last executing test programs: 6m54.12186475s ago: executing program 3 (id=336): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x4001}, 0x80, &(0x7f0000000500)=[{0x0}], 0x1}, 0x4) 6m53.90181803s ago: executing program 3 (id=337): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x57) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100027da8e340ba30005088f48300000109021200010100001009048c000077b36a00"], 0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, 0x0) sendmmsg$unix(r3, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)="33b28423bedc48c3f35019e436ba03448eb7bb5c7196274ea2b163fbe345c5cc053c167620225cce6860a5a53c2519919120fb30dbdace80464dbd9a594685a6c147e2e77eb0b0c2cb6ded3e60275f54dd7a71bd8d05c257dc162005be69b53f445af9a870cb6d3f0ab74c48695fb49895ad57f4afb81381477e6f5320029923afc3f7e6e8ad5e55a937941e32daa4e65337d2425512afd27b18f94383", 0x9d}, {&(0x7f0000000600)="fbc6db0a2d43f891304c9c279e9841149e0ca202e09ca42f5c49ee6f522af6d9cc02144820f62061137054adf5936889d406adbe52778b8a172a042794cd8f70e5aa6af17001b5eaf6ec7f626a0c7bb0003e92c2c6a8a732f20b85eefbc6e22cf4351ac1f90eb61ab46b150e8b1dde22fe7a9fe4752a0e6b5066e420e826ea35dd5911ced137464e2d7e79829446087ab8ad30b60429772f0b415173db447d3fc8834b023deb0a6585acf1853b1b46e8dd1645aa82ec3e826cf1b65349734878378b86083f3da05a4cde66a2b8ff60cd053a733abc7e8103c0f89fffda3d34db70d8618bccbb0d6a5e27d472b8c1e48c1d659f", 0xf3}, {&(0x7f0000000940)="2439a2991b5e2ce41fc996060c7e7604237464d7c5473b0063cbe13229ba7c0ffbc595ffa461f43bb3831636708cb435e2bc0062310f0bc302c4e9312ed77a9f3dad34be9cb74013d749e513bee2ec5d25ea5f25e8123b36253ca32deaaf3ccb3d9d8e03d039105f167fef0961c76ac18f7976c4b139fcf15a6787022d3f673a2199c35ff229a2a885e7e3f128add5f3207a7e07ea7bbef1ec7970d2b4f3f7727bc71e05e32d53ffb5a3090ea8b6f736614f1df13ba95cca6596c062b61d8d4567b53357d95669e4b97a9a613a0486cbaf32d286d6ed0e4db8d62ff2e8f89f668b430cafd94ae77ecb66091cb0945c194dea63659edb24f3cfc6fb6b083c659b3c53b71cc12eb93d68a6d3ff4c1e3478d5efa690d87c868c38fd4308c49984395c008b85dc84b1f03fa726dadb9985ea4f057ce2470ec0a8d349306d2b2044c7b7293b70b55111a4e7b287e1181785d9f5e6e5c9ddcf92e4f92b81b75614f59b2fa00358696c166b2a20037f3818f2345d6eea2b2a6fd15173b58c910b42630ff1ebc265340464f3cb266a9b4a4d36879c3409180ce8bd0a3259ed91af7b24607d37a4822f7e494d61d224dac425f5ac5c72b49d684e39cfafb5e29bd06e5f9e68535ba3e0376f3ef759cbdb24af2b445f1c20496565734806b7f43a46af2e9437ff98b7a6be13f982953040c1b930e5b4b8c185326d90f0f883133ad2b5bed449582bb4d87a20a2339749476d46287000c200a9a1fd49002645bd19a9ce0a73fa42e15ce422efce046f89ca1003d62494a8def127958311be45e19914981807ed10fe1be1224cf483432192f9f7db5231155110e36e13f53004172764e02aa9129780012809b3b1ad90328d35cd1918109478c8a0a46d79370b522d39b528edfaf26e8f8c1faa84d489ebfd1dbf7745ccf14ef47440c767b8b4589973c5ec7335d0f2a5d04dfb9554176dac749bd84a4bdd5c8d946ab56e8a05ff0e8901f0324aeb7684d678ad504f9ebe43623b30ef17de180ddddd28c9a67e5bf81a8be94ddd237b1373070df830eaa81de71ba24e0fb507833265af0072f268e534b82bacadd3bea4b2856c46930192bcf1caeb1f24664a675d35448538f4fa0064fb8b8f253419d9ff0be1027ac1a7f71d3099baa5cdc8b74af26fa8a5346271c2af6a6267a057b73b0f134e77c761922e71b165f150759cf605161bba7faf2ace5f9218a5e932133e9cab7c9c0404634698580099b828587dae95ecaff198f626ba0775189b19544d5295ac205de52ec6be9f78f376d5b69d4dc87dcd05f7161d62872e6f0762044685e4af193f9570b1f89ee2591b9acf746231f5c0d5cec3c1693608eb4e36c5faaad5df8e8e8537277b364ea13417a1f4a8c92005dc2fca86c54a21dada444d1141d0f3f01119a64550138581e73b87fc31123f521d7c58980c7c2086b43736027cb311d296cd2c0a2964881f617026f2ec551cfb769c632b506854737f0a2a9ecd743bdf03cf1eaf9040eaab467e7e3e7253e7ba6efbeea74cc4d0ba3e846e755debf23ed675242bf2951f1b28268925ccff0bd28b023447ec45fabe1d054e1617a74ab304c61d70f6cf93daa692d310889cd2c1591dae32500b53427a150c7b6d7c9a5c38bca8fafdde9b1ef78d41ead06353f202f7fac6dec68c88f192b6d8e9424cc1ee97f00ef9b4b944c1184572597b15b43067f950dba2b07ada1cc2d92814df85f3620491da82479d6317d76a67230debe1bbbeec506930410fc3a4c09e2c9eaaf1d94d8afd0b171329ceb88dd9a888a848aa8c6b32c34856748c0bd4f7c66657bfcaf0f47156c7fee341cba1b8ea3e17d1a5562efa5cae7495e5479ea03ca5bbbabaff9e5b3f80338c8ce708c7971bb93bfceaaa99dd1e0e265af1864c6b83d1638be2094a9bd485c2c1b7d4255d5ee4a6bba9dc569e42f2d9cdd90f9212930d6548f3fe330b6961088463835b9ce03eae042b18fc86f5c7f47f91dff18b179369513adecc0ab1200a315fffea1522cfbeaa7e586460463c76aec850fe1fdb1b5494256b7744b7ddfe8e89bcef05fdcb70196650a1125aa276d456e21ed61719b894ad92a8dc3b69a23399706f14c3d11de989be98509ae2b6b86429ff13446bd10f827d8cc85da616c561f1891cfaa4a108f7af112c7b1e752d143e7288c1c83db85b850a141d64f144016d06ec873c26838b592a79411634a93b76779879cc9c09ccd26449fde38c36daef68c14281eb8440c5e97c1a5b77d99e28d8bb872cd3e1413abd1f5e0549ae5622988cbda14dbb24ef866b2188bdf8c433873730f4b2d3c5d341dfbda36300c0c565ae0e09a9c8734467887fe96b322331f8977ce40eccb3bb59e6313b4672be0432d945868e57f887a39dc5efa479a7bdebdc53f845e3d571ee837b6e62ffd4954f0af2671d88dc12b07202d4e24ca4a06439b801928d895c1f34ec00344ae5df7ff098713666c6fe9efb1eb67eaeae06ed0a71fc8dc6e3879d346e916ff7a3358c52054663ccd5614318514f38cd9d4a33d5dde83c9216f063ca703c37bba06eba873cf23037083727bb8ff880b41d2982e6727a9e2a1465db7216a52d0b13a29a84835b885bf61d3c948a0ca630f6781c076b335b380f3dd0008f432a306777d06163cfd7604d74fe0676d39155834ee9ffe37c6c3eaf95454e6904c988997c1ec54f019a0901c02ff0545389ab9e60010a69c8c3a966ce84e8bb0c75533beac91351b7e0f8774d9877f4589538f90a6fb6aba91171614322772387b15c4dcd1a49c1fab3efbf2c103075543b3b0f66a7e21758af11870f1e1ad40b5846d0003d45786605bda685e315fce180c629d66a968301c2714593094f1b29e8ddae991b10d930a70c1e48e7e370e4403848a155686d5adb89374da5fbf64fddc18a8d5030a14e02a2e2b802bd6de7118d9dbe44d1a0f586decab1136324312b19258d3e45b88f6428e9adb57654cd5d913412b6def0546b0ad982e6993ba0d10721809516ac0d3b52e7206a4c1f05713e6ed900922aa18832e557891c6a681793c38a3b703b0a00f797da0e87649dad05ff11149892eb0b67db66092dd3e089639b0722448b544d036e504b9e4432e6147b13a5504024992233346df77c3e07eb5a91972d58f9643660e8ae43ffe080758fd5054a3e74cd78c2000cced4d954fc017415b5ecc1202355ef979d03403d7b77c897b9298733b979ff6c155042543eca5cafb01c1259bbf8e830ce3fc0a2909b99766f081e137c7e0dcb6252d2e415cd98ab48d08be2b79be8c0a8cfd99b8262eec7083233dc8bff01ecefbea231f66c1caedd43d75c4ddc68ad311aa2e0d91f1398af42465548b086e12408c4c500c7c165bc255320416b1d9b37e8746e6f52555572ffe89f52434bebda8856c011ad28613d845ad8906a0d131814ea1c35bd4570adebda34145d734c252c91a9c0a8999598f31a47018418fb9339791080dcb70f8e77e68d5c413f50dbe26e624d8b4c7509201784e696323ae3ca0e938b3a44917baac43714cba6361748c9691af2ad9b544cd87dcf38f2f060215e84f35c037f7f7eaf6a87f1d9d853aa7993786640dbe870097faa061277616ee67a4d4939125a592e83bafe1b605355f01cf05db5e23869bc0dd2a98e3d41b78e0ef47b757bc3a0809c6ac7b90394b3281f6c829f333f6f37f18211e216e8d13e685bccd7b332de0649a1e0e6b8c95a02808e723b2371dfe95274909769510849fd0da11c2ad31600dd588f11189287c636f8fda286f6c1018a810a460958c299e45ed0f2fa02320b39a2427d70374a3f0441c3fb8a293c50031ec213eaa1f28923ddd35e7886ed5f2520846bb236340b81320071cebb9bb339757dab8b70e054add1278cdfa0aaa94a6a3e204fa54be2a2571575b5cd85aabccfefda2d9ab4f6cf682b07462e4057405935421fc440aac21ffb7e470ad3cbb3d8d73d781c85908d0f8c0c911c0c092cb3df7409f4a075d2d5dfe0676b53bd64e4a2ac5f6033d566acc6630021ac3735d0d3b55c121a0c8a0f68902a6784c0a3f2595f5706d5f1a3973419585dc6a3f16b827ef7672b257c32b77c87d04438c1428911b4f789fd921b28e9ab2c90f266d0815cfabc24ed5ecba54d64fa5ef9b778414fb9e76b234898e7c4abb92a9d8d8a83f636c7faf390517b7ecf3eda8e59150befaf8bda2b1924555babcd6f9198b3a4a337f266b88aea9f381b9eda0da0903d1fa29baba37bd48855e4cda33a057cc0688614c7a1665afa88c963fb8339b4775139639068175f9c8622a0a7babf19423bff592c5db77702c09f39488759c47130d5583d512b9ed60a0cbef16128f41728185b8ae8de195c0215b23391f0c2e61a57d40334000c1a705b112f8bd2308ad9c3a72a9cef585a61b74dfa29066dc2c4157d709effe612e810a816ef4895cc32b20180696a0ad81001c966464ef87df9e0654da672c56ccad7e0fec8f2c05dea640ae8a6eef0d10a2114e89ec50f5fbf9db14a33e1da402011057afb637e3244e46c108b8fcb381b031bf01c209f6c9adf0705634e5c282eb1ae44232f3afbc4b80a8d5bb98c6078cd8bb6c206294a0ef5403c63c52c07c90b319eb76630a156b12a61e29b78760f4ca5ce2ebc10c3c9c148aeabff364cf58bfc6f34267c32e88983a394aada5b27af5ef1aad8812d2dddf2e34f3b8ad67b468c996da7dd2f23670a64bf832b0fa4c6a8712bd6a5a0a399f9af38ba05a53ba2c05b7dfc2fe335c0a3b6a58b1681cf3de0bbeb5ac10ab874789df9051a5fa090f7a53a823bb0e188562833bdfb6559f3e474cac820d2454e38910d78f716692c0ed292fa2e6c87ee80db207c51a6d3352b9e63ad956dbc4a98e04e52b453d22ccd4c1d6f98c4bbd1b8bdd4434a6a6a8895c51deebddd894bba5eb322c4e49078cabee187a21d64010b2c819606d9affef6e60666b94bb0bc42072077e1750ba45d7e1c92878544ca1a2d9a2f6b7a6cc46a2b5630a77f5b3e1d4daa7b833c22c876435cb93f07f990bc3c3efc7ab51c33658bc849326be27363aebdb8ff3506f41ff0895d7d24642044aa6e3adbc3f119219a39fee5fdd2be12addf930c81f4726ae377a7960e26b7609b1592b58e6f9f9d43953274811c99500bce04279da470e59a7a059dfd0a12a0d6547107dbfedad87ffffff36c863ac6a753d194067218e4459cbee048eba0d9216f27d5f92b1b60a0c355e048c35bf1b4dc2c96c201e465b67093386f31647435d0a7ad160b2027f6528b315cda394256bdba55327b139e850eb2baef908bcb23c8bdfbd4e659df110dd9059cfeca4fb19f4703d0b08ffdbfd9c6c4a4b0bba4e8f51148ec96208dfc432cf24722f6154d0e746f8c8b713e658ed562ec64c84ea8dc75b39e403db99363fb26d9e600961f8b9b25a866ca7789bb0245f624ec01bf684918770291abe1f7b2a88b1aa55ca8709a42a4cf23b8d800699f3caefc20f549570a1bcd9941999f876b60d06f650b9a4cdfaa196c0ed26a11655c0a9f3ce4b5a95f4e4d02618f72fb32cadafcf5f011df4782228b734626dc2f17d3909e852b7fe139cc1a89101b425e83e2e55011db75cd109ceb77de9cf23915086712963ff2ae6500e2a05110319df0e3a9026d3aeb064da603c661798d3b13e431617514b820af255f87684d2e85003ec81dd99cbfd36401f42c720b3b458c8a7ea66f2df1edd706db2d606c6f3481ee489bf33baa651b19646caa6bdcf0ad18dab4e99159dfd91421375c544cb3ec371e2602", 