last executing test programs: 34m46.177131194s ago: executing program 1 (id=357): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x7c4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000180)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0}}, 0x859) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x10000, 0x6000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_GET_XSAVE2(r4, 0x9000aecf, &(0x7f0000ffc000/0x2000)=nil) ioctl$KVM_RUN(r4, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe(0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000000040)={0x1d, r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r9, {0x1}, {0x9, 0x1b}, {0xfff2, 0x6}}}, 0x24}}, 0x40044) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04000000000000000800000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0400008001"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x240400c6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) 34m45.418925244s ago: executing program 1 (id=359): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="6001000010000100feffffff0000000000000000000000000000ffffe000000200000000000000000000ffffac1e000100010007fffc00000a00004d32000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000000006c000000e000000200000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c25000000000000030000000000000006000000f2fffffffbffffffffffffffffffffffffffffff000000000000000021130000000000000000000000000000ffffffff000000000000000080000000ff340000020001000000000000000000700003006465666c617465"], 0x160}, 0x1, 0x0, 0x0, 0x2000c002}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c0001"], 0x1d8}}, 0x3000000) 34m45.113991649s ago: executing program 1 (id=364): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b"], 0x37a0}, 0x1, 0x0, 0x30000000, 0x4000d}, 0x20000000) 34m45.023468294s ago: executing program 1 (id=365): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000009c0), 0x604001) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000a80)={{0x4, 0x81}, 'port1\x00', 0xa, 0x420, 0x2, 0x5, 0x3cbc, 0x778a71a, 0xfff, 0x0, 0x2, 0xff}) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) r4 = syz_usb_connect$cdc_ncm(0x0, 0x84, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0x1, 0x4, 0x0, 0xf8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'L'}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x8001, 0x0, 0xc}, {0x6, 0x24, 0x1a, 0x9, 0xe}, [@mdlm={0x15, 0x24, 0x12, 0x100}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x35, 0x0, 0xf7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0x5, 0xb}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0x3, 0x8, 0x7, 0xff, 0xae}, 0x61, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x8, [{0x90, &(0x7f0000000580)=@string={0x90, 0x3, "4a521767a27bf2d27b4b16f0fd8dc46f5133184d4c41a63a476b2a406f1758019ff93540425714fb09861108aacb743f30dc267acc0cc03413b7efe8c04c3b2c5f33150edcf6c4f68482506c4ebd4483229ecce9ec8e46ec2d76cf08eca12de1de483096bab9d61a0511bee6148053a5297edae38739c6b032a5df597dfcc185f5f611dfb1ffe72b5daf25918895"}}, {0x81, &(0x7f0000000640)=@string={0x81, 0x3, "e37bb9e9dbda5b20ec9c3c40ff41a81cd54bf0ead5be9b0e88b385c08c67031a34d50bd82d06df724a23f23291a65b7593332b161ca8ff6f94f159aec76a36d3c1895a6856794ce204546cd4e7d8674a25c3a2b7f7f955b8e1283acf39a43e9e4d30bc96dce68d91c0c0f79163f6e9846c4cd5762fb099ee3cdf9898659051"}}, {0x8c, &(0x7f0000000700)=@string={0x8c, 0x3, "e9a29ca7139afdfb96c286e9943d0514547cc2abf6a502a13663f94ebf63360fe2ad23f570d12c020f650807e46c4fbeeb073db3d21eac069d1d94801c9691d4854f5fb233b59fe7dbbf6333dbc1a6a72c458dcd6bf40c574b46e5fa55a0f848826f20085d78a14be56d094ddd48ca324bb60233d06f83d077c67750fcc5fc406f3eccfa04808dda65e6"}}, {0x88, &(0x7f00000007c0)=@string={0x88, 0x3, "d078ccc48c786b461caf6385a8adf11db200e3777f7571f3984d2e49916937ba204dcdf30989edb880aaedbe963bc5447fa40efe4a5e9641b3eecdf00aa9dab10388c70f62b753705baca94762f066f3281bec07d78efa7e44b89db78c9bb396c7ccb4c82332dfcaf665b90b254779ecc58629886ea7150c7f561a7be92b12af8dde1cee1c60"}}, {0x1b, &(0x7f00000002c0)=@string={0x1b, 0x3, "8cb3a106f789cf9ceb996141fd92a77f55497c0048d0a97072"}}, {0xc9, &(0x7f0000000880)=@string={0xc9, 0x3, "7d10392033562cdb8fcadb5c5e09c014839c77813468e69883380cc658caabc824b32dac4a10964c280de74d668df8f8ac6324b04ce5df3096e24f5d7d79a61966236dbf249de5735814d7f380caba22b830cf0ba326aa660ba2f30465c24e4b71ce4b1fe808849092bb5ebfb9f203487333bedc4464f0dd88d86bd6fd7c9134570718a1d4730f431b425a147e25ae6947357c6c72b38c4ca4f57f8c395cfa8328c9480de195818d556aec64a26b83a4f0ac9cacebef7fc5b2e312f0aaa2e617ad04044504baa7"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x44d}}]}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) syz_usb_control_io(r4, &(0x7f0000000980)={0x756f81a1ee4009f9, 0x0, &(0x7f0000000140)={0x0, 0x3, 0xd6, @string={0xd6, 0x3, "37d6f2574f8e1a3692eb6d42bf24169fbda3d6d1b43d5ca29b29807294f300bac41a96054a7233664ce0a4c744ef2333d6266c78cad30fc128fa9ae5543089f89ac7ea84069a20a844bd5318c653b55c8685aabd94b286aa0f3dab64e1edc8a5524dcc66acf0dc3894e0f29f54a5f2f124be56900cf7ce625a540706e1f2160d5dba78f9c3aa3fff2c2922b05b40c93f4ae14f1468942967e8fa90254902f1da09a2fa411bc9ea8e6233523b22b043e80f6f43267dc6021c7170967b6c4af5a8c432957e4a060d0a6238449d81c57d54fca7d1d7"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000300)={0x0, 0x3, 0xc, @string={0xc, 0x3, "78bbf9a528e9c52837e2"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) getdents(r8, &(0x7f0000000080)=""/44, 0x2c) read$char_usb(r7, &(0x7f0000000000)=""/188, 0xbc) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="10") 34m40.084399249s ago: executing program 1 (id=388): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 34m39.686169874s ago: executing program 1 (id=390): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) mount_setattr(r1, &(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000200)={0x5, 0x0, 0xa0000}, 0x20) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x606202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x102) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) add_key(&(0x7f0000000a80)='rxrpc\x00', 0x0, &(0x7f0000000b00)="d7e8b72acddfa212992f219f3512401582a23be493b9f6d1d5e784f0a6bc01f23c45051ba20d000df202f0de1aea033374773b0a7aa81b834910c3e5b764a55c3f1c9c656866f9231c175f82a14ae076431b4453ebb06aaaab645df8dd74618a6cf65d052be5108fc8cc7f51dd59fda433ee3abf4d74f5e615bd856425cf3ee51a84e652a2", 0x85, 0xfffffffffffffffb) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$inet6(0xa, 0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 34m38.917733279s ago: executing program 32 (id=390): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) mount_setattr(r1, &(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000200)={0x5, 0x0, 0xa0000}, 0x20) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x606202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x102) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) add_key(&(0x7f0000000a80)='rxrpc\x00', 0x0, &(0x7f0000000b00)="d7e8b72acddfa212992f219f3512401582a23be493b9f6d1d5e784f0a6bc01f23c45051ba20d000df202f0de1aea033374773b0a7aa81b834910c3e5b764a55c3f1c9c656866f9231c175f82a14ae076431b4453ebb06aaaab645df8dd74618a6cf65d052be5108fc8cc7f51dd59fda433ee3abf4d74f5e615bd856425cf3ee51a84e652a2", 0x85, 0xfffffffffffffffb) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$inet6(0xa, 0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 27m44.613196516s ago: executing program 5 (id=2060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000003d0007010080000008000000047c0000100008800c0008"], 0x24}, 0x1, 0x0, 0x0, 0x40440cd}, 0xc000) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x5, 0xffff}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_MODE={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc010) 27m43.93711879s ago: executing program 5 (id=2062): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="af9e5f36a7ebbd30271ad475250f58a9a77136a202f770e9a4636e0b5e7d85ba927cd92eb21ebfe614e715b732c35537ab9f0427f583b4dc00f8e777923ba35ccfae38214dc6dded3c1d097ad4c04e95fe98817093b7ccaca53941b14eefbb14d9a21a5005830f82d6790fd41a7ecea2e75a8ce61505ffb3", @ANYRES16=0x0, @ANYBLOB="01002dbd701004000000050000000600010008000000080009000200000008000b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x3e8, 0x100, 0x70bd2b, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x4000011) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(r0, r3, 0x8f5, 0x100000000000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 27m43.587697637s ago: executing program 5 (id=2064): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x4, 0x4b, 0xe8, 0x4}, {0x3, 0xb, 0x7, 0x4}, {0x6, 0xf1, 0x88, 0xa}]}) ptrace(0x10, r0) socket$igmp(0x2, 0x3, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x3, 0x0) 27m41.880641304s ago: executing program 5 (id=2069): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x20000000) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) sendmsg$inet6(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)="17394afac46412389cfba92abc612195618de7165a00f17c3d9cd6817dccc2ce3b03fa9a4e998575f1cb909be050f5f16d5d32d9dacebc6942fe1efdcead50ea455d92ac96a6ea6d8baa7faa148969a355609ce9626af567c8ce45b683d2cc3a93378e308eb8428a8cbb22f5", 0x6c}, {&(0x7f0000000240)="6f412e6d725c690005cb462da4e547cefb39bed95d0a1128b1", 0x19}, {&(0x7f0000000500)="1a406d32dc155fa0a6cfea8f968141221d9fd9c9e6befab04dc65273ba17334c80d5ea7c4bd7c47b9b61dc1a60194581e05c7228dc3cba5c8ea5dabc56b0fa54c9ae61b7885ec675bc597af67da773285d33c42b6c9d3e010b59b5b8d3a38701983cd0d09a64a3ee4289ad5af50d4d1f560d1d60c8df1a7f5e72b065c77c2423", 0x80}, {&(0x7f0000000580)="6553cd3defeabbd3742f3dc68709e2fba4bbfd276be18a3bd399aa95b5bf30772b1117679dc6d34e6e934842b145f56140fecfd1909c6c5ae3a5e7fb34ebf4ac1c96d17414ada70887e41d2eb0492c871da9f11d905c278610cd542ce4e3966ae0a63200f980ea1534d41847a789b51c28ba93fdc1fea57b39c1b3fa3efe2a694af06cc638db782ef9e4a884df04c62102f572f92d3a3805784d42ae100574292b8ae309e9d372ef1bc80c9bcc6103f2b32d4e5e", 0xb4}, {&(0x7f0000000640)="85fa2a210c055983d5fe992dd8f9084a59644aba3d546444859081ef373841b68f34c178533e46ef5306e15d6da317b8be0ac978ab845c8a1294c91d47a8a8eb5ac124424becc85846be829ee6642e184960c9fa394a938946bc3a", 0x5b}, {&(0x7f00000002c0)="f05e69e832ce7416368c3d0fef2776ba69b70ee8afbc560f48aab580da60474febbfecf8", 0x24}, {&(0x7f00000006c0)="a6463920392a733ef7d4e5e360a4f8707acd6aa01834cf1c6ed912b94024dfc7586caa4e1c7e37d834ea5d19034d6a2bae62af58381baa2c9a4719708b259fa8e388d9aa0d9518c5d69ccd61e47cbfd1f80cac7a54904dfe72cf82639c848e272ff48d2fc557560ee38fa42e6d411b876593d74164bfc2723a778bb47aa7832e90258e1d62f45cbcd18ab25b8bc5714eb0eaa051d137580736041a730af3833a5895d17762a5e190dd072c4525b6039a71dd20b93ac4", 0xb6}], 0x7, &(0x7f0000000900)=[@dstopts={{0x60, 0x29, 0x37, {0x11, 0x8, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @ra={0x5, 0x2, 0x59}, @padn={0x1, 0x1, [0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x7, 0x2, [0x7, 0x20000000000000b, 0x2, 0xa]}}]}}}, @dstopts_2292={{0x160, 0x29, 0x4, {0x6c, 0x28, '\x00', [@calipso={0x7, 0x48, {0x2, 0x10, 0x0, 0x9, [0x5, 0xffffffffffffffff, 0x1, 0x164, 0x5f7b, 0x8000, 0x7, 0x5]}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @ra={0x5, 0x2, 0xb8}, @ra, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xf6, 0x7, "cb77f4bdecb8c8"}, @generic={0x80, 0xb3, "3f715b7babd9b675e76b0b16b4fbc26dff6bfcfeb8e896bfbbf3258dbf8992ef2ab74541b6d8f5f11dbb7605ec1d3fc0af4dda53ea413dfd90e3af331458b277633f1eb6d46cd49f0eca150ca4936765139fe6074c441ecec4e12d5a85f485bdc826304cf934adcabbe33e8f7f30dbe76e1daf1e391a50d33603bf626e1f594e18b3477f84c2be51384f950c9f165fe3e43dc09d0199081ad1403ad229395a37ba19795fad436d2c26f775345b3e2451b36e64"}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x31}}]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x0, 0x10, 0x0, 0x2, 0x0, [@local, @remote, @remote, @private2, @loopback, @private1, @mcast1, @mcast1]}}}, @hopopts={{0xa8, 0x29, 0x36, {0x5e, 0x11, '\x00', [@ra={0x5, 0x2, 0xf800}, @hao={0xc9, 0x10, @private2}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x800}, @ra={0x5, 0x2, 0x800}, @pad1, @generic={0xb, 0x54, "36d392c35a030d9518e5293bd3b391ef4f4cf0bbc8b988d8ea68dd11b9bbf955a77b8f3b6f5f6512cf98e7daa757cc4e7b2cc3e3829e6f447ae5aeefcaa777276b0b0690083c6de2d42d78b34eedb44daeee906a"}, @ra={0x5, 0x2, 0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}], 0x318}, 0x40800) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x3, [0x0], [0x10]}) userfaultfd(0x80800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x5, 0xed, 0x20b1}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x9, 0x81, &(0x7f0000000100)="000000001a000000", 0x8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r10 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040c50f80b000000000000109022400010000000009040000010300000009210000000122030009058103000000c400256c5912752ae2af9a172cf33f810fe33e341921accdcc3d94c82f97c1fbc1e13c8910b8c90192d1331e1a8a1b43f881499ce7"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="40213e0000003e23b9e4880a9ff78b6ee52a29a7932432d3a594ee97f4a858b2d05ffbc2f27e69f02b1b7865d2ad4c5fd80100e41c1010b96e3d82a1da337e1e4204cfff"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r10, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0}) 27m38.159776904s ago: executing program 5 (id=2082): r0 = syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302", @ANYRESOCT=0x0], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32, @ANYBLOB="8000a205080001800000000008000f80"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x80c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b04000000f4ffffff00020000002400048020000180a25a21224bedd2dc082778de5254620700010063740000140002800800014000080010080002400000000b0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a625be8194aef4b26165d1b5dfc87f9bbd4e9abfeec92"], 0x78}}, 0x4) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003090000000203"], 0x0, 0x0, 0x0}, 0x0) 27m37.456823014s ago: executing program 5 (id=2085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000090a01040000000000000000010f00010900030073797a32000000000c00024000000000000000010900010073797a30"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 27m36.770531968s ago: executing program 33 (id=2085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000090a01040000000000000000010f00010900030073797a32000000000c00024000000000000000010900010073797a30"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 24m4.892079168s ago: executing program 6 (id=2873): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61"], 0x0}, 0x94) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x3f}, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109023d0c020000000009049c000301035100090d0a00000000000009050313000000000003270103"], 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) 24m2.748779905s ago: executing program 6 (id=2879): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101005, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd2c, 0x25dfdbff, {0xa, 0x20, 0x0, 0xff, r4}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x729}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x400c0c0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000380)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x3, {[@eol]}}}}}}}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r8) socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x8, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x100, 0x7, 0x6368, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_RATE={0x14, 0x6, {0x101, 0x418a, 0x2, 0x4}}]}}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x8, 0x4, 0x3, 0x2, 0x5383, 0x5, 0x4}}, {0xc, 0x2, [0x5, 0x7f, 0xd0, 0x0]}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) keyctl$get_security(0x11, 0x0, &(0x7f00000011c0)=""/176, 0xb0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103b00000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a107464ffffff7f00000000617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce963b0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c3f000000315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b47623028271722fb515f31e0dd115a292f1e68481a62cd15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 24m2.550736088s ago: executing program 6 (id=2880): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000018000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000001b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a0000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000a00)="00000000076f00001abd8cf0eedf", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 24m2.256978837s ago: executing program 6 (id=2883): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRESDEC=r3, @ANYRESDEC=0x0, @ANYRES8=r4, @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) write$FUSE_OPEN(r1, &(0x7f0000000200)={0x20, 0x0, r5, {0x0, 0x6}}, 0x20) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x24000004) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400), 0x2, 0x2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0100}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00042cbd70080031000900000005002d000100000008002b00010000000000000000000000005a7d0dd6762c719a8a86dfd10b8c1a4f246de41a3791b9f129eb8db6a4a90031a4d8af8a179dae7fc2bc2f641d682b327f9f8879afb04dc71fcf2d3ed9848f103669d06fc7a16dc4f5c040b2c5f2274c4cf04ca95289398610ed9b71bf4a272d2d79e3778f2a7c1bd8b632aa882e54d4a976518d4d0eb55505a5c851ca94d3885c21d13e1ba5b3f4f97f333d3def27f54acdd2f7dbc818b967ac5b655440ab8aae5059fcf433903d2b2adee334abd524f4c95d9dc81742be841ffbde07e047fae244f679bbd1fe6086115ddeec89e9bb4bd0e83b1f65f1bd6d423faa6fde5dae993f3fffd2ddb696e272278d"], 0x2c}, 0x1, 0x0, 0x0, 0x20040080}, 0x8000) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000340)=@multiplanar_fd={0x1, 0x3, 0x4, 0x100, 0x5, {}, {0x4, 0x2, 0x10, 0x7, 0x0, 0x2, "7441b537"}, 0x5755, 0x4, {0x0}, 0xffffffff}) r7 = syz_io_uring_setup(0x49f, &(0x7f0000000280)={0x0, 0xf18e, 0x8000, 0x200002, 0xc0024e}, &(0x7f0000000340)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r9 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000000300)=r9, 0x1) io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r10, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) 24m1.173112952s ago: executing program 6 (id=2886): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001d80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a4000f400000900020000010031000000000900010073797a300000000008000540000000063c0000001e0a05010000000000000000070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x0) 23m57.739838199s ago: executing program 6 (id=2896): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x4, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000f14010025bd7000fcdbdf2509004500"], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002880)={0x2020}, 0x2020) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r6, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000540)={0x48, 0x8, r7, 0x0, 0x2fff, 0x1, &(0x7f00000000c0)='z', 0x4}) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x5ca5, 0x200, 0xfffffffe, 0x8}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) 23m57.106072023s ago: executing program 34 (id=2896): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x4, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000f14010025bd7000fcdbdf2509004500"], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002880)={0x2020}, 0x2020) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r6, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000540)={0x48, 0x8, r7, 0x0, 0x2fff, 0x1, &(0x7f00000000c0)='z', 0x4}) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x5ca5, 0x200, 0xfffffffe, 0x8}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) 23m40.481816417s ago: executing program 0 (id=2942): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x1c, 0x0, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad50400c11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x2, 0x2000000000001]}}) 23m40.20839652s ago: executing program 0 (id=2943): socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000004) sched_setattr(0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x10000, 0x2) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x1}, {r4, 0xe000}, {r3, 0x4}, {r2, 0x75d2fd647345b897}, {r5, 0x4604}, {r0, 0x103}, {0xffffffffffffffff, 0x4084}, {r1, 0x10}, {r2, 0x2000}], 0x9, &(0x7f00000002c0)={0x0, 0x3938700}, &(0x7f0000000300)={[0x9]}, 0x8) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x0, 0x4, 0x0, 0x5}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x20, 0x400, {0x77359400}, {0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x291d}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000480)={'#! ', './file0', [], 0xa, "7e3a5e115b18c89e6fb2430789b5597752cf4e7f632df5a283ca976e680934e8493fc526e6bbf002216b09295d5dde38f24885db0f69e837cb6d0ce4d21dace4c2dde2981ebacf09149b"}, 0x55) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$UI_SET_PHYS(r6, 0x4008556c, &(0x7f0000000380)='syz0\x00') ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000100)=0x1) syz_io_uring_setup(0x422, &(0x7f00000000c0)={0x0, 0x20079af, 0x2000, 0x8008, 0x40824e}, &(0x7f0000000340)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x11c, &(0x7f0000000000)=0x1010, 0x0, 0x4) r9 = socket$kcm(0x2, 0x3, 0x2) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, r9, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0, 0x801}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ff07000000000000038000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x20, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x34, &(0x7f0000000680)=r10, 0x4) 23m37.824108675s ago: executing program 0 (id=2953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x180}}, 0x0) 23m37.733256362s ago: executing program 0 (id=2955): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x48051) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') r5 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x110}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_open_dev$evdev(&(0x7f0000001a80), 0x910, 0x200) read$FUSE(r4, &(0x7f0000006a40)={0x2020}, 0x2020) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210900ff"}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000440)='./file0\x00') syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x2, r7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r6, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') execve(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0, 0x0) userfaultfd(0x80001) 23m36.687067809s ago: executing program 0 (id=2959): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = inotify_init() r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000280)={0x2, 0x3, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000004c0)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, 0x8) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') 23m35.515459732s ago: executing program 0 (id=2963): r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000001fc0)=[{{&(0x7f0000000180)=@nfc_llcp, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000540)=""/236, 0xec}, {&(0x7f0000000640)=""/208, 0xd0}, {&(0x7f0000000880)=""/243, 0xf3}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000240)=""/1, 0x1}, {&(0x7f0000000a80)=""/203, 0xcb}, {&(0x7f0000000280)=""/36, 0x24}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000440)=""/55, 0x37}], 0x9}, 0xc}, {{&(0x7f0000000740)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000c40)=""/128, 0x80}, {&(0x7f0000000cc0)=""/72, 0x48}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/122, 0x7a}, {&(0x7f0000000480)=""/54, 0x36}, {&(0x7f0000001dc0)=""/230, 0xe6}], 0x6, &(0x7f0000001f40)=""/97, 0x61}, 0x3}], 0x2, 0x40002100, &(0x7f0000000800)) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = fsopen(&(0x7f0000000400)='xfs\x00', 0x0) close(r7) sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, 0xff7f}}, 0x20}}, 0x0) r8 = socket(0x8, 0x803, 0x2) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002140)=ANY=[@ANYBLOB="70001bcbcb814ee544bafb7f6c00000000000000000000000000000000253fa9358805de91997e5058596661d4fc115074dfb495c25892db6475945ce3536b62b92772f96fc7f1079ca7edcd3218a0563f2fb2cc92bb84442fe3bed37d771bc244029f01d2db1dcefe8e25a1ba44", @ANYBLOB="9fec005857586b66831643f15df5276636283b016dd91f6e0f67e8b23a21702f2a5c8970fafb2141a385511959cfce652e0489c017d3dc638cd51d78d17db3c2a631b83db437f53aef012f65abd5bf0055df8e5ebc11a5fdcde8ceda663e2d15812be00ecf7829489231fc2898d6d5fa8a6d2ae40a35391b3e27ffd88a22e415f5e0928d650b9c7b7d257dd2be84d29c3987489af4b6f930d05c", @ANYBLOB="0000000012000000340012800e00010069703667726574617000000020000280060002000104000006000200ff0f000004001200060002000900000008000a00", @ANYRES32=r9, @ANYBLOB="14002b80080003000000000008000800", @ANYRES32, @ANYBLOB], 