptor or descriptor too short [ 234.635855][ T47] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 234.659732][ T47] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 234.673756][ T47] usb 5-1: string descriptor 0 read error: -22 [ 234.680772][ T47] usb 5-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 234.690927][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.798941][ T5680] hub 2-1:4.0: 7 ports detected [ 234.804600][ T5680] hub 2-1:4.0: insufficient power available to use all downstream ports [ 234.818926][ T8784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.827718][ T8784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.008159][ T5680] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 235.027458][ T5680] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 235.088484][ T5680] usb 2-1: USB disconnect, device number 61 [ 235.167116][ T47] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 235.182116][ T47] usb 5-1: USB disconnect, device number 46 [ 235.677138][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.780'. [ 235.736204][ T8805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.781'. [ 235.736204][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.781'. [ 235.741297][ T8805] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.769079][ T8805] bridge_slave_1 (unregistering): left allmulticast mode [ 235.776307][ T8805] bridge_slave_1 (unregistering): left promiscuous mode [ 235.784882][ T8805] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.355553][ T47] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 236.515444][ T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.525949][ T47] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 236.534968][ T47] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 236.547861][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.558603][ T47] usb 2-1: config 0 descriptor?? [ 236.766412][ T47] Bluetooth: Can't get state to change to load ram patch err [ 236.774160][ T47] Bluetooth: Loading patch file failed [ 236.779754][ T47] ath3k 2-1:0.0: probe with driver ath3k failed with error -71 [ 236.790652][ T47] usb 2-1: USB disconnect, device number 62 [ 237.535172][ T10] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 237.674171][ T5679] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 237.707433][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 237.716828][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.725400][ T10] usb 2-1: Product: syz [ 237.729684][ T10] usb 2-1: Manufacturer: syz [ 237.734361][ T10] usb 2-1: SerialNumber: syz [ 237.864261][ T5679] usb 5-1: Using ep0 maxpacket: 16 [ 237.875383][ T5679] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.888100][ T5679] usb 5-1: config 0 interface 0 has no altsetting 0 [ 237.894944][ T5679] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 237.904273][ T5679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.914593][ T5679] usb 5-1: config 0 descriptor?? [ 237.958952][ T8835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.975799][ T8835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.048452][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 238.079775][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 238.105711][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 238.140710][ T10] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 238.181658][ T10] usb 2-1: USB disconnect, device number 63 [ 238.196899][ T5679] usbhid 5-1:0.0: can't add hid device: -71 [ 238.214441][ T5679] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 238.261080][ T5679] usb 5-1: USB disconnect, device number 47 [ 238.342070][ T8847] kvm: pic: non byte write [ 238.349383][ T8847] netlink: 'syz.4.793': attribute type 13 has an invalid length. [ 238.359811][ T8847] netlink: 'syz.4.793': attribute type 17 has an invalid length. [ 238.624876][ T8847] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.600584][ T8884] binder: BINDER_SET_CONTEXT_MGR already set [ 239.607023][ T8884] binder: 8883:8884 ioctl 4018620d 200000000140 returned -16 [ 239.614786][ T8884] binder: BINDER_SET_CONTEXT_MGR already set [ 239.620873][ T8884] binder: 8883:8884 ioctl 4018620d 200000000140 returned -16 [ 239.629198][ T8884] binder: BINDER_SET_CONTEXT_MGR already set [ 239.635435][ T8884] binder: 8883:8884 ioctl 4018620d 200000000140 returned -16 [ 239.642962][ T8884] binder: BINDER_SET_CONTEXT_MGR already set [ 239.649308][ T8884] binder: 8883:8884 ioctl 4018620d 200000000140 returned -16 [ 239.657208][ T8884] binder: BINDER_SET_CONTEXT_MGR already set [ 239.663668][ T8884] binder: 8883:8884 ioctl 4018620d 200000000140 returned -16 [ 239.977649][ T8896] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 239.999518][ T8896] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 240.024085][ T24] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 240.200048][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 240.211643][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217 [ 240.221642][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 240.230758][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.241302][ T24] usb 2-1: config 0 descriptor?? [ 240.255088][ T8893] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 240.369462][ T8900] netlink: 36 bytes leftover after parsing attributes in process `syz.3.804'. [ 240.479474][ T24] ath6kl: Failed to submit usb control message: -71 [ 240.496506][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 240.513471][ T24] ath6kl: Unable to send get target info: -71 [ 240.517211][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.805'. [ 240.549008][ T24] ath6kl: Failed to init ath6kl core: -71 [ 240.578822][ T24] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 240.619582][ T24] usb 2-1: USB disconnect, device number 64 [ 240.750186][ T5679] IPVS: starting estimator thread 0... [ 240.855219][ T8915] IPVS: using max 32 ests per chain, 76800 per kthread [ 240.953143][ T8917] kvm: pic: non byte write [ 241.188106][ T8926] loop3: detected capacity change from 0 to 7 [ 241.203224][ T8926] Dev loop3: unable to read RDB block 7 [ 241.215988][ T8926] loop3: unable to read partition table [ 241.224432][ T8926] loop3: partition table beyond EOD, truncated [ 241.255761][ T8926] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 241.774036][ T5679] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 241.960541][ T5679] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.006922][ T5679] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 242.024441][ T5679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.041552][ T5679] usb 5-1: config 0 descriptor?? [ 242.057495][ T5679] pwc: Askey VC010 type 2 USB webcam detected. [ 242.250215][ T8958] loop3: detected capacity change from 0 to 7 [ 242.269049][ T8958] Dev loop3: unable to read RDB block 7 [ 242.295688][ T8958] loop3: unable to read partition table [ 242.323784][ T8958] loop3: partition table beyond EOD, truncated [ 242.331207][ T8958] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 242.450163][ T5679] pwc: recv_control_msg error -32 req 02 val 2b00 [ 242.480139][ T5679] pwc: recv_control_msg error -32 req 02 val 2700 [ 242.849140][ T8967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.874383][ T8967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.889006][ T5679] pwc: recv_control_msg error -32 req 02 val 2c00 [ 242.908574][ T5679] pwc: recv_control_msg error -32 req 04 val 1000 [ 242.924524][ T5679] pwc: recv_control_msg error -32 req 04 val 1300 [ 242.932947][ T5679] pwc: recv_control_msg error -32 req 04 val 1400 [ 242.943712][ T5679] pwc: recv_control_msg error -32 req 02 val 2000 [ 242.954555][ T5679] pwc: recv_control_msg error -32 req 02 val 2100 [ 242.963094][ T5679] pwc: recv_control_msg error -32 req 04 val 1500 [ 242.975595][ T5679] pwc: recv_control_msg error -32 req 02 val 2500 [ 242.984702][ T5679] pwc: recv_control_msg error -32 req 02 val 2400 [ 243.237010][ T5679] pwc: recv_control_msg error -71 req 02 val 2900 [ 243.247958][ T5679] pwc: recv_control_msg error -71 req 02 val 2800 [ 243.255280][ T5679] pwc: recv_control_msg error -71 req 04 val 1100 [ 243.262157][ T5679] pwc: recv_control_msg error -71 req 04 val 1200 [ 243.293786][ T5679] pwc: Registered as video103. [ 243.306306][ T5679] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input26 [ 243.328195][ T5679] usb 5-1: USB disconnect, device number 48 [ 243.362618][ T8970] program syz.1.827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.470840][ T8976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.481182][ T8976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.404056][ T9002] loop3: detected capacity change from 0 to 7 [ 244.416169][ T9002] Dev loop3: unable to read RDB block 7 [ 244.422348][ T9002] loop3: unable to read partition table [ 244.428333][ T9002] loop3: partition table beyond EOD, truncated [ 244.433408][ T9006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.436066][ T9002] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 244.524399][ T9006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.540718][ T9004] 8021q: adding VLAN 0 to HW filter on device bond2 [ 244.560095][ T9009] tipc: Started in network mode [ 244.565080][ T9009] tipc: Node identity d63e46eccca3, cluster identity 4711 [ 244.572516][ T9009] tipc: Enabled bearer , priority 0 [ 244.580623][ T9009] syzkaller0: entered promiscuous mode [ 244.586301][ T9009] syzkaller0: entered allmulticast mode [ 244.610566][ T9009] tipc: Resetting bearer [ 244.854854][ T5679] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 245.026317][ T5679] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.038447][ T5679] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 245.047647][ T5679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.055675][ T5679] usb 2-1: Product: syz [ 245.059814][ T5679] usb 2-1: Manufacturer: syz [ 245.064423][ T5679] usb 2-1: SerialNumber: syz [ 245.070776][ T5679] usb 2-1: config 0 descriptor?? [ 245.078977][ T5679] usb 2-1: ucan: probing device on interface #0 [ 245.086870][ T5679] usb 2-1: ucan: invalid EP count (0) [ 245.092259][ T5679] usb 2-1: ucan: probe failed; try to update the device firmware [ 245.624054][ T5679] tipc: Node number set to 446514924 [ 245.802998][ T9036] loop3: detected capacity change from 0 to 7 [ 245.803279][ T5629] usb 2-1: USB disconnect, device number 65 [ 245.820459][ T9036] Dev loop3: unable to read RDB block 7 [ 245.821142][ T9009] tipc: Resetting bearer [ 245.834372][ T9036] loop3: unable to read partition table [ 245.840355][ T9036] loop3: partition table beyond EOD, truncated [ 245.846824][ T9036] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 245.883465][ T9009] tipc: Disabling bearer [ 246.294054][ T5629] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 246.454121][ T5629] usb 2-1: Using ep0 maxpacket: 8 [ 246.466308][ T5629] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 246.484099][ T5629] usb 2-1: config 179 has no interface number 0 [ 246.497961][ T5629] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 246.512643][ T5629] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 246.524937][ T5629] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 246.536190][ T5629] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 246.548302][ T5629] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 246.562065][ T5680] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 246.576505][ T5629] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 246.586732][ T5629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.605192][ T9041] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 246.660888][ T9064] loop3: detected capacity change from 0 to 7 [ 246.669386][ T9064] Dev loop3: unable to read RDB block 7 [ 246.675416][ T9064] loop3: unable to read partition table [ 246.681230][ T9064] loop3: partition table beyond EOD, truncated [ 246.689324][ T9064] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 246.737659][ T5680] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.760356][ T5680] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 246.780867][ T5680] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 246.790465][ T5680] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 246.800228][ T5680] usb 5-1: SerialNumber: syz [ 246.815027][ T5680] hub 5-1:1.0: bad descriptor, ignoring hub [ 246.822070][ T5680] hub 5-1:1.0: probe with driver hub failed with error -5 [ 246.830834][ T5680] cdc_acm 5-1:1.0: Zero length descriptor references [ 246.837967][ T5680] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 246.906366][ T9068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.930581][ T9068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.019705][ T9072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.035089][ T9072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.047026][ T9072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.058263][ T9072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.146371][ T10] usb 2-1: USB disconnect, device number 66 [ 247.146369][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 247.146411][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 247.502708][ T9078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.511757][ T9078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.964031][ T5680] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 248.133391][ T5680] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 248.142677][ T5680] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.152338][ T9084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.161660][ T5680] usb 2-1: Product: syz [ 248.165950][ T5680] usb 2-1: Manufacturer: syz [ 248.170539][ T5680] usb 2-1: SerialNumber: syz [ 248.174416][ T9084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.591601][ T5680] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 248.611160][ T5680] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 248.691603][ T9092] caif0: tun_chr_ioctl cmd 1074812117 [ 249.151218][ T9102] loop3: detected capacity change from 0 to 7 [ 249.192855][ T9098] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 9098 comm: syz.3.869) [ 249.212953][ T9102] Dev loop3: unable to read RDB block 7 [ 249.227305][ T9102] loop3: unable to read partition table [ 249.229771][ T9082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.244504][ T9082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.273306][ T9102] loop3: partition table beyond EOD, truncated [ 249.284893][ T9102] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 249.304368][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 249.304382][ T29] audit: type=1800 audit(1779754758.017:525): pid=9098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.869" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=34976 res=0 errno=0 [ 249.515867][ T24] usb 5-1: USB disconnect, device number 49 [ 249.655769][ T5680] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 249.712309][ T5680] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 249.772256][ T5680] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 249.831619][ T5680] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 249.852876][ T5680] usb 2-1: USB disconnect, device number 67 [ 250.412158][ T9118] vlan2: entered promiscuous mode [ 250.423899][ T9118] bond0: entered promiscuous mode [ 250.442827][ T9118] bond_slave_0: entered promiscuous mode [ 250.464872][ T9118] bond_slave_1: entered promiscuous mode [ 250.759976][ T9125] xt_TCPMSS: Only works on TCP SYN packets [ 250.813188][ T9127] xt_TCPMSS: Only works on TCP SYN packets [ 250.852991][ T9129] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 251.231432][ T9136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.240693][ T9141] loop3: detected capacity change from 0 to 7 [ 251.254116][ T9136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.273319][ T9136] Cannot find add_set index 1 as target [ 251.280603][ T9141] Dev loop3: unable to read RDB block 7 [ 251.310093][ T9141] loop3: unable to read partition table [ 251.335259][ T9141] loop3: partition table beyond EOD, truncated [ 251.373867][ T9141] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 251.804088][ T5679] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 251.924213][ T9154] netlink: 'syz.3.885': attribute type 11 has an invalid length. [ 251.965906][ T5679] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.988019][ T5679] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 252.019923][ T5679] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 252.032269][ T9154] 8021q: adding VLAN 0 to HW filter on device .` [ 252.040536][ T5679] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 190, setting to 64 [ 252.064344][ T5679] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 252.076684][ T5679] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 252.085744][ T9154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.092683][ T5679] usb 2-1: Product: syz [ 252.099684][ T5679] usb 2-1: Manufacturer: syz [ 252.108920][ T5679] usb 2-1: SerialNumber: syz [ 252.126448][ T5679] usb 2-1: config 0 descriptor?? [ 252.149065][ T9147] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 252.212775][ T9154] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 252.249949][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.6.887'. [ 252.260417][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.6.887'. [ 252.270796][ T9154] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.291427][ T5679] rc_core: IR keymap rc-imon-rsc not found [ 252.300520][ T5679] Registered IR keymap rc-empty [ 252.317523][ T5679] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 252.334819][ T5679] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input27 [ 252.348965][ T9154] hsr0: entered promiscuous mode [ 252.364682][ T9165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.398277][ T9154] veth1_vlan: left promiscuous mode [ 252.417069][ T9165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.425885][ T9154] veth0_vlan: left promiscuous mode [ 252.434545][ T9154] veth0_vlan: entered promiscuous mode [ 252.460627][ T5702] usb 2-1: USB disconnect, device number 68 [ 252.474418][ T9154] veth1_vlan: entered promiscuous mode [ 252.511125][ T9154] veth1_macvtap: left promiscuous mode [ 252.532897][ T9154] veth0_macvtap: left promiscuous mode [ 252.545389][ T9154] veth0_macvtap: entered promiscuous mode [ 252.560838][ T9154] veth1_macvtap: entered promiscuous mode [ 252.585859][ T9154] 8021q: adding VLAN 0 to HW filter on device  [ 252.602559][ T9154] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 252.623037][ T9154] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 252.646665][ T9154] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 252.680377][ T9154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.695559][ T9154] bond0: entered allmulticast mode [ 252.712207][ T9154] bridge1: entered allmulticast mode [ 252.723315][ T9154] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 252.751093][ T9154] bridge1: entered promiscuous mode [ 252.760744][ T9154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 252.773761][ T9154] erspan0: entered promiscuous mode [ 252.854512][ T67] netdevsim netdevsim3 : set [1, 0] type 2 family 0 port 6081 - 0 [ 252.920728][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.943433][ T9175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.976603][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.980721][ T9175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.020195][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.281491][ T9184] xt_hashlimit: size too large, truncated to 1048576 [ 253.320104][ T9186] loop3: detected capacity change from 0 to 7 [ 253.333479][ T9186] Dev loop3: unable to read RDB block 7 [ 253.339729][ T9186] loop3: unable to read partition table [ 253.347085][ T9186] loop3: partition table beyond EOD, truncated [ 253.359466][ T9186] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 253.714786][ T47] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 253.734149][ T5680] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 253.905263][ T5680] usb 5-1: Using ep0 maxpacket: 8 [ 253.911953][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 253.936071][ T5680] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 253.947980][ T47] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 253.959591][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.973343][ T5680] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 253.987312][ T47] usb 2-1: config 0 descriptor?? [ 253.992582][ T5680] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.004966][ T5680] usb 5-1: Product: syz [ 254.009224][ T5680] usb 5-1: Manufacturer: syz [ 254.013904][ T5680] usb 5-1: SerialNumber: syz [ 254.026451][ T5680] ch9200 5-1:2.0: probe with driver ch9200 failed with error -22 [ 254.204549][ T47] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 254.213928][ T47] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 254.226109][ T47] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 254.233305][ T47] usb 2-1: media controller created [ 254.245726][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 254.326107][ T5702] usb 5-1: USB disconnect, device number 50 [ 254.411970][ T47] az6027: usb out operation failed. (-71) [ 254.419177][ T47] az6027: usb out operation failed. (-71) [ 254.425213][ T47] stb0899_attach: Driver disabled by Kconfig [ 254.431716][ T47] az6027: no front-end attached [ 254.431716][ T47] [ 254.439692][ T47] az6027: usb out operation failed. (-71) [ 254.445648][ T47] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 254.454593][ T47] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 254.467598][ T47] dvb-usb: schedule remote query interval to 400 msecs. [ 254.474792][ T47] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 254.485278][ T47] usb 2-1: USB disconnect, device number 69 [ 254.512340][ T47] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 254.883564][ T29] audit: type=1326 audit(1779754763.607:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.4.899" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfef39ce59 code=0x0 [ 255.104431][ T29] audit: type=1326 audit(1779754763.837:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.4.899" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfef39ce59 code=0x7ffc0000 [ 255.129814][ T29] audit: type=1326 audit(1779754763.837:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.4.899" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfef39ce59 code=0x7ffc0000 [ 255.155983][ T29] audit: type=1326 audit(1779754763.847:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.4.899" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fbfef39ce59 code=0x7ffc0000 [ 255.180301][ T29] audit: type=1326 audit(1779754763.847:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.4.899" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfef39ce59 code=0x7ffc0000 [ 255.205094][ T10] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 255.213181][ T29] audit: type=1326 audit(1779754763.847:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.4.899" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbfef39ce59 code=0x7ffc0000 [ 255.238392][ T29] audit: type=1326 audit(1779754763.847:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.4.899" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfef39ce59 code=0x7ffc0000 [ 255.263231][ T29] audit: type=1326 audit(1779754763.847:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.4.899" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbfef39ce59 code=0x7ffc0000 [ 255.287772][ T29] audit: type=1326 audit(1779754763.847:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.4.899" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfef39ce59 code=0x7ffc0000 [ 255.345304][ T29] audit: type=1326 audit(1779754763.847:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.4.899" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbfef39ce59 code=0x7ffc0000 [ 255.377777][ T9218] syzkaller0: entered promiscuous mode [ 255.383330][ T9218] syzkaller0: entered allmulticast mode [ 255.414086][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 255.422904][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 255.432185][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.454008][ T10] usb 2-1: Product: syz [ 255.458200][ T10] usb 2-1: Manufacturer: syz [ 255.462771][ T10] usb 2-1: SerialNumber: syz [ 255.470680][ T10] usb 2-1: config 0 descriptor?? [ 255.566118][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.572552][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.688674][ T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 255.995199][ T9230] loop3: detected capacity change from 0 to 7 [ 256.002006][ T9230] Dev loop3: unable to read RDB block 7 [ 256.009249][ T9230] loop3: unable to read partition table [ 256.015311][ T9230] loop3: partition table beyond EOD, truncated [ 256.021651][ T9230] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 256.099126][ T9233] netlink: 'syz.6.905': attribute type 1 has an invalid length. [ 256.107029][ T9233] netlink: 'syz.6.905': attribute type 2 has an invalid length. [ 256.115927][ T9233] netlink: 'syz.6.905': attribute type 1 has an invalid length. [ 256.123595][ T9233] netlink: 16 bytes leftover after parsing attributes in process `syz.6.905'. [ 256.493418][ T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 256.507902][ T10] usb 2-1: USB disconnect, device number 70 [ 257.107690][ T9260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.121794][ T9260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.155742][ T9262] tmpfs: Unknown parameter '' [ 257.166742][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a399000: rx timeout, send abort [ 257.641178][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 257.676958][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a399000: abort rx timeout. Force session deactivation [ 257.777717][ T9269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.790910][ T9269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.879438][ T9269] netlink: 36 bytes leftover after parsing attributes in process `syz.3.918'. [ 258.054099][ T24] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 258.234074][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 258.248048][ T24] usb 5-1: config 0 has an invalid interface number: 160 but max is 0 [ 258.257704][ T24] usb 5-1: config 0 has an invalid descriptor of length 62, skipping remainder of the config [ 258.269423][ T24] usb 5-1: config 0 has no interface number 0 [ 258.300397][ T24] usb 5-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9 [ 258.314026][ T24] usb 5-1: New USB device strings: Mfr=1, Product=237, SerialNumber=2 [ 258.332657][ T24] usb 5-1: Product: syz [ 258.337024][ T24] usb 5-1: Manufacturer: syz [ 258.342082][ T24] usb 5-1: SerialNumber: syz [ 258.352655][ T24] usb 5-1: config 0 descriptor?? [ 258.610822][ T24] spcp8x5 5-1:0.160: required endpoints missing [ 258.625557][ T24] usb 5-1: USB disconnect, device number 51 [ 258.734118][ T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 258.865819][ T10] usb 2-1: device descriptor read/64, error -71 [ 259.104033][ T10] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 259.234322][ T10] usb 2-1: device descriptor read/64, error -71 [ 259.355273][ T10] usb usb2-port1: attempt power cycle [ 259.694041][ T10] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 259.714570][ T10] usb 2-1: device descriptor read/8, error -71 [ 259.954372][ T10] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 259.971116][ T9289] : renamed from vlan0 (while UP) [ 259.994791][ T10] usb 2-1: device descriptor read/8, error -71 [ 260.104657][ T10] usb usb2-port1: unable to enumerate USB device [ 260.325959][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 260.325976][ T29] audit: type=1326 audit(1779754769.047:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.6.926" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fc79ce59 code=0x7ffc0000 [ 260.360727][ T29] audit: type=1326 audit(1779754769.047:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.6.926" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fc79ce59 code=0x7ffc0000 [ 260.387831][ T29] audit: type=1326 audit(1779754769.087:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.6.926" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fe7fc79ce59 code=0x7ffc0000 [ 260.422444][ T29] audit: type=1326 audit(1779754769.087:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.6.926" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fc79ce59 code=0x7ffc0000 [ 260.451177][ T29] audit: type=1326 audit(1779754769.087:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.6.926" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fc79ce59 code=0x7ffc0000 [ 260.477609][ T29] audit: type=1326 audit(1779754769.097:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.6.926" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fe7fc79ce59 code=0x7ffc0000 [ 260.502426][ T9302] netlink: 'syz.6.926': attribute type 10 has an invalid length. [ 260.511439][ T29] audit: type=1326 audit(1779754769.097:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.6.926" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fc79ce59 code=0x7ffc0000 [ 260.545491][ T9302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 260.552690][ T29] audit: type=1326 audit(1779754769.097:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.6.926" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fc79ce59 code=0x7ffc0000 [ 260.587443][ T9302] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 260.595617][ T29] audit: type=1326 audit(1779754769.097:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.6.926" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe7fc79ce59 code=0x7ffc0000 [ 260.646519][ T9302] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 260.658716][ T29] audit: type=1326 audit(1779754769.137:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.6.926" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fc79ce59 code=0x7ffc0000 [ 260.874462][ T5680] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 260.982582][ T9310] tmpfs: Unknown parameter '' [ 261.056406][ T5680] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 261.073988][ T5680] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 261.094404][ T5680] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 261.114066][ T5680] usb 5-1: config 8 has no interface number 0 [ 261.130481][ T5680] usb 5-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 261.164429][ T5680] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 261.180162][ T5680] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.203984][ T5680] usb 5-1: Product: syz [ 261.215275][ T5680] usb 5-1: Manufacturer: syz [ 261.221053][ T5680] usb 5-1: SerialNumber: syz [ 261.472366][ T9300] netlink: 28 bytes leftover after parsing attributes in process `syz.4.927'. [ 261.542481][ T5680] usb 5-1: USB disconnect, device number 52 [ 261.847365][ T9323] netlink: 12 bytes leftover after parsing attributes in process `syz.6.934'. [ 261.866372][ T9323] netlink: 28 bytes leftover after parsing attributes in process `syz.6.934'. [ 261.876946][ T9323] netlink: 'syz.6.934': attribute type 10 has an invalid length. [ 261.884129][ T10] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 261.887734][ T9323] netlink: 40 bytes leftover after parsing attributes in process `syz.6.934'. [ 261.902317][ T9323] dummy0: entered promiscuous mode [ 262.014598][ T9328] netlink: 'syz.3.935': attribute type 16 has an invalid length. [ 262.022434][ T9328] netlink: 'syz.3.935': attribute type 17 has an invalid length. [ 262.054163][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 262.066048][ T10] usb 2-1: config index 0 descriptor too short (expected 1810, got 18) [ 262.088707][ T10] usb 2-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 262.131227][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.158965][ T10] usb 2-1: config 0 descriptor?? [ 262.169683][ T9330] cgroup: fork rejected by pids controller in /syz4 [ 262.172031][ T10] gspca_main: etoms-2.14.0 probing 102c:6151 [ 262.199125][ T9327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.211151][ T9330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.936'. [ 262.240726][ T9327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.292370][ T9328] macvtap1: left allmulticast mode [ 262.298722][ T9328] bond0: left allmulticast mode [ 262.303848][ T9328] bridge1: left allmulticast mode [ 262.661269][ T10] usb 2-1: USB disconnect, device number 75 [ 262.849544][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.867682][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.999739][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.011688][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.140774][ T12] team0: Port device netdevsim1 removed [ 263.165542][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.195060][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.298148][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 263.308971][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 263.319472][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 263.329675][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 263.338552][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 263.380088][ T12] bridge0: port 3(netdevsim0) entered disabled state [ 263.407376][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 263.416450][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 263.427559][ T12] bridge0: port 3(netdevsim0) entered disabled state [ 263.448135][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.459090][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.779972][ T12] bridge_slave_1: left promiscuous mode [ 263.799241][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.829674][ T12] bridge_slave_0: left allmulticast mode [ 263.838475][ T12] bridge_slave_0: left promiscuous mode [ 263.848452][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.116076][ T12] bond1 (unregistering): (slave gretap1): Releasing active interface [ 264.144344][ T12] team0: Port device vxlan0 removed [ 264.182152][ T12] bond1 (unregistering): (slave bridge1): Releasing active interface [ 264.240857][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.251571][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.261967][ T12] bond0 (unregistering): Released all slaves [ 264.272378][ T12] bond1 (unregistering): Released all slaves [ 264.290895][ T12] bond2 (unregistering): Released all slaves [ 264.441854][ T9342] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.465670][ T9342] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.499684][ T9342] bridge_slave_0: entered allmulticast mode [ 264.528670][ T9342] bridge_slave_0: entered promiscuous mode [ 264.577804][ T9342] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.608285][ T9342] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.627968][ T9342] bridge_slave_1: entered allmulticast mode [ 264.645301][ T9342] bridge_slave_1: entered promiscuous mode [ 264.796769][ T9356] pimreg: entered allmulticast mode [ 264.832177][ T9342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.850953][ T9354] pimreg: left allmulticast mode [ 265.048108][ T9366] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.093888][ T9342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.217825][ T9366] overlayfs: missing 'lowerdir' [ 265.224299][ T9342] team0: Port device team_slave_0 added [ 265.239311][ T9370] tmpfs: Unknown parameter '' [ 265.309815][ T9342] team0: Port device team_slave_1 added [ 265.394590][ T5624] Bluetooth: hci4: command tx timeout [ 265.419615][ T9342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.439450][ T9342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.466921][ T9342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.511659][ T9342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.524990][ T9342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.551184][ T9342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.606046][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 265.730350][ T9342] hsr_slave_0: entered promiscuous mode [ 265.745627][ T9342] hsr_slave_1: entered promiscuous mode [ 265.762154][ T9342] debugfs: 'hsr0' already exists in 'hsr' [ 265.768605][ T9342] Cannot create hsr debugfs directory [ 265.870111][ T12] hsr_slave_0: left promiscuous mode [ 265.889530][ T12] hsr_slave_1: left promiscuous mode [ 265.905865][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.922467][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.941421][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.959758][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.016149][ T12] veth1_macvtap: left promiscuous mode [ 266.031220][ T12] veth0_macvtap: left promiscuous mode [ 266.047693][ T12] veth1_vlan: left promiscuous mode [ 266.699027][ T12] team0 (unregistering): Port device team_slave_1 removed [ 266.733556][ T12] team0 (unregistering): Port device team_slave_0 removed [ 267.411182][ T9427] tmpfs: Unknown parameter '' [ 267.474291][ T5624] Bluetooth: hci4: command tx timeout [ 267.537657][ T9430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.567687][ T9430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.741285][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6 [ 267.807349][ T9407] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 268.320589][ T9454] loop3: detected capacity change from 0 to 7 [ 268.352210][ T9454] Dev loop3: unable to read RDB block 7 [ 268.378359][ T9454] loop3: unable to read partition table [ 268.419004][ T9454] loop3: partition table beyond EOD, truncated [ 268.462196][ T9454] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 268.530736][ T5680] IPVS: starting estimator thread 0... [ 268.553527][ T9445] IPVS: sh: FWM 3 0x00000003 - no destination available [ 268.621544][ T9342] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 268.636515][ T9458] IPVS: using max 57 ests per chain, 136800 per kthread [ 268.661447][ T9342] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 268.681777][ T9342] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 268.706331][ T9342] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 268.723621][ T9342] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 268.762425][ T9342] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 268.774873][ T9342] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 268.793616][ T9342] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 269.103537][ T9342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.189509][ T9342] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.244838][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.251961][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.307617][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.314775][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.554989][ T5624] Bluetooth: hci4: command tx timeout [ 269.737295][ T9342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.783752][ T13] IPVS: stop unused estimator thread 0... [ 270.154174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 270.165064][ T9342] veth0_vlan: entered promiscuous mode [ 270.173756][ T9491] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.961'. [ 270.191513][ T9491] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 270.210771][ T9342] veth1_vlan: entered promiscuous mode [ 270.380786][ T9342] veth0_macvtap: entered promiscuous mode [ 270.436021][ T9342] veth1_macvtap: entered promiscuous mode [ 270.499488][ T9342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.548771][ T9342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.573263][ T9514] syzkaller1: entered promiscuous mode [ 270.579581][ T9514] syzkaller1: entered allmulticast mode [ 270.651378][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.682456][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.716631][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.735672][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.753482][ T9520] tmpfs: Unknown parameter '' [ 270.972374][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.006611][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.020348][ T9523] kvm: pic: non byte write [ 271.079678][ T9527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.099152][ T9527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.108493][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.129892][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.261248][ T9534] fuse: Unknown parameter '' [ 271.634500][ T5624] Bluetooth: hci4: command tx timeout [ 271.652075][ T9553] loop3: detected capacity change from 0 to 7 [ 271.694728][ T9553] Dev loop3: unable to read RDB block 7 [ 271.711391][ T9553] loop3: unable to read partition table [ 271.729529][ T9553] loop3: partition table beyond EOD, truncated [ 271.753825][ T9553] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 272.063416][ T9575] xt_hashlimit: size too large, truncated to 1048576 [ 272.089369][ T9573] xt_hashlimit: size too large, truncated to 1048576 [ 272.128901][ T9579] netlink: 28 bytes leftover after parsing attributes in process `syz.3.979'. [ 272.503199][ T9579] pimreg3: entered allmulticast mode [ 272.618955][ T9579] netlink: 20 bytes leftover after parsing attributes in process `syz.3.979'. [ 272.719731][ T9596] bridge_slave_0: left allmulticast mode [ 272.782881][ T9596] bridge_slave_0: left promiscuous mode [ 272.884204][ T5679] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 272.900799][ T9596] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.044053][ T5679] usb 5-1: Using ep0 maxpacket: 16 [ 273.061366][ T5679] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.101466][ T9596] bridge_slave_1: left allmulticast mode [ 273.120043][ T5679] usb 5-1: config 0 interface 0 has no altsetting 0 [ 273.151090][ T9596] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.176183][ T5679] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 273.198500][ T5679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.251389][ T5679] usb 5-1: config 0 descriptor?? [ 273.281942][ T9596] bond0: (slave bond_slave_0): Releasing backup interface [ 273.419334][ T9596] bond0: (slave bond_slave_1): Releasing backup interface [ 273.453746][ T9610] tmpfs: Unknown parameter '' [ 273.522573][ T9596] team0: Port device team_slave_0 removed [ 273.617424][ T9596] team0: Port device team_slave_1 removed [ 273.692371][ T5679] nzxt-smart2 0003:1E71:2009.0015: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 273.722104][ T9596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.763746][ T9596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.927751][ T9596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.959819][ T9596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.001813][ T9596] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 274.180901][ T10] usb 5-1: USB disconnect, device number 53 [ 274.215523][ T9616] ip6gre1: entered promiscuous mode [ 274.442582][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.986'. [ 274.495878][ T9622] netlink: 14 bytes leftover after parsing attributes in process `syz.6.987'. [ 274.896190][ T9629] tipc: Enabling of bearer rejected, failed to enable media [ 275.493729][ T9625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.517092][ T9625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.555700][ T9627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.874555][ T1222] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 275.882593][ T10] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 276.067316][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 276.077564][ T1222] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x2C, changing to 0xC [ 276.097232][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.112925][ T1222] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0xC has invalid wMaxPacketSize 0 [ 276.131614][ T10] usb 2-1: config 0 descriptor?? [ 276.142522][ T1222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 276.153483][ T10] cp210x 2-1:0.0: cp210x converter detected [ 276.176148][ T1222] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 276.190920][ T1222] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 276.213448][ T1222] usb 5-1: Product: syz [ 276.226465][ T1222] usb 5-1: Manufacturer: syz [ 276.241819][ T1222] usb 5-1: SerialNumber: syz [ 276.253632][ T1222] usb 5-1: config 0 descriptor?? [ 276.295421][ T1222] usb 5-1: selecting invalid altsetting 0 [ 276.327980][ T9650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.342730][ T9650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.439867][ T9652] fuse: Unknown parameter 'X-i/B&d' [ 276.446685][ T9653] fuse: Unknown parameter 'X-i/B&d' [ 276.574948][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 277.810732][ T9663] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 277.866210][ T10] usb 5-1: USB disconnect, device number 54 [ 278.030225][ T9665] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1000'. [ 278.071051][ T9667] Cannot find set identified by id 0 to match [ 278.226737][ T5629] usb 2-1: USB disconnect, device number 76 [ 278.276698][ T5629] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 278.293806][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1002'. [ 278.315121][ T5629] cp210x 2-1:0.0: device disconnected [ 279.221228][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1006'. [ 279.247757][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1006'. [ 279.277190][ T9693] netlink: 'syz.6.1007': attribute type 10 has an invalid length. [ 279.313260][ T9693] syz_tun: entered promiscuous mode [ 279.335539][ T9693] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 279.503473][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1009'. [ 279.540260][ T9704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.571595][ T9704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.856900][ T9712] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1013'. [ 279.894176][ T9715] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1015'. [ 279.980839][ T9715] dummy0: entered allmulticast mode [ 280.130718][ T5702] IPVS: starting estimator thread 0... [ 280.239181][ T9726] IPVS: using max 33 ests per chain, 79200 per kthread [ 280.284331][ T9733] loop5: detected capacity change from 0 to 7 [ 280.342207][ T9733] Dev loop5: unable to read RDB block 7 [ 280.371016][ T9733] loop5: AHDI p1 p2 p3 [ 280.394202][ T9733] loop5: partition table partially beyond EOD, truncated [ 280.464234][ T9733] loop5: p1 start 1601398130 is beyond EOD, truncated [ 280.495857][ T9733] loop5: p2 start 1702059890 is beyond EOD, truncated [ 280.901895][ T9755] bond0: (slave bridge_slave_1): Error: Device can not be enslaved while up [ 281.179560][ T9770] netlink: 'syz.1.1029': attribute type 13 has an invalid length. [ 281.200800][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1029'. [ 281.239410][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.248646][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.265809][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.277147][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.440831][ T9790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.457037][ T9790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.565161][ T9794] netlink: 'syz.4.1033': attribute type 10 has an invalid length. [ 281.580365][ T9791] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 281.597303][ T9794] team0 (unregistering): Port device team_slave_0 removed [ 281.608632][ T9794] team0 (unregistering): Port device team_slave_1 removed [ 281.634039][ T24] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 281.805667][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.816730][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.828119][ T24] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 281.837685][ T24] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 281.846061][ T24] usb 2-1: Manufacturer: syz [ 281.852588][ T24] usb 2-1: config 0 descriptor?? [ 282.023626][ T9798] program syz.3.1038 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.474088][ T1222] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 282.626211][ T1222] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 282.637414][ T1222] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 282.647325][ T1222] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 282.656407][ T1222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.667391][ T9804] raw-gadget.7 gadget.4: fail, usb_ep_enable returned -22 [ 282.681067][ T1222] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 282.881059][ T24] uclogic 0003:256C:006D.0016: v1 frame probing failed: -71 [ 282.888928][ T24] uclogic 0003:256C:006D.0016: failed probing parameters: -71 [ 282.901997][ T24] uclogic 0003:256C:006D.0016: probe with driver uclogic failed with error -71 [ 282.915620][ T24] usb 2-1: USB disconnect, device number 77 [ 283.058583][ T1222] usb 5-1: USB disconnect, device number 55 [ 283.441710][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 283.441728][ T29] audit: type=1326 audit(1779754792.167:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9810 comm="syz.1.1042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42c79ce59 code=0x7ffc0000 [ 283.481228][ T29] audit: type=1326 audit(1779754792.167:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9810 comm="syz.1.1042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42c79ce59 code=0x7ffc0000 [ 283.513307][ T29] audit: type=1326 audit(1779754792.207:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9810 comm="syz.1.1042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42c79ce59 code=0x7ffc0000 [ 283.540359][ T29] audit: type=1326 audit(1779754792.207:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9810 comm="syz.1.1042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42c79ce59 code=0x7ffc0000 [ 283.570427][ T29] audit: type=1326 audit(1779754792.207:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9810 comm="syz.1.1042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fc42c79ce59 code=0x7ffc0000 [ 283.658089][ T29] audit: type=1326 audit(1779754792.207:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9810 comm="syz.1.1042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42c79ce59 code=0x7ffc0000 [ 283.694232][ T29] audit: type=1326 audit(1779754792.207:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9810 comm="syz.1.1042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42c79ce59 code=0x7ffc0000 [ 283.725870][ T29] audit: type=1326 audit(1779754792.207:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9810 comm="syz.1.1042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42c79ce59 code=0x7ffc0000 [ 283.750960][ T29] audit: type=1326 audit(1779754792.207:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9810 comm="syz.1.1042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc42c79ce59 code=0x7ffc0000 [ 283.776446][ T29] audit: type=1326 audit(1779754792.217:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9810 comm="syz.1.1042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42c79ce59 code=0x7ffc0000 [ 284.023286][ T9824] openvswitch: netlink: IP tunnel dst address not specified [ 284.036313][ T9825] netlink: 'syz.4.1045': attribute type 1 has an invalid length. [ 284.295371][ T9832] fuse: Unknown parameter 'seclabel' [ 284.313379][ T9833] fuse: Unknown parameter 'seclabel' [ 284.434129][ T1222] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 284.461920][ T9841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.496894][ T9841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.584215][ T1222] usb 5-1: device descriptor read/64, error -71 [ 284.751440][ T9841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.765085][ T9841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.774603][ T5629] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 284.838499][ T1222] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 284.946483][ T5629] usb 2-1: Using ep0 maxpacket: 8 [ 284.962149][ T5629] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 284.974117][ T1222] usb 5-1: device descriptor read/64, error -71 [ 284.980239][ T5629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.988936][ T9858] FAULT_INJECTION: forcing a failure. [ 284.988936][ T9858] name failslab, interval 1, probability 0, space 0, times 1 [ 285.000437][ T5629] usb 2-1: Product: syz [ 285.013028][ T5629] usb 2-1: Manufacturer: syz [ 285.022822][ T5629] usb 2-1: SerialNumber: syz [ 285.039166][ T5629] usb 2-1: config 0 descriptor?? [ 285.050517][ T9858] CPU: 0 UID: 0 PID: 9858 Comm: syz.0.1055 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.050546][ T9858] Tainted: [L]=SOFTLOCKUP [ 285.050552][ T9858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 285.050571][ T9858] Call Trace: [ 285.050581][ T9858] [ 285.050589][ T9858] dump_stack_lvl+0xe8/0x150 [ 285.050615][ T9858] should_fail_ex+0x412/0x560 [ 285.050647][ T9858] should_failslab+0xa8/0x100 [ 285.050673][ T9858] __kmalloc_noprof+0xe8/0x760 [ 285.050697][ T9858] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 285.050724][ T9858] tomoyo_realpath_from_path+0xe3/0x5d0 [ 285.050752][ T9858] ? tomoyo_domain+0xd7/0x130 [ 285.050784][ T9858] ? tomoyo_path_number_perm+0x219/0x630 [ 285.050807][ T9858] tomoyo_path_number_perm+0x246/0x630 [ 285.050832][ T9858] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 285.050853][ T9858] ? __lock_acquire+0x6b5/0x2cf0 [ 285.050888][ T9858] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 285.050927][ T9858] ? __fget_files+0x2a/0x420 [ 285.050952][ T9858] ? __fget_files+0x2a/0x420 [ 285.050978][ T9858] ? __fget_files+0x3a0/0x420 [ 285.050998][ T9858] ? __fget_files+0x2a/0x420 [ 285.051022][ T9858] security_file_ioctl+0xc3/0x2a0 [ 285.051045][ T9858] __se_sys_ioctl+0x47/0x170 [ 285.051072][ T9858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.051092][ T9858] do_syscall_64+0x15f/0x560 [ 285.051108][ T9858] ? trace_irq_disable+0x3b/0x140 [ 285.051134][ T9858] ? clear_bhb_loop+0x40/0x90 [ 285.051154][ T9858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.051172][ T9858] RIP: 0033:0x7f9c1df9ce59 [ 285.051198][ T9858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.051213][ T9858] RSP: 002b:00007f9c1ed8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.051233][ T9858] RAX: ffffffffffffffda RBX: 00007f9c1e216090 RCX: 00007f9c1df9ce59 [ 285.051246][ T9858] RDX: 0000200000000000 RSI: 0000000000005393 RDI: 000000000000000d [ 285.051257][ T9858] RBP: 00007f9c1ed8a090 R08: 0000000000000000 R09: 0000000000000000 [ 285.051267][ T9858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.051277][ T9858] R13: 00007f9c1e216128 R14: 00007f9c1e216090 R15: 00007f9c1e33fa48 [ 285.051304][ T9858] [ 285.054159][ T9858] ERROR: Out of memory at tomoyo_realpath_from_path. [ 285.094311][ T1222] usb usb5-port1: attempt power cycle [ 285.304188][ T5629] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 285.664325][ T1222] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 285.695050][ T1222] usb 5-1: device descriptor read/8, error -71 [ 285.791480][ T9860] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1056'. [ 285.801277][ T9860] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1056'. [ 285.934961][ T5629] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 285.947045][ T5629] usb 2-1: USB disconnect, device number 78 [ 285.954555][ T1222] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 286.005696][ T1222] usb 5-1: device descriptor read/8, error -71 [ 286.124332][ T1222] usb usb5-port1: unable to enumerate USB device [ 286.459240][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1062'. [ 286.473803][ T9882] bond0: entered promiscuous mode [ 286.482471][ T9882] bond0: left promiscuous mode [ 286.521615][ T9884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1063'. [ 286.600256][ T9886] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.864158][ T1222] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 287.004128][ T1222] usb 2-1: device descriptor read/64, error -71 [ 287.014810][ T9901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.027089][ T9901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.264047][ T1222] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 287.404178][ T1222] usb 2-1: device descriptor read/64, error -71 [ 287.514305][ T1222] usb usb2-port1: attempt power cycle [ 287.574040][ T9905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.583013][ T9905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.605163][ T24] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 287.768295][ T24] usb 5-1: config 0 has an invalid interface number: 33 but max is 0 [ 287.777220][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.788005][ T24] usb 5-1: config 0 has no interface number 0 [ 287.794281][ T24] usb 5-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 287.804315][ T24] usb 5-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.822145][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 287.831333][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.839441][ T24] usb 5-1: Product: syz [ 287.843636][ T24] usb 5-1: Manufacturer: syz [ 287.848445][ T24] usb 5-1: SerialNumber: syz [ 287.860055][ T24] usb 5-1: config 0 descriptor?? [ 287.874581][ T1222] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 287.874735][ T9903] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 287.903312][ T24] hdpvr 5-1:0.33: Could not find bulk-in endpoint [ 287.912096][ T24] hdpvr 5-1:0.33: probe with driver hdpvr failed with error -12 [ 287.924605][ T1222] usb 2-1: device descriptor read/8, error -71 [ 288.136074][ T9903] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 288.174062][ T1222] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 288.190229][ T10] usb 5-1: USB disconnect, device number 60 [ 288.197137][ T1222] usb 2-1: device descriptor read/8, error -71 [ 288.311067][ T9932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.323134][ T9932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.326449][ T1222] usb usb2-port1: unable to enumerate USB device [ 288.963738][ T9936] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1080'. [ 288.978520][ T1222] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 289.135629][ T1222] usb 5-1: device descriptor read/64, error -71 [ 289.188356][ T9942] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1083'. [ 289.317547][ T9945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.356572][ T9945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.396263][ T1222] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 289.564070][ T1222] usb 5-1: device descriptor read/64, error -71 [ 289.685839][ T1222] usb usb5-port1: attempt power cycle [ 290.044186][ T1222] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 290.074686][ T1222] usb 5-1: device descriptor read/8, error -71 [ 290.324184][ T1222] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 290.354976][ T1222] usb 5-1: device descriptor read/8, error -71 [ 290.366524][ T9967] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1089'. [ 290.391184][ T9967] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1089'. [ 290.495895][ T1222] usb usb5-port1: unable to enumerate USB device [ 290.792097][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1088'. [ 291.364031][ T5679] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 291.408719][ T5710] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 291.452117][ T5710] usb 1-1: USB disconnect, device number 73 [ 291.549046][ T5679] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 291.566038][ T5679] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 291.576188][ T5679] usb 2-1: Product: syz [ 291.581034][ T5679] usb 2-1: SerialNumber: syz [ 291.589905][ T5679] usb 2-1: config 0 descriptor?? [ 291.804327][ T5710] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 291.984685][ T5710] usb 1-1: Using ep0 maxpacket: 8 [ 291.998180][ T5710] usb 1-1: config 0 has no interfaces? [ 292.011983][ T5710] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 292.024309][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.032737][ T5710] usb 1-1: Product: syz [ 292.034674][ T24] usb 2-1: USB disconnect, device number 83 [ 292.037147][ T5710] usb 1-1: Manufacturer: syz [ 292.047956][ T5710] usb 1-1: SerialNumber: syz [ 292.060454][ T5710] usb 1-1: config 0 descriptor?? [ 292.258366][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1092'. [ 292.302759][ T9983] hsr_slave_0: left promiscuous mode [ 292.332091][ T9983] hsr_slave_1: left promiscuous mode [ 292.369280][ T9998] batadv_slave_1: entered promiscuous mode [ 292.960953][T10020] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1100'. [ 293.019121][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1102'. [ 293.075017][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1102'. [ 293.127437][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1102'. [ 293.162948][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1102'. [ 293.199493][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1102'. [ 293.230764][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1102'. [ 293.269580][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1102'. [ 293.302482][T10022] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1102'. [ 293.380325][ T9997] batadv_slave_1: left promiscuous mode [ 293.733712][T10037] input: syz1 as /devices/virtual/input/input30 [ 293.759682][T10037] input: failed to attach handler leds to device input30, error: -6 [ 294.059363][ T1222] usb 1-1: USB disconnect, device number 74 [ 294.228476][T10047] netlink: 'syz.4.1108': attribute type 1 has an invalid length. [ 294.261374][T10047] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 294.272542][T10047] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 294.315416][T10049] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 294.439418][T10047] macvlan2: entered promiscuous mode [ 294.445036][T10047] macvlan2: entered allmulticast mode [ 294.455209][ T1222] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 294.604054][ T1222] usb 1-1: Using ep0 maxpacket: 16 [ 294.610908][ T1222] usb 1-1: unable to get BOS descriptor or descriptor too short [ 294.620313][ T1222] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 294.630774][ T1222] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 512, setting to 64 [ 294.645018][ T1222] usb 1-1: string descriptor 0 read error: -22 [ 294.651351][ T1222] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 294.660709][ T1222] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.672824][T10045] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 294.693839][ T1222] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 294.704173][ T1222] usb 1-1: MIDIStreaming interface descriptor not found [ 294.889730][ T1222] usb 1-1: USB disconnect, device number 75 [ 294.926575][T10053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.940748][T10053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.870773][T10066] vxcan1: tx drop: invalid da for name 0x0000000010000003 [ 295.942899][T10069] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 296.005407][T10072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.014840][T10072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.063505][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 296.063521][ T29] audit: type=1326 audit(1779754804.787:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10076 comm="syz.1.1116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc42c79ce59 code=0x0 [ 296.555889][T10083] netlink: 'syz.0.1118': attribute type 30 has an invalid length. [ 296.834230][ T24] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 297.005451][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 297.012285][ T24] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.026415][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 297.033069][ T24] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 297.042816][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.052559][ T24] usb 1-1: config 0 descriptor?? [ 297.224097][ T5710] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 297.394400][ T5710] usb 2-1: Using ep0 maxpacket: 8 [ 297.410649][ T5710] usb 2-1: unable to get BOS descriptor or descriptor too short [ 297.429062][ T5710] usb 2-1: config 4 interface 0 has no altsetting 0 [ 297.440200][ T5710] usb 2-1: string descriptor 0 read error: -22 [ 297.446637][ T5710] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 297.455901][ T5710] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 297.480884][ T5710] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 297.497209][ T24] nzxt-smart2 0003:1E71:2009.0017: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 297.516099][ T5710] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 297.527732][ T5710] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 297.535036][ T5710] usb 2-1: media controller created [ 297.558357][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 297.688503][ T24] usb 1-1: USB disconnect, device number 76 [ 297.691076][ T5710] zl10353_read_register: readreg error (reg=127, ret==0) [ 297.755747][ T5710] usb 2-1: USB disconnect, device number 84 [ 297.804063][ T5629] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 297.964676][ T5629] usb 5-1: Using ep0 maxpacket: 16 [ 297.971598][ T5629] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.982066][ T5629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 297.993930][ T5629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 298.004212][ T5629] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 298.013878][ T5629] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.028924][ T5629] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 298.038564][ T5629] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 298.046721][ T5629] usb 5-1: Manufacturer: syz [ 298.054886][ T5629] usb 5-1: config 0 descriptor?? [ 298.319962][T10120] ip6tnl2: entered promiscuous mode [ 298.324254][ T5717] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 298.331354][T10117] netlink: 'syz.3.1127': attribute type 1 has an invalid length. [ 298.360514][T10117] bond3: entered promiscuous mode [ 298.366931][ T5629] rc_core: IR keymap rc-hauppauge not found [ 298.372845][ T5629] Registered IR keymap rc-empty [ 298.379685][T10117] 8021q: adding VLAN 0 to HW filter on device bond3 [ 298.386495][ T5629] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 298.404181][ T5629] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 298.408608][T10116] 8021q: adding VLAN 0 to HW filter on device bond3 [ 298.422320][T10116] bond3: (slave vcan0): The slave device specified does not support setting the MAC address [ 298.425157][ T5629] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 298.433320][T10116] bond3: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 298.448989][ T5629] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input31 [ 298.468837][T10117] __nla_validate_parse: 10 callbacks suppressed [ 298.468852][T10117] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1127'. [ 298.474269][ T5717] usb 1-1: device descriptor read/64, error -71 [ 298.491734][ T5629] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 298.499892][T10116] bond3: (slave vcan0): making interface the new active one [ 298.507837][T10121] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1127'. [ 298.507870][T10116] vcan0: entered promiscuous mode [ 298.518218][ T5629] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 298.529366][T10116] bond3: (slave vcan0): Enslaving as an active interface with an up link [ 298.544216][ T5629] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 298.564118][ T5629] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 298.594211][ T5629] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 298.601406][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 298.628444][ T5629] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 298.667090][ T5629] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 298.705828][ T5629] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 298.737115][ T5717] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 298.746922][ T5629] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 298.786435][ T5629] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 298.817859][ T5629] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 298.833804][ T5629] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 298.852459][ T5629] usb 5-1: USB disconnect, device number 65 [ 298.904095][ T5717] usb 1-1: device descriptor read/64, error -71 [ 299.024668][ T5717] usb usb1-port1: attempt power cycle [ 299.294127][ T1222] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 299.374109][ T5717] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 299.395367][ T5717] usb 1-1: device descriptor read/8, error -71 [ 299.424039][ T1222] usb 2-1: device descriptor read/64, error -71 [ 299.634062][ T5717] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 299.676219][ T5717] usb 1-1: device descriptor read/8, error -71 [ 299.684462][ T1222] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 299.825303][ T5717] usb usb1-port1: unable to enumerate USB device [ 299.844056][ T1222] usb 2-1: device descriptor read/64, error -71 [ 299.976524][ T1222] usb usb2-port1: attempt power cycle [ 300.325156][ T1222] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 300.356194][ T1222] usb 2-1: device descriptor read/8, error -71 [ 300.604083][ T1222] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 300.648050][ T1222] usb 2-1: device descriptor read/8, error -71 [ 300.774328][ T1222] usb usb2-port1: unable to enumerate USB device [ 301.603224][T10208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.618179][T10208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.643886][T10206] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1142'. [ 301.892544][T10217] netlink: 'syz.0.1145': attribute type 1 has an invalid length. [ 301.928211][T10217] 8021q: adding VLAN 0 to HW filter on device bond3 [ 302.100220][T10226] fuse: Unknown parameter '0x000000000000000f' [ 302.100224][T10231] fuse: Unknown parameter '0x000000000000000f' [ 302.204843][T10226] libceph: resolve '0..' (ret=-3): failed [ 302.315096][T10235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.334161][T10235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.374360][ T5717] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 302.409092][T10238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.422052][T10238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.453090][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1150'. [ 302.529180][ T5717] usb 2-1: unable to get BOS descriptor or descriptor too short [ 302.546955][ T5717] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.568910][ T5717] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.588172][ T5717] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 302.610519][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.638408][ T5717] usb 2-1: Product: syz [ 302.649771][ T5717] usb 2-1: Manufacturer: syz [ 302.662888][ T5717] usb 2-1: SerialNumber: syz [ 302.717356][ T5717] usb 2-1: selecting invalid altsetting 1 [ 302.741001][ T5717] usb 2-1: unit 6 not found! [ 303.036411][ T1222] usb 5-1: new low-speed USB device number 66 using dummy_hcd [ 303.184548][ T1222] usb 5-1: device descriptor read/64, error -71 [ 303.319299][ T5717] usb 2-1: 2:0: failed to get current value for ch 0 (-32) [ 303.435011][ T1222] usb 5-1: new low-speed USB device number 67 using dummy_hcd [ 303.584068][ T1222] usb 5-1: device descriptor read/64, error -71 [ 303.588257][T10229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.610021][T10229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.694436][ T1222] usb usb5-port1: attempt power cycle [ 303.701966][ T5717] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 303.730679][ T5717] usb 2-1: USB disconnect, device number 89 [ 303.894857][ T10] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 304.044175][ T1222] usb 5-1: new low-speed USB device number 68 using dummy_hcd [ 304.075929][ T1222] usb 5-1: device descriptor read/8, error -71 [ 304.082698][ T10] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 304.092882][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.102979][ T10] usb 1-1: config 0 descriptor?? [ 304.110550][ T10] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 304.324133][ T1222] usb 5-1: new low-speed USB device number 69 using dummy_hcd [ 304.344950][ T1222] usb 5-1: device descriptor read/8, error -71 [ 304.455147][ T1222] usb usb5-port1: unable to enumerate USB device [ 304.510853][T10281] netlink: zone id is out of range [ 304.516227][T10281] netlink: zone id is out of range [ 304.522235][ T10] gspca_cpia1: usb_control_msg 03, error -71 [ 304.530961][ T10] gspca_cpia1: usb_control_msg 01, error -71 [ 304.538211][ T10] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 304.548416][ T10] usb 1-1: USB disconnect, device number 81 [ 304.595077][T10300] batadv_slave_1: entered promiscuous mode [ 305.350574][ T285] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.388054][ T285] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.460941][T10299] batadv_slave_1: left promiscuous mode [ 305.590208][ T285] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.631315][ T285] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.954588][ T285] team0: Port device netdevsim1 removed [ 305.963395][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 305.986809][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 305.998581][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 306.007771][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 306.014883][ T285] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.025481][ T285] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.036620][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 306.174229][ T1222] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 306.195337][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1166'. [ 306.312190][T10331] fuse: Bad value for 'fd' [ 306.325522][ T285] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.338190][ T285] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.377115][T10328] input: syz0 as /devices/virtual/input/input32 [ 306.422198][ T1222] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 306.457721][ T1222] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.490128][ T1222] usb 1-1: Product: syz [ 306.513358][ T1222] usb 1-1: Manufacturer: syz [ 306.530122][ T1222] usb 1-1: SerialNumber: syz [ 306.553631][ T1222] usb 1-1: config 0 descriptor?? [ 306.999832][ T285] bridge_slave_0: left allmulticast mode [ 307.007129][ T285] bridge_slave_0: left promiscuous mode [ 307.013145][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.349702][T10347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.413349][T10347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.607312][ T5710] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 307.642097][ T1222] usb 1-1: Firmware version (0.0) predates our first public release. [ 307.684401][ T1222] usb 1-1: Please update to version 0.2 or newer [ 307.805675][ T5710] usb 5-1: Using ep0 maxpacket: 8 [ 307.833699][ T5710] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 307.893467][ T5710] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 307.938630][T10357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 307.954461][ T5710] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 307.972872][ T5710] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.991288][ T285] team0: Port device bond0 removed [ 308.032579][ T285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.043691][ T5710] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 308.053868][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.064777][ T285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.080279][ T285] bond0 (unregistering): Released all slaves [ 308.114176][ T50] Bluetooth: hci3: command tx timeout [ 308.116204][ T285] bond1 (unregistering): Released all slaves [ 308.227621][ T285] bond2 (unregistering): Released all slaves [ 308.299015][ T5710] usb 5-1: GET_CAPABILITIES returned 0 [ 308.312833][ T5710] usbtmc 5-1:16.0: can't read capabilities [ 308.328580][ T285] bond3 (unregistering): Released all slaves [ 308.385009][ T5710] usb 5-1: USB disconnect, device number 70 [ 308.509702][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 308.600369][ T285] tipc: Left network mode [ 308.774816][ T5710] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 308.902782][ T1222] usb 1-1: USB disconnect, device number 82 [ 308.965647][ T5710] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 308.990591][ T5710] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 309.017426][ T5710] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 309.042680][ T5710] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 309.062540][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.089300][ T5710] usb 5-1: Product: syz [ 309.107855][ T5710] usb 5-1: Manufacturer: syz [ 309.123082][ T5710] usb 5-1: SerialNumber: syz [ 309.151666][ T5710] usb 5-1: config 0 descriptor?? [ 309.185902][T10369] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 309.203036][T10369] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 309.228921][T10376] syzkaller0: entered promiscuous mode [ 309.237723][ T5710] usb 5-1: ucan: probing device on interface #0 [ 309.261625][T10376] syzkaller0: entered allmulticast mode [ 309.443731][T10402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.455496][T10402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.508421][ T5710] usb 5-1: ucan: could not read protocol version, ret=-71 [ 309.536538][ T5710] usb 5-1: ucan: probe failed; try to update the device firmware [ 309.583405][ T5710] usb 5-1: USB disconnect, device number 71 [ 309.974258][T10418] netlink: 'syz.4.1179': attribute type 10 has an invalid length. [ 309.982190][T10418] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1179'. [ 310.199222][ T50] Bluetooth: hci3: command tx timeout [ 311.721831][T10326] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.734733][T10326] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.741949][T10326] bridge_slave_0: entered allmulticast mode [ 311.750931][T10326] bridge_slave_0: entered promiscuous mode [ 311.804584][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6 [ 311.817998][T10418] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 311.877919][T10326] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.885647][T10326] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.892927][T10326] bridge_slave_1: entered allmulticast mode [ 311.900554][T10326] bridge_slave_1: entered promiscuous mode [ 311.950050][T10430] syzkaller1: entered promiscuous mode [ 311.955874][T10430] syzkaller1: entered allmulticast mode [ 312.002684][ T285] hsr_slave_0: left promiscuous mode [ 312.008521][ T285] hsr_slave_1: left promiscuous mode [ 312.014403][ T285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.021873][ T285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.040238][ T285] veth1_macvtap: left promiscuous mode [ 312.050318][ T1222] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 312.062443][ T285] veth0_macvtap: left promiscuous mode [ 312.074182][ T285] veth1_vlan: left promiscuous mode [ 312.084155][ T285] veth0_vlan: left promiscuous mode [ 312.237045][ T1222] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.259804][ T1222] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.270757][ T1222] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 312.274169][ T50] Bluetooth: hci3: command tx timeout [ 312.288172][T10439] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1184'. [ 312.329786][ T1222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.360389][ T1222] usb 1-1: config 0 descriptor?? [ 312.429893][ T285] team0 (unregistering): Port device team_slave_1 removed [ 312.458040][ T285] team0 (unregistering): Port device team_slave_0 removed [ 312.549686][T10449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.567746][T10449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.611591][T10449] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1186'. [ 312.739777][T10326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.751057][T10454] xt_CT: You must specify a L4 protocol and not use inversions on it [ 312.771607][T10326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.804537][ T1222] hid_parser_main: 455 callbacks suppressed [ 312.807740][ T1222] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 312.840193][ T1222] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 312.861595][ T1222] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 312.876063][T10326] team0: Port device team_slave_0 added [ 312.881699][ T1222] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 312.906714][T10326] team0: Port device team_slave_1 added [ 312.912394][ T1222] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 312.935858][ T1222] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 312.978436][ T1222] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 313.048795][ T1222] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 313.066850][ T5710] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 313.081421][T10326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.109178][T10326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.135738][T10326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.150116][T10326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.157510][T10326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.214506][ T1222] cp2112 0003:10C4:EA90.0018: Part Number: 0x00 Device Version: 0x00 [ 313.224856][T10326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.274408][ T5710] usb 5-1: Using ep0 maxpacket: 16 [ 313.282721][ T5710] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 214, changing to 7 [ 313.313640][ T5710] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 313.323791][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.336750][ T5710] usb 5-1: Product: 鹯眇㕤颲怮ύ馲笳ᘬ㝏퍃䟕뉛遇띶㥨쮒㟍䷢덮䖦ㆅ템눳疑ᥲ溿齷酢櫷돲Ąᨳ碟쌦«䵣⏘覠䑮䎖 [ 313.374946][T10326] hsr_slave_0: entered promiscuous mode [ 313.381758][T10326] hsr_slave_1: entered promiscuous mode [ 313.397377][ T5710] usb 5-1: SerialNumber: 㱗髴芏玪욗㩶⾍ৃ屈촃묇䎙ࢻ蠛ㆭ옰醄껓⁨珰銇쪩饠떗뜇鳑幂矔蘋ⷯ侍陘蕫ˏ㛲෥竖ᐙ괇 [ 313.418247][T10326] debugfs: 'hsr0' already exists in 'hsr' [ 313.430297][T10326] Cannot create hsr debugfs directory [ 313.501387][ T285] IPVS: stop unused estimator thread 0... [ 313.532127][T10468] tipc: Enabled bearer , priority 0 [ 313.534580][T10469] loop2: detected capacity change from 0 to 14 [ 313.547371][T10472] syzkaller0: entered promiscuous mode [ 313.553346][T10472] syzkaller0: entered allmulticast mode [ 313.555943][T10469] Dev loop2: unable to read RDB block 14 [ 313.565996][T10469] loop2: AHDI p1 p2 p3 [ 313.570433][T10469] loop2: partition table partially beyond EOD, truncated [ 313.589737][T10469] loop2: p1 start 1601398130 is beyond EOD, truncated [ 313.597577][T10469] loop2: p2 start 1702059890 is beyond EOD, truncated [ 313.606632][T10475] fuse: Unknown parameter '0x000000000000000a' [ 313.613251][T10470] fuse: Unknown parameter '0x000000000000000a' [ 313.633654][T10469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.666450][T10469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.705018][ T5710] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 313.722110][ T5710] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 313.768740][ T1222] cp2112 0003:10C4:EA90.0018: error reading lock byte: -71 [ 313.803401][ T1222] usb 1-1: USB disconnect, device number 83 [ 313.818107][T10472] tipc: Resetting bearer [ 313.889858][ T5710] usb 5-1: USB disconnect, device number 72 [ 313.907577][T10472] tipc: Disabling bearer [ 313.999752][ T5288] 8021q: adding VLAN 0 to HW filter on device eth7 [ 314.354494][ T50] Bluetooth: hci3: command tx timeout [ 314.862196][T10513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.898418][T10513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.981484][T10326] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 315.010395][T10326] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 315.061681][T10515] netlink: 'syz.6.1195': attribute type 4 has an invalid length. [ 315.069491][T10326] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 315.129798][T10326] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 315.263112][T10326] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 315.327871][T10326] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 315.348578][ T5288] 8021q: adding VLAN 0 to HW filter on device eth8 [ 315.363004][T10326] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 315.377561][T10326] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 315.596091][T10531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.630023][T10530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.630351][T10531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.651223][T10530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.885315][T10326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.963129][T10326] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.990367][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.997495][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.042761][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.049920][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.234492][ T1222] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 316.264510][T10326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.282711][T10551] loop3: detected capacity change from 0 to 7 [ 316.293793][T10551] Dev loop3: unable to read RDB block 7 [ 316.299872][T10551] loop3: unable to read partition table [ 316.307454][T10551] loop3: partition table beyond EOD, truncated [ 316.316035][T10551] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 316.394572][ T1222] usb 5-1: Using ep0 maxpacket: 16 [ 316.404236][ T1222] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.424157][ T5679] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 316.435865][ T1222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 316.450294][ T1222] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 316.460617][ T1222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.477255][ T1222] usb 5-1: config 0 descriptor?? [ 316.493753][T10326] veth0_vlan: entered promiscuous mode [ 316.543809][T10326] veth1_vlan: entered promiscuous mode [ 316.617120][ T5679] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 316.637022][ T5679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.637062][T10326] veth0_macvtap: entered promiscuous mode [ 316.670000][ T5679] usb 1-1: config 0 descriptor?? [ 316.714404][T10326] veth1_macvtap: entered promiscuous mode [ 316.794539][T10326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.825650][T10556] gre1: entered promiscuous mode [ 316.869750][T10326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.907037][ T5679] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 316.921518][ T1222] nzxt-smart2 0003:1E71:2009.0019: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 316.942294][ T67] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.956957][ T67] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.969407][ T67] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.978806][ T67] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.996559][ T30] INFO: task kworker/0:5:5701 blocked for more than 143 seconds. [ 317.006785][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.013808][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 317.031784][ T30] Tainted: G L syzkaller #0 [ 317.080738][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.112340][T10549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.160409][T10549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.168218][ T30] task:kworker/0:5 state:D stack:22464 pid:5701 tgid:5701 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 317.246760][ T30] Workqueue: usb_hub_wq hub_event [ 317.261020][ T30] Call Trace: [ 317.277870][ T30] [ 317.288826][ T30] __schedule+0x1821/0x5740 [ 317.294168][ T5679] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 317.311150][ T30] ? kasan_save_stack+0x3e/0x60 [ 317.321090][ T5679] [drm] Initialized udl on minor 2 [ 317.329477][ T30] ? bus_probe_device+0x12a/0x220 [ 317.343614][ T30] ? usb_set_configuration+0x1a87/0x2110 [ 317.360355][ T30] ? device_initial_probe+0xa1/0xd0 [ 317.366127][ T30] ? bus_probe_device+0x12a/0x220 [ 317.371237][ T30] ? look_up_lock_class+0x57/0x110 [ 317.389332][ T30] ? __pfx___schedule+0x10/0x10 [ 317.399621][ T30] ? schedule+0x90/0x360 [ 317.415210][ T30] schedule+0x164/0x360 [ 317.426604][ T30] schedule_timeout+0xc3/0x2c0 [ 317.444538][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 317.454430][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 317.465221][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 317.474820][ T30] ? wait_for_completion+0x274/0x5e0 [ 317.484767][ T30] wait_for_completion+0x2cc/0x5e0 [ 317.494777][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 317.507689][ T30] i2c_del_adapter+0x5c0/0x790 [ 317.514342][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 317.524658][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 317.534235][ T30] ? dvb_usbv2_exit+0x94c/0xb80 [ 317.544257][ T30] dvb_usbv2_probe+0x4c3/0x3d40 [ 317.565242][ T30] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 317.574089][ T30] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 317.579764][ T30] usb_probe_interface+0x659/0xc70 [ 317.586401][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 317.594093][ T30] really_probe+0x267/0xaf0 [ 317.604168][ T30] __driver_probe_device+0x1ef/0x380 [ 317.615179][ T30] driver_probe_device+0x4f/0x240 [ 317.624190][ T30] __device_attach_driver+0x279/0x430 [ 317.631035][ T30] bus_for_each_drv+0x258/0x2f0 [ 317.637089][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 317.643084][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 317.654087][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 317.660763][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 317.677388][ T30] __device_attach+0x2c5/0x450 [ 317.682191][ T30] ? __pfx___device_attach+0x10/0x10 [ 317.688695][ T30] ? _raw_spin_unlock+0x28/0x50 [ 317.694173][ T30] device_initial_probe+0xa1/0xd0 [ 317.704616][ T30] bus_probe_device+0x12a/0x220 [ 317.709512][ T30] device_add+0x7e9/0xbb0 [ 317.714678][ T30] usb_set_configuration+0x1a87/0x2110 [ 317.720282][ T30] usb_generic_driver_probe+0x8d/0x150 [ 317.726695][ T30] usb_probe_device+0x1c4/0x3b0 [ 317.731594][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 317.737006][ T30] really_probe+0x267/0xaf0 [ 317.741633][ T30] __driver_probe_device+0x1ef/0x380 [ 317.747246][ T30] driver_probe_device+0x4f/0x240 [ 317.752286][ T30] __device_attach_driver+0x279/0x430 [ 317.757687][ T30] bus_for_each_drv+0x258/0x2f0 [ 317.762647][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 317.768670][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 317.774216][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 317.779412][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 317.786154][ T30] __device_attach+0x2c5/0x450 [ 317.791047][ T30] ? __pfx___device_attach+0x10/0x10 [ 317.796669][ T30] ? _raw_spin_unlock+0x28/0x50 [ 317.801591][ T30] device_initial_probe+0xa1/0xd0 [ 317.806891][ T30] bus_probe_device+0x12a/0x220 [ 317.811755][ T30] device_add+0x7e9/0xbb0 [ 317.817080][ T30] usb_new_device+0xa08/0x16f0 [ 317.821870][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 317.827799][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 317.833019][ T30] hub_event+0x2a1c/0x4f30 [ 317.838456][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 317.843612][ T30] ? __pfx_hub_event+0x10/0x10 [ 317.848628][ T30] ? process_scheduled_works+0xa70/0x1860 [ 317.854570][ T30] ? process_scheduled_works+0xa70/0x1860 [ 317.860318][ T30] ? process_scheduled_works+0xa70/0x1860 [ 317.866295][ T30] process_scheduled_works+0xb5d/0x1860 [ 317.871872][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 317.878183][ T30] ? assign_work+0x3d5/0x5e0 [ 317.882791][ T30] worker_thread+0xa53/0xfc0 [ 317.887629][ T30] kthread+0x389/0x470 [ 317.891721][ T30] ? __pfx_worker_thread+0x10/0x10 [ 317.898185][ T30] ? __pfx_kthread+0x10/0x10 [ 317.902820][ T30] ret_from_fork+0x514/0xb70 [ 317.907535][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 317.912779][ T30] ? __switch_to+0xc79/0x1410 [ 317.918439][ T30] ? __pfx_kthread+0x10/0x10 [ 317.923056][ T30] ret_from_fork_asm+0x1a/0x30 [ 317.928100][ T30] [ 317.931164][ T30] INFO: task syz.5.378:7306 