0x1000}], 0x3, &(0x7f0000000700)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}, @cred={{0x1c}}], 0x38, 0x4004040}}, {{&(0x7f0000001940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001e40)=[{&(0x7f00000019c0)="c94b84c2b787a5630479cbfef8c01221ec4ee4b6e1b55eaa2e53b78dd8fb29ca3dbe14c1aa6b0ff3de7b48513d561b72ce314543ead71561c2f63f6c17938060d8da031ad11a3133c26151cf0d61e2a9f0e14e7180cbc3f3b29e66b39e7735ec4a2e055e0e7ddef10d5d6092c8b5619a9724984201ca319357ff308bc8ce421a3707512984fa58f85b379ea1636229ef61c7ceaea273474ff27d76b9f73c3337c6590c50ca2dfe73265bdcd60401bf71a74ccc5782411db7cd4b3d6375fcc8cf1426fefa738e2b97b60a7d151668db5a03d1b3d383f5cbb3bb9a", 0xda}, {&(0x7f0000001ac0)="feaab8367fc19976cbb4eb3bd4268bb272d88200db0c4575341843e9a5a6ebabf0d6d1c29a359e4b339dab562984dc23b6a5313b0f0313aad5d2efad41913f033e7fe832059e02d0feeaaf7bc548437f8b2617a120ede75581abfa0ad169f8da2ae2ad6b80a4b0e876f5378c55c04f478b3fb23328240930d68a", 0x7a}, {&(0x7f0000001b40)="b147de32c9162f0e0e8c1b1b90e27c97a95a7bbcb35f34cb697728ae64f5715efeef0111ba379ff9516e6c72af816e75340ca640e96cdfb5152c2921e700461e41bcf2517d107f8cf0470f9976267a1ae6334d6ad8e3de241bd1614b0e90a728af5f0bf40823", 0x66}, {&(0x7f0000001bc0)="d5212334c47dafaa5f0a965eefa23f561ae03cd7761cd549712484c87e3f65d20d30324cf16ae2834646e7f04970753fe8af9ad0619e07b710888322ba4bd40e6f065cb8b32bcc6faeed8f99ba80fbed1ce51ff3add2f8daca7a9ee7b0eb5a02ebd5fc84eeae3c2e2ff46c6547085ac18cd5483a80bf18f44e19617382b8a9ad0ccc0be2739ce93b84f2eb3cb5bf7c6b47d3384f8afc2821edbb256609feb8eadb91d5398ffd1a64aa07f053b56414c4f04179c6bf3633258255a586f11e498d13e237a24271bab03b451c848968e43d3c4681c77177aee24beb76b86f26253aa127a1c256e2", 0xe6}, {&(0x7f0000002500)="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", 0x173}, {&(0x7f0000000400)="1eb7a37dc60915ad0ef7bc7addbb1248f4c906182b91b1241486fe682fe5aab65eaee17ef561aa11b7aab7500df13356f8eb819e2d85e0a0af40882067a82d9e249bc7c9f338588a337654e6a4a6c0f1e3735ec4ef2340e44fcc1842d5e675c8bcfe50f51ab67a71e4a5b3800444a36057a21802cc94b163c5e6", 0x7a}, {&(0x7f0000001dc0)="68e987d986bb021795ee2c2941847e77a40d5bbc281130d558201adcca7b0c30e3948e32ad14dbb28a6627c9f00a0d9525b23b9716a9344e7f0ce8b960c638fd29d7e1dad4ea7bebe7bcd1e0a41014decd81e6eb2a7c005a198b", 0x5a}], 0x7, &(0x7f0000002780)=[@rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [r1, r1, r3, 0xffffffffffffffff, r3, r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}], 0xb0, 0x24008000}}, {{&(0x7f0000001f80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002380)=[{&(0x7f0000002000)="f81209448ecce46fcdea2807b3ebcdc63c8c11ec29975be2d10e6c6780d687eb40d081017f62c10d0e910d3da66fb425704938842ea6d0d3b403942dd32407c5ce3055041a2abd5901beeb21328b1fc8fe5035f3053db0aede7018fb917f948b97fb4c16ee66b0b0165bf2a5e3fcacceee9b57118060bd4d813a5e67e57db28f4d173226e3d2d5173b46c31daf5d40cdf729784598549f84320a967064b81c8b05bcf02dc96c7e9b44f7049ef778dca902771435b3ec16d466d691b243bf458ea6c7ba5147913ed9b46b98d18ccfaf21ed3e18", 0xd3}, {&(0x7f0000002100)="a5c1222398c099d32c18868097306abb4ebdd3bd7266af48ee284b5d568c0a83f089ccf030f5f1d3f549e2ab5fbd623a12917bdd8877d2089c094c23aa5037cbc7172b177735795f127319b94c7cb0869e0cf35cf21ee1e749b7a0b81c0eb4326795f4ec8c531bbb422f46f125af2b6e5e59942574c9f40d1e0b0eb6c16b27603cbfcf54d5062f061d1e3e9c7518583f18e0135ffc14ec8633d26709033caee5d879e3bc", 0xa4}, {&(0x7f00000021c0)="a7dca39e7431b6c983e4fdb3d55de774fd6006a7006fa498abdcc619b8dd2c3743ce1ed461b56eedc9e35a5942b484a93893e9ed9da2f49dab842a5ccfc407e1d116464c683f28c3710664a6d0732f823bb892aa4d7d5dab20d876c15faf7e2da47883d5d4e360a3eadae3fd56875fc8059910ff4d0566be57f9e61414c0a1a3d27d572a7365edca4218c55f8f5e9f96c323126d34f220650b4e10a8d92d5f53a5d73835b8bcd5ba327958ae2ead74329238440e87d3fbefa1121539", 0xbc}, {&(0x7f0000002280)="75086fc28d49d429f187a03863250b5434e1033172339835c4c4d73b1564129b0562e1171d17fb4f380bcf0aaaf75b88f1fccc5aaa4f899eafb421e9ee80c77ceb747174a2e80a839e6ff2e70af1fa468a71cd4ded", 0x55}, {&(0x7f0000002300)="5d9a5699014703310c7bc22f37fc058acf5605de8404da0fb8570bcc6f0955bbab9e77c2cb723d45043dc42ae43ab4905b4d5c9b864e75a7048da005e1a37abf8881bf889f053859ad35cb05a9dd74602f813713bd857d5edb6e716fad4e1a", 0x5f}], 0x5, &(0x7f0000002dc0)=ANY=[@ANYBLOB="00000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="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", @ANYRESDEC=r3, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="5cc49ae81c000000000000000100200002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB="44000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="e4ff13be000034a100000000dcca419651c73900000100", @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32=r2, @ANYRES64, @ANYBLOB='\x00\x00\x00\x00'], 0x170, 0x4004}}, {{&(0x7f00000028c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003b40), 0x0, 0x0, 0x0, 0x4000016}}, {{&(0x7f0000003bc0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003c80), 0x0, &(0x7f0000003cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}], 0x28, 0x42084}}], 0x5, 0x4008836) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="66643df939f2547a8a7fb66bb54f293f8aa55dbfaa7ef234d8b6629a9a7f9a364e7de6c0a540ed3691fc1ad49a32b4b9d366840b", @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0xffffffffffffffda}, 0x10) stat(0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) readv(r4, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb45fd629100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db220100002600000000000080622ea74b2b7f6a0cad8c932e1559f5fc8cd77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="160110941c6709c1f2ae0d0132337a084406218078470102030109021200010207300e09"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYBLOB="01002dbd7000040b5b63050ac866"], 0x60}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008420000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000003e40)="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", &(0x7f0000000240), 0x800, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r6}, 0x38) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x1) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000340)="390000001300034700bb65e1c3e4ffff01000000010000005600000002000000190004000400000007fd17e5ffff08000400000000000000008862", 0x3b}], 0x1) 6m50.633281782s ago: executing program 3 (id=343): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000000000000e8000000000068087589d0ec891bf3e637fcea96e5c6431ede1aed37a2cc2c0f385ee7b7ff403d000000100000", @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800e00010069"], 0x58}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 6m50.270551672s ago: executing program 3 (id=346): syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) (async) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000e40), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0xa, @pix_mp={0x0, 0x0, 0x33565348, 0x7, 0x2, [{0x0, 0x1ff}, {0x9}, {}, {0x10000000, 0x894a}, {}, {0x400000}, {0xffffffff}], 0x6, 0x0, 0x0, 0x2, 0x7}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) statfs(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000400)) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x20, 0x18, 0x1a, "fdbbf262d3f4d045f284e29d36f5711a0c7edba0491ad5449565"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m49.279299151s ago: executing program 1 (id=351): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000040)=0x5) write$binfmt_register(r1, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0xd4, 0x3a, '\x10%,\'', 0x3a, '\\&#', 0x3a, './file0', 0x3a, [0x50, 0x50, 0x4f, 0x46, 0x43]}, 0x33) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0xd000000, 0x800) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000013c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001380)={&(0x7f0000000140)={0x1230, 0x14, 0x300, 0x70bd28, 0x25dfdbfd, {0x21, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xef, 