0x70}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb00000001090224"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x14) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000300)) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 23m34.718604058s ago: executing program 35 (id=2963): r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000001fc0)=[{{&(0x7f0000000180)=@nfc_llcp, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000540)=""/236, 0xec}, {&(0x7f0000000640)=""/208, 0xd0}, {&(0x7f0000000880)=""/243, 0xf3}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000240)=""/1, 0x1}, {&(0x7f0000000a80)=""/203, 0xcb}, {&(0x7f0000000280)=""/36, 0x24}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000440)=""/55, 0x37}], 0x9}, 0xc}, {{&(0x7f0000000740)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000c40)=""/128, 0x80}, {&(0x7f0000000cc0)=""/72, 0x48}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/122, 0x7a}, {&(0x7f0000000480)=""/54, 0x36}, {&(0x7f0000001dc0)=""/230, 0xe6}], 0x6, &(0x7f0000001f40)=""/97, 0x61}, 0x3}], 0x2, 0x40002100, &(0x7f0000000800)) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = fsopen(&(0x7f0000000400)='xfs\x00', 0x0) close(r7) sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, 0xff7f}}, 0x20}}, 0x0) r8 = socket(0x8, 0x803, 0x2) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002140)=ANY=[@ANYBLOB="70001bcbcb814ee544bafb7f6c00000000000000000000000000000000253fa9358805de91997e5058596661d4fc115074dfb495c25892db6475945ce3536b62b92772f96fc7f1079ca7edcd3218a0563f2fb2cc92bb84442fe3bed37d771bc244029f01d2db1dcefe8e25a1ba44", @ANYBLOB="9fec005857586b66831643f15df5276636283b016dd91f6e0f67e8b23a21702f2a5c8970fafb2141a385511959cfce652e0489c017d3dc638cd51d78d17db3c2a631b83db437f53aef012f65abd5bf0055df8e5ebc11a5fdcde8ceda663e2d15812be00ecf7829489231fc2898d6d5fa8a6d2ae40a35391b3e27ffd88a22e415f5e0928d650b9c7b7d257dd2be84d29c3987489af4b6f930d05c", @ANYBLOB="0000000012000000340012800e00010069703667726574617000000020000280060002000104000006000200ff0f000004001200060002000900000008000a00", @ANYRES32=r9, @ANYBLOB="14002b80080003000000000008000800", @ANYRES32, @ANYBLOB], 0x70}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb00000001090224"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x14) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000300)) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 7.193191867s ago: executing program 2 (id=9691): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000100000000005f000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000001b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a0000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000a00)="00000000076f00001abd8cf0eedf", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.969375435s ago: executing program 2 (id=9696): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)="59e3", 0x2}], 0x1, &(0x7f00000007c0)=ANY=[], 0x138}, 0x0, 0x8000, 0x1}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0xea) 6.73311128s ago: executing program 7 (id=9698): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) syz_io_uring_setup(0xeec, &(0x7f00000000c0)={0x0, 0x835b, 0x10100, 0x200}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000016c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001509000000092140000001220f00090581d7"], 0x0) syz_usb_control_io(r4, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x3, 0x8, 0x5, "c5320120", "b185072b"}}, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x1, {0x0, 0x0, 0x0, r8, {0x3, 0x5}, {0x7, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x24}}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xd0, 0xe, 0xa5cc, 0x1, 0x7, 0x1000, 0x3}}, {0xa, 0x2, [0x14d, 0x2, 0x1]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000013c0)={0x2c, &(0x7f00000011c0)={0x40, 0x9}, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd=r0, 0x90, 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000280)={0xf, {"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", 0x1000}}, 0x1006) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380040001"], 0xec}}, 0x0) 5.347583764s ago: executing program 3 (id=9702): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x73e, &(0x7f0000433000/0x2000)=nil, 0x3) r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mmap$KVM_VCPU(&(0x7f0000231000/0x6000)=nil, r0, 0x2000001, 0x10, r1, 0x0) 5.26116147s ago: executing program 2 (id=9703): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000090000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x0, 0x2000000000001]}}) 4.901139405s ago: executing program 2 (id=9704): sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8490}, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fa", 0x97}], 0x1}, 0x20004804) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 4.886903978s ago: executing program 4 (id=9705): openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async, rerun: 32) r5 = gettid() (rerun: 32) tkill(r5, 0x6) (async) process_vm_readv(r5, &(0x7f00000016c0)=[{&(0x7f0000000140)=""/106, 0x6a}, {0x0}], 0x2, 0x0, 0x0, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async, rerun: 32) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000440)={@remote, @local, 0x0, "ab4a10dea6d88f680c032dd66fee2b7ae807e269061c1616d297cb53005aca18", 0x400, 0x8, 0x3, 0x6}, 0x3c) (async, rerun: 32) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x10000000000) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x2000000, &(0x7f0000000740)="fe"}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (rerun: 64) 4.705346603s ago: executing program 2 (id=9707): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40084}, 0x4000800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0028000002010a004c0012800900010069706970000000003c00028005000400eb000000060011004e24000008001400ffffffff080002000a01010108000100", @ANYRES32=0x0, @ANYBLOB="05000a0001000000080001", @ANYRES32=r5, @ANYBLOB="48288fb4bdb539ce04ffd732bd98ddd62ea1c24a467ea9a5baaa64f314eb750451faa1259a7eeb717b6e8b2d248fa5c8064c1d1314ec1d63711ae176c645d73e35b9313f8d64c8f6245d16cd4aeb95c8318a14743b521286ccfdf101f4f24e8aff09ae180b56526661a63557a85c8d97"], 0x6c}}, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/71, 0x47}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f0100000000000000000009058202400000000009050302"], 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000200), 0xec, 0x412000) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f00000005c0)=@urb_type_control={0x2, {0xa}, 0xd9, 0x2, &(0x7f0000000500)={0x3, 0x17, 0x3, 0x2, 0x4}, 0x8, 0x3, 0x43, 0x0, 0x4dc, 0x6, 0x0}) connect$inet(r7, &(0x7f0000000040)={0x2, 0x1, @loopback}, 0xb) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) getsockopt(r3, 0x8001, 0xffffff79, &(0x7f0000000600)=""/91, &(0x7f0000000680)=0x5b) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r10, 0x4004551e, &(0x7f0000000000)) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r4, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100766c616e0000000004000280070001000180c20000000000"], 0x40}}, 0x0) ioctl$USBDEVFS_RESET(r10, 0x5514) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x5, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007008019000200000000000000022122af0e4ccfb7b3cada00", [0x0, 0x2000000000001]}}) close_range(r0, 0xffffffffffffffff, 0x0) 3.75959064s ago: executing program 4 (id=9710): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x2000, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000022000300", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x0, 0x2000000000001]}}) 3.602661296s ago: executing program 7 (id=9711): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) 3.485181406s ago: executing program 3 (id=9712): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400ffef1000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}}, 0x8000) sendmsg$key(0xffffffffffffffff, 0x0, 0x40001) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'dummy0\x00', 0x0}) 3.444424027s ago: executing program 7 (id=9713): sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=@canfd={{0x1, 0x1}, 0x39, 0x0, 0x0, 0x0, "3992ca995e968b0b065f7922b761528f0199602d1e09faf0c0f1c2db040f957a34b2aa413157e3ec06fdcf6128269e6763e9c19b00d4eb026a6375a22b930a64"}, 0x48}, 0x1, 0x0, 0x0, 0x8490}, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e0", 0x9b}], 0x1}, 0x20004804) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 3.354995422s ago: executing program 3 (id=9714): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394", 0xf}], 0x1}, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) 3.241088912s ago: executing program 8 (id=9715): socket$inet6(0xa, 0x400000000001, 0x0) open(&(0x7f00000000c0)='.\x00', 0x800, 0xd0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f0000000600010000efff0008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3.240822576s ago: executing program 7 (id=9716): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000000000000000000000000000000000000100000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) 3.053474538s ago: executing program 8 (id=9717): sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8490}, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fa", 0x97}], 0x1}, 0x20004804) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2.916006986s ago: executing program 8 (id=9718): openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x20842, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0x4, 0x9, 0x6, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x38c, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r3, 0x81ff) syz_emit_ethernet(0x0, 0x0, 0x0) mknod(0x0, 0x8001420, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x2) sendmsg$nl_route_sched_retired(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtclass={0x24, 0x28, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff9}, {0x3, 0x10}, {0xb, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0xc5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_cache\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/4120, 0x1018}], 0x1, 0x7ff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) 2.711051961s ago: executing program 4 (id=9719): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x3, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r1, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0xffca}}, 0x1014) 2.593949056s ago: executing program 4 (id=9720): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000fe00000000e00000020000000000000000003000000000000000000000000000000000000000000000fffd00000a"], 0xb8}}, 0x0) 2.330359122s ago: executing program 7 (id=9721): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x0}, &(0x7f0000001fee)='R\x10rusgrVen:De\x00\x00\x00\x00\x00', 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r5, 0x3, &(0x7f00000000c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r6, &(0x7f0000000200)="bc", 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2, 0x0, r4, 0x0}, 0x0]) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x183800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000001c0)=ANY=[]) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000080)="08000300286cdb290000010000080000", 0x10) write$binfmt_register(r1, &(0x7f0000000200)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x5, 0x3a, '\'', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r11 = syz_open_dev$vbi(&(0x7f0000000380), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f0000000180)={0x4, @pix_mp={0x10, 0xb553, 0x26b790c5, 0x9, 0x9, [{0x40007b, 0x3}, {0x7f, 0x7}, {0x5, 0x200}, {0xfffffef8, 0xbb17}, {0xfffffffb, 0x7}, {0x9, 0x3a}, {0x9, 0x8}, {0x10000, 0x7}], 0xf1, 0x7, 0x0, 0x0, 0x1}}) r12 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$SG_SET_TIMEOUT(r12, 0x2201, &(0x7f0000000040)=0x3) 2.043822531s ago: executing program 4 (id=9722): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0xa0c02, 0x0) fcntl$setlease(r1, 0x400, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r2, &(0x7f0000000280)=@hci={0x1f, 0x2, 0x3}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) creat(&(0x7f0000000240)='./file0\x00', 0x8a) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0xfffffeef) write$FUSE_INIT(r4, &(0x7f0000002300)={0x50, 0x0, r5, {0x7, 0x9, 0x3, 0x8695c3813a9bd78d, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x80000}}, 0x50) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000600)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r4, &(0x7f000000b1c0)="02cbda572ec32cf73bdbc52bfa4e157261eb6cbd0d1d50c9d937a19739fcb9f8697bf69c0e2e526012185f1b86989056f9c2d38906e8a47b9b5fde55a777a6357ac40c211de6325f496fd86dac09bb38b62b37d715d06e3c61b172aa4a662cefc7810ba37161c637a9b56a7c7b022426826076f1d2bf3c3b6f92ab9c27d691385c3efc354f1423d01d6a49d534fca3f2bf518cd645cf18b4ac2d2ac4c5c29ba487c9d27bb488a73146d5b9e21427af37dee4a276646eb2519e4f6c76cce2f7bf7e708d5180959f71d3797220101849c5144ef8338a5a2079ecce466000cf290d4df42e82865512fb5fb01fb655613cf1c469682edd86a4bef86aa23240ca6a2ff38b59339f7530e8a8027aee0628e0f81b2f5c661b149d780f20ec54c8d3d42c0c49f83b1c0d4bec94bc9221e6fc7c75ebd3b68081df207721584055baeaf6429616d57cb35d2977d45971d209e4c45dfe3c5c105e0e2b49fc8685b4945f31c9468f3c950fcf70a8f45e5a3be62f73c228a6a34a99b6f584b42c50506a6c14187f44887270011cc98d7e5e258df533411c8d39bfa9e27014912ed9e9696fd4074fbefcd4817a344be5ea348f4a7a34733a5bc5674b1bcd39404d5a458d1e19b6d4bdb4e23403154249b5798dea7b60bbf0c09c25027a4efd49d36cbe65b7450c0bde580d356ad4e3cc7a9a57e6ac0b542592617869e57d9bed28f0590241bdeb51fa775aa8806a55df2c795a61146bdbe38eb7a716180bb9b728696bb0e78ff11f89b17c7e7fe9b14ea976ccd9991f01f5d0c4620053d0b5ce42af76591fd0706494b91a6dfc43560f9a9538ada19825ffe3a7cc7a56b755d46ae1189b1f1ac729d9938ad48a066624c1b28003a9d193b4b34c4ab2609949df96f693389f27dd3e1f42b178eb17079c1448d7e9fac30ddb53ce8e5a157db8296cd3069d332bad0528ae56a6db41ba84699b85f225a78a33879512a5f0b795fc58957ef6766afcf546fe36c8125276eeaac9d647b2459c164aae86a2703e85d4f552a0647cb4bdfaecf6ec3a264a6b6892a9a1ba08a9055e98b49edc4e1f8010f63f601a8251921df70e15011116c471a70a0580b1789bcff471dcc95ad209a44ca2453d58d3ea4c71e0383db68adf332a497a84faada33f18bd3cd79ff9d6809409769b02a66cf524534ab7134e3066eef904d8961195d9cdc396a012bb3bc1b1ccd60317d08cb059174642aa3f60584e58e7417c1736f6863fae9e7103158711167a53d7d5deddacee6958fd4c2e0672b8dd90b41512b1f59fc49099633860dd6902c1df3d5924b1cf81ec848d51129b3eddea619129e961390d65d2243d400a1e30e524eeee1a701da5e21598acf457947bad693892a2989097ecbe9607a33ffb33425ccac5e19ebd1f88bf3acc03331adf9697bed04b33ac9fceaa3bdc9a417b12108e10f9c45b6d36181099056a448689da4ef68beee35f5930ce4a5712cbed98239a674c5883d6a5e0df9c1cbe1eda8dc19d14c4abe896e3b28bb3d4b2a0e9ae31ca07b9819825f3a6ab82c5501becf023a656cbff569dbc3035ae3c585747fb459581629051286b170b679b683a0b2eea6ef3b41a68012e5f4d64f689c2b909cfd06d37c0a802be2d882351bffeddef1373d8cbafa10fefbc28b31a70b6e912fc61257aa76a0f0dc1d3ef72d2f61517a359053c3dcb7d49d8a4da61bcf3b3dafc0528bb037cec0d986b3949fff38a21dab6b8a3a167bacf067c5f7842ebebcc1bd54776b2e54a098303c6331beb16e42d0669a518af2d173405786439d739b813c145c4f9f98a537b1065bf4636c76e38b71943815a6d1227d0a6965dffc37c00444aebd2ec19286b83443902dba1354a69377e97070a79151e64711111bf3e0a755b0fb1a1d5d009fdf61b665b41a3b7dbd0655236360141c52b93bc907b0672743973c30d6c9ece47fa1fe3625cc8acbe305156012ef1c5ea140be70b804887be593f25faa13ee4ea2d9821d23c3e047d74ad4f7de4d95d275ea3e6c87479f1badfcef002ebc7020b581a096abac1a80ef6ff476a01b01f7c0fb1239fcc182f74e5b5965412c0f4170432af15daf457143b1f41422b8a7f9b81c15a156ddef9af95955090d013cd52aa66ebfbc87c8030e7f86b52aadaa2e63c261185eed7c46b5f8d56e8301a9cc1578aff77b42419a5eb2e263207ef259f4da6ca6466ac9326a633b39e005028c07c9aedf17a70e638d7ed84638406e6028be879fd0fe491152e181d5527933950eb67a52cf155d5c845a6425e41a47b44d9905de26e5132c8d594c1bf6d4f12dbcb96d7431a56546800275623679d6c189e0cebd1fb8063140b89d42da60ed06206d329c29841e69c820428bcde53c998bee0380a816d080b36f64574718b84e0ecafbfd2b9981f4886df258dbf1cfdb148b171516500572a7086516fd519bc861878ec2fceb6872229ff1e9782720e590d8ef4691fa9c4c54bfcc843015913a2ed40bf37048151d17b44365f7f8d3b816d1b1cd40dc5dda6ab8f637b5f6bae92580f1c269c9231c9a79d58d43208be7622147db352b1294260eeab12409f5b5ee94d99548640634bc9479a6e6e06cc8838bf85d9bd95452eaf8ad3cf6c070aac36a7d38fe23cebfaba46c74a6c5c98b1b5243edfe405161b8c3ea0cdb1bcb4e1041fc62451a6094b0c56ee2ed29520b87228959bc01a9a9f54d214704bd321b152a0e88d0646e99a92a390dfa6bc2c34d418e5e900a3b641ab34a5fd8de751bfb3253b7aae3948d871892d7b76b351b073a93f3ad82b0c59bc49ed922c8d63f8d12c14ce1912bf877bc7877f619b03d09200836c775675e0614efabfd5665c3bf12e6131a7232639729b79ac1c5e807246d30934b0f63b31a06c4722278299949c7785d796b6d3d4a5f2fa652b7fe8be447cafe93fcb07167f3ef16b94261fc3a9d22a57a7aac56562a231d79dbf3bdc1f436206337ff0f8e019d76b823c5976ee23ba4e553ec62d261bdc7da90fee46d3472cc267a7a74b88112ef765091df03bb59cf303feaa0149b371a7bdd75c0187ce842dd1e4cdaf7fc0f5ef7ffb559c535f19100ba653728cd936987731d5ac99cb9ef772975b17b2aff8b872df0d189c7944d63ed66cfce8ee92e7a1082c2a501007aacbe0011e6c32489bcb888e1c464bec59902d940d81136c543098a60104bcfd0f4e7c27cb114ff42e8d31fe09a4bcc21cae5ef2f8e4890bd8139fff1b1b2a39e29eaf2e5d2fb810ea37a13e6d2105a6c2ccd03fc110c6f9063e2433e1450dc8ebd8ede0445af662cf7ee705003630ab7d9fc6ed30169ed674dda2802d519e3b49016c6f11612ae53230b062281ddf7a678784516c3d177857f8bdbec7910af8c81333e471bd8a973ce858a14756ef6ec85498714fe8e1e6600023804004b968eea42c410bf0f5c5b2471835454f20230a6d342f96f71a2e64f54b838e5cd939d7a651d402fd60a8a2a081de0c536d5b81345d92165e79fa65140b91c23cdb5829db55f1f93b88bb43a355e9304a17355851d52c0d745b611a30eb400044dce6ac742bcce9df9583b827514af8a2ed4a04553817ba6ea22e9beaba65d32189a5c2bf65a09d2c8a8798c0645fb24157a4e71be7889fe65c34869d8852b21661407feed92afb0bfe582693a21c050e5adce1fe97755b0be276c36b81b89700b99d23d315a64f7e115eacdb3ade725cb3cfe36c27a5e2addad60290b022a9fc26132b5ec3b5f1d884399fd992525a3e17e18e7ee6078a64b7efc3bbd116e5c305d8ad935baff18ed94c7a8720e729132e110f986991a3ad21cc637282f55588b12756895e2d10afce85b1a04fc271b217278f156c7ffb1ed9dd52b18fc8b153802fc329dca81b278d715f6e31fbcc77d8ce5c2786573bacac30791aff5771fece44063d1e84abcd6a4ae016858893605eecf253c79e59c2152efbe9fdfee3c441e4bc9cb14fc96a675aa17bf7d2024d665fe3982b61888bbe7129a1ec8fafc3480170c71d05f5d22ef7ff0e2ca598fd02bbd0ad82e6ab0e775388bf3aa421c20b6a2a5e256386abff1103f46a8b5c54c2d54b81c50d8bd98aea724bda55f99d95956e939b85d59abdc50ea4cf1d44afa3e8dffc9d84c6b7d28b78c40d7498670602b97c5e2a6281c7876dabc1d14d156e827873818bc590644d2a1d084d39c84e78127b087bf2cd9353fd13d4ab12350318aedadaca6a2728267e6f5f16547caadf3ac2fade3c86b516c6ab53d61ea1c148835b9a2c91fd0ded7283ef720086dfc7728968924731715f78915045a69122d8b23a6db47cc6fccf402b9913e46c9a36924327ca9bba6bb8cf7cc80952501fc2181a2ec7ae4364cc6eac0cba0edda68f3b398a249d114702147f8b1cd9c7f8a15345f42a7a50334928eb4e2de974e4ae2ffb796bc640922f7ada0933460e0c0fc06276dfd228da9bfbbe5a3eade6f98594b0226339156022aad7aa8c9650417cb1551b3b6b31ce436396f68134a6ef23d6b926988fc410f81e1ae01282f244e70051f1b93644f78af3ef6359d106b291568e1ad00ad6ee102964fb7aaaec9732e43a21ea28cda496e4ae367ea738482e777290cca2ef61c8ff10c1b9546b5d395d21c98542f37578d297c13899247a6fdcdf0b8cba6b498875926a19852f97ef60dc1a0c4069fdd4d1fb87a6cd58b8786210687d644a4bad6f8fee0bc5fb94294cffc323e97597be6a5e457a5dd27fe2ebf5c34aef3bb5c43ba0a7d931e7ab02b7c290c5d04a41c01d14d6fc1ba80bfedf71caa0f7e59b135fad73e28d4861d601f79ad32edc6f8d1978d8ecf787f3c9ac71b2404939827b16f3915c8b1445dd1ec012aaeff88789c396665a50df52b244ce5b100d9a29ce52903b8f7f3662c0d0599fd1a7071798b759be02d58e5c6e4626b477653655fb7f5d7bc0ad94dbfe131c9ba5a994c1605c03b9f5173f8205c580bff685e693b23ab4cc7b2e4b21282b14f65684747ad98c0d855a205a6e17b5bb4c2b07097ae32393690e4e07a7f3e25d6bd01c1fb973a67edfa4e1d4a7a96b68570dd9d3bdfbe8a5a69adbd17167533ddbd2a58d70ca1ccea6428770dbcfeb47ddffa99e8b5e69bd34641c1f1a033e86215447fd2927482b12a85f11ae1d8b2054d7f642a9ba526e5a7d8e3d81bd394c264666f4b4dc3ff9c1584f277ff31a29c1358d9a953e0ae2822a3d174a0ce3da386083ae06f02723aea03931a38116a8e4afbc36fb9c094eb340214881a6f838f8d66141e451b9a1bd250363e591bc4ac566123a379272c08c0511e29e1dd1bc06869f3fd151bada9b28a6a71970ae3580d5bb0ab76b38068f504659bc335be1bb2a285329f749303600211d6ef7e151ad861b946d99f36d20074d65426f68a6758270ff946dd387ed3b150199fd81fd2e76a70a2fe2d7a2f8899079068ce48c5380db7e69a1a91f244ed32400e8d9e3097ec2065570dbde88faaee4a938f0b4cc20f31f175df62bf6cd88968ef7e24912dbbf91869eb9b34498d7f6000ef9a62c9441f4177ab5da1428d647b6e3cea1ca8a91b1a1246c2e048654e350cbf3dd4daaaa2558ff9c505ce0fcbcf93601a725289c38724290cffddf87e5345b43a66eb5f9fef718b0df4bcfe82c466017c3d8f0bbfd5544ff2d834a6e653ae789561df44281c8510b4bad838d04ab4a8e84fc4fc022bbe8454b36273cec843731c1df6fce42947a029f61e030990c0002b6f2c9c552227c8785c0b53683de3e518123548e332d25f2b270f595aad389951d1edbb9c6fb14cb4e479acff1ffac191da3d80a696b8be5919710c9137ecc0ca383d8666e30a356759a5299f44c2bfcd03a8df33de0e27d6038a9551cfc5ff43de0d42a6d033bf15f3a44d52f8a71554d1a2efb78042c1c9957256d7ea06b7751b40668feefff205c74f0f947ae0920aa746f17027bbef312708bf72fb23c12d0dcf6493584c1bdd0b5780017c038bc23fb6c25c560bb6da3775cf03502c07b987e64f8a2b84a870b5dd90c6aea7fad3d0a3ee46fda953dc085d272ee5855104b8bab8ed8bfd3338e75eb9ad8118f25c7e580fec613e30cf3eb7059e06d9be015709ba6c9de9dc9b6df8228b13f0439fa8d530aa9a4dc1d44abc3191c159a8816e7368fc5c6a0e57eb881d734c7a5459ba3be1b8a17b5ee6777ee42e962aee199f35ee2c2d4a39275e1dd6a8546daadc7ceab2c90667ad48c75bc7008ec2d7daa57562260d6d4509e67850e988b640569c050d3bedbd6c2de9b4f466e2d0c6f83c3c2392a5adcce1523e89f730a84f8cad28f84d1a0991f44aa4714f93088ec2a2836766d73569c7b0c1f70a067a3f0dff1d01661937aecb39e3d0f8e0ea282cffebbfdac63196eb13c4e53f144fc66a82cc0590f1d6d249c333420c24db92177c89cf0869346c34147dab6c3b94c325ef635d0e6d75c23906e71a7940e13364aef81b97108a4b209d372558d3bb0424ecb6a9a9ee28f7d1585c8af6f1256c812eb48515feda309a08f1a2954039ff0a60a2ab75717d2eb93024586837e552942eb63e0d6735d01258eb4dac6209370c109c1a1763dd742f3551276768648919f9093fd4e0cedff9442ac404e463eaea0ffe58a5085c987c093fd30e121218123457916ced3a7250a796a40451a4729125bce2ba5b6406e6626ecfb1d3f16287ba238feb575f60eba96443c60252d5927b81b73574ff1b7d424623b6cff5ce0d1b31b3d199c85da27f8736d990063f09dfef93402d880b2c5d7a9cdf45cbb4d1baf95be490f3dc9998c2c7ccfcc6e6395e7e09e6c44865834cd3e0968ffcc1d0f54406b55a8952cd8096e8968cdca3632b71546192c76472a66c4a8584eb748c1b3c30d52e8699adbef91329aefbf94d251d0b82bf42a648f73020881a914ea7c529802772b4b60617e9c1d9712a31d0ec3e92af4b97f50ec96e794486101a9e15daf8b7f13078d22767dc3b57bc0431ef39b3ca12b2932aa585bc856e8cf5496d78eaa50f06b483f416b31f78767bd25e260042e84c10e9cf9bb53a3f4fce11d703e90004949b55044907242f8eddef627cfc9642f4a828476074c298ea2d7b07ddb7b4a2b9f8f1e5a32fac7d105c5a12186da19ef5f6475763ee19aa670e7b45f37248fdfa796d6ae761dd77955851faa33675ee22e8174e0a126ac58b9998ccb5e4d12c3e00165533ddf710bf0ab0edf6ba1fecf9548ca1618fd980a4f9a35eeb5c1aa329a288378b9b5ed54b56075810cd22abf0c06ce0f1054805410375d6e41564b71b86cab6929c5c1cedb72e0b1237fdad44edbcfd326312caa49ed0c8f7c5a33986c89245fec75d0f9a34f744bf74d6e0f901c12ea25edd60c43d22f6644fa294534cac1c581b0cbf5d9765fc18fe6c223dcff4a85c7eeaf4cb1a9a889c236778b85e69d50d482743664bdeade11b4ced78c3d0b62ba07f98a898c6e89241ed6522fdfc430b75593673d43d695082b0114b25f231c8a141be953290b1a3855adc0146adee0b784fce2cf8243838bdcdbcf4e0dbcc2a9945deea1d02858a9e9dc54f0e818b81d024bd9b2e052a73fb59d037ab526c78faadfcdecc15f2a1d843e84aabc403e84b2fefbfbec982f22b89a2be560002d45ae12a8a2d00f0a3f55e26789a593fb8bdf20efb8a51e3d0dad9ad2caec39ea7392c58eebebc7201c78276f0127e43d5c8efef6e17ca522d69586a9e096efe80844c38841640238584936d8a96c0ba41dc0dc96a11623ff1e70ef54a9c43ec3cd0359dfdf55c8f8c306110d833d7de7a35f015369bf6d92b3b6f0f7dc717c84e51ce475df451b9a6a91c8d564aeb389267082b9cea77f09c6c6490084da3820f80d3e62bbd41a6540591c6c5cf2a18e4e829b82a6780b6b1f66d96fcfb1639a335a78f8c3ecf381148b2625859e514d35eb8c4acc98f7f8220e1827d7745f1f054691eeb1625e2d238ae03c93991058c1567be4938de2e60537749ee81f327f1f1e586ee3af4ccf53b29741c1bb0e774a1d27672ec27b43719d3710e9fd8634213738d98844717c8b1f707bd42f4077c9e59eb539f9cb32c11b47bcb7cb3efd3bf4994e90166a5ae380c821d2640fa99df59978e9b7e50f0b830943de787b1bf99e14edcdfe8565556ae2a8c0552d67898fd13551c007eb779edb60e85210a418cf0a4a41764fe9ece74f5d8000d168fab