blocked for more than 144 seconds. [ 317.938891][ T30] Tainted: G L syzkaller #0 [ 317.945744][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.957533][ T30] task:syz.5.378 state:D stack:24480 pid:7306 tgid:7295 ppid:6637 task_flags:0x400040 flags:0x00080002 [ 317.990413][ T30] Call Trace: [ 317.997797][ T30] [ 318.004031][ T30] __schedule+0x1821/0x5740 [ 318.016132][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 318.022504][ T30] ? __pfx___schedule+0x10/0x10 [ 318.027452][ T30] ? schedule+0x90/0x360 [ 318.031724][ T30] schedule+0x164/0x360 [ 318.040911][ T30] schedule_preempt_disabled+0x13/0x30 [ 318.046426][ T30] __mutex_lock+0x7f7/0x1550 [ 318.051039][ T30] ? __mutex_lock+0x608/0x1550 [ 318.056025][ T30] ? usbdev_open+0x182/0x770 [ 318.060635][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 318.066158][ T30] ? bus_find_device+0x27d/0x2d0 [ 318.071142][ T30] ? __pfx_bus_find_device+0x10/0x10 [ 318.076909][ T30] ? usbdev_open+0xa7/0x770 [ 318.081443][ T30] ? __kmalloc_cache_noprof+0x15b/0x660 [ 318.087052][ T30] usbdev_open+0x182/0x770 [ 318.091515][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 318.096637][ T30] ? __pfx_usbdev_open+0x10/0x10 [ 318.101622][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 318.106808][ T30] chrdev_open+0x4cd/0x5e0 [ 318.111248][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 318.116360][ T30] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 318.123419][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 318.128463][ T30] do_dentry_open+0x785/0x14e0 [ 318.133260][ T30] vfs_open+0x3b/0x340 [ 318.137702][ T30] ? path_openat+0x2df0/0x3860 [ 318.142493][ T30] path_openat+0x2e08/0x3860 [ 318.147148][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 318.152559][ T30] ? stack_depot_save_flags+0x33/0x810 [ 318.159752][ T30] ? __pfx_path_openat+0x10/0x10 [ 318.164764][ T30] ? __x64_sys_openat+0x138/0x170 [ 318.169816][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 318.174877][ T30] do_file_open+0x23e/0x4a0 [ 318.179425][ T30] ? __pfx_do_file_open+0x10/0x10 [ 318.184781][ T30] ? _raw_spin_unlock+0x28/0x50 [ 318.189648][ T30] ? alloc_fd+0x64b/0x6c0 [ 318.194036][ T30] do_sys_openat2+0x113/0x200 [ 318.198788][ T30] ? __se_sys_futex+0x3a8/0x450 [ 318.203669][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 318.209266][ T30] ? rcu_is_watching+0x15/0xb0 [ 318.214104][ T30] __x64_sys_openat+0x138/0x170 [ 318.218988][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.226038][ T30] do_syscall_64+0x15f/0x560 [ 318.230669][ T30] ? trace_irq_disable+0x3b/0x140 [ 318.235829][ T30] ? clear_bhb_loop+0x40/0x90 [ 318.240567][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.246507][ T30] RIP: 0033:0x7f8059b5d68e [ 318.250945][ T30] RSP: 002b:00007f8057df5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 318.259416][ T30] RAX: ffffffffffffffda RBX: 00007f8057df66c0 RCX: 00007f8059b5d68e [ 318.267423][ T30] RDX: 0000000000163002 RSI: 00007f8057df5c00 RDI: ffffffffffffff9c [ 318.276190][ T30] RBP: 00007f8057df5c00 R08: 0000000000000000 R09: 0000000000000000 [ 318.284486][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 318.292476][ T30] R13: 00007f8059e16128 R14: 00007f8059e16090 R15: 00007f8059f3fa48 [ 318.300951][ T30] [ 318.304394][ T30] [ 318.304394][ T30] Showing all locks held in the system: [ 318.336652][ T5710] usb 4-1: USB disconnect, device number 24 [ 318.352578][ T30] 3 locks held by kworker/0:1/10: [ 318.368983][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 318.454298][ T30] #1: ffffc900000f7c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 318.500677][ T30] #2: ffffffff8e962fe8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 318.563064][ T30] 3 locks held by kworker/1:0/24: [ 318.587061][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 318.632721][ T30] #1: ffffc900001e7c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 318.677296][ T30] #2: ffff888078fa3250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x202/0x3d0 [ 318.715545][ T30] 1 lock held by khungtaskd/30: [ 318.737769][ T30] #0: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 318.776170][ T30] 4 locks held by kworker/u8:7/1088: [ 318.793711][ T30] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 318.847232][ T30] #1: ffffc90005137c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 318.875861][ T30] #2: ffffffff8fdc2d68 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 318.905731][ T30] #3: ffffffff8fdd1a40 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x940 [ 318.939737][ T30] 4 locks held by kworker/0:2/1222: [ 318.955434][ T30] 2 locks held by getty/5381: [ 318.961101][ T30] #0: ffff8880369190a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 318.974294][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 318.985421][ T30] 4 locks held by udevd/5630: [ 318.990153][ T30] #0: ffff888059f0cab8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 318.999651][ T30] #1: ffff88805a398c80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 319.009486][ T30] #2: ffff888079535f08 (kn->active#34){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 319.024117][ T30] #3: ffff88807a0481d8 (&dev->mutex){....}-{4:4}, at: serial_show+0x26/0xa0 [ 319.048440][ T30] 12 locks held by kworker/0:3/5679: [ 319.064072][ T30] #0: ffff888021aba140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 319.084013][ T30] #1: ffffc90003fdfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 319.104076][ T30] #2: ffff88802998e1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 319.113037][ T30] #3: ffff8880535c61d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 319.122840][ T30] #4: ffff888058eca1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 319.132344][ T30] #5: ffff888032060260 (&dev->clientlist_mutex){+.+.}-{4:4}, at: drm_client_register+0x4f/0x210 [ 319.142983][ T30] #6: ffff888058d63270 (&helper->lock){+.+.}-{4:4}, at: drm_fb_helper_initial_config+0x29/0x40 [ 319.154544][ T30] #7: ffff888058d63090 (&client->modeset_mutex){+.+.}-{4:4}, at: drm_client_modeset_probe+0x417/0x5ee0 [ 319.165955][ T30] #8: ffff8880320603f8 (&dev->mode_config.mutex){+.+.}-{4:4}, at: drm_client_modeset_probe+0x432/0x5ee0 [ 319.177524][ T30] #9: ffffc90003fde710 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_helper_probe_single_connector_modes+0x138/0x1830 [ 319.190197][ T30] #10: ffffc90003fde738 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_helper_probe_single_connector_modes+0x138/0x1830 [ 319.202563][ T30] #11: ffffffff8f26ff98 (drm_unplug_srcu){.+.+}-{0:0}, at: drm_dev_enter+0x49/0x150 [ 319.212150][ T30] 5 locks held by kworker/0:5/5701: [ 319.217494][ T30] #0: ffff888021aba140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 319.228971][ T30] #1: ffffc9000412fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 319.241449][ T30] #2: ffff88802a0221d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 319.250925][ T30] #3: ffff88807a0481d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 319.260272][ T30] #4: ffff888020b191a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 319.269567][ T30] 1 lock held by syz.5.378/7306: [ 319.274801][ T30] #0: ffff88802a0221d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 319.283842][ T30] 3 locks held by kworker/u8:9/10192: [ 319.289322][ T30] #0: ffff888031a06140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 319.300959][ T30] #1: ffffc9000db6fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 319.313873][ T30] #2: ffffffff8fdd1a40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 319.323561][ T30] 3 locks held by syz-executor/10326: [ 319.329095][ T30] #0: ffff8880333e0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 319.339182][ T30] #1: ffff8880333e00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 319.349372][ T30] #2: ffffffff8ff551e0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 319.359500][ T30] 3 locks held by syz.6.1195/10514: [ 319.364728][ T30] #0: ffff88806b134ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 319.374710][ T30] #1: ffff88806b1340b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 319.384541][ T30] #2: ffffffff8ff551e0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 319.394685][ T30] 3 locks held by syz.4.1200/10544: [ 319.399888][ T30] #0: ffff8880775acea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 319.409895][ T30] #1: ffff8880775ac0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 319.419606][ T30] #2: ffffffff8ff551e0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 319.429680][ T30] 4 locks held by syz.0.1201/10549: [ 319.434995][ T30] #0: ffff88807bd88ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 319.445072][ T30] #1: ffff88807bd880b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 319.455319][ T30] #2: ffffffff8ff551e0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 319.466287][ T30] #3: ffff88803328baf8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 319.475862][ T30] 2 locks held by syz.3.1204/10555: [ 319.481063][ T30] #0: ffff88805b43d040 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 319.491312][ T30] #1: ffffffff8e962fe8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 319.502392][ T30] [ 319.506173][ T30] ============================================= [ 319.506173][ T30] [ 319.529912][ T30] NMI backtrace for cpu 1 [ 319.529933][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 319.529956][ T30] Tainted: [L]=SOFTLOCKUP [ 319.529961][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 319.529972][ T30] Call Trace: [ 319.529980][ T30] [ 319.529987][ T30] dump_stack_lvl+0xe8/0x150 [ 319.530012][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 319.530036][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 319.530057][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 319.530083][ T30] sys_info+0x135/0x170 [ 319.530102][ T30] watchdog+0xfd3/0x1030 [ 319.530134][ T30] ? watchdog+0x1c9/0x1030 [ 319.530164][ T30] kthread+0x389/0x470 [ 319.530188][ T30] ? __pfx_watchdog+0x10/0x10 [ 319.530210][ T30] ? __pfx_kthread+0x10/0x10 [ 319.530233][ T30] ret_from_fork+0x514/0xb70 [ 319.530254][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 319.530273][ T30] ? __switch_to+0xc79/0x1410 [ 319.530302][ T30] ? __pfx_kthread+0x10/0x10 [ 319.530326][ T30] ret_from_fork_asm+0x1a/0x30 [ 319.530360][ T30] [ 319.530366][ T30] Sending NMI from CPU 1 to CPUs 0: [ 319.647051][ C0] NMI backtrace for cpu 0 [ 319.647070][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.647094][ C0] Tainted: [L]=SOFTLOCKUP [ 319.647100][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 319.647110][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 319.647140][ C0] Code: 6b 7d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 02 20 00 fb f4 7c f7 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 319.647154][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000242 [ 319.647169][ C0] RAX: 00000000004f1691 RBX: ffffffff819a858a RCX: 0000000080000001 [ 319.647180][ C0] RDX: 0000000000000001 RSI: ffffffff8dfad31b RDI: ffffffff8c28b860 [ 319.647191][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 319.647203][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 319.647214][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 319.647226][ C0] FS: 0000000000000000(0000) GS:ffff888125287000(0000) knlGS:0000000000000000 [ 319.647239][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 319.647250][ C0] CR2: 00007f7a1c6264c0 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 319.647264][ C0] Call Trace: [ 319.647269][ C0] [ 319.647275][ C0] default_idle+0x9/0x20 [ 319.647293][ C0] default_idle_call+0x72/0xb0 [ 319.647311][ C0] do_idle+0x36a/0x5f0 [ 319.647332][ C0] ? __pfx_do_idle+0x10/0x10 [ 319.647353][ C0] cpu_startup_entry+0x43/0x60 [ 319.647372][ C0] rest_init+0x2de/0x300 [ 319.647391][ C0] start_kernel+0x38a/0x3e0 [ 319.647416][ C0] x86_64_start_reservations+0x24/0x30 [ 319.647435][ C0] x86_64_start_kernel+0x143/0x1c0 [ 319.647454][ C0] common_startup_64+0x13e/0x147 [ 319.647482][ C0] [ 319.831156][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 319.838032][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 319.848694][ T30] Tainted: [L]=SOFTLOCKUP [ 319.852996][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 319.863041][ T30] Call Trace: [ 319.866321][ T30] [ 319.869250][ T30] vpanic+0x56c/0xa60 [ 319.873236][ T30] ? __pfx___schedule+0x10/0x10 [ 319.878088][ T30] ? __pfx_vpanic+0x10/0x10 [ 319.882585][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 319.888757][ T30] panic+0xc5/0xd0 [ 319.892496][ T30] ? __pfx_panic+0x10/0x10 [ 319.896908][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 319.902280][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 319.908435][ T30] watchdog+0x102c/0x1030 [ 319.912765][ T30] ? watchdog+0x1c9/0x1030 [ 319.917177][ T30] kthread+0x389/0x470 [ 319.921239][ T30] ? __pfx_watchdog+0x10/0x10 [ 319.925902][ T30] ? __pfx_kthread+0x10/0x10 [ 319.930484][ T30] ret_from_fork+0x514/0xb70 [ 319.935062][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 319.940162][ T30] ? __switch_to+0xc79/0x1410 [ 319.944833][ T30] ? __pfx_kthread+0x10/0x10 [ 319.949420][ T30] ret_from_fork_asm+0x1a/0x30 [ 319.954187][ T30] [ 319.957568][ T30] Kernel Offset: disabled [ 319.961885][ T30] Rebooting in 86400 seconds..