0x1, "5c99b340f7dc660d386581d5f1204b690ec770fc9d05601cfff4dd548606e04d6836f6377a16eab45de1e3017cd19e28f51d3be2dc21d1e465207965c9785262911e05ab33b21bde36c9965acd9cb7316f35d151035bac4673b5337326c8f52957dff5c6a1bcd683a4c2acd301ebccdbb8b9ba1128c7cae1523dc6eba1750d5c374664d244d49ac746eb0e6e8baa57f19364c656516cec63537513ba1336b2815cca06a53e133927d9151693bbed94e7074ad0bc645af805d7ae2aa93a21ca3c3d5e0bbdad07d998f573cf205179158d192b44cd80e279cce8300a01665bb292451aaf9ae7bf1d0077d2fe"}, @INET_DIAG_REQ_BYTECODE={0x86, 0x1, "a71530330441f81fc9482113547c567f8c0b435e58091f871fea531d8a329684ad88f5c3ca7f9758bd8fb548c40cf660d4acf799cd18b5dbc1f1233e2d7bab937a8e2cdf6627a37b8311fe78286d662441b39d92036f7becd3d3ea129c812342ec9f465e0fa902213980c7d68851a154aee1a9292f1db4a7095740ccff0682c3a42f"}, @INET_DIAG_REQ_BYTECODE={0x9d, 0x1, "ec88db75f952071eda04d8ff6b55984aa343479e531907e6bd3a3e0e287df1cdd8cd66284090618e208fb0b9aa7b4c3e31bdb37a9d5064476cb29fe683cd5da4046c4c4d3360629d3ac57d64c72f2d6ac9711f573c8a07fe84039af2bedd9f7f4dd672c6018086b952a119e4c874ad897b829084226b3f6029c368c6452a6c48cc0020b3414489e64306a56482ffb978360200486b76a8daea"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x1230}, 0x1, 0x0, 0x0, 0x4049000}, 0x20048017) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001400), 0x214680, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x11, r2, 0xa11e9000) close(r3) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000001440)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000019c0)={0xffff, 0x0, &(0x7f0000001900)=[{&(0x7f0000001500)=""/20, 0x14}, {&(0x7f0000001540)=""/222, 0xde}, {&(0x7f0000001640)=""/147, 0x93}, {&(0x7f0000001700)=""/220, 0xdc}, {&(0x7f0000001800)=""/124, 0x7c}, {&(0x7f0000001880)=""/86, 0x56}], &(0x7f0000001980)=[0x8de, 0x9, 0x7, 0x8], 0x6}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000001b40)={'tunl0\x00', &(0x7f0000001a40)={'ip_vti0\x00', 0x0, 0x20, 0x700, 0x401, 0x101, {{0x35, 0x4, 0x1, 0x30, 0xd4, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @multicast1, {[@ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0x9a, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1b}, @remote]}, @timestamp={0x44, 0x14, 0xf6, 0x0, 0x7, [0x4, 0x1ff, 0x81, 0xc2]}, @rr={0x7, 0x1f, 0xe5, [@multicast2, @private=0xa010101, @broadcast, @private=0xa010102, @remote, @multicast2, @loopback]}, @lsrr={0x83, 0x17, 0xcb, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @timestamp_prespec={0x44, 0x14, 0xfb, 0x3, 0x4, [{@broadcast, 0x6}, {@multicast2, 0x9}]}, @timestamp_prespec={0x44, 0x4c, 0x74, 0x3, 0xb, [{@private=0xa010101, 0xffffff01}, {@broadcast, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@remote, 0xfffffff7}, {@initdev={0xac, 0x1e, 0x2, 0x0}, 0x7}, {@loopback, 0x2}, {@broadcast, 0x4}, {@loopback, 0x6}, {@remote, 0x80000000}]}, @end]}}}}}) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000002f40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002f00)={&(0x7f0000001b80)={0x1350, 0x12, 0x200, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x7, 0x3, {0x4e24, 0x4e21, [0x9, 0x81, 0x1, 0xfffff97f], [0x9, 0x6fea, 0x5, 0x7], r4, [0x9c8, 0x3ff]}, 0x0, 0x7ff}, [@INET_DIAG_REQ_BYTECODE={0x95, 0x1, "4e53aa802a202fff63d16844ed189e746321f85c1a80f79f35b1f441a0eac70ff50aca5c33bc5a984fe4947ddf7ca60142b333898d8e9aa66614af406632aa190057b75a3387a8a097479580f2c1bb307f6509c6169b946f3642568909f4c22e912ac3f066985be1b4ef0608ab7fadbeca62bd4eba39b954a00fd159fcb435bd59a6dec88749f4490f1ffcc4dfe7a1678c"}, @INET_DIAG_REQ_BYTECODE={0xa, 0x1, '`\bI3o3'}, @INET_DIAG_REQ_BYTECODE={0xf3, 0x1, "011e4b06f294718e00e6d2e4e61c4628d7d4aa186c1e97a22d34327b7eaec44af8ffad84c96b4231e9f5c9c0c751090581054c8eaf5e2952279a05bee3619e5c02bde9553807173e76817719d351baaf0191cf02a69becec88d91dc6f290438eda20998f6e220b4190cdd0c188d4b469c3c9052d205f14fb7dd4b5ab80035d8016572968c10de962e6070abf1d1cbfcf1712ece36fc8e23fc1baca1281c4f3fcaf9296488b342cf23e2286b8bb3614bc0236226fd9208f0f7f970bed5ec222ac4867661ba2399ea008fc863147cd84507c60b181e8e6499895254e396bd4f062cc85f7371895e01b3bd84caa2d7c12"}, @INET_DIAG_REQ_BYTECODE={0x4b, 0x1, "d9a3b262e42e9d131b2c035167e58d34aeb266d89db238d60096915bf2aa021b209c2ee58e53f9ac529cb5edb2f13d8d01bba483940d64be34b27db94f9d8d99ef202c693dfef3"}, @INET_DIAG_REQ_BYTECODE={0xfe, 0x1, "caf91c25f263c92a59def49daf15097101295b7bbb17307cf0204bb4505cf9a26b0d920dd280e066caef30ad9d1321a62e14f1ce645fbc1f29342c5c3434653ff7e98a1b2f5199794e2f6a2314ff788d91bc7b9da4b78cbda70bd93f658910c5c882ec4398f8d9353a1d4c58b9d6941977217d93cb0d75ec7b18060ee095e7236522d3ab88d3fd983680507fbb7fc7c95f0551532ee040f3c395265198e18439ba4ad1cd7ac77711cb4f7b1e087aef5a1f9d9e2c4521826e8365aa85336dbc8bac7a368e6f24a5239f5f1c7924f319ecfc54c376053b6fcd60e0ca01c386f7f44e8bb60b27a5d9653b12c40e10eb70266b46de9cd214a037caca"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x1b, 0x1, "b7d2c0e4aa1575ba2eff3dd9105bf179b149b3394cf01d"}]}, 0x1350}, 0x1, 0x0, 0x0, 0x814}, 0x4000000) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000003000)=[@textreal={0x8, &(0x7f0000002f80)="640f78a8c6f6670f01ca660f3a20e2fc66b83b9700000f23d00f21f86635100000010f23f8bc000066b8000000800f23d00f21f86635100000030f23f80f01cad303c4c3c9cfef0066b9800000c00f326635010000000f30", 0x58}], 0x1, 0xb, &(0x7f0000003040)=[@cr0={0x0, 0x40040035}], 0x1) ioctl$IOCTL_STATUS_ACCEL_DEV(r3, 0x40046103, &(0x7f0000003080)={0x1, 0x10000, 0xd7, 0x7, 0x1, 0x2, 0x5, 0x3, 0x2, 0x3, 0x3, "797d5e643adf6ded0ed4cb9f326f09c2be9f09a7c14391b2ceaa347dc070e05a"}) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) finit_module(r5, &(0x7f00000030c0)='-\x00', 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003100)) sync_file_range(r1, 0x199, 0x5, 0x5) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x4161, 0x0) r6 = semget(0x0, 0x2, 0x80) semctl$GETZCNT(r6, 0x1, 0xf, &(0x7f0000003140)=""/1) mknodat(r0, &(0x7f0000003180)='./file0\x00', 0x8000, 0xffff) r7 = syz_create_resource$binfmt(&(0x7f00000031c0)='./file0\x00') execveat$binfmt(r1, r7, &(0x7f0000003400)={[&(0x7f0000003200)='^\'', &(0x7f0000003240)='\x00', &(0x7f0000003280)='tunl0\x00', &(0x7f00000032c0)='/dev/sg#\x00', &(0x7f0000003300)='\x10%,\'', &(0x7f0000003340)='\x00', &(0x7f0000003380)='(\'\x00', &(0x7f00000033c0)='-*[\x00']}, &(0x7f0000003500)={[&(0x7f0000003480)='$A.@\x00', &(0x7f00000034c0)='-\x00']}, 0x1000) r8 = socket$isdn(0x22, 0x3, 0x23) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000003540)={0x1}) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000003640)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003600)={&(0x7f00000035c0)={0x30, 0x2, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xd95}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040014}, 0x4001) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000003680)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f00000036c0)) write(r8, &(0x7f0000003740)="35b425e5d85d09fc55625d0bd479d70573ca5cd6589c765f2449edf96044548dfe9cb1264419ee0a124b1ec758d28456e8eb2cedf3e3d2b1ad46726b92912f648e6eb393601087ec825e6b8db20354794273a27eaf88956cc0117e", 0x5b) 6m49.133351041s ago: executing program 1 (id=353): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRESOCT=r0, @ANYBLOB="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"], 0x29c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x200840, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f00000000c0)={0x2, [0xf, 0x6, 0x400, 0x0, 0x9, 0x101, 0x7f, 0x14c5, 0xfffe, 0x3ff, 0xd, 0xcca, 0x3, 0x200, 0x0, 0x8eb, 0x8, 0x7f, 0x39fb, 0x2, 0xa, 0x6, 0x100, 0x7, 0x4, 0x7fff, 0x2, 0x2563, 0x7, 0xd, 0x75ec, 0x1800, 0x4260, 0x7, 0x2, 0x81, 0x0, 0x4, 0x8, 0x8, 0x6, 0xff00, 0x2, 0x40f8, 0x8, 0xffff, 0x178, 0xf], 0x7}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0xb9c1, 0xffff}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r4, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa, 0x2f}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7f}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}]}, 0x40}}, 0x64000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r5, @ANYBLOB="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"], 0xd0}}, 0x8000) 6m48.884929717s ago: executing program 1 (id=355): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60b03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001e00010000000000000000000200000001000001000000fa00000000e0000002"], 0x24}}, 0x4000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r9, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x6, 0xc, 0x3, 0x405, 0x1, 0x4, 0x1000, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x4, 0x8, 0x10001, 0x7ff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d81, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0x6, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x5, 0x5, 0x0, 0x24e, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x80, 