61588c5549113e8d8a059f17699d976fc7dc68cfd0ec404ef0c7eca459fbad1c40317d81b95a94b037cf96ba677697cfdce4c2c4e02cea296f25e556c02381ca891ddb6adcb0535e262b26290000c542e7616d63b211c16f86048079ca5167598aece3288f86658249e939cb6b59b6cdd3fce0e9ea81a3bb3f88908c600ea031b0028f12632d7ac2f81e54f7e7eb70ba70bc937571b242c4ef228f801b6a4376d11eabadaebb1322823eb30faf6cf21a8b38a769824e8b7009ff278f80ac2af39f0943a29458d127eabae81d2915557b09e3c49f8c22564edea93e8717306fb198dcc92eb3c9212f03dac94fa3fa1fa4e1dbd2119e024639f0ddc87cd906d3317c6ebc6e698257f73912ff46fe8d9adbd3f57ecc78cea5c1eb04ac5fd1bb79a53921fddaffd2d34f444b54208096cbd2aa3e26ca01359b05c10ff36e98e1ac97d51380c99e1b685928eced0d2f1e754001e7023d2473596feb7c7601619277dd7e844bd5544e7e360f8e4223fbd9e24b3fb69a34ced39bf7590fb853e44031d075fe647190ac7811522c73a6c6033457c14c415e4a84663d2540784a1cbb4a398f1d8612f4f3d334576c99d5721bbeac95cc34d18080e3b1365b6844152b8259c8d4618597f291f2b9e8812ab7729e108a8d44487f8993faabf6c6a8f49db727f17cdfec43b34c39cfdd3916fa6953e34f316100368c7b2836c11dcd4710986980356b7ec4ba23fab5cc5a8c6cacb61cc65570231407ca647946393031986cf4736280ed2d7976d66618fc240191455ae405f1d62145297179c040a707093fb8f60f5a3738b8bf78bbdf952478da7e9d3c892af5b83cd9dd4f00fcfa13beb9e6988e3c4b4e5300e3757a93efaef9023fb9d7442cb1a49d7efdec32ac1f98e6227cad38538f6383c3b6efca2fda7c101ec548c3549e7ac5e737478343ca47cdcd65acb71e0eade28c684b69785ae1fe31aaec713834b6635938d7d66426e965498978e4b467f6132daa6026c39dcbf95656b9be5c074badc18b5a74e12967b45e23099fa765ea5c8c18f0feae94755827e494f251ae96882b5c5f6d54713de02501faef1fcb59bf0d66f9d0cd3a493b139237aefdbd402a3df9dd5beb2887a055261a08047be52fa51f61636255870366e837f20d0f83b8557fa4a003647152ee27bd34b5af52743d4c431ff4a116ae1184c810e8397ef2a056845c6e3b5c0beafbf8f78488102412e04e47fb87be9a9ddc075ab519f424ebf821da659b18ae3b61a7b243ff94e3d1ba420cb342db7b8060937749892a7954d3ba5e63017703f5224602616ff6d3fec42444b2524f97dfa467d9db91681dce08de5ccb1ac2bf6cb5e6c1d586b2fc62e78b0bc23e1924a4f023adb39803fd6c3d52c40b13df9c6f54bb2b4ef88f5d0ffdfef13ae46dbf75aa6457da3bdc1781dc814b0b69debee7456aa7f75571caef87f624ef703fea75f136cc7f90af0ae558cf3de5e8cc92f3e803bd46e05f42e4167af8136db6982ad26a52778e1fefcbabe61a57f00cbf04e3c82445c04bbd8832b8bb9a7cb854a22f98cd7b422a7abafe6a00571539802e56f036d5a26d79a86cb100b90ae168d2406c2c0b9c5274ad69298e7983f4b30e006cf4882e90ca8af4e445dc06d0639231638dd39929065d920af913cc7284619fcacab0023893352468eec73d7014407e5d4bca9e49d412ffb12e68610c26206de0b3282e925b83389cbdfbc41cf279440a13838a1431ea4f1a371b6b143b914238773d171bc7b44c07729e8723fe51b8180fc9c9be6694477132cb82b22b2512518266781e687fcd460995ed581059d3c692ecbdc8daf3c76e5a5bc8e57973fed5fb3465a3dcb5557f92dba1e212f9bda66fc4829e10ce3e8b6c117b1214cb246211c861eaabf8ccaa94aedd58349399e619c2dc587719d7901d2cd85ced669d0ea898c4f127d1a4cf274aa0405d225605edf425dc9b7375c8ac2940bb369eec586097f0cc07940ecc8bd400976b9b36027a040be6e64a2fa4f7ba5d59ce9b4f76192d260d665290b20faa3a6a941939a0b3042ef4d8f9b980c71a13496b104965e1c3dab25cb46147bca6170baa0237c8a5cd1c437e43a50302490462585410f65e03186df5fc2c5bcd89f6d6a4ac34c971f0579070ab6e9a6a84159b2910a7ba797fb09dbd3ab88c23951b1a91df8cfc2d13de85dc715e2a111458acc4d640a59c199faa2bb28ec3309864fd8a6997ac89833853101a08198aa6ab3e5167b4e8e55843efae1ecd3fc6507f3a97bf2f8c4c4da4896c788a17a5fe8d8c3f79fe41dd7f4497380f1ffc8f8d6cc2c2dead697e4947cfe680a0e2b5100743444536134cde4378b0b1fe6ddc09dfe8d618f93edffeb7d097a37a19248be0bf9c4f536a484a5fc96f18f2eb4f6462b20bee241ce16b4790c854bca10914e3ba98eb0970765571a8ad45baba39d20b8c1bbb7c65717e265f5fc5edefb130aada09aa7f2c50c45de6de7327faef192977f499b7aed9e73c2ecb97f7256f89fc8b4834670f798438fac5a5045d61a7f429eba77de37517b984b0acfbd6f494a1414b0fc040244bb62a19150e0c15e5315b2618d05429263dd1847accc5de9baca08edc921ed9a0af00175c118ab801da9980098fc4a2bf16ba73e580000b49129a5fba00a1f2c45c0d0939be83ad93569dd61330913e8b381f9aff6d6a584862d636c1a4989dd3fd14853bf033be56f21a3cf1eb95d7df7c6436ff3d5a8f472bf4a3fa8b0b0741d953d9644e0ec801d4154336357d2d1492c6d336b9101827c1401898ecdca5a66c6f727d23d3ebb95530ecfee0f7649c221d2c131e56d37a8d422b0803ed0d623a2de36e9279c3c1c806654fbce9305cbb44210e282fa53c72f813440fd0cbfff492716c4a06cf99f4809481d51a03a88911f48f25db6784e16f3a251d5fb75fca164911e4a88d1b904b5372d8660d309f347dce2810552a4789af371f3e67418433cdb0d69a4fc562514cb396141f31312fab85f68c1ecd9d03ba37b40934535cc3e53c71a3a51663a479eca63dc5c15a387e5753cfa806402b6426b8dcaace2553d219b2ae02bd45fd4fde6e3e1bd6370d3e8d558aea69854381f1dad0fe2bbf1a73043f03aafe81c3a3d386c758abcb45cc537bf40d459e138f418802ec61abcad5e333389d74ea941eb5f26b25ed7642e0135fd8e3e2fc998613023dd5b804e2cf1a80ea60b353535b1446e3ebb542c1c15d87c6f5a4716455c8a9f52380161a5d23e9678417fe7ed64760e14c1390bcf73e1d531bb3548d7b9df25b6f85512667af396fad73110d1ab69a8ecdddaf29dc3701a5d927e599f5c2af293a6b276da7a5c917298ea24c2366d5e91593605fcbc4d6462", 0x2000, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x4, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fb, 0xfffffe01, 0x8000, 0xfff, 0x0, 0xee00, 0x0, 0xc3fa}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) 1.943049292s ago: executing program 8 (id=9723): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c000003000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010000104fc009700", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.626970604s ago: executing program 8 (id=9724): pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r5 = syz_io_uring_setup(0x19fd, &(0x7f0000000700)={0x0, 0x0, 0x10100, 0x0, 0x29f}, &(0x7f0000000180)=0x0, &(0x7f0000000540)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r9, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r5, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r8, 0x1) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12020) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000580)) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaab5aaaaaaaaaa3908004900003800000000000690780a210104ac1414aa44044a01070b04030e004b5ca4c14a000000fffc", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078fffe"], 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x327cf3e4, 0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000, 0xd67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x3, 0x0, 0x5, 0x3, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff]}) close(r0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r12, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x1, @empty, 0xa}, 0x1c, 0x0}}], 0x1, 0x200880c0) shutdown(r0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40e768473cac9494) 1.553400445s ago: executing program 7 (id=9725): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc534, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x89, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x80, 0x40, 0xa}}}}}]}}]}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x101, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x10000000000000, 0x4}, {}, 0x0, 0x300}}, 0xb8}}, 0x0) 945.265729ms ago: executing program 3 (id=9726): syz_genetlink_get_family_id$devlink(&(0x7f0000002680), 0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf090000f300000055"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) poll(&(0x7f0000000040), 0x55, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000001200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00b94e3d500007000000e0ff00000018000500", [0x0, 0x2000000000001]}}) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x14) r3 = syz_io_uring_setup(0x10c, &(0x7f0000001280)={0x0, 0xb28b, 0x800, 0xfffffffc, 0x20002, 0x0, r2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000000c0)=0x10001, 0x0, 0x4) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0xfeffffff, 0xffffffffffffffff, 0x3, {0x3b4, 0x9}, 0x6}, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000700)={0xfffd, {{0x2, 0x4e22, @rand_addr=0x64010101}}, {{0x2, 0x4e24, @rand_addr=0x64010100}}}, 0x108) 387.68576ms ago: executing program 2 (id=9727): r0 = syz_io_uring_setup(0x1783, &(0x7f0000000100)={0x0, 0x2ec5, 0x4000, 0x1, 0x180}, &(0x7f0000000180), &(0x7f0000000200)) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xa5bb, 0x0, 0x0, 0x224, 0x0, r0}) socket$pppl2tp(0x18, 0x1, 0x1) inotify_init() r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = epoll_create1(0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f00004d6000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00001e2000/0x4000)=nil) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, 0x0, &(0x7f0000000100)={0x80000001, 0x8000001, [0x997, 0x8bf, 0xe4b, 0xc70]}) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x7, 0xb, 0x2, 0x1}, 0xfffffffffffffecb) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r2, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, r3, 0x0) fanotify_init(0x200, 0x40800) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x7, 0x2, 0x4, 0x0, 0xa, {}, {0x5, 0x8, 0xc1, 0x6b, 0x9, 0x2, "84653375"}, 0xffb, 0x2, {0x0}}) 294.876263ms ago: executing program 4 (id=9728): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, 0x2, 0x1, 0x801, 0x0, 0x0, {0x7}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_FILTER={0x4}, @CTA_TUPLE_ORIG={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) add_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="17a46f1b48d871c2a7d47b503946c15eea29fff7641852b6998d2047e10f4d26a2df79b433702f7891754e788190b070b4405ca8fbb4b214e9e41ba1415a0e0e3cb240eb60f7ea6402ec848a8d935a7ed95b691ca33ea75aae1a60e1b1c1f6d1fd6b17bf34274532975103441ca7cd111fa5fdef3443979d8f10cd9cfb6178f10e3e9a98dc8ae0684a6123d1d9bc94a6d0af8e1d4eac30760e367fc30e377c3d92ebddc40de7f3e7ff3a584213d9055e0cab076b2d183588f02c6b621359ae23573abb", 0xc3, 0xfffffffffffffffe) 201.249897ms ago: executing program 3 (id=9729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x180}}, 0x0) 100.455188ms ago: executing program 3 (id=9730): r0 = syz_io_uring_setup(0x4144, &(0x7f00000004c0)={0x0, 0xb4e4, 0x800, 0x3, 0x97}, &(0x7f0000000540), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000000680)={0x7, 0x80000001, 0x8}, 0x0) (async) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000000680)={0x7, 0x80000001, 0x8}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) (async) r2 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2860) syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380), 0x0) (async) r3 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380), 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x8, 0xca, 0x2, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x6, 0x4, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x6, 0x0, 0xb6, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000180)=0x1) (async) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50005008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50005008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='status\x00') pread64(r6, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f00000000c0)={@remote, @empty, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x40003, 0x40, 0x5, 0x100, 0x10000000, 0x20010, r8}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x8, 0x0}, 0x8) syz_io_uring_setup(0x610, &(0x7f0000000580)={0x0, 0x40c55c, 0x4000, 0x400000, 0x46, 0x0, r5}, &(0x7f0000000000), &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYRESOCT=r4], &(0x7f0000000140)='syzkaller\x00', 0xa0000, 0x0, 0x0, 0x40f00, 0x24, '\x00', r8, @fallback=0x28, r6, 0x8, &(0x7f0000000180)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, r9, r6, 0x0, &(0x7f0000000200)=[r5, r6, 0x1, r5, 0xffffffffffffffff, r5], 0x0, 0x10, 0x7ff}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r9, 0x4) 0s ago: executing program 8 (id=9731): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x45, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x5, {0x5, 0x0, "a725eb"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x100, &(0x7f0000000000)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x24, 0x0, 0x2}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r4}) io_uring_enter(r4, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) r7 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = fsopen(&(0x7f0000000300)='cgroup\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f00000000c0)='source', &(0x7f00000004c0)='{\x06\x00\xa2(\xa4\xfd\xae\xe69\xd3g\x18+<\xaf\x9a\xa3:\xa8\n\x9e\xc0\xd3\xc3\xb3\xd2\x9f\x12\xe0\xbfa9\xd37\x87\xeeD1V\x11\xb0\x10\xc2\x95\x8cd\x7f\x96t\xf2D\xc2\x1dn\xe0\xe6\xefXTsW\xd3\xd9\xbf\xdc\xc5\xef`\xf9>\x92\x15 \xb2`\x94\xdc\xa7\xe8\t;\xa6\xf9sW\x86S\xfa[O\'Bh\x9f#\r\x01\x17\t\xb7\x83\xd8m\xf2J\x96\xaf\x84\xebV\x8b\xde\x93\x1b\xaa4R\x15J\xbbV\r\\=\x03\xc7,O\x0e:/C:M\x95R\x01\xd1\xf9\xef\xd0\xb7*\x84RU\xe4 t\xb4\\\xc0\xb3\xc4\x1a\x12\'p[\xd7\x94\xb6\xba{w\x9c/\xdc{\xa9!\x92\x8e~\xa9\xf5\x93\xc4>a\xe8\x85c4\x1cJp\x8c\xa3\xc3e\x14^\x02T\xfe\x9e\xb8\xd1#Zq\xb5\xf5\x050\x18\x80^\x89eo\x82\xac\xe7\x92u\xc2\x02\x98\x9e\xf7\xf4Fy\x95\xe6\x8c\x12\x13\t\xa6m\xc5\xcc\x8a\x91#\xc1a\x04#\xdf\xcc\x113>V\xad\xad\xfb!Yt', 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a800160004000140060700000000000000d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4e1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccfb42b1073520ae", 0xd8}], 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)="59e3", 0x2}], 0x1, &(0x7f00000007c0)=ANY=[], 0x138}, 0x0, 0x8000, 0x1}) io_uring_enter(r7, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 4 callbacks suppressed [ 2097.155038][ T4782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9168'. [ 2097.212474][ T4792] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 2097.401303][ T4801] fuse: Unknown parameter 'use00000000000000000000' [ 2097.423700][ T4801] fuse: Bad value for 'fd' [ 2098.563683][ T849] IPVS: starting estimator thread 0... [ 2098.584180][ T4817] tipc: Started in network mode [ 2098.716931][ T4817] tipc: Node identity ac1414aa, cluster identity 4711 [ 2098.734185][ T4819] IPVS: using max 32 ests per chain, 76800 per kthread [ 2098.734618][ T4817] tipc: Enabled bearer , priority 10 [ 2099.038471][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.044827][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.856753][ T4741] tipc: Node number set to 2886997162 [ 2099.920595][ T4830] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9179'. [ 2099.950111][ T4830] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9179'. [ 2100.179354][T28389] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 2100.338496][T28389] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 2100.350137][T28389] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2100.396671][T28389] usb 9-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 2100.452194][T28389] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2100.503530][T28389] usb 9-1: config 0 descriptor?? [ 2100.664156][ T4657] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2100.866002][ T4845] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2100.921552][T28389] usbhid 9-1:0.0: can't add hid device: -71 [ 2100.950820][T28389] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2100.972773][ T4657] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2101.008183][T28389] usb 9-1: USB disconnect, device number 46 [ 2101.009599][ T4657] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2101.152959][ T4657] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2101.591391][ T4657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2101.691815][ T4657] 8021q: adding VLAN 0 to HW filter on device team0 [ 2101.740183][ T2775] bridge0: port 1(bridge_slave_0) entered blocking state [ 2101.747410][ T2775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2101.842187][T18047] bridge0: port 2(bridge_slave_1) entered blocking state [ 2101.849369][T18047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2101.864921][ T4867] netlink: 108 bytes leftover after parsing attributes in process `syz.7.9186'. [ 2101.913623][ T4867] netlink: 108 bytes leftover after parsing attributes in process `syz.7.9186'. [ 2101.983349][ T4867] netlink: 108 bytes leftover after parsing attributes in process `syz.7.9186'. [ 2102.127862][ T30] audit: type=1326 audit(1755991018.653:6100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4863 comm="syz.4.9185" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f512858ebe9 code=0x0 [ 2102.168406][ T4657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2102.223612][ T30] audit: type=1326 audit(1755991018.753:6101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4863 comm="syz.4.9185" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f512858ebe9 code=0x0 [ 2102.408242][ T4657] veth0_vlan: entered promiscuous mode [ 2102.459441][ T4657] veth1_vlan: entered promiscuous mode [ 2102.554213][ T4657] veth0_macvtap: entered promiscuous mode [ 2102.602460][ T4657] veth1_macvtap: entered promiscuous mode [ 2102.632388][ T4886] loop4: detected capacity change from 0 to 7 [ 2102.684572][ T4657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2102.705867][ T4886] Dev loop4: unable to read RDB block 7 [ 2102.725482][ T4886] loop4: unable to read partition table [ 2102.755121][ T4657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2102.756990][ T4886] loop4: partition table beyond EOD, truncated [ 2102.812089][ T4886] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2102.884874][ T2775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2102.942212][ T2775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2102.980963][ T2775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2103.015833][ T2775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2103.243195][ T4897] netlink: 'syz.3.9193': attribute type 1 has an invalid length. [ 2103.413466][ T4897] bond1: entered promiscuous mode [ 2103.424487][ T4897] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2103.542677][ T4900] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2103.560643][ T4900] bond1: (slave bond2): making interface the new active one [ 2103.568178][ T4900] bond2: entered promiscuous mode [ 2103.577493][ T4900] bond1: (slave bond2): Enslaving as an active interface with an up link [ 2103.809177][T18047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2103.824894][ T4903] loop4: detected capacity change from 0 to 7 [ 2103.835184][ T9034] buffer_io_error: 38 callbacks suppressed [ 2103.835196][ T9034] Buffer I/O error on dev loop4, logical block 0, async page read [ 2103.957631][ T9034] Buffer I/O error on dev loop4, logical block 0, async page read [ 2103.984288][ T9034] Buffer I/O error on dev loop4, logical block 0, async page read [ 2103.992565][T18047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2104.042682][ T9034] Buffer I/O error on dev loop4, logical block 0, async page read [ 2104.060019][ T2775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2104.092516][ T9034] Buffer I/O error on dev loop4, logical block 0, async page read [ 2104.101882][ T2775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2104.115409][ T9034] Buffer I/O error on dev loop4, logical block 0, async page read [ 2104.135394][ T9034] Buffer I/O error on dev loop4, logical block 0, async page read [ 2104.185106][ T9034] ldm_validate_partition_table(): Disk read failed. [ 2104.221130][ T9034] Buffer I/O error on dev loop4, logical block 0, async page read [ 2104.266842][ T9034] Buffer I/O error on dev loop4, logical block 0, async page read [ 2104.305270][ T9034] Buffer I/O error on dev loop4, logical block 0, async page read [ 2104.343614][ T9034] Dev loop4: unable to read RDB block 0 [ 2104.372954][ T9034] loop4: unable to read partition table [ 2104.407035][ T9034] loop4: partition table beyond EOD, truncated [ 2104.446384][ T4903] ldm_validate_partition_table(): Disk read failed. [ 2104.458218][ T4903] Dev loop4: unable to read RDB block 0 [ 2104.464317][ T4903] loop4: unable to read partition table [ 2104.470279][ T4903] loop4: partition table beyond EOD, truncated [ 2104.502430][ T4903] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2104.882041][ T30] audit: type=1326 audit(1755991021.393:6102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.2.9198" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc515f8ebe9 code=0x0 [ 2104.924385][ T4917] vlan2: entered promiscuous mode [ 2105.188432][ T4928] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9202'. [ 2105.216993][ T5955] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2105.298224][ T4932] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9204'. [ 2105.377938][ T5955] usb 3-1: Using ep0 maxpacket: 16 [ 2105.384802][ T5955] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 2105.407956][ T5955] usb 3-1: config 0 has no interface number 0 [ 2105.438071][ T5955] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 2105.468917][ T5955] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 2105.509605][ T5955] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2105.533625][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2105.542936][ T5955] usb 3-1: Product: syz [ 2105.554248][ T5955] usb 3-1: Manufacturer: syz [ 2105.560025][ T5955] usb 3-1: SerialNumber: syz [ 2105.573016][ T5955] usb 3-1: config 0 descriptor?? [ 2105.583981][ T4921] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2105.592710][ T4921] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2105.830788][ T4921] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2105.929736][ T4921] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2106.191280][ T4945] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9209'. [ 2106.201166][ T4945] netlink: 'syz.8.9209': attribute type 3 has an invalid length. [ 2106.210071][ T4945] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9209'. [ 2106.309021][ T4941] netlink: 132 bytes leftover after parsing attributes in process `syz.7.9205'. [ 2107.384004][ T4954] input: syz0 as /devices/virtual/input/input198 [ 2107.653537][ T4960] vlan2: entered promiscuous mode [ 2107.729428][ T5955] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2107.854999][ T4961] pim6reg1: entered promiscuous mode [ 2107.860455][ T4961] pim6reg1: entered allmulticast mode [ 2107.891025][ T4965] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9215'. [ 2107.977016][ T5955] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 2108.097700][ T5955] asix 3-1:0.251: probe with driver asix failed with error -71 [ 2108.160456][ T4971] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9217'. [ 2108.164183][ T5955] usb 3-1: USB disconnect, device number 44 [ 2108.418046][ T4260] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2108.596117][ T4982] netlink: 108 bytes leftover after parsing attributes in process `syz.8.9222'. [ 2108.597085][ T4260] usb 4-1: Using ep0 maxpacket: 32 [ 2108.611855][ T4982] netlink: 108 bytes leftover after parsing attributes in process `syz.8.9222'. [ 2108.634931][ T4260] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2108.649100][ T4260] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2108.653291][ T4982] netlink: 108 bytes leftover after parsing attributes in process `syz.8.9222'. [ 2108.659045][ T4260] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2108.677117][ T4260] usb 4-1: Product: syz [ 2108.681433][ T4260] usb 4-1: Manufacturer: syz [ 2108.686281][ T4260] usb 4-1: SerialNumber: syz [ 2108.691161][T28389] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 2108.726708][ T4260] usb 4-1: config 0 descriptor?? [ 2108.774009][ T4974] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2108.783511][ T4260] hub 4-1:0.0: bad descriptor, ignoring hub [ 2108.807073][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2108.823482][ T4260] hub 4-1:0.0: probe with driver hub failed with error -5 [ 2108.846948][T28389] usb 5-1: Using ep0 maxpacket: 16 [ 2108.855309][T28389] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 2108.873314][T28389] usb 5-1: config 0 has no interface number 0 [ 2108.892856][T28389] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 2108.904275][T28389] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2108.929441][T28389] usb 5-1: Product: syz [ 2108.945647][T28389] usb 5-1: Manufacturer: syz [ 2108.966779][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 2108.973891][T28389] usb 5-1: SerialNumber: syz [ 2108.992512][ T9] usb 3-1: config 162 has an invalid interface number: 84 but max is 2 [ 2109.022274][T28389] usb 5-1: config 0 descriptor?? [ 2109.036728][ T9] usb 3-1: config 162 has an invalid interface number: 3 