0xb, 0x1, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f15, 0xc, 0x2, 0x9, 0x7, 0x5, 0x5, 0x7, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x1, 0x8001, 0x7, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x9, 0x5, 0x4, 0x10000, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x4, 0xff, 0x140, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0x1, 0x9, 0xc3, 0x8, 0x7a3], [0x9, 0x3a89, 0xffff9a7f, 0x200, 0x6, 0x2, 0x1, 0xfffffff3, 0xd077, 0x4, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0x101, 0x2, 0x66608000, 0x5, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x29, 0xffff, 0xd, 0x0, 0x1, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x8, 0x20000000, 0x8, 0x1d, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb"], 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x1, 0x3, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffb, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x1, 0x0, 0x8000000000000000, 0x0, 0x8000000000000000, 0x4, 0xffffffffffffffff, 0x1000000000000006, 0x8000], 0xd000, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m48.684730427s ago: executing program 3 (id=356): socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x0, 0x1, 0xb}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_GET_DUMPABLE(0x3) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="001d01000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCSETS(r2, 0x5402, &(0x7f00000014c0)={0xfffffffd, 0xffffffcb, 0x1c02, 0xc8e9, 0x1b, "cc33101d3f0000002000"}) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) r4 = socket(0x18, 0x3, 0x0) write(r4, &(0x7f0000000300)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff1100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c0504000000000000000482f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d57155870c58a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700000000000000", 0xfffffffffffffc17) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001880)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x120, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x218, 0x20a, 0x278, 0x218, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'veth1\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x0, 0x0, 0x22}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x6}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0xfffffffc, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0xfffffffffffffeae}}, 0x44004) preadv(r2, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f0000000500)=""/215, 0xd7}, {&(0x7f0000000280)=""/41, 0x29}, {&(0x7f00000002c0)=""/53, 0x35}], 0x5, 0x1000004, 0x0) socket$kcm(0x2, 0x200000000000003, 0x0) socket$inet(0x2, 0x3, 0x6) 6m47.433427885s ago: executing program 2 (id=359): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x1, 0x0, &(0x7f00000004c0)="f4"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1d}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0xfffffffd}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5d}]}}]}, 0x40}}, 0x8050) 6m46.947360003s ago: executing program 2 (id=361): r0 = socket$kcm(0x10, 0x2, 0x0) (async) epoll_create1(0x80000) (async) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in, @in=@local, 0x0, 0x8, 0x0, 0x0, 0xa, 0x50, 0x180, 0x2b}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x3}, 0x0, 0x0, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x42}, 0x0, 0x6c}, 0x0, @in6=@remote, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}}, 0xe4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r2, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x26, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x80, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x1, 0x0, 0x8, 0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x3, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x80, 0x4, 0x10001, 0x75, 0x0, 0x2, 0xffffffff, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x7fff, 0x9], [0x0, 0xc50, 0x3, 0x9f5, 0xfffffffe, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x10000006, 0x0, 0x0, 0x7, 0x3e90f5f, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x400, 0x0, 0xffffff7d, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x9, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0x5, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x4, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x4, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7ff7, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r3, &(0x7f0000000580)=[{&(0x7f0000000240)}, {&(0x7f0000000280)="f697079a161cfb7702711e629acda76933ddd0c20574eb4d4d28f9", 0x1b}, {&(0x7f00000002c0)="c27d037369597e0a4e", 0x9}], 0x3, 0xfffffffe, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, 0x0, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f00002f0000/0x3000)=nil, 0x3000, 0x1, 0x2010, r1, 0xe52a7000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff038}, {0x28}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) (async) sendmmsg(r8, &(0x7f0000001c00), 0x400000000000159, 0x40840) (async) syz_io_uring_setup(0x4e1, 0x0, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1, r7, 0x0, &(0x7f0000000940)={&(0x7f00000001c0)=@can, 0x80, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/119, 0x77}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x3, &(0x7f0000000880)=""/140, 0x8c}, 0x0, 0x20012020, 0x1, {0x1}}) (async) r11 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x42) ioctl$SCSI_IOCTL_SEND_COMMAND(r11, 0x1, &(0x7f0000000000)={0x0, 0x8, 0x4000bf}) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r13 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r13, r12, &(0x7f0000002080)=0x64, 0x23b) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000002200000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x20040040) 6m46.516572021s ago: executing program 2 (id=362): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x556, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) migrate_pages(0x0, 0x8, &(0x7f0000000280)=0x9, &(0x7f00000003c0)=0x3) sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a4e", 0xe1}, {&(0x7f0000000b80)}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fcdbdf24010000000000000002"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 6m46.429737893s ago: executing program 0 (id=363): r0 = open(&(0x7f00000001c0)='./cgroup\x00', 0x202, 0x6f) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) (async, rerun: 32) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, {0x7fff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bdddafd1db934473aeaacb0565c1c2251560ee04a6100"}}) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) (async, rerun: 64) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) (async, rerun: 64) bind$tipc(r4, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (async) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000300)=0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x106, 0xbda8dca89c3f2464}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r8, 0x1000}}, 0x10) sendmsg$nl_xfrm(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x44) (async, rerun: 32) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x200) (async, rerun: 32) bind$tipc(0xffffffffffffffff, 0x0, 0x0) 6m45.734179563s ago: executing program 0 (id=365): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0xc40, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}, {0x0}], 0x2}) io_uring_enter(r0, 0x100847c0, 0x0, 0x1, 0x0, 0x0) (fail_nth: 26) 6m45.330120707s ago: executing program 0 (id=367): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0x7ffffffe, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) 6m45.123048921s ago: executing program 1 (id=368): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaabaaaaaa0806000608000604"], 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000780)="2fe19d4693816b321d3a", 0x2, 0xffffffffffffffff, 0x4}, 0x38) socket$nl_crypto(0x10, 0x3, 0x15) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x190, 0x4c, 0x232, 0x0, 0x0, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3, 0x48}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x0, 0x0, 0x0, 0x1}}, @common=@srh1={{0x90}, {0x1, 0x7, 0xb, 0x7, 0x5, @dev={0xfe, 0x80, '\x00', 0x2f}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff000000, 0xffffff00, 0x0, 0xffffffff], [0xff000000, 0xffffffff, 0xff, 0xffffffff], [0xffffffff, 0xff000000, 0xffffffff, 0xffffff00], 0x4, 0x400}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@local, @private1, [0x100fffe00], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0x118, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}, {0x0, 0x2, 0x1, [0x4ea, 0xfff, 0x8, 0x3, 0x8, 0x8, 0x1, 0x5, 0x2, 0x0, 0x0, 0x6, 0x3, 0x4, 0x800, 0x3ff], 