but max is 2 [ 2109.088486][ T9] usb 3-1: config 162 has no interface number 0 [ 2109.102432][ T9] usb 3-1: config 162 has no interface number 1 [ 2109.153886][ T9] usb 3-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2109.192140][ T9] usb 3-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 2109.226615][ T9] usb 3-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 2109.301990][ T30] audit: type=1326 audit(1755991025.833:6103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4975 comm="syz.4.9220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512858ebe9 code=0x7ffc0000 [ 2109.321534][ T9] usb 3-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 2109.335095][ T4989] bridge0: entered promiscuous mode [ 2109.341617][ T9] usb 3-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 2109.350174][ T4989] macsec1: entered promiscuous mode [ 2109.367508][ T9] usb 3-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 2109.368776][ T4989] bridge0: port 3(macsec1) entered blocking state [ 2109.382006][ T9] usb 3-1: config 162 interface 84 has no altsetting 0 [ 2109.396419][ T9] usb 3-1: config 162 interface 2 has no altsetting 0 [ 2109.396784][ T30] audit: type=1326 audit(1755991025.833:6104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4975 comm="syz.4.9220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512858ebe9 code=0x7ffc0000 [ 2109.408243][ T9] usb 3-1: config 162 interface 3 has no altsetting 0 [ 2109.446378][ T4989] bridge0: port 3(macsec1) entered disabled state [ 2109.459022][ T30] audit: type=1326 audit(1755991025.833:6105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4975 comm="syz.4.9220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f512858ebe9 code=0x7ffc0000 [ 2109.459519][ T4989] macsec1: entered allmulticast mode [ 2109.481416][ C1] vkms_vblank_simulate: vblank timer overrun [ 2109.505337][ T4989] bridge0: entered allmulticast mode [ 2109.506178][ T30] audit: type=1326 audit(1755991025.833:6106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4975 comm="syz.4.9220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512858ebe9 code=0x7ffc0000 [ 2109.517495][ T9] usb 3-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 2109.555376][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2109.564811][ T30] audit: type=1326 audit(1755991025.833:6107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4975 comm="syz.4.9220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f512858ebe9 code=0x7ffc0000 [ 2109.567706][ T4989] macsec1: left allmulticast mode [ 2109.592199][ T9] usb 3-1: Product: syz [ 2109.596409][ T9] usb 3-1: Manufacturer: syz [ 2109.607114][ T9] usb 3-1: SerialNumber: syz [ 2109.612993][ T30] audit: type=1326 audit(1755991025.833:6108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4975 comm="syz.4.9220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512858ebe9 code=0x7ffc0000 [ 2109.623435][ T4989] bridge0: left allmulticast mode [ 2109.666683][ T30] audit: type=1326 audit(1755991025.833:6109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4975 comm="syz.4.9220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f512858ebe9 code=0x7ffc0000 [ 2109.690891][ T4989] bridge0: left promiscuous mode [ 2109.827067][ T4976] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2109.833419][ T4976] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2109.855648][ T4980] futex_wake_op: syz.2.9223 tries to shift op by -1; fix this program [ 2109.888344][ T4976] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2109.894911][ T4976] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2109.909164][ T4976] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2109.922682][ T4976] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2109.932195][ T4976] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2109.962484][ T4976] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2109.988078][ T4976] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2110.004084][ T4976] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2110.023091][ T4976] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2110.031960][ T4976] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2110.038748][ T4976] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2110.047234][ T4976] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2110.058751][ T30] audit: type=1326 audit(1755991026.593:6110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4975 comm="syz.4.9220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512858ebe9 code=0x7ffc0000 [ 2110.064246][ T4990] random: crng reseeded on system resumption [ 2110.081125][ C1] vkms_vblank_simulate: vblank timer overrun [ 2110.085630][ T30] audit: type=1326 audit(1755991026.613:6111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4975 comm="syz.4.9220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512858ebe9 code=0x7ffc0000 [ 2110.116023][ C1] vkms_vblank_simulate: vblank timer overrun [ 2110.140180][ T4980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2110.162079][ T4980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2110.197151][T28389] as10x_usb: device has been detected [ 2110.205338][T28389] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 2110.227374][ T3576] Bluetooth: hci1: Opcode 0x0c03 failed: -71 [ 2110.253429][ T9] usb 3-1: USB disconnect, device number 45 [ 2110.290014][ T4974] usb 4-1: reset high-speed USB device number 99 using dummy_hcd [ 2110.318950][T28389] usb 5-1: DVB: registering adapter 3 frontend 0 (Sky IT Digital Key (green led))... [ 2110.386185][T28389] as10x_usb: error during firmware upload part1 [ 2110.393663][T28389] Registered device Sky IT Digital Key (green led) [ 2110.396356][T28389] usb 5-1: USB disconnect, device number 51 [ 2110.459192][T28389] Unregistered device Sky IT Digital Key (green led) [ 2110.462486][T28389] as10x_usb: device has been disconnected [ 2110.535402][ T4987] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2110.586856][ T4741] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 2110.760578][ T4741] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2110.800867][ T4741] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2110.837736][ T4741] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2110.860851][ T5004] __nla_validate_parse: 1 callbacks suppressed [ 2110.860904][ T5004] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9231'. [ 2110.901353][ T4741] usb 9-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 2110.913602][ T4741] usb 9-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 2110.922206][ T4741] usb 9-1: Manufacturer: syz [ 2110.934360][ T4741] usb 9-1: config 0 descriptor?? [ 2110.955619][ T4741] smsusb:smsusb_probe: board id=9, interface number 0 [ 2110.965335][ T4741] smsusb:smsusb_probe: Device initialized with return code -19 [ 2111.079381][T21465] IPVS: starting estimator thread 0... [ 2111.148100][ T4998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2111.157138][ T4998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2111.166065][ T5011] tipc: Started in network mode [ 2111.172439][ T5011] tipc: Node identity ac1414aa, cluster identity 4711 [ 2111.183887][ T5011] tipc: Enabled bearer , priority 10 [ 2111.193724][ T4998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2111.306685][ T5014] IPVS: using max 32 ests per chain, 76800 per kthread [ 2111.319580][ T4998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2111.397895][ T849] usb 9-1: USB disconnect, device number 47 [ 2111.439218][ T5021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2111.573628][T28389] usb 4-1: USB disconnect, device number 99 [ 2111.837487][ T3576] Bluetooth: hci0: command 0x0406 tx timeout [ 2111.922059][ T3576] Bluetooth: hci2: command 0x0c1a tx timeout [ 2111.996825][ T3576] Bluetooth: hci5: command 0x0c1a tx timeout [ 2112.000273][ T5881] Bluetooth: hci3: command 0x0c1a tx timeout [ 2112.095496][ T5881] Bluetooth: hci4: command 0x0c1a tx timeout [ 2112.472328][T28389] tipc: Node number set to 2886997162 [ 2112.665046][T21465] usb 9-1: new full-speed USB device number 48 using dummy_hcd [ 2112.736842][ T849] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 2112.900976][ T849] usb 3-1: config 0 has an invalid interface number: 167 but max is 0 [ 2112.958187][ T849] usb 3-1: config 0 has no interface number 0 [ 2113.031592][ T849] usb 3-1: config 0 interface 167 altsetting 0 endpoint 0x8A has invalid maxpacket 512, setting to 64 [ 2113.056054][T21465] usb 9-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2113.069789][T21465] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2113.087983][T21465] usb 9-1: Product: syz [ 2113.100581][T21465] usb 9-1: Manufacturer: syz [ 2113.109704][T21465] usb 9-1: SerialNumber: syz [ 2113.145154][T21465] usb 9-1: config 0 descriptor?? [ 2113.201529][ T5049] vlan2: entered promiscuous mode [ 2113.226900][ T849] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0104, bcdDevice=f1.04 [ 2113.241534][ T849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2113.257874][ T849] usb 3-1: Product: syz [ 2113.276516][ T849] usb 3-1: Manufacturer: syz [ 2113.289855][ T849] usb 3-1: SerialNumber: syz [ 2113.342716][ T849] usb 3-1: config 0 descriptor?? [ 2113.385905][ T5047] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2113.429944][ T849] kvaser_usb 3-1:0.167: error -ENODEV: Cannot get usb endpoint(s) [ 2113.653303][ T5040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2113.692653][ T5040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2113.751277][T21465] airspy 9-1:0.0: Board ID: 00 [ 2113.756195][T21465] airspy 9-1:0.0: Firmware version: oEÒÛI] [ 2113.828463][ T5058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2113.916670][ T5881] Bluetooth: hci0: command 0x0406 tx timeout [ 2113.946803][T21483] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2113.997025][ T5881] Bluetooth: hci2: command 0x0c1a tx timeout [ 2114.076834][ T5881] Bluetooth: hci3: command 0x0c1a tx timeout [ 2114.077013][ T3576] Bluetooth: hci5: command 0x0c1a tx timeout [ 2114.157895][ T3576] Bluetooth: hci4: command 0x0c1a tx timeout [ 2114.339501][ T5069] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2114.590931][T21465] airspy 9-1:0.0: usb_control_msg() failed -71 request 0f [ 2114.667283][T21465] airspy 9-1:0.0: Registered as swradio24 [ 2114.725473][T21465] airspy 9-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2114.835475][T21465] usb 9-1: USB disconnect, device number 48 [ 2114.847315][ T849] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 2114.993065][ T4260] usb 3-1: USB disconnect, device number 46 [ 2115.023408][ T849] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2115.045172][ T849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2115.079274][ T5075] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2115.150634][ T849] usb 5-1: Product: syz [ 2115.154859][ T849] usb 5-1: Manufacturer: syz [ 2115.165661][ T849] usb 5-1: SerialNumber: syz [ 2115.400547][ T5086] loop7: detected capacity change from 0 to 1 [ 2115.549591][ T5089] bond_slave_0: entered promiscuous mode [ 2115.555315][ T5089] bond_slave_1: entered promiscuous mode [ 2115.699240][ T5089] vlan2: entered promiscuous mode [ 2115.714647][ T5089] bond0: entered promiscuous mode [ 2115.782911][ T5094] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2116.081596][ T3576] Bluetooth: hci2: command 0x0c1a tx timeout [ 2116.111985][ T5102] netlink: 76 bytes leftover after parsing attributes in process `syz.8.9263'. [ 2116.159705][ T3576] Bluetooth: hci3: command 0x0c1a tx timeout [ 2116.159875][ T5881] Bluetooth: hci5: command 0x0c1a tx timeout [ 2116.178053][ T5103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9264'. [ 2116.236876][ T5881] Bluetooth: hci4: command 0x0c1a tx timeout [ 2116.619975][ T5077] netlink: 'syz.4.9254': attribute type 5 has an invalid length. [ 2116.679032][ T849] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 2116.710163][ T849] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 2116.738538][ T849] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 2116.757523][ T849] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2116.769705][ T849] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2116.789124][ T849] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 2116.826452][ T849] usb 5-1: USB disconnect, device number 52 [ 2117.008385][ T9] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2117.450120][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 2117.663897][ T9] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 2117.702254][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2117.777079][ T5130] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2117.846201][ T9] usb 4-1: Product: syz [ 2117.860192][ T5132] tipc: Enabling of bearer rejected, already enabled [ 2117.911587][ T9] usb 4-1: Manufacturer: syz [ 2117.916310][ T9] usb 4-1: SerialNumber: syz [ 2118.068106][ T9] usb 4-1: config 0 descriptor?? [ 2118.155569][ T5136] netlink: 'syz.4.9276': attribute type 3 has an invalid length. [ 2118.225471][ T5139] veth1_to_bond: entered allmulticast mode [ 2118.833122][ T5148] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2118.962911][ T5138] veth1_to_bond: left allmulticast mode [ 2119.378013][ T5159] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9283'. [ 2119.391499][ T5156] loop4: detected capacity change from 0 to 7 [ 2119.399911][T16230] Dev loop4: unable to read RDB block 7 [ 2119.405724][T16230] loop4: unable to read partition table [ 2119.436860][T16230] loop4: partition table beyond EOD, truncated [ 2119.470328][ T5156] Dev loop4: unable to read RDB block 7 [ 2119.476078][ T5156] loop4: unable to read partition table [ 2119.626940][ T5156] loop4: partition table beyond EOD, truncated [ 2119.666696][ T5156] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2119.666792][ T5159] netlink: 'syz.7.9283': attribute type 3 has an invalid length. [ 2119.704556][ T5159] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9283'. [ 2119.985375][ T5157] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2120.366980][ T5166] 8021q: VLANs not supported on wlan1 [ 2120.760013][ T5174] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9287'. [ 2120.932935][ T9] usb 4-1: USB disconnect, device number 101 [ 2121.103282][ T30] audit: type=1326 audit(1755991037.613:6112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5176 comm="syz.4.9289" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f512858ebe9 code=0x0 [ 2121.212936][ T5192] fuse: Bad value for 'fd' [ 2121.225042][ T5192] fuse: Bad value for 'fd' [ 2121.255560][ T9034] udevd[9034]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2121.283164][ T5193] netlink: 108 bytes leftover after parsing attributes in process `syz.8.9290'. [ 2121.344464][ T5193] netlink: 108 bytes leftover after parsing attributes in process `syz.8.9290'. [ 2121.355659][ T30] audit: type=1326 audit(1755991037.673:6113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5176 comm="syz.4.9289" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f512858ebe9 code=0x0 [ 2121.378420][ T5193] netlink: 108 bytes leftover after parsing attributes in process `syz.8.9290'. [ 2121.589333][ T5195] macsec1: entered promiscuous mode [ 2121.607559][ T5195] macsec1: entered allmulticast mode [ 2121.613352][ T5195] dummy0: entered allmulticast mode [ 2121.635154][ T5195] dummy0: left allmulticast mode [ 2122.286716][T21465] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 2122.491220][T21465] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2122.536787][T21465] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2122.612257][T21465] usb 9-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2122.664210][T21465] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2122.744136][T21465] usb 9-1: config 0 descriptor?? [ 2123.287141][ T5231] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9302'. [ 2123.747221][ T5240] dlm: no locking on control device [ 2123.892731][ T5201] sctp: [Deprecated]: syz.8.9293 (pid 5201) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2123.892731][ T5201] Use struct sctp_sack_info instead [ 2124.067383][ T3576] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2124.085791][ T3576] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2124.094492][ T3576] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2124.102843][ T3576] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2124.116260][ T3576] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2124.169979][ T5249] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9305'. [ 2124.187065][ T5249] netlink: 'syz.3.9305': attribute type 3 has an invalid length. [ 2124.215775][ T5249] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9305'. [ 2124.376899][ T4741] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2124.606525][ T4741] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2124.617660][ T4741] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 2124.634087][ T4741] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2124.673277][ T4741] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2124.708145][ T4741] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2124.743795][ T4741] usb 3-1: Product: syz [ 2124.751745][ T4741] usb 3-1: Manufacturer: syz [ 2124.759927][ T4741] usb 3-1: SerialNumber: syz [ 2124.801292][ T4741] usb 3-1: config 0 descriptor?? [ 2124.815696][ T5248] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2124.848887][ T4741] usb 3-1: ucan: probing device on interface #0 [ 2124.868970][ T4741] usb 3-1: ucan: invalid endpoint configuration [ 2124.883029][ T4741] usb 3-1: ucan: probe failed; try to update the device firmware [ 2124.897797][ T5250] chnl_net:caif_netlink_parms(): no params data found [ 2124.946655][T21465] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 2125.028366][ T4741] usb 9-1: USB disconnect, device number 49 [ 2125.126519][T21465] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2125.150390][T21465] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2125.161495][T21465] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2125.202619][T21465] usb 5-1: config 0 descriptor?? [ 2125.720008][ T5250] bridge0: port 1(bridge_slave_0) entered blocking state [ 2125.735792][ T5250] bridge0: port 1(bridge_slave_0) entered disabled state [ 2125.745996][ T5250] bridge_slave_0: entered allmulticast mode [ 2125.775592][ T5250] bridge_slave_0: entered promiscuous mode [ 2125.785090][ T5250] bridge0: port 2(bridge_slave_1) entered blocking state [ 2125.792850][ T5250] bridge0: port 2(bridge_slave_1) entered disabled state [ 2125.804671][ T5250] bridge_slave_1: entered allmulticast mode [ 2125.826016][ T5250] bridge_slave_1: entered promiscuous mode [ 2125.934415][ T5250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2125.946970][ T849] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 2125.976490][ T5250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2126.096327][ T5250] team0: Port device team_slave_0 added [ 2126.103386][ T4741] usb 3-1: USB disconnect, device number 47 [ 2126.104343][ T849] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2126.136307][ T5250] team0: Port device team_slave_1 added [ 2126.150824][ T849] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2126.167311][ T849] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2126.180900][ T849] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2126.190476][ T849] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2126.204006][ T849] usb 9-1: config 0 descriptor?? [ 2126.237003][ T3576] Bluetooth: hci0: command tx timeout [ 2126.257466][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2126.264585][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2126.290537][ C1] vkms_vblank_simulate: vblank timer overrun [ 2126.297654][ T5250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2126.312226][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2126.319722][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2126.347347][ T5250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2126.427882][ T5250] hsr_slave_0: entered promiscuous mode [ 2126.435038][ T5250] hsr_slave_1: entered promiscuous mode [ 2126.441979][ T5250] debugfs: 'hsr0' already exists in 'hsr' [ 2126.448060][ T5250] Cannot create hsr debugfs directory [ 2126.629241][ T849] plantronics 0003:047F:FFFF.005D: reserved main item tag 0xd [ 2126.673795][ T849] plantronics 0003:047F:FFFF.005D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 2126.900803][ T5270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2126.913956][ T5270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2127.009156][ T5250] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2127.012607][ T5270] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 2127.136030][ T849] usb 9-1: USB disconnect, device number 50 [ 2127.193881][ T5285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9316'. [ 2127.206050][ T5285] netlink: 'syz.2.9316': attribute type 3 has an invalid length. [ 2127.225287][ T5250] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2127.238537][ T5285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9316'. [ 2127.383625][ T5250] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2127.471038][ T5250] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2127.670648][ T4741] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2127.883305][T21465] usbhid 5-1:0.0: can't add hid device: -71 [ 2127.893805][T21465] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2127.936254][T21465] usb 5-1: USB disconnect, device number 53 [ 2127.956913][ T4741] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 2127.969586][ T5289] vlan2: entered promiscuous mode [ 2127.995886][ T4741] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2128.043314][ T4741] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 2128.053388][ T4741] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2128.065793][ T4741] usb 3-1: Product: syz [ 2128.070414][ T4741] usb 3-1: Manufacturer: syz [ 2128.075904][ T4741] usb 3-1: SerialNumber: syz [ 2128.091813][ T4741] usb 3-1: config 0 descriptor?? [ 2128.097750][ T5287] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2128.105070][ T5287] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2128.182418][ T5250] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2128.211515][ T5250] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2128.281125][ T5250] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2128.314825][ T5287] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2128.323629][ T3576] Bluetooth: hci0: command tx timeout [ 2128.328853][ T5287] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2128.354248][ T5250] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2128.418116][ T5299] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (9) [ 2128.551124][ T4741] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 2128.827943][ T5312] PKCS7: Unknown OID: [5] (bad) [ 2128.832828][ T5312] PKCS7: Only support pkcs7_signedData type [ 2128.839094][ T849] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 2129.046990][ T4741] usb 3-1: USB disconnect, device number 48 [ 2129.105257][ T5315] fuse: Bad value for 'fd' [ 2129.115399][ T5315] fuse: Bad value for 'fd' [ 2129.157649][ T5250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2129.188388][ T5250] 8021q: adding VLAN 0 to HW filter on device team0 [ 2129.209066][ T849] usb 9-1: Using ep0 maxpacket: 16 [ 2129.260922][ T849] usb 9-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=ba.e9 [ 2129.271327][ T2779] bridge0: port 1(bridge_slave_0) entered blocking state [ 2129.278465][ T2779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2129.311481][ T849] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2129.323686][ T2779] bridge0: port 2(bridge_slave_1) entered blocking state [ 2129.330861][ T2779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2129.338708][ T849] usb 9-1: Product: syz [ 2129.343013][ T849] usb 9-1: Manufacturer: syz [ 2129.350765][ T849] usb 9-1: SerialNumber: syz [ 2129.368181][ T849] usb 9-1: config 0 descriptor?? [ 2129.385798][ T849] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 2129.603193][ T849] pwc: send_video_command error -71 [ 2129.607317][ T5250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2129.634238][ T849] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2129.654767][ T849] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 2129.692328][ T849] usb 9-1: USB disconnect, device number 51 [ 2129.786234][ T5250] veth0_vlan: entered promiscuous mode [ 2129.839205][ T5250] veth1_vlan: entered promiscuous mode [ 2129.983083][ T5250] veth0_macvtap: entered promiscuous mode [ 2130.045847][ T5250] veth1_macvtap: entered promiscuous mode [ 2130.146036][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2130.175454][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2130.299326][ T2768] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2130.327352][ T2768] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2130.397185][ T3576] Bluetooth: hci0: command tx timeout [ 2130.523190][ T2768] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2130.533936][ T2768] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2130.587490][ T5955] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2130.710680][ T2775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2130.747143][ T5955] usb 4-1: device descriptor read/64, error -71 [ 2130.770078][ T2775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2130.789911][T21465] usb 9-1: new full-speed USB device number 52 using dummy_hcd [ 2130.825886][ T5336] dummy0: entered promiscuous mode [ 2130.834717][ T5336] vlan2: entered promiscuous mode [ 2130.920084][ T2775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2130.935731][ T2775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2130.960852][T21465] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 2130.970265][T21465] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2130.984476][T21465] usb 9-1: config 0 descriptor?? [ 2130.990102][ T5955] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2131.015211][T21465] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 2131.127838][ T5955] usb 4-1: device descriptor read/64, error -71 [ 2131.228641][ T5334] bridge_slave_0: left allmulticast mode [ 2131.237158][ T5955] usb usb4-port1: attempt power cycle [ 2131.254968][ T5334] bridge_slave_0: left promiscuous mode [ 2131.271880][T21463] IPVS: starting estimator thread 0... [ 2131.277984][ T5334] bridge0: port 1(bridge_slave_0) entered disabled state [ 2131.293224][ T5343] program syz.8.9329 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2131.313775][ T5334] bridge_slave_1: left allmulticast mode [ 2131.358532][ T5334] bridge_slave_1: left promiscuous mode [ 2131.364565][ T5334] bridge0: port 2(bridge_slave_1) entered disabled state [ 2131.384188][ T5334] bond0: (slave bond_slave_0): Releasing backup interface [ 2131.394571][ T5334] bond_slave_0: left promiscuous mode [ 2131.400713][ T5342] IPVS: using max 50 ests per chain, 120000 per kthread [ 2131.414415][ T5334] bond0: (slave bond_slave_1): Releasing backup interface [ 2131.455047][ T5334] bond_slave_1: left promiscuous mode [ 2131.503908][ T5334] team0: Port device team_slave_0 removed [ 2131.527813][ T5334] team0: Port device team_slave_1 removed [ 2131.534776][ T5334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2131.542858][ T5334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2131.553504][ T5334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2131.562536][ T5334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2131.620490][ T5955] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2131.641007][ T5339] tipc: Started in network mode [ 2131.646159][ T5339] tipc: Node identity ac1414aa, cluster identity 4711 [ 2131.657908][ T5339] tipc: Enabled bearer , priority 10 [ 2131.664139][ T5343] netlink: 'syz.8.9329': attribute type 11 has an invalid length. [ 2131.697540][ T5955] usb 4-1: device descriptor read/8, error -71 [ 2131.934434][T21465] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2131.948094][ T5955] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2131.959666][T21465] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 2131.984030][ T5955] usb 4-1: device descriptor read/8, error -71 [ 2132.459870][ T5955] usb usb4-port1: unable to enumerate USB device [ 2132.479374][ T3576] Bluetooth: hci0: command tx timeout [ 2132.777548][ T9] tipc: Node number set to 2886997162 [ 2133.240698][ T30] audit: type=1326 audit(1755991049.733:6114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.2.9337" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc515f8ebe9 code=0x0 [ 2133.296333][T21463] usb 9-1: USB disconnect, device number 52 [ 2133.341429][ T30] audit: type=1326 audit(1755991049.813:6115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.2.9337" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc515f8ebe9 code=0x0 [ 2133.414950][ T5368] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9338'. [ 2133.766930][ T5371] bridge0: entered promiscuous mode [ 2133.772824][ T5371] macsec1: entered promiscuous mode [ 2133.798255][ T5371] bridge0: port 3(macsec1) entered blocking state [ 2133.833438][ T5371] bridge0: port 3(macsec1) entered disabled state [ 2133.856358][ T5371] macsec1: entered allmulticast mode [ 2133.870527][ T5371] bridge0: entered allmulticast mode [ 2133.880652][ T5371] macsec1: left allmulticast mode [ 2133.885782][ T5371] bridge0: left allmulticast mode [ 2133.901767][ T5371] bridge0: left promiscuous mode [ 2133.947671][ T5374] dummy0: entered promiscuous mode [ 2133.953249][ T5374] vlan2: entered promiscuous mode [ 2134.195986][ T5381] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9344'. [ 2135.020275][T21463] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2135.186972][T21463] usb 3-1: Using ep0 maxpacket: 32 [ 2135.196066][T21463] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2135.213951][T21463] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2135.273814][ T5406] netlink: 76 bytes leftover after parsing attributes in process `syz.8.9351'. [ 2135.288349][T21463] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2135.312873][T21463] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2135.350307][T21463] usb 3-1: config 0 descriptor?? [ 2135.373125][ T5410] tipc: Enabling of bearer rejected, already enabled [ 2135.375230][T21463] hub 3-1:0.0: USB hub found [ 2135.546144][ T5412] bridge0: entered promiscuous mode [ 2135.570811][ T5412] macsec1: entered promiscuous mode [ 2135.583983][T21463] hub 3-1:0.0: 1 port detected [ 2135.607735][ T5412] bridge0: port 1(macsec1) entered blocking state [ 2135.615873][ T5412] bridge0: port 1(macsec1) entered disabled state [ 2135.631512][ T5412] macsec1: entered allmulticast mode [ 2135.640110][ T5412] bridge0: entered allmulticast mode [ 2135.665159][ T5412] macsec1: left allmulticast mode [ 2135.695757][ T5412] bridge0: left allmulticast mode [ 2135.732914][ T5412] bridge0: left promiscuous mode [ 2136.028431][ T5420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9349'. [ 2136.651918][T21463] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 2136.675858][T21463] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 2136.748414][T21463] usbhid 3-1:0.0: can't add hid device: -32 [ 2136.756364][T21463] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 2136.774035][ T30] audit: type=1326 audit(1755991053.263:6116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5426 comm="syz.3.9359" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f8e18ebe9 code=0x0 [ 2136.863659][ T30] audit: type=1326 audit(1755991053.393:6117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5426 comm="syz.3.9359" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f8e18ebe9 code=0x0 [ 2138.135886][T21465] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 2138.420016][T21465] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2138.441368][T21465] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2138.471675][T21465] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2138.480982][T21465] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2138.492560][T21465] usb 5-1: config 0 descriptor?? [ 2138.919610][ T5461] IPv6: addrconf: prefix option has invalid lifetime [ 2138.937009][T21463] usb 3-1: USB disconnect, device number 49 [ 2139.275543][ T5468] loop4: detected capacity change from 0 to 7 [ 2139.285926][ T5468] Dev loop4: unable to read RDB block 7 [ 2139.294601][ T5468] loop4: unable to read partition table [ 2139.308326][ T5468] loop4: partition table beyond EOD, truncated [ 2139.314910][ T5468] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2139.326750][T21463] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2139.461781][ T5470] batadv0: entered promiscuous mode [ 2139.469316][ T5470] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2139.484339][ T5470] batadv0: left promiscuous mode [ 2139.507058][T21463] usb 3-1: Using ep0 maxpacket: 8 [ 2139.532991][T21463] usb 3-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 2139.543517][T21463] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2139.551818][T21463] usb 3-1: Product: syz [ 2139.556739][T21463] usb 3-1: Manufacturer: syz [ 2139.561948][T21463] usb 3-1: SerialNumber: syz [ 2139.595601][T21463] usb 3-1: config 0 descriptor?? [ 2139.611701][ T5453] sctp: [Deprecated]: syz.4.9366 (pid 5453) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2139.611701][ T5453] Use struct sctp_sack_info instead [ 2139.655983][T21463] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 2139.854529][ T5461] IPv6: addrconf: prefix option has invalid lifetime [ 2139.990507][T21463] pwc: Failed to set LED on/off time (-71) [ 2140.011275][T21463] pwc: send_video_command error -71 [ 2140.033697][T21463] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2140.050109][T21463] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 2140.061240][ T3576] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 2140.073037][T21463] usb 3-1: USB disconnect, device number 50 [ 2140.300068][ T5495] netlink: 76 bytes leftover after parsing attributes in process `syz.7.9381'. [ 2140.317061][ T9] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2140.478158][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 2140.493319][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2140.509318][ T9] usb 4-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 2140.519167][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2140.527984][ T9] usb 4-1: Product: syz [ 2140.532255][ T9] usb 4-1: Manufacturer: syz [ 2140.537958][ T9] usb 4-1: SerialNumber: syz [ 2140.554971][ T5503] tipc: Enabling of bearer rejected, already enabled [ 2140.563556][ T9] usb 4-1: config 0 descriptor?? [ 2140.570905][ T9] cdc_phonet 4-1:0.0: skipping garbage [ 2140.582953][ T9] cdc_phonet 4-1:0.0: probe with driver cdc_phonet failed with error -22 [ 2140.668710][ T4260] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 2140.743930][T21463] usb 5-1: USB disconnect, device number 54 [ 2140.772438][ T5485] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9376'. [ 2140.859468][ T4260] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 2140.876037][ T4260] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2140.904569][T28389] usb 4-1: USB disconnect, device number 106 [ 2140.936922][ T4260] usb 3-1: config 0 has no interface number 0 [ 2140.951696][ T4260] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 8456, setting to 64 [ 2140.974286][ T4260] usb 3-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2141.033377][ T4260] usb 3-1: config 0 interface 11 has no altsetting 0 [ 2141.043793][ T4260] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 2141.062034][ T9] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 2141.077272][ T4260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2141.091642][ T4260] usb 3-1: config 0 descriptor?? [ 2141.404094][ T4260] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 2141.412356][ T4260] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 7 [ 2141.501841][ T4260] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 2141.510450][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 2141.516527][ T4260] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 2141.524873][ T4260] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 2141.536492][ T9] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2141.901800][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2142.046888][ T9] usb 9-1: Product: syz [ 2142.051096][ T9] usb 9-1: Manufacturer: syz [ 2142.056406][ T4260] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 2142.064512][ T4260] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 2142.072812][ T9] usb 9-1: SerialNumber: syz [ 2142.082158][ T9] usb 9-1: config 0 descriptor?? [ 2142.088043][ T4260] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 2142.197012][ T4260] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 2142.239148][ T4260] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 2142.276032][ T4260] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 2142.313555][ T9] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2142.344753][ T4260] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 2142.353235][ T5525] bridge0: entered promiscuous mode [ 2142.376107][ T5525] macsec1: entered promiscuous mode [ 2142.422593][ T4260] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 2142.425613][ T5525] bridge0: port 3(macsec1) entered blocking state [ 2142.471345][ T4260] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 2142.506960][ T4260] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 2142.507035][ T5525] bridge0: port 3(macsec1) entered disabled state [ 2142.522046][ T5535] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9394'. [ 2142.556551][ T4260] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 2142.589130][ T5525] macsec1: entered allmulticast mode [ 2142.614086][ T4260] usb 3-1: USB disconnect, device number 51 [ 2142.627011][ T5525] bridge0: entered allmulticast mode [ 2142.642006][ T5525] macsec1: left allmulticast mode [ 2142.652047][ T4260] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 2142.667870][ T5525] bridge0: left allmulticast mode [ 2142.734224][ T5525] bridge0: left promiscuous mode [ 2142.777705][ T4260] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 2142.852725][ T4260] keyspan 3-1:0.11: device disconnected [ 2142.877403][ T9] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2142.904444][ T9] usb 9-1: USB disconnect, device number 53 [ 2143.137959][ T5546] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9398'. [ 2143.196811][T21463] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 2143.361735][T21463] usb 5-1: Using ep0 maxpacket: 8 [ 2143.407401][T21463] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 2143.416501][T21463] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2143.447196][T21463] usb 5-1: Product: syz [ 2143.451581][T21463] usb 5-1: Manufacturer: syz [ 2143.470678][T21463] usb 5-1: SerialNumber: syz [ 2143.494006][T21463] usb 5-1: config 0 descriptor?? [ 2143.535701][T21463] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 2143.716147][T21463] gspca_sonixj: reg_r err -32 [ 2143.725144][T21463] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 2144.030974][T21463] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2144.187069][T21463] usb 4-1: Using ep0 maxpacket: 8 [ 2144.198503][T21463] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2144.214370][T21463] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2144.222462][T21463] usb 4-1: can't read configurations, error -61 [ 2144.273243][ T4741] usb 5-1: USB disconnect, device number 55 [ 2144.386768][T21463] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2144.553236][T21463] usb 4-1: Using ep0 maxpacket: 8 [ 2144.586108][T21463] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2144.608536][T21463] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2144.700651][ T5581] netlink: 'syz.4.9409': attribute type 1 has an invalid length. [ 2144.776978][T21463] usb 4-1: can't read configurations, error -61 [ 2144.814526][ T5584] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9412'. [ 2144.890486][T21463] usb usb4-port1: attempt power cycle [ 2145.226821][ T5955] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 2145.409268][ T5955] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2145.418483][ T5955] usb 9-1: config 1 has an invalid descriptor of length 40, skipping remainder of the config [ 2145.503318][ T5955] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2145.516736][T21463] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 2145.573888][ T5955] usb 9-1: config 1 has no interface number 1 [ 2145.581295][ T5955] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2145.595223][T21463] usb 4-1: Using ep0 maxpacket: 8 [ 2145.607409][T21463] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2145.616279][ T5955] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2145.626026][ T5955] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2145.637149][T21463] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2145.646329][T21463] usb 4-1: can't read configurations, error -61 [ 2145.654137][ T5955] usb 9-1: Product: syz [ 2145.662735][ T5955] usb 9-1: Manufacturer: syz [ 2145.667641][ T5955] usb 9-1: SerialNumber: syz [ 2145.697460][ T5591] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9413'. [ 2145.806871][T21463] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2145.864923][T21463] usb 4-1: Using ep0 maxpacket: 8 [ 2145.874617][T21463] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2145.896893][ T5955] usb 9-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 2145.933770][ T5955] usb 9-1: MIDIStreaming interface descriptor not found [ 2145.941888][T21463] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2145.955392][T21463] usb 4-1: can't read configurations, error -61 [ 2146.018400][T21463] usb usb4-port1: unable to enumerate USB device [ 2146.155051][ T5955] usb 9-1: USB disconnect, device number 54 [ 2146.686632][ T30] audit: type=1326 audit(1755991063.213:6118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5608 comm="syz.8.9420" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c9a98ebe9 code=0x0 [ 2146.886830][ T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 2147.286828][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 2147.314871][ T9] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 2147.324555][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2147.335714][ T9] usb 5-1: Product: syz [ 2147.343694][ T9] usb 5-1: Manufacturer: syz [ 2147.348814][ T9] usb 5-1: SerialNumber: syz [ 2147.375869][ T9] usb 5-1: config 0 descriptor?? [ 2147.429942][ T30] audit: type=1326 audit(1755991063.963:6119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5621 comm="syz.3.9423" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f8e18ebe9 code=0x0 [ 2147.567248][ T30] audit: type=1326 audit(1755991064.063:6120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5621 comm="syz.3.9423" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f8e18ebe9 code=0x0 [ 2148.061816][ T5632] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9421'. [ 2148.194921][ T30] audit: type=1326 audit(1755991064.713:6121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.8.9424" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c9a98ebe9 code=0x0 [ 2148.266143][ T30] audit: type=1326 audit(1755991064.793:6122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.8.9424" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c9a98ebe9 code=0x0 [ 2149.396740][ T5649] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9427'. [ 2149.599546][ T5649] netlink: 'syz.3.9427': attribute type 3 has an invalid length. [ 2149.647501][ T5649] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9427'. [ 2149.899979][ T9] usb 5-1: USB disconnect, device number 56 [ 2150.009240][ T9034] udevd[9034]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2150.336727][T28389] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2150.447335][ T5669] netlink: 152 bytes leftover after parsing attributes in process `syz.8.9434'. [ 2150.461677][ T5669] netlink: 'syz.8.9434': attribute type 1 has an invalid length. [ 2150.496178][T28389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2150.511720][T28389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2150.522196][T28389] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2150.532442][T28389] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2150.545566][T28389] usb 3-1: config 0 descriptor?? [ 2150.748496][ T5677] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2150.803722][ T5682] loop4: detected capacity change from 0 to 7 [ 2150.810055][ T5677] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 2150.857792][ T5682] Dev loop4: unable to read RDB block 7 [ 2150.863617][ T5682] loop4: unable to read partition table [ 2150.883781][ T5677] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 2150.930029][ T5682] loop4: partition table beyond EOD, truncated [ 2150.961518][ T5682] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2151.340124][ T5691] netlink: 188 bytes leftover after parsing attributes in process `syz.4.9438'. [ 2151.448786][ T5694] netlink: 'syz.4.9438': attribute type 27 has an invalid length. [ 2151.771531][ T5656] sctp: [Deprecated]: syz.2.9428 (pid 5656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2151.771531][ T5656] Use struct sctp_sack_info instead [ 2151.816148][ T5694] bridge0: port 2(bridge_slave_1) entered disabled state [ 2151.823623][ T5694] bridge0: port 1(bridge_slave_0) entered disabled state [ 2152.053088][ T4260] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 2152.077677][ T5694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2152.105997][ T5694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2152.328906][ T4260] usb 5-1: Using ep0 maxpacket: 16 [ 2152.336275][ T4260] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2152.352645][ T4260] usb 5-1: config 0 has no interface number 0 [ 2152.373242][ T4260] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2152.385975][ T4260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2152.676677][T28389] usb 4-1: new low-speed USB device number 111 using dummy_hcd [ 2152.872632][ T4260] usb 5-1: Product: syz [ 2152.897395][T28389] usb 4-1: device descriptor read/64, error -71 [ 2152.907105][ T4260] usb 5-1: Manufacturer: syz [ 2152.954492][ T4260] usb 5-1: SerialNumber: syz [ 2152.987239][ T5696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2152.995124][ T5955] usb 3-1: USB disconnect, device number 52 [ 2153.030618][ T5696] 8021q: adding VLAN 0 to HW filter on device team0 [ 2153.052370][ T4260] usb 5-1: config 0 descriptor?? [ 2153.088864][ T4260] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2153.107466][ T5696] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2153.146884][T28389] usb 4-1: new low-speed USB device number 112 using dummy_hcd [ 2153.179867][ T2779] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2153.189921][ T2779] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2153.214409][ T2779] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2153.246798][ T2779] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2153.303645][T28389] usb 4-1: device descriptor read/64, error -71 [ 2153.440581][T28389] usb usb4-port1: attempt power cycle [ 2153.627021][ T4260] gspca_spca1528: reg_w err -110 [ 2153.646899][ T4260] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 2153.690876][ T5716] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9445'. [ 2153.818545][T28389] usb 4-1: new low-speed USB device number 113 using dummy_hcd [ 2153.859054][T28389] usb 4-1: device descriptor read/8, error -71 [ 2153.976237][ T5724] loop4: detected capacity change from 0 to 7 [ 2153.989265][ T5724] Dev loop4: unable to read RDB block 7 [ 2153.994877][ T5724] loop4: unable to read partition table [ 2154.002568][ T5724] loop4: partition table beyond EOD, truncated [ 2154.032961][ T5724] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2154.119222][T28389] usb 4-1: new low-speed USB device number 114 using dummy_hcd [ 2154.147426][T28389] usb 4-1: device descriptor read/8, error -71 [ 2154.258052][T28389] usb usb4-port1: unable to enumerate USB device [ 2154.367069][ T4260] usb 5-1: USB disconnect, device number 57 [ 2154.827558][ T4260] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 2154.946690][T28389] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 