0x4}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) dup3(r4, r1, 0x0) (async) getsockopt$inet6_tcp_int(r5, 0x6, 0x4, 0x0, &(0x7f0000000100)=0x2) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x2}}, 0xe8) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r6, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) (async) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000001c0)=0xf) (async) setsockopt$inet_int(r6, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) (async) setsockopt$inet_int(r6, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) (async) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000019100)=ANY=[@ANYBLOB="edefb6020000005d"], 0x0, 0x0}) (async) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x20, r2, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4, 0x142}]}, 0x20}}, 0x0) 6m45.016232279s ago: executing program 4 (id=369): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0xff, 0xffffffffffffbfff, 0x9, 0x8000000000000005, 0x3, 0x2, 0x9, 0x400000000000006, 0x9], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r4, 0x4068aea3, &(0x7f0000000000)={0xc1, 0x0, 0x3}) 6m44.751788533s ago: executing program 1 (id=370): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x4001}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)}], 0x1}, 0x4) 6m44.459351777s ago: executing program 1 (id=371): r0 = socket$packet(0x11, 0xa, 0x300) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x15, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x12) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) writev(r7, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac14"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) socket$rds(0x15, 0x5, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x6) getsockopt(r4, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @local, @remote}}}}, 0x0) rt_sigaction(0x40, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc29c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) 6m44.16162523s ago: executing program 0 (id=372): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x800000, 0x10000}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000240)={0x10, 0x0, 0xa03, 0x2}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x810000}, 0xc) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r5, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r10, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc) bind$netlink(r5, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x4) writev(r12, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 6m43.867527763s ago: executing program 0 (id=373): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="4011b2000000b2229b"], 0x0, 0x0, 0x0}, 0x0) fanotify_init(0x8, 0x1000) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x20, 0x6, 0x0, @private1, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @timestamp={0x8, 0xa, 0x5, 0xbf3f}]}}}}}}}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) 6m43.718634671s ago: executing program 2 (id=374): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x103, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000200)) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r5 = memfd_create(&(0x7f00000013c0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf6\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\x95\xba\xda\xc9\x93\x9c5\xcf\t\x04\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x80\x00\x00\x00\x17\x81\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6\xfb\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r3, 0x0, 0x10000, 0x0, 0x9, 0x2a7345, 0x20d37}) (async, rerun: 32) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x75, 0x7, r3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x253b5b}) (async, rerun: 32) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0x6, r3, 0x0, 0x1, 0x0, 0xa, 0x2bff79, 0x1ba373, 0xffffffffffffff7b}) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x6) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) (async) shutdown(r0, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x4b0, 0xbbba, 0x2, 0x0, 0x0, {}, {0x0, 0x2}, {0x4000000}, {0x0, 0x8}, 0x0, 0x3f0, 0x0, 0xd613}) (async) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) (async, rerun: 64) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) (async, rerun: 64) sendmmsg$inet6(r6, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) (async) recvmmsg(r6, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/231, 0xe7}, 0x9}], 0x1, 0x12141, 0x0) r7 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) (async, rerun: 64) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) (async, rerun: 64) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) (async) close(0x3) io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0x6, 0x4) (rerun: 32) 6m43.279646391s ago: executing program 3 (id=376): socket(0x22, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x7fffffffffffffff, 0x80000001}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000c40), 0x604102, 0x0) syncfs(r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r4, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000100)=0x800) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x55}, 0x2c) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x53}, {@remote, 0x4e23, 0x2000, 0x2000000, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r7 = gettid() ptrace$getregset(0x4204, r7, 0x7e24c62ee6a8b2f6, &(0x7f00000000c0)={&(0x7f0000000180)=""/248, 0xf8}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m43.138355008s ago: executing program 4 (id=377): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0xc40, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}, {0x0}], 0x2}) io_uring_enter(r0, 0x100847c0, 0x0, 0x1, 0x0, 0x0) (fail_nth: 27) 6m42.946664477s ago: executing program 2 (id=378): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00ff03000000000080006a"], 0x26}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 6m42.583730314s ago: executing program 4 (id=379): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@ipv6_getroute={0x2c, 0x1a, 0x99, 0x70bd25, 0x25dfdbff, {0xa, 0x20, 0x14, 0x1, 0xff, 0x2, 0xc8, 0x5, 0x800}, [@RTA_MARK={0x8, 0x10, 0x43}, @RTA_UID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004090}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="656e9419e3bfa7b82774fa94ca1c2c0e8e6147aed9319eeb080e3b08db4712aff84583b9ca084272fabf81ccdc4d6d6f83f42cc048a408fda03143553b109ec3f6ef", 0x42}, {&(0x7f0000000180)="83bf1df3106fea8e3c7078e9f9b438a9222ffedd19516079703e5459d547b93ab4780b67a12f13132bbcc6207627ef90ae4cc2eef8d6c6a0710910f8ca6635d630a84b33f759ae83dc0ffea19618a919805a129c7425e7b9396341ec180955ebfdfa12f12e4f5db7e95277c1c88e4f77f0d9e0b32cc49ebd3b844cd269279239ba445278f9d70646ae842da20369395969", 0x91}, {&(0x7f0000000240)="c755b6cce50a3cee3eb398ab527751eb051bb2559a7fdcab5146e5188b6e4ccc416c035436c583d4db879e68437e8fe43189b46739e8b446b65af8fafa77418b6bed4fead0726c09feddb87bf5185e646b4156196a55f55c9d00ff571e9a39a312ad9813e8a6ac46b38317c634ecf999", 0x70}], 0x3) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x819e4000) 6m41.615665623s ago: executing program 2 (id=380): socket(0x22, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x7fffffffffffffff, 0x80000001}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000c40), 0x604102, 0x0) syncfs(r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r4, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000100)=0x800) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x55}, 0x2c) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x53}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r7 = gettid() ptrace$getregset(0x4204, r7, 0x7e24c62ee6a8b2f6, &(0x7f00000000c0)={&(0x7f0000000180)=""/248, 0xf8}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x7, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m41.601219843s ago: executing program 4 (id=381): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x4001}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)}], 0x1}, 0x4) 6m39.131671266s ago: executing program 0 (id=382): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xfd, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) 6m39.020880617s ago: executing program 4 (id=383): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req={0x0, 0x8, 0xf69, 0x8}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0) 6m23.187426653s ago: executing program 32 (id=371): r0 = socket$packet(0x11, 0xa, 0x300) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x15, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x12) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) writev(r7, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac14"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) socket$rds(0x15, 0x5, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x6) getsockopt(r4, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @local, @remote}}}}, 0x0) rt_sigaction(0x40, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc29c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) 6m22.610018429s ago: executing program 33 (id=380): socket(0x22, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x7fffffffffffffff, 0x80000001}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000c40), 0x604102, 0x0) syncfs(r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r4, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000100)=0x800) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x55}, 0x2c) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x53}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r7 = gettid() ptrace$getregset(0x4204, r7, 0x7e24c62ee6a8b2f6, &(0x7f00000000c0)={&(0x7f0000000180)=""/248, 0xf8}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x7, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m22.350474409s ago: executing program 34 (id=376): socket(0x22, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x7fffffffffffffff, 0x80000001}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000c40), 0x604102, 0x0) syncfs(r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r4, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000100)=0x800) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x55}, 0x2c) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x53}, {@remote, 0x4e23, 0x2000, 0x2000000, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r7 = gettid() ptrace$getregset(0x4204, r7, 0x7e24c62ee6a8b2f6, &(0x7f00000000c0)={&(0x7f0000000180)=""/248, 0xf8}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m21.64620342s ago: executing program 35 (id=382): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xfd, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) 6m21.201166652s ago: executing program 36 (id=383): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req={0x0, 0x8, 0xf69, 0x8}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0) 47.501727016s ago: executing program 9 (id=1169): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x70cb0}], 0xc}, 0x1f00) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async) io_setup(0x3, &(0x7f0000000180)=0x0) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) r3 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaef2, 0x400, 0x2, 0xbfcffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.kill\x00', 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r6, 0xf5) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000800)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, {0x2}}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, 0x0) (async, rerun: 32) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r10, 0x84, 0x21, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) (rerun: 32) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="0fb9457a2e0f8800300fd4cc2e660f3882bd060066b9240800000f320f9037b81c088ed8ba4000b04dee0f06640f212d", 0x30}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (rerun: 64) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) (async) io_submit(r2, 0x0, 0x0) (async) r11 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x800) ioctl$EVIOCSKEYCODE(r11, 0x40084504, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x2, 0x16, 0x8}]}, 0x10) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) mount$fuseblk(&(0x7f0000000080), 0x0, 0x0, 0x1151400, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000), 0x4) 42.464304712s ago: executing program 7 (id=1201): r0 = socket(0x2a, 0x2, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0x2, 0x102, 0x2, {0x4, 0x6, 0x3ff, 0xe97}}) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x3, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) fgetxattr(r4, &(0x7f0000000b40)=@random={'osx.', 'gre0\x00'}, &(0x7f0000000b80)=""/179, 0xb3) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}]}}]}, 0x3c}}, 0x2000c800) r5 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) socket$igmp6(0xa, 0x3, 0x2) r6 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r10, 0x48075000) r11 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r11, &(0x7f0000005bc0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2008000}], 0x1, 0x8041) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) open(&(0x7f0000022ff6)='./control\x00', 0x25e041, 0x18c) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x15) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 41.308902123s ago: executing program 7 (id=1202): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0xa70, 0x0, 0x11, 0x148, 0x0, 0x0, 0x9d8, 0x2a8, 0x2a8, 0x9d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x878, 0x8c0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@u32={{0x7e0}, {[{[{}, {}, {}, {}, {}, {}, {}, {0x1}]}, {}, {}, {[], [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4000000}]}, {}, {}, {[{}, {}, {}, {}, {}, {}, {0x800000}]}, {[{}, {0x4}, {}, {}, {0x0, 0x3}, {0xfffff001}], [{}, {0x0, 0x1}]}, {[], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}]}, {[{0xfffffffe}]}, {[{}, {}, {}, {}, {}, {0x0, 0x2}]}], 0x29}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x3, 0x4, 0x7, 0x2, 0x7, 0x1], 0x1, 0x5}, {0x0, [0x3, 0x0, 0x1, 0x2, 0x5, 0x2], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xad0) syz_usb_connect(0x0, 0x36, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0xc8, 0x5c, 0xcc, 0x10, 0x1189, 0x893, 0xf495, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x63, 0x64, 0x3b, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x11e, 0x4) 39.210094296s ago: executing program 7 (id=1205): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x1, 0x66c, 0x0, 'queue1\x00'}) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x9d) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="900000001000030400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1502000000000000680012800e000100697036677265746170000000540002800500080001000000060003000a000000080014007f000000050017000100000006000f000100000008000c000200000008000100", @ANYRES32, @ANYBLOB="0800040006000000080005"], 0x90}, 0x1, 0xba01}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'caif0\x00', {0x2, 0x4e20, @multicast2}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x328}}, './file0\x00'}) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-twofish-avx\x00'}, 0x58) 38.967732338s ago: executing program 9 (id=1206): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x2000000, 0x0, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x29, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x83a936f24d33bfd4, 0x1, {0x3}}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x8}) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) socket$netlink(0x10, 0x3, 0xe) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x2000000, 0x0, 0x0, 0xc0}, &(0x7f00000002c0), &(0x7f0000000640)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x29, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x83a936f24d33bfd4, 0x1, {0x3}}) (async) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) (async) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x8}) (async) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) (async) socket$netlink(0x10, 0x3, 0xe) (async) 38.751003922s ago: executing program 9 (id=1207): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x16, "43720738300000000200000000000000476f8eb2940a25f0"}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') close(0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0xc0844123, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x0, {0x132e712c, 0x2fd, 0x3ff, 0x3d45}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_usb_connect(0x0, 0x3b, &(0x7f0000002080)={{0x12, 0x1, 0x110, 0x41, 0xa7, 0x38, 0x10, 0xd49, 0x7000, 0x6c67, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x8, 0x2, 0x10, 0x2, [{{0x9, 0x4, 0xc6, 0x9, 0x0, 0x91, 0xb0, 0x9b, 0xf6, [@uac_control={{0xa, 0x24, 0x1, 0x53, 0x6}, [@mixer_unit={0x5, 0x24, 0x4, 0x5, 0x3c}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x6, 0x1, [0x9], 0x4}]}]}}]}}]}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xd0f, 0x703d2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0x8}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x6}}]}}]}, 0x48}}, 0x44080) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff0000000000000400012800e0001006970366772657461700000002c00028014000700fed2"], 0x60}, 0x1, 0x0, 0x0, 0x8050}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x84002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="bd1b5c"], 0x3c}}, 0x0) 38.475684212s ago: executing program 7 (id=1209): write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x3f44ca5737088513, 0x0, {0x7, 0x1f, 0x2, 0x7ab78c4493962e09, 0x0, 0xb279, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, 0x50) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = geteuid() read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r3, r4}}, './file0\x00'}) r7 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r7) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902"], 0x0) syz_emit_ethernet(0x2e, &(0x7f0000002200)=ANY=[@ANYBLOB="0180c20000000180c2000000080045000020000000000011907880000000b31414aa00fd3661e35c351f8e45b8e00f1b306b310037c1000c907801000000"], 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000021c0)={r5, r6, 0x0, 0xf, &(0x7f0000002180)='\\\\\x98\xae!