2154.996677][ T4260] usb 5-1: Using ep0 maxpacket: 8 [ 2155.037572][ T4260] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2155.079758][ T4260] usb 5-1: config index 0 descriptor too short (expected 274, got 18) [ 2155.100004][T28389] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2155.113888][ T4260] usb 5-1: string descriptor 0 read error: -22 [ 2155.126996][ T4260] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice= 4.5d [ 2155.136355][T28389] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2155.155878][ T4260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2155.173009][T28389] usb 9-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2155.199083][ T4260] usb 5-1: config 0 descriptor?? [ 2155.216752][T28389] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2155.266196][T28389] usb 9-1: config 0 descriptor?? [ 2155.440463][ T4260] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 2155.491389][ T4260] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 2155.534671][ T4260] dib0700: firmware download failed at 7 with -22 [ 2155.596551][ T4260] usb 5-1: USB disconnect, device number 58 [ 2156.326734][ T5763] program syz.4.9458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2156.383972][ T5736] sctp: [Deprecated]: syz.8.9452 (pid 5736) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2156.383972][ T5736] Use struct sctp_sack_info instead [ 2156.454042][ T5767] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.9461'. [ 2157.411787][ T5774] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2157.750144][ T5955] usb 9-1: USB disconnect, device number 55 [ 2158.116786][T21463] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2158.266661][ T5788] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9466'. [ 2158.286994][T21463] usb 3-1: Using ep0 maxpacket: 32 [ 2158.296980][T21463] usb 3-1: config 202 has an invalid interface number: 196 but max is 3 [ 2158.307104][T21463] usb 3-1: config 202 has an invalid interface number: 74 but max is 3 [ 2158.315368][T21463] usb 3-1: config 202 contains an unexpected descriptor of type 0x2, skipping [ 2158.352015][ T5789] fuse: Unknown parameter 'fd0x000000000000000b' [ 2158.374267][T21463] usb 3-1: config 202 has an invalid descriptor of length 191, skipping remainder of the config [ 2158.386898][ T5789] fuse: Bad value for 'fd' [ 2158.471905][T21463] usb 3-1: config 202 has 2 interfaces, different from the descriptor's value: 4 [ 2158.509205][T21463] usb 3-1: config 202 has no interface number 0 [ 2158.517856][T21463] usb 3-1: config 202 has no interface number 1 [ 2158.531856][T21463] usb 3-1: config 202 interface 196 altsetting 9 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 2158.569330][T21463] usb 3-1: config 202 interface 74 altsetting 6 endpoint 0x1 has an invalid bInterval 251, changing to 11 [ 2158.632864][T21463] usb 3-1: config 202 interface 74 altsetting 6 endpoint 0x1 has invalid maxpacket 17964, setting to 1024 [ 2158.697349][T21463] usb 3-1: config 202 interface 74 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 2158.760375][T21463] usb 3-1: config 202 interface 74 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 2158.767974][ T5800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9471'. [ 2158.785395][ T5800] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9471'. [ 2158.822922][T21463] usb 3-1: config 202 interface 74 altsetting 6 has 7 endpoint descriptors, different from the interface descriptor's value: 1 [ 2158.851279][T21463] usb 3-1: config 202 interface 196 has no altsetting 0 [ 2158.877048][T21463] usb 3-1: config 202 interface 74 has no altsetting 0 [ 2158.908512][T21463] usb 3-1: New USB device found, idVendor=0403, idProduct=0011, bcdDevice=9d.41 [ 2158.926357][T21463] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2158.935421][T21463] usb 3-1: Product: à  [ 2158.939760][T21463] usb 3-1: Manufacturer: 륽䙻縥æ†å“采竢ç’䒷囲ᚼá甞蠹仵ã©ï¦žà¹¾ì¯¯âŸ•鑸巈壃Ᶎè»ä’ã¡îµ•è¢­à¼Žë¶”á‰Šë•Žî¬æ¤ä‚Šç¦¢ [ 2159.013685][T21463] usb 3-1: SerialNumber: syz [ 2159.085504][ T5807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9473'. [ 2159.235338][ T30] audit: type=1326 audit(1755991075.753:6123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5801 comm="syz.3.9472" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f8e18ebe9 code=0x0 [ 2159.304934][T21463] ftdi_sio 3-1:202.196: FTDI USB Serial Device converter detected [ 2159.340057][ T30] audit: type=1326 audit(1755991075.853:6124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5801 comm="syz.3.9472" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f8e18ebe9 code=0x0 [ 2159.400519][T21463] ftdi_sio ttyUSB0: unknown device type: 0x9d41 [ 2159.430701][T21463] ftdi_sio 3-1:202.74: FTDI USB Serial Device converter detected [ 2159.464879][T21463] ftdi_sio ttyUSB1: unknown device type: 0x9d41 [ 2159.504215][T21463] usb 3-1: USB disconnect, device number 53 [ 2159.541210][T21463] ftdi_sio 3-1:202.196: device disconnected [ 2159.567991][T21463] ftdi_sio 3-1:202.74: device disconnected [ 2160.322962][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.329579][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.606770][T13874] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2160.616795][T21463] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 2160.758142][T21463] usb 9-1: device descriptor read/64, error -71 [ 2160.764621][ T5831] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9480'. [ 2160.825893][T13874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2160.837743][T13874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2160.854118][T13874] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2160.890277][T13874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2160.912016][T13874] usb 3-1: config 0 descriptor?? [ 2161.016716][T21463] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 2161.308848][T21465] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 2161.346709][T21463] usb 9-1: device descriptor read/64, error -71 [ 2161.458019][T21463] usb usb9-port1: attempt power cycle [ 2161.515157][T21465] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2161.537719][T21465] usb 4-1: not running at top speed; connect to a high speed hub [ 2161.550415][T21465] usb 4-1: config 9 has an invalid interface number: 87 but max is 0 [ 2161.566799][T21465] usb 4-1: config 9 has no interface number 0 [ 2161.579469][T21465] usb 4-1: config 9 interface 87 altsetting 127 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 2161.620507][T21465] usb 4-1: config 9 interface 87 has no altsetting 0 [ 2161.652690][T21465] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=a8.d0 [ 2161.682491][T21465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2161.743005][T21465] usb 4-1: Product: syz [ 2161.757297][T21465] usb 4-1: Manufacturer: syz [ 2161.777143][T21465] usb 4-1: SerialNumber: syz [ 2161.798822][T21463] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 2161.828463][T21463] usb 9-1: device descriptor read/8, error -71 [ 2162.020273][T21465] usb 4-1: USB disconnect, device number 115 [ 2162.047504][ T4741] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 2162.107726][T21463] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 2162.158000][T21463] usb 9-1: device descriptor read/8, error -71 [ 2162.180680][ T5821] sctp: [Deprecated]: syz.2.9476 (pid 5821) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2162.180680][ T5821] Use struct sctp_sack_info instead [ 2162.226972][ T4741] usb 5-1: Using ep0 maxpacket: 16 [ 2162.241317][ T4741] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2162.264528][ T4741] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2162.275022][T21463] usb usb9-port1: unable to enumerate USB device [ 2162.285745][ T4741] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2162.296001][ T4741] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2162.306309][ T4741] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2162.316709][ T4741] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 2162.329135][ T4741] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 2162.345006][ T4741] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2162.357491][ T4741] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2162.365654][ T4741] usb 5-1: SerialNumber: syz [ 2162.963481][ T4741] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 2163.064180][ T4741] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 2163.143290][ T4741] usb 5-1: USB disconnect, device number 59 [ 2163.406298][T13874] usb 3-1: USB disconnect, device number 54 [ 2164.134285][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9494'. [ 2164.144119][ T5876] bridge_slave_1: left allmulticast mode [ 2164.183479][ T5876] bridge_slave_1: left promiscuous mode [ 2164.193863][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 2164.351165][ T5876] bridge_slave_0: left allmulticast mode [ 2164.361451][ T5876] bridge_slave_0: left promiscuous mode [ 2164.368592][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 2164.436789][ T4741] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 2164.817376][ T4741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2164.886928][ T4741] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2164.895998][ T4741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2165.007242][ T4741] usb 4-1: config 0 descriptor?? [ 2165.224390][ T5878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2165.235236][ T5878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2165.516131][ T5878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2165.516903][T28389] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2165.553524][ T5878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2166.341450][T28389] usb 3-1: config 0 has no interfaces? [ 2166.838166][T28389] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2166.882374][ T5897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2166.897162][T28389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2166.993503][T28389] usb 3-1: Product: syz [ 2167.003718][T28389] usb 3-1: Manufacturer: syz [ 2167.016756][T28389] usb 3-1: SerialNumber: syz [ 2167.046504][T28389] usb 3-1: config 0 descriptor?? [ 2167.504277][ T4741] usbhid 4-1:0.0: can't add hid device: -71 [ 2167.515082][ T4741] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2167.629134][ T4741] usb 4-1: USB disconnect, device number 116 [ 2167.778587][ T5905] tipc: Enabling of bearer rejected, already enabled [ 2167.808467][ T5906] fuse: Unknown parameter '0x000000000000000b' [ 2167.820894][ T5906] fuse: Bad value for 'fd' [ 2168.312038][ T5915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2168.322824][ T5915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2168.342934][T28389] usb 3-1: can't set config #0, error -71 [ 2168.576914][ T849] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 2168.641636][T28389] usb 3-1: USB disconnect, device number 55 [ 2168.855916][ T849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2168.931327][ T849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2169.005425][ T849] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2169.066066][ T849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2169.120050][ T849] usb 4-1: config 0 descriptor?? [ 2169.160898][ T5930] bridge0: entered promiscuous mode [ 2169.185827][ T5930] macsec1: entered promiscuous mode [ 2169.198387][ T5930] bridge0: port 3(macsec1) entered blocking state [ 2169.284495][ T5930] bridge0: port 3(macsec1) entered disabled state [ 2169.355078][ T5930] macsec1: entered allmulticast mode [ 2169.363301][ T5930] bridge0: entered allmulticast mode [ 2169.379519][ T5930] macsec1: left allmulticast mode [ 2169.420864][ T5930] bridge0: left allmulticast mode [ 2169.452693][ T5930] bridge0: left promiscuous mode [ 2169.930016][ T5941] loop4: detected capacity change from 0 to 7 [ 2169.944384][ T5941] Dev loop4: unable to read RDB block 7 [ 2169.953924][ T5941] loop4: unable to read partition table [ 2169.965073][ T5941] loop4: partition table beyond EOD, truncated [ 2169.973906][ T5941] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2170.221676][ T5911] sctp: [Deprecated]: syz.3.9501 (pid 5911) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2170.221676][ T5911] Use struct sctp_sack_info instead [ 2170.788709][ T5957] fuse: Bad value for 'fd' [ 2170.976728][ T849] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 2171.137164][ T849] usb 5-1: Using ep0 maxpacket: 32 [ 2171.208629][ T849] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2171.262375][ T849] usb 5-1: too many endpoints for config 0 interface 0 altsetting 11: 36, using maximum allowed: 30 [ 2171.326290][ T5955] usb 4-1: USB disconnect, device number 117 [ 2171.398470][ T849] usb 5-1: config 0 interface 0 altsetting 11 bulk endpoint 0x6 has invalid maxpacket 255 [ 2171.477290][ T849] usb 5-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 36 [ 2171.534871][ T849] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2171.547640][ T5961] netlink: 104 bytes leftover after parsing attributes in process `syz.8.9517'. [ 2171.574859][ T849] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 2171.630120][ T849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2171.671198][ T849] usb 5-1: Product: syz [ 2171.675397][ T849] usb 5-1: Manufacturer: syz [ 2171.710746][ T849] usb 5-1: SerialNumber: syz [ 2171.726965][ T849] usb 5-1: config 0 descriptor?? [ 2171.732602][ T5954] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2172.001788][ T849] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2172.291320][ T849] usb 5-1: USB disconnect, device number 61 [ 2172.466121][T12631] udevd[12631]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2172.938029][ T5971] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2173.402330][ T5982] batadv0: entered promiscuous mode [ 2173.451741][ T5982] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2173.474605][ T5982] batadv0: left promiscuous mode [ 2173.584679][ T5986] dummy0: entered promiscuous mode [ 2173.590649][ T5986] vlan2: entered promiscuous mode [ 2221.764319][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.770873][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2223.375592][ T6018] fuse: Bad value for 'fd' [ 2223.380299][ T4260] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 2223.707590][ T4260] usb 4-1: Using ep0 maxpacket: 8 [ 2223.831384][ T6022] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2223.902326][ T4260] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 2223.980553][ T4260] usb 4-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 2224.266834][ T4260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2224.318955][ T4260] usb 4-1: config 0 descriptor?? [ 2224.384938][ T4260] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input206 [ 2225.354365][ T6042] loop4: detected capacity change from 0 to 7 [ 2225.367303][ T6042] Dev loop4: unable to read RDB block 7 [ 2225.373601][ T6042] loop4: unable to read partition table [ 2225.411929][ T6042] loop4: partition table beyond EOD, truncated [ 2225.441015][ T6042] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2225.456788][T28389] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2225.712929][T28389] usb 3-1: config 1 interface 1 has no altsetting 0 [ 2225.748415][T28389] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2225.800913][T28389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2225.860711][T28389] usb 3-1: Product: syz [ 2225.888933][T28389] usb 3-1: Manufacturer: syz [ 2225.906749][T28389] usb 3-1: SerialNumber: syz [ 2226.184172][T28389] usb 3-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 2226.246121][T28389] usb 3-1: 2:1 : sample bitwidth 232 in over sample bytes 4 [ 2226.277430][T28389] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 2226.376040][T28389] usb 3-1: USB disconnect, device number 56 [ 2226.474122][ T5219] bcm5974 4-1:0.0: could not read from device [ 2226.492709][ T4260] usb 4-1: USB disconnect, device number 118 [ 2226.517891][ T5219] bcm5974 4-1:0.0: could not read from device [ 2226.626354][ T6013] udevd[6013]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2226.703556][ T6062] loop4: detected capacity change from 0 to 7 [ 2226.726265][ T6058] buffer_io_error: 28 callbacks suppressed [ 2226.726278][ T6058] Buffer I/O error on dev loop4, logical block 0, async page read [ 2226.748452][ T6061] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2226.809991][ T6058] Buffer I/O error on dev loop4, logical block 0, async page read [ 2226.832605][ T6057] udevd[6057]: Error opening device "/dev/input/event4": No such file or directory [ 2226.845962][ T6058] Buffer I/O error on dev loop4, logical block 0, async page read [ 2226.885349][ T6058] Buffer I/O error on dev loop4, logical block 0, async page read [ 2226.915227][ T6058] Buffer I/O error on dev loop4, logical block 0, async page read [ 2226.918743][ T6057] udevd[6057]: Unable to EVIOCGABS device "/dev/input/event4" [ 2226.946840][ T6067] FAULT_INJECTION: forcing a failure. [ 2226.946840][ T6067] name failslab, interval 1, probability 0, space 0, times 0 [ 2226.960852][ T6058] Buffer I/O error on dev loop4, logical block 0, async page read [ 2226.971782][ T6057] udevd[6057]: Unable to EVIOCGABS device "/dev/input/event4" [ 2226.979746][ T6058] Buffer I/O error on dev loop4, logical block 0, async page read [ 2226.997007][ T6067] CPU: 1 UID: 0 PID: 6067 Comm: syz.2.9548 Not tainted syzkaller #0 PREEMPT(full) [ 2226.997035][ T6067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2226.997048][ T6067] Call Trace: [ 2226.997057][ T6067] [ 2226.997066][ T6067] dump_stack_lvl+0x189/0x250 [ 2226.997103][ T6067] ? __pfx____ratelimit+0x10/0x10 [ 2226.997131][ T6067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2226.997155][ T6067] ? __pfx__printk+0x10/0x10 [ 2226.997188][ T6067] ? __pfx___might_resched+0x10/0x10 [ 2226.997213][ T6067] should_fail_ex+0x414/0x560 [ 2226.997244][ T6067] should_failslab+0xa8/0x100 [ 2226.997275][ T6067] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 2226.997303][ T6067] ? __alloc_skb+0x112/0x2d0 [ 2226.997327][ T6067] __alloc_skb+0x112/0x2d0 [ 2226.997350][ T6067] netlink_sendmsg+0x5c6/0xb30 [ 2226.997389][ T6067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2226.997422][ T6067] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2226.997444][ T6067] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2226.997466][ T6067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2226.997497][ T6067] __sock_sendmsg+0x21c/0x270 [ 2226.997527][ T6067] ____sys_sendmsg+0x505/0x830 [ 2226.997554][ T6067] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2226.997585][ T6067] ? import_iovec+0x74/0xa0 [ 2226.997612][ T6067] ___sys_sendmsg+0x21f/0x2a0 [ 2226.997636][ T6067] ? __pfx____sys_sendmsg+0x10/0x10 [ 2226.997700][ T6067] ? __fget_files+0x2a/0x420 [ 2226.997743][ T6067] ? __fget_files+0x3a0/0x420 [ 2226.997783][ T6067] __x64_sys_sendmsg+0x19b/0x260 [ 2226.997811][ T6067] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2226.997843][ T6067] ? __pfx_ksys_write+0x10/0x10 [ 2226.997865][ T6067] ? rcu_is_watching+0x15/0xb0 [ 2226.997891][ T6067] ? do_syscall_64+0xbe/0x3b0 [ 2226.997922][ T6067] do_syscall_64+0xfa/0x3b0 [ 2226.997950][ T6067] ? lockdep_hardirqs_on+0x9c/0x150 [ 2226.997976][ T6067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2226.997996][ T6067] ? clear_bhb_loop+0x60/0xb0 [ 2226.998020][ T6067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2226.998040][ T6067] RIP: 0033:0x7fc515f8ebe9 [ 2226.998059][ T6067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2226.998078][ T6067] RSP: 002b:00007fc516e01038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2226.998104][ T6067] RAX: ffffffffffffffda RBX: 00007fc5161b5fa0 RCX: 00007fc515f8ebe9 [ 2226.998120][ T6067] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003 [ 2226.998132][ T6067] RBP: 00007fc516e01090 R08: 0000000000000000 R09: 0000000000000000 [ 2226.998145][ T6067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2226.998157][ T6067] R13: 00007fc5161b6038 R14: 00007fc5161b5fa0 R15: 00007fc5162dfa28 [ 2226.998189][ T6067] [ 2227.000549][ T6058] ldm_validate_partition_table(): Disk read failed. [ 2227.006824][ T6057] udevd[6057]: Unable to EVIOCGABS device "/dev/input/event4" [ 2227.036724][ T6058] Buffer I/O error on dev loop4, logical block 0, async page read [ 2227.173705][ T6057] udevd[6057]: Unable to EVIOCGABS device "/dev/input/event4" [ 2227.428371][ T6072] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9550'. [ 2227.590901][ T6058] Buffer I/O error on dev loop4, logical block 0, async page read [ 2227.606966][ T6058] Buffer I/O error on dev loop4, logical block 0, async page read [ 2227.658357][ T6058] Dev loop4: unable to read RDB block 0 [ 2227.664275][ T6058] loop4: unable to read partition table [ 2227.676236][ T6058] loop4: partition table beyond EOD, truncated [ 2227.912904][ T6082] FAULT_INJECTION: forcing a failure. [ 2227.912904][ T6082] name failslab, interval 1, probability 0, space 0, times 0 [ 2227.926554][ T6082] CPU: 1 UID: 0 PID: 6082 Comm: syz.7.9553 Not tainted syzkaller #0 PREEMPT(full) [ 2227.926584][ T6082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2227.926596][ T6082] Call Trace: [ 2227.926603][ T6082] [ 2227.926612][ T6082] dump_stack_lvl+0x189/0x250 [ 2227.926639][ T6082] ? __pfx____ratelimit+0x10/0x10 [ 2227.926665][ T6082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2227.926687][ T6082] ? __pfx__printk+0x10/0x10 [ 2227.926716][ T6082] ? __pfx___might_resched+0x10/0x10 [ 2227.926734][ T6082] ? fs_reclaim_acquire+0x7d/0x100 [ 2227.926765][ T6082] should_fail_ex+0x414/0x560 [ 2227.926795][ T6082] should_failslab+0xa8/0x100 [ 2227.926823][ T6082] __kmalloc_noprof+0xcb/0x4f0 [ 2227.926848][ T6082] ? tomoyo_encode+0x28b/0x550 [ 2227.926870][ T6082] tomoyo_encode+0x28b/0x550 [ 2227.926892][ T6082] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2227.926924][ T6082] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2227.926949][ T6082] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2227.926978][ T6082] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2227.927022][ T6082] ? __lock_acquire+0xab9/0xd20 [ 2227.927062][ T6082] ? __fget_files+0x2a/0x420 [ 2227.927088][ T6082] ? __fget_files+0x2a/0x420 [ 2227.927110][ T6082] ? __fget_files+0x3a0/0x420 [ 2227.927133][ T6082] ? __fget_files+0x2a/0x420 [ 2227.927160][ T6082] security_file_ioctl+0xcb/0x2d0 [ 2227.927185][ T6082] __se_sys_ioctl+0x47/0x170 [ 2227.927209][ T6082] do_syscall_64+0xfa/0x3b0 [ 2227.927232][ T6082] ? lockdep_hardirqs_on+0x9c/0x150 [ 2227.927254][ T6082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2227.927271][ T6082] ? clear_bhb_loop+0x60/0xb0 [ 2227.927290][ T6082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2227.927306][ T6082] RIP: 0033:0x7efedbb8ebe9 [ 2227.927322][ T6082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2227.927336][ T6082] RSP: 002b:00007efedcade038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2227.927354][ T6082] RAX: ffffffffffffffda RBX: 00007efedbdb5fa0 RCX: 00007efedbb8ebe9 [ 2227.927367][ T6082] RDX: 00002000000003c0 RSI: 0000000080044dff RDI: 0000000000000007 [ 2227.927378][ T6082] RBP: 00007efedcade090 R08: 0000000000000000 R09: 0000000000000000 [ 2227.927389][ T6082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2227.927399][ T6082] R13: 00007efedbdb6038 R14: 00007efedbdb5fa0 R15: 00007efedbedfa28 [ 2227.927425][ T6082] [ 2228.172277][ T6083] fuse: Bad value for 'fd' [ 2228.208325][ T6082] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2228.218131][ T6084] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2228.727458][ T6089] vlan2: entered promiscuous mode [ 2228.756672][ T4260] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 2228.972046][ T4260] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2229.005431][ T4260] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2229.057721][ T4260] usb 9-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2229.090319][ T4260] usb 9-1: config 1 interface 0 has no altsetting 1 [ 2229.156031][ T4260] usb 9-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 2229.166737][ T4260] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2229.177717][ T4260] usb 9-1: Product: syz [ 2229.181915][ T4260] usb 9-1: Manufacturer: syz [ 2229.186522][ T4260] usb 9-1: SerialNumber: syz [ 2229.233225][ T4260] smsusb:smsusb_probe: board id=8, interface number 0 [ 2229.392584][ T6108] macsec1: entered promiscuous mode [ 2229.400058][ T6092] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9551'. [ 2229.523693][ T4260] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 2229.523823][ T6108] macsec1: entered allmulticast mode [ 2229.561553][ T4260] smsusb 9-1:1.0: probe with driver smsusb failed with error -71 [ 2229.594001][ T4260] usb 9-1: USB disconnect, device number 60 [ 2229.611565][ T6108] dummy0: entered allmulticast mode [ 2229.653992][ T6112] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9562'. [ 2229.702279][ T6108] dummy0: left allmulticast mode [ 2231.063963][ T6132] macsec1: entered promiscuous mode [ 2231.157162][ T6132] macsec1: entered allmulticast mode [ 2231.165022][ T6132] dummy0: entered allmulticast mode [ 2231.177902][ T6132] dummy0: left allmulticast mode [ 2231.307302][ T6135] vlan2: entered promiscuous mode [ 2231.585181][ T6144] loop4: detected capacity change from 0 to 7 [ 2231.670136][ T6144] Dev loop4: unable to read RDB block 7 [ 2231.687005][ T6144] loop4: unable to read partition table [ 2231.700343][ T6144] loop4: partition table beyond EOD, truncated [ 2231.732712][ T6144] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2231.963769][ T4260] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2232.128984][ T4260] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2232.132330][ T6154] FAULT_INJECTION: forcing a failure. [ 2232.132330][ T6154] name failslab, interval 1, probability 0, space 0, times 0 [ 2232.160265][ T4260] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2232.166948][ T6154] CPU: 1 UID: 0 PID: 6154 Comm: syz.8.9577 Not tainted syzkaller #0 PREEMPT(full) [ 2232.166975][ T6154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2232.166988][ T6154] Call Trace: [ 2232.166996][ T6154] [ 2232.167005][ T6154] dump_stack_lvl+0x189/0x250 [ 2232.167034][ T6154] ? __pfx____ratelimit+0x10/0x10 [ 2232.167062][ T6154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2232.167085][ T6154] ? __pfx__printk+0x10/0x10 [ 2232.167115][ T6154] ? __pfx___might_resched+0x10/0x10 [ 2232.167134][ T6154] ? fs_reclaim_acquire+0x7d/0x100 [ 2232.167169][ T6154] should_fail_ex+0x414/0x560 [ 2232.167199][ T6154] should_failslab+0xa8/0x100 [ 2232.167229][ T6154] __kmalloc_cache_noprof+0x70/0x3d0 [ 2232.167254][ T6154] ? snd_mixer_oss_get_volume1_sw+0xbc/0x4a0 [ 2232.167285][ T6154] snd_mixer_oss_get_volume1_sw+0xbc/0x4a0 [ 2232.167309][ T6154] ? kasan_quarantine_put+0xdd/0x220 [ 2232.167337][ T6154] snd_mixer_oss_get_recsrc1_sw+0x8f/0x140 [ 2232.167364][ T6154] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 2232.167387][ T6154] snd_mixer_oss_ioctl1+0x1432/0x19f0 [ 2232.167416][ T6154] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 2232.167436][ T6154] ? do_vfs_ioctl+0xbe8/0x1430 [ 2232.167481][ T6154] ? __lock_acquire+0xab9/0xd20 [ 2232.167522][ T6154] snd_mixer_oss_ioctl_card+0x10b/0x160 [ 2232.167549][ T6154] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 2232.167576][ T6154] ? __fget_files+0x2a/0x420 [ 2232.167603][ T6154] ? __fget_files+0x3a0/0x420 [ 2232.167642][ T6154] snd_pcm_oss_ioctl+0x264/0xdd0 [ 2232.167669][ T6154] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 2232.167694][ T6154] __se_sys_ioctl+0xfc/0x170 [ 2232.167720][ T6154] do_syscall_64+0xfa/0x3b0 [ 2232.167751][ T6154] ? lockdep_hardirqs_on+0x9c/0x150 [ 2232.167777][ T6154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2232.167796][ T6154] ? clear_bhb_loop+0x60/0xb0 [ 2232.167820][ T6154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2232.167838][ T6154] RIP: 0033:0x7f4c9a98ebe9 [ 2232.167856][ T6154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2232.167872][ T6154] RSP: 002b:00007f4c9b8bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2232.167892][ T6154] RAX: ffffffffffffffda RBX: 00007f4c9abb5fa0 RCX: 00007f4c9a98ebe9 [ 2232.167907][ T6154] RDX: 00002000000003c0 RSI: 0000000080044dff RDI: 0000000000000007 [ 2232.167920][ T6154] RBP: 00007f4c9b8bc090 R08: 0000000000000000 R09: 0000000000000000 [ 2232.167932][ T6154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2232.167943][ T6154] R13: 00007f4c9abb6038 R14: 00007f4c9abb5fa0 R15: 00007f4c9acdfa28 [ 2232.167974][ T6154] [ 2232.574808][ T6154] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2232.616839][ T4260] usb 3-1: New USB device found, idVendor=06a3, idProduct=93fb, bcdDevice= 0.00 [ 2232.628580][ T4260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2232.648049][ T4260] usb 3-1: config 0 descriptor?? [ 2233.109800][ T4260] hid-generic 0003:06A3:93FB.0063: unknown main item tag 0x0 [ 2233.135322][ T4260] hid-generic 0003:06A3:93FB.0063: hidraw0: USB HID v0.00 Device [HID 06a3:93fb] on usb-dummy_hcd.2-1/input0 [ 2233.392880][ T6138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2233.441442][ T6138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2233.502672][T21463] usb 3-1: USB disconnect, device number 57 [ 2233.576788][ T4741] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 2233.746683][ T4741] usb 9-1: Using ep0 maxpacket: 8 [ 2233.778352][ T4741] usb 9-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 2233.787912][ T4741] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2233.795897][ T4741] usb 9-1: Product: syz [ 2233.800282][ T4741] usb 9-1: Manufacturer: syz [ 2233.804856][ T4741] usb 9-1: SerialNumber: syz [ 2233.895203][ T30] audit: type=1326 audit(1755991150.413:6125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.7.9582" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efedbb8ebe9 code=0x0 [ 2233.944779][ T4741] usb 9-1: config 0 descriptor?? [ 2234.060676][ T30] audit: type=1326 audit(1755991150.583:6126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.7.9582" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efedbb8ebe9 code=0x0 [ 2234.339713][ T6168] netlink: 'syz.8.9579': attribute type 10 has an invalid length. [ 2234.364461][ T6168] veth0_vlan: left promiscuous mode [ 2234.371887][ T6168] veth0_vlan: entered promiscuous mode [ 2234.384153][ T6168] team0: Device veth0_vlan failed to register rx_handler [ 2236.583661][ T6199] loop4: detected capacity change from 0 to 7 [ 2236.617594][ T6199] buffer_io_error: 14 callbacks suppressed [ 2236.617613][ T6199] Buffer I/O error on dev loop4, logical block 0, async page read [ 2236.662301][ T6199] Buffer I/O error on dev loop4, logical block 0, async page read [ 2236.670564][ T6199] Buffer I/O error on dev loop4, logical block 0, async page read [ 2236.726998][ T6199] Buffer I/O error on dev loop4, logical block 0, async page read [ 2236.778328][ T6199] Buffer I/O error on dev loop4, logical block 0, async page read [ 2236.832968][ T6199] Buffer I/O error on dev loop4, logical block 0, async page read [ 2236.850676][ T6199] Buffer I/O error on dev loop4, logical block 0, async page read [ 2236.886764][ T6199] ldm_validate_partition_table(): Disk read failed. [ 2236.899161][ T6199] Buffer I/O error on dev loop4, logical block 0, async page read [ 2236.907594][ T6199] Buffer I/O error on dev loop4, logical block 0, async page read [ 2236.915588][ T6199] Buffer I/O error on dev loop4, logical block 0, async page read [ 2236.957914][ T6199] Dev loop4: unable to read RDB block 0 [ 2236.987277][ T6199] loop4: unable to read partition table [ 2237.000813][ T6199] loop4: partition table beyond EOD, truncated [ 2237.020951][ T6199] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2237.061232][ T4741] usb 9-1: USB disconnect, device number 61 [ 2237.096998][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9592'. [ 2237.163434][ T6205] hsr_slave_0: left promiscuous mode [ 2237.246819][ T6205] hsr_slave_1: left promiscuous mode [ 2237.389462][ T6218] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2237.663503][ T6227] macsec1: entered promiscuous mode [ 2237.674707][ T6227] macsec1: entered allmulticast mode [ 2237.682744][ T6227] dummy0: entered allmulticast mode [ 2237.707602][ T6227] dummy0: left allmulticast mode [ 2237.757369][ T849] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 2237.931260][ T6233] Lens A: ================= START STATUS ================= [ 2237.939011][ T849] usb 5-1: Using ep0 maxpacket: 32 [ 2237.948302][ T849] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2237.972716][ T849] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2238.102029][ T6233] Lens A: Focus, Absolute: 0 [ 2238.111024][ T6233] Lens A: ================== END STATUS ================== [ 2238.116056][ T849] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2238.128660][ T849] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2238.139709][ T849] usb 5-1: Product: syz [ 2238.143899][ T849] usb 5-1: Manufacturer: syz [ 2238.163674][ T849] hub 5-1:4.0: USB hub found [ 2238.374554][ T849] hub 5-1:4.0: 2 ports detected [ 2238.788241][ T849] hub 5-1:4.0: set hub depth failed [ 2238.815110][ T849] usb 5-1: USB disconnect, device number 62 [ 2238.911741][ T6249] program syz.3.9608 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2239.065832][ T6259] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20003 [ 2239.269752][ T6270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2239.293066][ T6270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2239.405517][ T6273] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9615'. [ 2239.506660][ T4741] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 2239.625704][ T6275] netlink: 232 bytes leftover after parsing attributes in process `syz.4.9616'. [ 2239.672023][ T4741] usb 4-1: config 0 has an invalid interface number: 45 but max is 0 [ 2239.680631][ T4741] usb 4-1: config 0 has no interface number 0 [ 2239.714989][ T4741] usb 4-1: config 0 interface 45 altsetting 175 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2239.793359][ T4741] usb 4-1: config 0 interface 45 altsetting 175 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2239.805699][ T4741] usb 4-1: config 0 interface 45 has no altsetting 0 [ 2239.812714][ T4741] usb 4-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 2239.824143][ T4741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2239.848243][ T4741] usb 4-1: config 0 descriptor?? [ 2239.929219][ T6280] dummy0: entered promiscuous mode [ 2239.986855][ T6280] vlan0: entered promiscuous mode [ 2240.202141][ T6283] loop4: detected capacity change from 0 to 7 [ 2240.222161][ T6011] Dev loop4: unable to read RDB block 7 [ 2240.228560][ T6011] loop4: unable to read partition table [ 2240.249205][ T6011] loop4: partition table beyond EOD, truncated [ 2240.263606][ T6283] Dev loop4: unable to read RDB block 7 [ 2240.314151][ T6283] loop4: unable to read partition table [ 2240.323330][ T4741] uclogic 0003:5543:3031.0064: interface is invalid, ignoring [ 2240.346498][ T6283] loop4: partition table beyond EOD, truncated [ 2240.356635][ T6283] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2240.437064][ T849] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2240.598871][ T849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2240.616707][ T849] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2240.637048][ T849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2240.667680][ T849] usb 3-1: config 0 descriptor?? [ 2240.730911][ T849] pwc: Askey VC010 type 2 USB webcam detected. [ 2240.788852][ T6291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2241.138490][ T849] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2241.198107][ T849] pwc: recv_control_msg error -32 req 02 val 2700 [ 2241.218524][ T849] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2241.365667][ T849] pwc: recv_control_msg error -32 req 04 val 1000 [ 2241.386061][ T6284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2241.425831][ T6284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2241.450842][ T849] pwc: recv_control_msg error -32 req 04 val 1300 [ 2241.479555][ T849] pwc: recv_control_msg error -32 req 04 val 1400 [ 2241.489997][ T849] pwc: recv_control_msg error -32 req 02 val 2000 [ 2241.507423][ T849] pwc: recv_control_msg error -32 req 02 val 2100 [ 2241.514669][ T849] pwc: recv_control_msg error -32 req 04 val 1500 [ 2241.526216][ T849] pwc: recv_control_msg error -32 req 02 val 2500 [ 2241.533165][ T849] pwc: recv_control_msg error -71 req 02 val 2400 [ 2241.560479][ T849] pwc: recv_control_msg error -71 req 02 val 2600 [ 2241.569222][ T849] pwc: recv_control_msg error -71 req 02 val 2900 [ 2241.593870][ T849] pwc: recv_control_msg error -71 req 02 val 2800 [ 2241.608578][ T849] pwc: recv_control_msg error -71 req 04 val 1100 [ 2241.623350][ T849] pwc: recv_control_msg error -71 req 04 val 1200 [ 2241.691454][ T6309] netlink: 27 bytes leftover after parsing attributes in process `syz.7.9628'. [ 2241.960748][ T849] pwc: Registered as video103. [ 2241.968868][ T849] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input208 [ 2242.090560][ T849] usb 3-1: USB disconnect, device number 58 [ 2242.357098][T28389] usb 4-1: USB disconnect, device number 119 [ 2243.116841][T21465] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 2243.257103][T21465] usb 5-1: device descriptor read/64, error -71 [ 2243.516725][T21465] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 2243.707819][T21465] usb 5-1: device descriptor read/64, error -71 [ 2243.839402][T21465] usb usb5-port1: attempt power cycle [ 2244.196701][T21465] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 2244.217493][T21465] usb 5-1: device descriptor read/8, error -71 [ 2244.476964][T21465] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 2244.507583][T21465] usb 5-1: device descriptor read/8, error -71 [ 2244.557133][ T6365] trusted_key: encrypted_key: insufficient parameters specified [ 2244.617179][T21465] usb usb5-port1: unable to enumerate USB device [ 2244.624511][ T6362] fuse: Bad value for 'fd' [ 2245.126825][ T4741] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 2245.296986][ T4741] usb 4-1: Using ep0 maxpacket: 16 [ 2245.394022][ T4741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2245.416096][ T4741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2245.443208][ T4741] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2245.494759][ T4741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2245.570800][ T4741] usb 4-1: config 0 descriptor?? [ 2246.116908][ T849] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2246.276887][ T849] usb 3-1: Using ep0 maxpacket: 16 [ 2246.297635][ T849] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2246.328027][ T849] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2246.359915][ T849] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 2246.403197][ T849] usb 3-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2246.463383][ T849] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2246.503821][ T849] usb 3-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 2246.523383][ T849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2246.541473][ T849] usb 3-1: Product: syz [ 2246.551051][ T849] usb 3-1: Manufacturer: syz [ 2246.555719][ T849] usb 3-1: SerialNumber: syz [ 2246.600398][ T6377] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 2246.671905][ T6391] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9653'. [ 2246.831511][ T849] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input209 [ 2247.219043][ T6400] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9657'. [ 2247.256280][ T6400] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9657'. [ 2247.282809][ T6400] gretap0: entered promiscuous mode [ 2247.296400][ T5219] bcm5974 3-1:1.0: could not write to device [ 2247.346139][ T849] bcm5974 3-1:1.0: could not read from device [ 2247.449663][ T6400] batadv_slave_1: entered promiscuous mode [ 2247.495863][ T4741] usbhid 4-1:0.0: can't add hid device: -71 [ 2247.513130][ T4741] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2247.526932][ T5219] bcm5974 3-1:1.0: could not read from device [ 2247.594993][ T6400] debugfs: 'hsr1' already exists in 'hsr' [ 2247.615241][ T6400] Cannot create hsr debugfs directory [ 2247.622118][ T849] input: failed to attach handler mousedev to device input209, error: -5 [ 2247.632250][ T4741] usb 4-1: USB disconnect, device number 120 [ 2247.698992][ T6400] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 2247.720089][ T5219] bcm5974 3-1:1.0: could not read from device [ 2247.737828][ T849] usb 3-1: USB disconnect, device number 59 [ 2247.753954][ T5219] bcm5974 3-1:1.0: could not read from device [ 2247.845994][ T6402] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2248.218557][ T6411] fuse: Bad value for 'fd' [ 2248.386857][ T4741] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 2248.554923][ T4741] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 2248.572332][ T4741] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2248.641257][ T4741] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 2248.668912][ T4741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2248.713636][ T4741] usb 4-1: config 0 descriptor?? [ 2248.944847][ T6422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9664'. [ 2248.960481][ T4741] usbhid 4-1:0.0: can't add hid device: -71 [ 2249.006861][ T4741] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2249.018685][ T4741] usb 4-1: USB disconnect, device number 121 [ 2249.437027][ T3576] Bluetooth: hci0: command 0x0406 tx timeout [ 2249.650880][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9672'. [ 2250.240630][ T6457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9677'. [ 2250.376766][ T4741] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2250.549183][ T4741] usb 5-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 2250.579400][ T4741] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2250.604145][ T4741] usb 5-1: config 0 descriptor?? [ 2250.614246][ T4741] pwc: Creative Labs Webcam 5 detected. [ 2250.654461][ T6465] tipc: Enabling of bearer rejected, already enabled [ 2250.976745][ T4741] pwc: Failed to set LED on/off time (-71) [ 2251.006768][ T4741] pwc: send_video_command error -71 [ 2251.023450][ T4741] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2251.047447][ T4741] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 2251.261748][ T4741] usb 5-1: USB disconnect, device number 67 [ 2251.371192][T21465] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2251.385323][T21465] hid-generic 0000:0000:0000.0065: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2251.400039][ T6477] netlink: 'syz.2.9684': attribute type 12 has an invalid length. [ 2251.411215][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9685'. [ 2251.699839][ T6484] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9687'. [ 2251.939171][ T6488] loop4: detected capacity change from 0 to 7 [ 2251.957359][ T6488] Dev loop4: unable to read RDB block 7 [ 2252.020293][ T6488] loop4: unable to read partition table [ 2252.026140][ T6488] loop4: partition table beyond EOD, truncated [ 2252.060032][ T6492] fuse: Bad value for 'fd' [ 2252.104002][ T6488] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2253.876711][T21463] usb 9-1: new full-speed USB device number 62 using dummy_hcd [ 2254.039097][T21463] usb 9-1: not running at top speed; connect to a high speed hub [ 2254.057809][T21463] usb 9-1: config index 0 descriptor too short (expected 51218, got 18) [ 2254.085492][T21463] usb 9-1: config 6 has too many interfaces: 210, using maximum allowed: 32 [ 2254.119144][T21463] usb 9-1: config 6 has an invalid descriptor of length 178, skipping remainder of the config [ 2254.145396][T21463] usb 9-1: config 6 has 0 interfaces, different from the descriptor's value: 210 [ 2254.188434][T21463] usb 9-1: New USB device found, idVendor=0cba, idProduct=3e43, bcdDevice=ec.20 [ 2254.256558][T21463] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2254.265049][T21463] usb 9-1: Product: syz [ 2254.283842][T21463] usb 9-1: Manufacturer: syz [ 2254.292274][T21463] usb 9-1: SerialNumber: syz [ 2254.537504][T21463] usb 9-1: USB disconnect, device number 62 [ 2254.962143][ T6522] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9697'. [ 2254.972613][ T6531] loop4: detected capacity change from 0 to 7 [ 2254.999245][ T6531] Dev loop4: unable to read RDB block 7 [ 2255.035582][ T6531] loop4: unable to read partition table [ 2255.045471][ T6531] loop4: partition table beyond EOD, truncated [ 2255.062769][ T6531] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2255.423858][ T6539] FAULT_INJECTION: forcing a failure. [ 2255.423858][ T6539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2255.445379][ T6539] CPU: 1 UID: 0 PID: 6539 Comm: syz.8.9706 Not tainted syzkaller #0 PREEMPT(full) [ 2255.445408][ T6539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2255.445421][ T6539] Call Trace: [ 2255.445430][ T6539] [ 2255.445440][ T6539] dump_stack_lvl+0x189/0x250 [ 2255.445470][ T6539] ? __pfx____ratelimit+0x10/0x10 [ 2255.445500][ T6539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2255.445523][ T6539] ? __pfx__printk+0x10/0x10 [ 2255.445562][ T6539] should_fail_ex+0x414/0x560 [ 2255.445595][ T6539] _copy_to_user+0x31/0xb0 [ 2255.445621][ T6539] simple_read_from_buffer+0xe1/0x170 [ 2255.445655][ T6539] proc_fail_nth_read+0x1b3/0x220 [ 2255.445682][ T6539] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2255.445709][ T6539] ? rw_verify_area+0x2a6/0x4d0 [ 2255.445733][ T6539] ? __lock_acquire+0xab9/0xd20 [ 2255.445760][ T6539] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2255.445784][ T6539] vfs_read+0x200/0xa30 [ 2255.445808][ T6539] ? fdget_pos+0x247/0x320 [ 2255.445829][ T6539] ? __pfx___mutex_lock+0x10/0x10 [ 2255.445859][ T6539] ? __pfx_vfs_read+0x10/0x10 [ 2255.445887][ T6539] ? __fget_files+0x2a/0x420 [ 2255.445920][ T6539] ? __fget_files+0x3a0/0x420 [ 2255.445948][ T6539] ? __fget_files+0x2a/0x420 [ 2255.445986][ T6539] ksys_read+0x145/0x250 [ 2255.446011][ T6539] ? __fget_files+0x3a0/0x420 [ 2255.446041][ T6539] ? __pfx_ksys_read+0x10/0x10 [ 2255.446082][ T6539] ? do_syscall_64+0xbe/0x3b0 [ 2255.446114][ T6539] do_syscall_64+0xfa/0x3b0 [ 2255.446147][ T6539] ? lockdep_hardirqs_on+0x9c/0x150 [ 2255.446174][ T6539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2255.446193][ T6539] ? clear_bhb_loop+0x60/0xb0 [ 2255.446218][ T6539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2255.446237][ T6539] RIP: 0033:0x7f4c9a98d5fc [ 2255.446256][ T6539] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2255.446274][ T6539] RSP: 002b:00007f4c9b8bc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2255.446297][ T6539] RAX: ffffffffffffffda RBX: 00007f4c9abb5fa0 RCX: 00007f4c9a98d5fc [ 2255.446312][ T6539] RDX: 000000000000000f RSI: 00007f4c9b8bc0a0 RDI: 0000000000000008 [ 2255.446325][ T6539] RBP: 00007f4c9b8bc090 R08: 0000000000000000 R09: 0000000000000000 [ 2255.446338][ T6539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2255.446350][ T6539] R13: 00007f4c9abb6038 R14: 00007f4c9abb5fa0 R15: 00007f4c9acdfa28 [ 2255.446382][ T6539] [ 2255.683301][ C1] vkms_vblank_simulate: vblank timer overrun [ 2256.236797][ T4741] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2256.421309][ T4741] usb 3-1: Using ep0 maxpacket: 8 [ 2256.428401][ T6555] loop4: detected capacity change from 0 to 7 [ 2256.437704][ T6555] buffer_io_error: 14 callbacks suppressed [ 2256.437727][ T6555] Buffer I/O error on dev loop4, logical block 0, async page read [ 2256.456850][ T4741] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 2256.491960][ T6555] Buffer I/O error on dev loop4, logical block 0, async page read [ 2256.500105][ T4741] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 57903, setting to 1024 [ 2256.525056][ T4741] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2256.550774][ T6555] Buffer I/O error on dev loop4, logical block 0, async page read [ 2256.597601][ T6555] Buffer I/O error on dev loop4, logical block 0, async page read [ 2256.621630][ T4741] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2256.623965][ T6555] Buffer I/O error on dev loop4, logical block 0, async page read [ 2256.703582][ T6555] Buffer I/O error on dev loop4, logical block 0, async page read [ 2256.743423][ T6555] Buffer I/O error on dev loop4, logical block 0, async page read [ 2256.752987][ T6555] ldm_validate_partition_table(): Disk read failed. [ 2256.806940][ T6555] Buffer I/O error on dev loop4, logical block 0, async page read [ 2256.926936][ T4741] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2256.936810][ T6555] Buffer I/O error on dev loop4, logical block 0, async page read [ 2256.944766][ T6555] Buffer I/O error on dev loop4, logical block 0, async page read [ 2256.962673][ T4741] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2257.041921][ T4741] usb 3-1: Product: syz [ 2257.046131][ T4741] usb 3-1: Manufacturer: syz [ 2257.053054][ T6555] Dev loop4: unable to read RDB block 0 [ 2257.064146][ T6555] loop4: unable to read partition table [ 2257.116770][ T4741] usb 3-1: SerialNumber: syz [ 2257.127294][ T849] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 2257.139332][ T6555] loop4: partition table beyond EOD, truncated [ 2257.176955][ T6555] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2257.292510][ T849] usb 4-1: Using ep0 maxpacket: 8 [ 2257.311014][ T849] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2257.323701][ T849] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2257.340914][ T849] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2257.351771][ T849] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2257.407501][ T849] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2257.430408][ T6548] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2257.438886][ T6548] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2257.468418][ T849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2257.911976][ T4741] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 2257.923978][ T4741] usbtest 3-1:1.0: Linux user mode ISO test driver [ 2257.957567][ T4741] usbtest 3-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 2257.961099][ T849] usb 4-1: GET_CAPABILITIES returned 0 [ 2257.976866][ T849] usbtmc 4-1:16.0: can't read capabilities [ 2258.019721][ T4741] usb 3-1: USB disconnect, device number 61 [ 2258.166740][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2258.175883][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2258.186374][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2258.195504][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2258.204626][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2258.213755][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2258.217152][ T6586] netlink: 'syz.8.9723': attribute type 1 has an invalid length. [ 2258.247054][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2258.256190][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2258.265303][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2258.274428][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2258.296876][ T6590] netlink: 36 bytes leftover after parsing attributes in process `syz.8.9723'. [ 2258.324087][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2258.340471][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2258.349557][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2258.358679][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2258.367721][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2258.376773][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 2258.465797][T21463] usb 4-1: USB disconnect, device number 122 [ 2260.465809][ T6612] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2260.496729][T21465] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 2260.551995][ T6617] syz.3.9730: vmalloc error: size 70778880, failed to allocated page array size 138240, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2260.574345][ T6617] CPU: 0 UID: 0 PID: 6617 Comm: syz.3.9730 Not tainted syzkaller #0 PREEMPT(full) [ 2260.574370][ T6617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2260.574382][ T6617] Call Trace: [ 2260.574390][ T6617] [ 2260.574398][ T6617] dump_stack_lvl+0x189/0x250 [ 2260.574427][ T6617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2260.574449][ T6617] ? __pfx__printk+0x10/0x10 [ 2260.574475][ T6617] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2260.574498][ T6617] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2260.574529][ T6617] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 2260.574555][ T6617] warn_alloc+0x214/0x310 [ 2260.574592][ T6617] ? __pfx_warn_alloc+0x10/0x10 [ 2260.574629][ T6617] ? __get_vm_area_node+0x28f/0x300 [ 2260.574654][ T6617] ? vb2_vmalloc_alloc+0xef/0x340 [ 2260.574676][ T6617] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 2260.574725][ T6617] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2260.574748][ T6617] ? __kasan_kmalloc+0x93/0xb0 [ 2260.574764][ T6617] vmalloc_user_noprof+0xad/0xf0 [ 2260.574780][ T6617] ? vb2_vmalloc_alloc+0xef/0x340 [ 2260.574790][ T6617] vb2_vmalloc_alloc+0xef/0x340 [ 2260.574800][ T6617] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 2260.574811][ T6617] __vb2_queue_alloc+0x9bf/0x15a0 [ 2260.574840][ T6617] vb2_core_reqbufs+0xc31/0x1420 [ 2260.574887][ T6617] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 2260.574907][ T6617] ? __vb2_init_fileio+0x1e8/0xff0 [ 2260.574920][ T6617] __vb2_init_fileio+0x318/0xff0 [ 2260.574929][ T6617] ? __lock_acquire+0xab9/0xd20 [ 2260.574946][ T6617] ? __pfx___mutex_lock+0x10/0x10 [ 2260.574963][ T6617] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2260.574982][ T6617] vb2_core_poll+0x4c1/0x840 [ 2260.574995][ T6617] vb2_fop_poll+0x168/0x380 [ 2260.575006][ T6617] ? __fget_files+0x2a/0x420 [ 2260.575021][ T6617] ? __pfx_vb2_fop_poll+0x10/0x10 [ 2260.575031][ T6617] v4l2_poll+0x144/0x2c0 [ 2260.575041][ T6617] ? __pfx_v4l2_poll+0x10/0x10 [ 2260.575051][ T6617] do_sys_poll+0x8c6/0x1070 [ 2260.575069][ T6617] ? do_sys_poll+0x361/0x1070 [ 2260.575088][ T6617] ? __pfx_do_sys_poll+0x10/0x10 [ 2260.575105][ T6617] ? futex_unqueue+0x22/0x240 [ 2260.575122][ T6617] ? __pfx_pollwake+0x10/0x10 [ 2260.575164][ T6617] ? futex_wait+0x285/0x360 [ 2260.575180][ T6617] ? __pfx_futex_wait+0x10/0x10 [ 2260.575209][ T6617] ? __pfx_do_futex+0x10/0x10 [ 2260.575221][ T6617] ? set_user_sigmask+0xc7/0x1b0 [ 2260.575231][ T6617] ? __pfx_set_user_sigmask+0x10/0x10 [ 2260.575248][ T6617] __se_sys_ppoll+0x1ff/0x260 [ 2260.575263][ T6617] ? __pfx___se_sys_ppoll+0x10/0x10 [ 2260.575280][ T6617] ? rcu_is_watching+0x15/0xb0 [ 2260.575294][ T6617] ? do_syscall_64+0xbe/0x3b0 [ 2260.575308][ T6617] ? __x64_sys_ppoll+0x20/0xc0 [ 2260.575323][ T6617] do_syscall_64+0xfa/0x3b0 [ 2260.575338][ T6617] ? lockdep_hardirqs_on+0x9c/0x150 [ 2260.575352][ T6617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2260.575362][ T6617] ? clear_bhb_loop+0x60/0xb0 [ 2260.575374][ T6617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2260.575384][ T6617] RIP: 0033:0x7f1f8e18ebe9 [ 2260.575395][ T6617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2260.575405][ T6617] RSP: 002b:00007f1f8f0ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 2260.575417][ T6617] RAX: ffffffffffffffda RBX: 00007f1f8e3b5fa0 RCX: 00007f1f8e18ebe9 [ 2260.575425][ T6617] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 2260.575432][ T6617] RBP: 00007f1f8e211e19 R08: 0000000000000000 R09: 0000000000000000 [ 2260.575439][ T6617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2260.575446][ T6617] R13: 00007f1f8e3b6038 R14: 00007f1f8e3b5fa0 R15: 00007f1f8e4dfa28 [ 2260.575462][ T6617] [ 2260.580478][ T6617] Mem-Info: [ 2260.830047][ T31] INFO: task kworker/u8:18:2776 blocked for more than 143 seconds. [ 2260.967526][ T6617] active_anon:8335 inactive_anon:0 isolated_anon:0 [ 2260.967526][ T6617] active_file:21955 inactive_file:4692 isolated_file:0 [ 2260.967526][ T6617] unevictable:776 dirty:136 writeback:0 [ 2260.967526][ T6617] slab_reclaimable:7260 slab_unreclaimable:112246 [ 2260.967526][ T6617] mapped:37916 shmem:1369 pagetables:2149 [ 2260.967526][ T6617] sec_pagetables:0 bounce:0 [ 2260.967526][ T6617] kernel_misc_reclaimable:0 [ 2260.967526][ T6617] free:1311936 free_pcp:20306 free_cma:0 [ 2260.974962][ T31] Not tainted syzkaller #0 [ 2261.018550][T21465] usb 9-1: Using ep0 maxpacket: 8 [ 2261.018714][ T6617] Node 0 active_anon:33284kB inactive_anon:0kB active_file:87600kB inactive_file:18640kB unevictable:1568kB isolated(anon):0kB isolated(file):0kB mapped:151512kB dirty:544kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15184kB pagetables:8464kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2261.024659][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2261.070760][T21465] usb 9-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2261.074835][ T6617] Node 1 active_anon:56kB inactive_anon:0kB active_file:220kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:152kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2261.082110][T21465] usb 9-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2261.122298][ T31] task:kworker/u8:18 state:D stack:22312 pid:2776 tgid:2776 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2261.125966][ T6617] Node 0 [ 2261.134395][ T31] Workqueue: netns cleanup_net [ 2261.134427][ T31] Call Trace: [ 2261.134436][ T31] [ 2261.134450][ T31] __schedule+0x1798/0x4cc0 [ 2261.134499][ T31] ? __lock_acquire+0xab9/0xd20 [ 2261.134528][ T31] ? __pfx___schedule+0x10/0x10 [ 2261.145371][ T6617] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2261.145743][ T31] ? schedule+0x91/0x360 [ 2261.148899][ T6617] lowmem_reserve[]: [ 2261.153199][ T31] schedule+0x165/0x360 [ 2261.165426][ T6617] 0 [ 2261.191410][T21465] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2261.191461][T21465] usb 9-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 2261.191484][T21465] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2261.194240][T21465] usb 9-1: config 0 descriptor?? [ 2261.221430][ T6617] 2497 2499 2499 2499 [ 2261.245247][ T31] afs_cell_purge+0x3d9/0x540 [ 2261.249376][ T6617] Node 0 DMA32 free:1340780kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33236kB inactive_anon:0kB active_file:87260kB inactive_file:17444kB unevictable:1568kB writepending:544kB present:3129332kB managed:2557452kB mlocked:32kB bounce:0kB free_pcp:65704kB local_pcp:31876kB free_cma:0kB [ 2261.257060][ T31] ? __pfx_afs_cell_purge+0x10/0x10 [ 2261.292057][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 2261.295688][ T6617] lowmem_reserve[]: [ 2261.297591][ T31] ? afs_net+0x45/0x270 [ 2261.297629][ T31] ? afs_net+0x45/0x270 [ 2261.297660][ T31] afs_net_exit+0x50/0x100 [ 2261.297687][ T31] ops_undo_list+0x497/0x990 [ 2261.297748][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 2261.297784][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 2261.297815][ T31] cleanup_net+0x4c5/0x800 [ 2261.297838][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 2261.297882][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2261.297909][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2261.297929][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2261.303496][ T6617] 0 [ 2261.305978][ T31] process_scheduled_works+0xae1/0x17b0 [ 2261.359445][ T6617] 0 [ 2261.364194][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2261.370081][ T6617] 1 [ 2261.372890][ T31] worker_thread+0x8a0/0xda0 [ 2261.373500][ T6617] 1 [ 2261.375597][ T31] kthread+0x70e/0x8a0 [ 2261.384863][ T6617] 1 [ 2261.386782][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2261.386833][ T31] ? __pfx_kthread+0x10/0x10 [ 2261.392788][ T6617] [ 2261.394454][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2261.404005][ T6617] Node 0 [ 2261.406916][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2261.406951][ T31] ? __pfx_kthread+0x10/0x10 [ 2261.406980][ T31] ret_from_fork+0x3f9/0x770 [ 2261.407029][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2261.407058][ T31] ? __switch_to_asm+0x39/0x70 [ 2261.407085][ T31] ? __switch_to_asm+0x33/0x70 [ 2261.407111][ T31] ? __pfx_kthread+0x10/0x10 [ 2261.407138][ T31] ret_from_fork_asm+0x1a/0x30 [ 2261.413903][ T6617] Normal free:20kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:340kB inactive_file:1196kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:12kB free_cma:0kB [ 2261.415332][ T31] [ 2261.425076][ T6617] lowmem_reserve[]: [ 2261.430755][ T31] [ 2261.430755][ T31] Showing all locks held in the system: [ 2261.493970][ T6617] 0 0 0 0 0 [ 2261.497408][ T6617] Node 1 Normal free:3892336kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:56kB inactive_anon:0kB active_file:220kB inactive_file:128kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15056kB local_pcp:6152kB free_cma:0kB [ 2261.535830][ T6617] lowmem_reserve[]: 0 0 0 0 0 [ 2261.541002][ T31] 1 lock held by khungtaskd/31: [ 2261.551977][ T6617] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2261.554707][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2261.570120][ T6617] Node 0 [ 2261.575299][ T31] 2 locks held by getty/5628: [ 2261.580813][ T6617] DMA32: [ 2261.583074][ T31] #0: [ 2261.583124][ T6617] 995*4kB [ 2261.586014][ T31] ffff888033dae0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2261.586081][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4} [ 2261.602810][ T6617] (UME) [ 2261.602956][ T31] , at: n_tty_read+0x43e/0x1400 [ 2261.611411][ T6617] 265*8kB [ 2261.620034][ T31] 5 locks held by kworker/1:9/21465: [ 2261.631471][ T31] #0: ffff88802168ad48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2261.641325][ T6617] (UME) 836*16kB (UME) 2526*32kB (UME) 593*64kB (UME) 258*128kB (UME) 84*256kB (UME) 40*512kB (UME) 16*1024kB (UME) 3*2048kB (UME) 270*4096kB (UM) = 1341716kB [ 2261.650913][ T31] #1: ffffc9000c327bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2261.686889][ T31] #2: ffff8881457e2198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2261.695931][ T31] #3: ffff888023b5c198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 2261.705592][ T31] #4: ffff88802f89f160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 2261.715982][ T6617] Node 0 [ 2261.717706][ T31] 3 locks held by kworker/u8:18/2776: [ 2261.722887][ T6617] Normal: [ 2261.726021][ T31] #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2261.740187][ T31] #1: ffffc9000b6b7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2261.741968][ T6617] 1*4kB [ 2261.751669][ T31] #2: ffffffff8f52b930 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 2261.756608][ T6617] (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 2261.764861][ T31] 1 lock held by syz.3.9730/6617: [ 2261.780923][ T31] [ 2261.783333][ T31] ============================================= [ 2261.783333][ T31] [ 2261.791923][ T6617] Node 1 Normal: 210*4kB (U) 61*8kB (UE) 54*16kB (UME) 261*32kB (UME) 105*64kB (UE) 20*128kB (UE) 5*256kB (UE) 3*512kB (UME) 1*1024kB (M) 3*2048kB (UME) 943*4096kB (UM) = 3892336kB [ 2261.793336][ T31] NMI backtrace for cpu 0 [ 2261.793353][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2261.793374][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2261.793386][ T31] Call Trace: [ 2261.793394][ T31] [ 2261.793403][ T31] dump_stack_lvl+0x189/0x250 [ 2261.793441][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2261.793465][ T31] ? __pfx__printk+0x10/0x10 [ 2261.793503][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2261.793529][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2261.793555][ T31] ? __pfx__printk+0x10/0x10 [ 2261.793585][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2261.793617][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2261.793644][ T31] watchdog+0xf93/0xfe0 [ 2261.793676][ T31] ? watchdog+0x1de/0xfe0 [ 2261.793707][ T31] kthread+0x70e/0x8a0 [ 2261.793733][ T31] ? __pfx_watchdog+0x10/0x10 [ 2261.793759][ T31] ? __pfx_kthread+0x10/0x10 [ 2261.793783][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2261.793809][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2261.793833][ T31] ? __pfx_kthread+0x10/0x10 [ 2261.793858][ T31] ret_from_fork+0x3f9/0x770 [ 2261.793880][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2261.793905][ T31] ? __switch_to_asm+0x39/0x70 [ 2261.793928][ T31] ? __switch_to_asm+0x33/0x70 [ 2261.793952][ T31] ? __pfx_kthread+0x10/0x10 [ 2261.793976][ T31] ret_from_fork_asm+0x1a/0x30 [ 2261.794031][ T31] [ 2261.794039][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2261.811655][ T6617] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2261.814887][ C1] NMI backtrace for cpu 1 [ 2261.814902][ C1] CPU: 1 UID: 0 PID: 6617 Comm: syz.3.9730 Not tainted syzkaller #0 PREEMPT(full) [ 2261.814922][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2261.814933][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 2261.814961][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc f3 0f 1e fa 89 f6 31 d2 e9 92 9b 8e 03 66 [ 2261.814976][ C1] RSP: 0018:ffffc90000a08db0 EFLAGS: 00000046 [ 2261.814993][ C1] RAX: 0000000000001dd3 RBX: ffff8880b8723900 RCX: 0000000000000838 [ 2261.815009][ C1] RDX: 0000000000000000 RSI: 0000000000001dd3 RDI: 0000000000000838 [ 2261.815020][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff81ae021e [ 2261.815032][ C1] R10: 0000000000000003 R11: ffffffff81703490 R12: 00000000100078cb [ 2261.815044][ C1] R13: dffffc0000000000 R14: 0000000000001dd3 R15: 0000000000000020 [ 2261.815057][ C1] FS: 00007f1f8f0ab6c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 2261.815072][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2261.815085][ C1] CR2: 000055555ae795c8 CR3: 0000000024ab4000 CR4: 00000000003526f0 [ 2261.815101][ C1] Call Trace: [ 2261.815108][ C1] [ 2261.815114][ C1] lapic_next_event+0x11/0x20 [ 2261.815134][ C1] clockevents_program_event+0x1cf/0x360 [ 2261.815161][ C1] hrtimer_run_softirq+0x23f/0x2b0 [ 2261.815188][ C1] handle_softirqs+0x283/0x870 [ 2261.815207][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 2261.815226][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2261.815246][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 2261.815270][ C1] __irq_exit_rcu+0xca/0x1f0 [ 2261.815287][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 2261.815309][ C1] irq_exit_rcu+0x9/0x30 [ 2261.815324][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2261.815348][ C1] [ 2261.815354][ C1] [ 2261.815361][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2261.815380][ C1] RIP: 0010:vprintk_emit+0x58f/0x7a0 [ 2261.815399][ C1] Code: 85 32 01 00 00 e8 11 87 1f 00 41 89 df 4d 85 f6 48 8b 1c 24 75 07 e8 00 87 1f 00 eb 06 e8 f9 86 1f 00 fb 48 c7 c7 80 e1 12 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 b9 35 [ 2261.815415][ C1] RSP: 0018:ffffc90011d7ec00 EFLAGS: 00000293 [ 2261.815429][ C1] RAX: ffffffff81a02487 RBX: ffffffff81a02344 RCX: ffff8880299eda00 [ 2261.815443][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e12e180 [ 2261.815455][ C1] RBP: ffffc90011d7ed10 R08: ffffffff8fa38937 R09: 1ffffffff1f47126 [ 2261.815468][ C1] R10: dffffc0000000000 R11: fffffbfff1f47127 R12: dffffc0000000000 [ 2261.815482][ C1] R13: 1ffff920023afd84 R14: 0000000000000200 R15: 0000000000000053 [ 2261.815496][ C1] ? vprintk_emit+0x444/0x7a0 [ 2261.815515][ C1] ? vprintk_emit+0x587/0x7a0 [ 2261.815535][ C1] ? vprintk_emit+0x444/0x7a0 [ 2261.815554][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 2261.815570][ C1] ? vprintk_emit+0x63e/0x7a0 [ 2261.815589][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 2261.815607][ C1] ? __lock_acquire+0xab9/0xd20 [ 2261.815637][ C1] _printk+0xcf/0x120 [ 2261.815663][ C1] ? __pfx__printk+0x10/0x10 [ 2261.815687][ C1] ? __pfx__printk+0x10/0x10 [ 2261.815708][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2261.815731][ C1] ? __show_mem+0x1598/0x2190 [ 2261.815757][ C1] hugetlb_show_meminfo_node+0x179/0x320 [ 2261.815784][ C1] __show_mem+0x1f48/0x2190 [ 2261.815808][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2261.815840][ C1] ? __pfx___show_mem+0x10/0x10 [ 2261.815873][ C1] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 2261.815895][ C1] warn_alloc+0x2dd/0x310 [ 2261.815923][ C1] ? __pfx_warn_alloc+0x10/0x10 [ 2261.815953][ C1] ? __get_vm_area_node+0x28f/0x300 [ 2261.815977][ C1] ? vb2_vmalloc_alloc+0xef/0x340 [ 2261.815996][ C1] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 2261.816036][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2261.816064][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 2261.816088][ C1] vmalloc_user_noprof+0xad/0xf0 [ 2261.816113][ C1] ? vb2_vmalloc_alloc+0xef/0x340 [ 2261.816130][ C1] vb2_vmalloc_alloc+0xef/0x340 [ 2261.816146][ C1] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 2261.816171][ C1] __vb2_queue_alloc+0x9bf/0x15a0 [ 2261.816209][ C1] vb2_core_reqbufs+0xc31/0x1420 [ 2261.816242][ C1] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 2261.816271][ C1] ? __vb2_init_fileio+0x1e8/0xff0 [ 2261.816290][ C1] __vb2_init_fileio+0x318/0xff0 [ 2261.816305][ C1] ? __lock_acquire+0xab9/0xd20 [ 2261.816331][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 2261.816356][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2261.816386][ C1] vb2_core_poll+0x4c1/0x840 [ 2261.816405][ C1] vb2_fop_poll+0x168/0x380 [ 2261.816421][ C1] ? __fget_files+0x2a/0x420 [ 2261.816447][ C1] ? __pfx_vb2_fop_poll+0x10/0x10 [ 2261.816463][ C1] v4l2_poll+0x144/0x2c0 [ 2261.816478][ C1] ? __pfx_v4l2_poll+0x10/0x10 [ 2261.816494][ C1] do_sys_poll+0x8c6/0x1070 [ 2261.816521][ C1] ? do_sys_poll+0x361/0x1070 [ 2261.816549][ C1] ? __pfx_do_sys_poll+0x10/0x10 [ 2261.816573][ C1] ? futex_unqueue+0x22/0x240 [ 2261.816594][ C1] ? __pfx_pollwake+0x10/0x10 [ 2261.816638][ C1] ? futex_wait+0x285/0x360 [ 2261.816664][ C1] ? __pfx_futex_wait+0x10/0x10 [ 2261.816703][ C1] ? __pfx_do_futex+0x10/0x10 [ 2261.816722][ C1] ? set_user_sigmask+0xc7/0x1b0 [ 2261.816740][ C1] ? __pfx_set_user_sigmask+0x10/0x10 [ 2261.816763][ C1] __se_sys_ppoll+0x1ff/0x260 [ 2261.816788][ C1] ? __pfx___se_sys_ppoll+0x10/0x10 [ 2261.816812][ C1] ? rcu_is_watching+0x15/0xb0 [ 2261.816832][ C1] ? do_syscall_64+0xbe/0x3b0 [ 2261.816856][ C1] ? __x64_sys_ppoll+0x20/0xc0 [ 2261.816880][ C1] do_syscall_64+0xfa/0x3b0 [ 2261.816904][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2261.816927][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2261.816944][ C1] ? clear_bhb_loop+0x60/0xb0 [ 2261.816965][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2261.816982][ C1] RIP: 0033:0x7f1f8e18ebe9 [ 2261.816997][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2261.817012][ C1] RSP: 002b:00007f1f8f0ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 2261.817029][ C1] RAX: ffffffffffffffda RBX: 00007f1f8e3b5fa0 RCX: 00007f1f8e18ebe9 [ 2261.817043][ C1] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 2261.817055][ C1] RBP: 00007f1f8e211e19 R08: 0000000000000000 R09: 0000000000000000 [ 2261.817067][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2261.817078][ C1] R13: 00007f1f8e3b6038 R14: 00007f1f8e3b5fa0 R15: 00007f1f8e4dfa28 [ 2261.817099][ C1] [ 2261.830549][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2261.830569][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2261.830591][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2261.830605][ T31] Call Trace: [ 2261.830614][ T31] [ 2261.830623][ T31] dump_stack_lvl+0x99/0x250 [ 2261.830651][ T31] ? __asan_memcpy+0x40/0x70 [ 2261.830675][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2261.830699][ T31] ? __pfx__printk+0x10/0x10 [ 2261.830737][ T31] vpanic+0x281/0x750 [ 2261.830762][ T31] ? __pfx_vpanic+0x10/0x10 [ 2261.830785][ T31] ? preempt_schedule+0xae/0xc0 [ 2261.830812][ T31] ? preempt_schedule_common+0x83/0xd0 [ 2261.830844][ T31] panic+0xb9/0xc0 [ 2261.830866][ T31] ? __pfx_panic+0x10/0x10 [ 2261.830890][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2261.830925][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2261.830953][ T31] watchdog+0xfd2/0xfe0 [ 2261.830985][ T31] ? watchdog+0x1de/0xfe0 [ 2261.831016][ T31] kthread+0x70e/0x8a0 [ 2261.831045][ T31] ? __pfx_watchdog+0x10/0x10 [ 2261.831071][ T31] ? __pfx_kthread+0x10/0x10 [ 2261.831097][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2261.831121][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2261.831147][ T31] ? __pfx_kthread+0x10/0x10 [ 2261.831171][ T31] ret_from_fork+0x3f9/0x770 [ 2261.831195][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2261.831220][ T31] ? __switch_to_asm+0x39/0x70 [ 2261.831245][ T31] ? __switch_to_asm+0x33/0x70 [ 2261.831269][ T31] ? __pfx_kthread+0x10/0x10 [ 2261.831294][ T31] ret_from_fork_asm+0x1a/0x30 [ 2261.831335][ T31] [ 2261.836430][ T31] Kernel Offset: disabled