\\A!3\x06\xc7F\xb2?='}, 0x30) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x1000) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f00000022c0)={[&(0x7f0000002240)='\\\\\x98\xae!\\A!3\x06\xc7F\xb2?=', &(0x7f0000002280)='(,\'[\x00']}, 0x1000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x3f44ca5737088513, 0x0, {0x7, 0x1f, 0x2, 0x7ab78c4493962e09, 0x0, 0xb279, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, 0x50) (async) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) geteuid() (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r3, r4}}, './file0\x00'}) (async) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (async) close(r7) (async) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902"], 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f0000002200)=ANY=[@ANYBLOB="0180c20000000180c2000000080045000020000000000011907880000000b31414aa00fd3661e35c351f8e45b8e00f1b306b310037c1000c907801000000"], 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000021c0)={r5, r6, 0x0, 0xf, &(0x7f0000002180)='\\\\\x98\xae!\\A!3\x06\xc7F\xb2?='}, 0x30) (async) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x1000) (async) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f00000022c0)={[&(0x7f0000002240)='\\\\\x98\xae!\\A!3\x06\xc7F\xb2?=', &(0x7f0000002280)='(,\'[\x00']}, 0x1000) (async) 36.329178092s ago: executing program 7 (id=1214): r0 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) gettid() r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)) sendmsg$nl_generic(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x40040) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, 0x0, 0x0) syz_usb_connect(0x5, 0x164, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100007af28810d30b55055b000000000109025201010000000009044000000e0100000824060725518827e7c8c1c20e3f4903ec", @ANYBLOB="993843f55f"], 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) readv(r6, &(0x7f0000000a00)=[{&(0x7f0000000380)=""/236, 0xec}, {&(0x7f0000000280)=""/72, 0x48}, {&(0x7f0000000480)=""/150, 0x96}, {&(0x7f0000000300)=""/11, 0xb}, {&(0x7f0000000680)=""/73, 0x49}, {&(0x7f0000000800)=""/207, 0xcf}, {&(0x7f0000000900)=""/209, 0xd1}, {&(0x7f0000000700)=""/14, 0xe}], 0x8) sendmsg$tipc(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a52bfb0821048f79548601020301090237000100000000090400000002fe1700052406"], 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) 33.489354064s ago: executing program 9 (id=1218): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) syz_usb_connect(0x0, 0x25c, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e9b7e3405e04bf02069e0000000109024a0201000020000904"], 0x0) 32.625646547s ago: executing program 7 (id=1220): getrlimit(0xd, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) read$nci(r1, &(0x7f0000000280)=""/83, 0x53) personality(0x5400004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000000100003050000b8227504b16d1db4df0ebcc7398f190100e33c00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b000100697036677265000028000280060010004e220000140006002001000000000000000000000000000206000f00ffff0000"], 0x58}}, 0x0) 31.525311271s ago: executing program 9 (id=1224): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$rxrpc(0x21, 0x2, 0xa) socket$kcm(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="addaced30a01a7"], 0x20) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801", 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40814) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[], 0x6f4}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x309e, &(0x7f0000000540)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x14, 0x0, 0x0, 0x0, 0x2b, @empty, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000280)=0xc) syz_open_procfs$userns(r9, &(0x7f00000002c0)) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[@ANYRES64=r7], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r8, 0x0}) 31.238670384s ago: executing program 9 (id=1225): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write(r1, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2cc", 0xce) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'veth0_to_bridge\x00', @link_local}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x7, 0x1}, 0x8) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800451000380080000000019078ac1e0001ac1414c7030490781206183f2500000000670000008900007f000001e000000200186371ae9b1c0372528bea78e83d00d1f50e1195e64822ce8e68173b8d120c986b07a440e652ead0329bc02c186551488836071e560f5514ea0e38e9fdfdbb8322c9caf49837dc8b1d0e2d32d9994d86c194cbd51c504d1b258930255edc9696ee2262701ae417be5a6797973b2225260409c50ea1921206f24b91e1f76841101676bc84493ec085a199374b738f00"/218], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x2ae951fe49db0b5e) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="18080000000000000000", @ANYRES8=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) listen(0xffffffffffffffff, 0xfffffffe) eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r5 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r5, 0x0, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) dup2(0xffffffffffffffff, r6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_to_hsr\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r7 = syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) getpgid(0xffffffffffffffff) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000040)={0x2000000c}) unshare(0x2040400) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, 0xffffffffffffffff, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) 24.551276726s ago: executing program 5 (id=1243): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x79, 0x1843, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfc}}}}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000087b0ce90b190"], 0x0}, 0x0) (rerun: 32) 22.350489455s ago: executing program 8 (id=1249): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0xfffffffc, 0x9, &(0x7f0000000100)="3c7034a5ce0588f739ba3213055047248e80ce99789808726e0bc4a8b088331435cea16433fbe00da9a887b13893380abecf3943e024052118bd138eab62a0d4c96da281def15e358bce2be92c73c0d5b1f75a45c7e47629d8cb03c3ee704bfc3e4e1457ae2dfdd910d175fce1a961d88354c64331f295feaed53e5365aa91ba"}) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000400)=@usbdevfs_driver={0xffffffff, 0xfffffffc, 0x0}) socket$alg(0x26, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x10040) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r3, 0x40086602, &(0x7f0000000000)) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a1400000011000100000000000000002a634e916a"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000090) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xb28, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) semget$private(0x0, 0x1, 0x80) r5 = socket$netlink(0x10, 0x3, 0xa) stat(&(0x7f00000001c0)='./file1/file0\x00', &(0x7f00000004c0)) r6 = dup(r5) r7 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x19d) ftruncate(r7, 0x200004) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000640)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f00000002c0)=0xe8) chown(&(0x7f0000000140)='./file1\x00', r8, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x34, 0x8, &(0x7f0000000200)="5c6e075c46ef765e69d340c96c1a1b1389efdf276d8fd9c333bae317bf7ae8b30b651cc5125b11391024a34ce9e61f53287d061d", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) write$apparmor_exec(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000000000"], 0x8) sendfile(r6, r7, 0x0, 0x80001d00c0d1) 22.226504714s ago: executing program 6 (id=1250): r0 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) gettid() r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)) sendmsg$nl_generic(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x40040) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, 0x0, 0x0) syz_usb_connect(0x5, 0x164, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100007af28810d30b55055b000000000109025201010000000009044000000e0100000824060725518827e7c8c1c20e3f4903ec", @ANYBLOB="993843f55f"], 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) readv(r6, &(0x7f0000000a00)=[{&(0x7f0000000380)=""/236, 0xec}, {&(0x7f0000000280)=""/72, 0x48}, {&(0x7f0000000480)=""/150, 0x96}, {0x0}, {&(0x7f0000000300)=""/11, 0xb}, {&(0x7f0000000680)=""/73, 0x49}, {&(0x7f0000000800)=""/207, 0xcf}, {&(0x7f0000000900)=""/209, 0xd1}, {&(0x7f0000000700)=""/14, 0xe}], 0x9) sendmsg$tipc(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a52bfb0821048f79548601020301090237000100000000090400000002fe1700052406"], 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) 21.455212131s ago: executing program 5 (id=1251): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8, 0x100800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'team_slave_0\x00', {0xd}, 0xd08}) sendto$inet6(r0, &(0x7f0000000080)="983dd349f3981ee222d13d331c6b6563b92b9afd2634c1c5e1afc7b78d25c81dc6d91886e2258ddb404edbf96cee0ff83aa627233e999c5b6d86947278571602bf4634367609901c3082dd7bcada60c9d1e203fc6bf80ebe791038199b4d07b85f7db4a44a6a362b31eb4562c4e05db84f20c3032965fcdcb6f4669e64200331a19e4522254e4c33c6ac127da15832bfd57bee33f0f620b1de08eac2400148f15f92d6e84677d839469e5de4722904893fae297cce2457b066b3bd2bc961d20c6abc72a45918f9760550753cc87cc71439388ec3ceab5b3f90acd0c9b0164c", 0xdf, 0x8080, 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) close(r1) syz_clone3(&(0x7f00000003c0)={0x418a0080, &(0x7f00000001c0)=0xffffffffffffffff, &(0x7f0000000200)=0x0, &(0x7f0000000240), {0x14}, &(0x7f0000000280)=""/157, 0x9d, &(0x7f0000000340)=""/7, &(0x7f0000000380)=[0x0, 0xffffffffffffffff], 0x2, {r0}}, 0x58) ioprio_set$pid(0x1, r3, 0x2000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000440)={0x0, 'bond_slave_0\x00', {0x4}, 0xa}) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000480)=0x8, 0x4) membarrier(0x10, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f00000004c0)) membarrier(0x8, 0x0) syz_open_dev$usbfs(&(0x7f0000000500), 0x7, 0x218583) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000000540)={r0}, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000090) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f00000006c0)={0x0, 'veth1\x00', {0x3}}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9, 0x20010, r2, 0xe6fd8000) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0x40000, 0x0) lseek(r0, 0xa, 0x1) pwrite64(r2, &(0x7f0000000740)="3d515ca31d113dafb5d5efc7ef4d14bec8c2d032972eb80ae62359ca", 0x1c, 0x8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup3(r1, r6, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000780)={0x7, 0xfffffff6, 0x5, 0x83f}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008014}, 0x41) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000900)=@add_del={0x2, &(0x7f00000008c0)='dummy0\x00'}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000980)=@o_path={&(0x7f0000000940)='./file0\x00', 0x0, 0x8, r6}, 0x18) poll(&(0x7f00000009c0)=[{r8, 0x20}, {r1, 0x1000}, {r9}, {0xffffffffffffffff, 0x101}, {r7, 0x2080}, {r7, 0x2048}, {r5, 0xa250}], 0x7, 0x9) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f0000000a00)={'netpci0\x00', {0x2, 0x0, @broadcast}}) 21.355515844s ago: executing program 8 (id=1252): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x300) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x1, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x80, &(0x7f0000001040)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x2, 0x1, 0x7, 0x180, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "c2b3fe"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4, 0x7, 0x3}, {0x6, 0x24, 0x1a, 0x2, 0x5}, [@mbim_extended={0x8, 0x24, 0x1c, 0xfffd, 0x6, 0x6}, @dmm={0x7, 0x24, 0x14, 0x9, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x8, 0x5, 0x8d}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xb7, 0x9, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3, 0x5, 0x18}}}}}}}]}}, &(0x7f0000001240)={0xa, &(0x7f00000010c0)={0xa, 0x6, 0x300, 0x9, 0x7, 0x6, 0x38, 0x3}, 0xda, &(0x7f0000001100)={0x5, 0xf, 0xda, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "728d1125461233b69504cd004d583067"}, @ptm_cap={0x3}, @generic={0xbb, 0x10, 0x2, "8b3b7db158b8bfb5a960431b54caf99a7dd89e6502a2c32735e2b33f714b1652b4e1823d6d941a3403aa2b5d8f5ae909b9b4fea4aef455507063171bd190c490a57c0c2f1b7990bf745da95fcc2ed0d21fa6e820d09547d4879dfc86a338d6d814763b5cd724e1ce0d00b31ae19f455d1b9b046252fb88ae653af4d826780b942f1968a84405d67dd5ac2db7703769660711b69be971251e0e8d34e321fd6da041db0e5f55316ddd3c3774cf10c1588c0aed1bcf45b8a9b5"}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x45}}]}) syz_usb_connect$cdc_ecm(0x3, 0x83, &(0x7f0000000940)=ANY=[@ANYBLOB="12015002020000082505a1a440000102030109027100010000f790441305240004000d240f0180000000ff030700080c241b0709000000000000000724140002100008241c008010020012240707000002000300060004000800fe04052415010009059802400002000809050302ff03020903"], &(0x7f0000000f40)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x300, 0x3, 0x37, 0xfc, 0x8, 0x1}, 0x93, &(0x7f0000000a40)={0x5, 0xf, 0x93, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x80, 0x4, 0x4}, @generic={0x7d, 0x10, 0x2, "4b7e3ce09e9841b90acdd8597922455034773077cfb24e25521410d921f08dca62d40250545e56b507d828bb542023bf9ddecca9b520c1bf0986487627fff69097e5bdce8438a2b4f6ee2ce66b826c6eef67a60d8d2a7761950439db00d2c1285c0b19d934109febb62824e786bf4c7593d4b87a12eaf232a0a3"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x1, 0x0, 0x7}]}, 0xa, [{0xbb, &(0x7f0000000b00)=@string={0xbb, 0x3, "e54f892e8391185ab5a26fbd7c12b3bc60fb9e782c848b832686b0f89c44b8ea70f17849382a1c9418e06be1dacb6058b2465810455f71253485bd99c1f63c744c5e6ce19151e2514632d8f302acaa7bcdd7d90c15a7ce32359ce2ff98b6bca5bf1a1c30b3cfc1359a8f304ad02bf5ace6d28e5cde52f3331a59274eb9a8aacacf422d947cfd4a6721226c1b4c376477272ba903daf29d20d0b8a3a69d9a5b758eb937526df667aaf8b9749a67c36d990972079278f3cc857a"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x380a}}, {0x85, &(0x7f0000000cc0)=@string={0x85, 0x3, "350bda0a19edba1b0b98d7a74ae7d3222b626bcda8bbb2d5fe327dcdff76ebde14c66b0cd0a2512a708438f7c4f607ae6e64a8c8a4c7ccf65ef9cb4911a9c34eed2457d1f5588ba577117df6fa139aed6d6c5e459708bd61263c2df2c3dda0aa4aec28120b9c81d8fdcc0b5ab1c3b0badc5fc5ab091370b79b9d1ef6fc7a30387906e1"}}, {0x41, &(0x7f0000000d80)=@string={0x41, 0x3, "ba2f940018c39d2260e294a132fcaaa441777ea9bf8365cd1191a8f505f68845534bff92cbbdc992f70f93f929324da29e58585e804a6a81a438e6cc3eb359"}}, {0xba, &(0x7f0000000e00)=@string={0xba, 0x3, "22e057f2de2fc504b85d1b4bfb3d7a3b0ee43dc6ec78074863107ec8e30c12a6bd86cf599165c7333a00d16370390ea33b3455c689da3d62e3cc2ed6f3669085d3748f36c793628f12f215756f2cbc964529b47cd74b242bd62e0328fdfe290e64e433ba624d681f03bfce3796f2f0a6e62b9c153c99db095ea801a8f630bbf4a51dc39c83fec442881d7d732c375ef389cecc15ff585e91e63ac3fedbd50c509958efdc14748873e633f979edf1df9d5bf10f9fa5048507"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x4ff}}]}) syz_usb_connect(0x5, 0x7c2, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0xe7, 0x7a, 0xd6, 0x40, 0x45e, 0x4cd, 0xee04, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b0, 0x2, 0xf, 0x2, 0x0, 0xe1, [{{0x9, 0x4, 0x64, 0x6, 0x5, 0xf, 0xf8, 0x87, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x7434, 0x5}, [@mixer_unit={0x9, 0x24, 0x4, 0x1, 0xf6, "c0697500"}, @mixer_unit={0x8, 0x24, 0x4, 0x4, 0x1, "754dc7"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0xfc, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x8}, @generic={0x16, 0x7, "1426a17d55fe45a1794c7827cbe7ffaf4b60576b"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x400, 0x2, 0x40, 0x6e}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0xbb, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x9}]}}, {{0x9, 0x5, 0xb, 0x1, 0x10, 0x5, 0x3b, 0x6, [@generic={0x5c, 0x7, "6c9248fad8b1b10d3b3d15aff08b63a3562f6ed209ee8cf044a78f372ca3d770628e59a5967c81cb9dc4a96c38d8bc981298711fa718105cc38354b3e5c50211d520cef2f0f72b7743411b45d422918e673e354b40623004a7d4"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x228, 0x3, 0x38, 0x3}}]}}, {{0x9, 0x4, 0x31, 0x4, 0xb, 0x5, 0x65, 0x4c, 0x9, [@generic={0xd4, 0x1, "aa0fae5c0df5e16c1e1a57dba757f5b17882400592c4646ef178873eab03ecb9a53e5ef71b903643668af588c1c5f9cd843fa68caad151d6b0735853d890c808329b2d307516fc32370998b4d34ecbba3603f887ab41016beaccfd8d64e718de71fdfd2c6e0f5d97338c3d240f9fb4c6e1fde98514024936f4a99f5bf1636a74e62ab477f98b992a2896362c9b3b604d86813fe8c528ad7f6e3aebc4ba80b741ad85944e0f1806008c711192b0e030ddb2848bb45416c2f0403d6051dd7fbc5b2202056dd237f0128a68771ea86f628599ac"}, @generic={0x85, 0x4, "a7e41503e42fe61b88bbd49f597d74d0b4986ee0b5fc44c722fdf09e93d12afb6891d196db1cc3e49d39dbf8eaaaff7fd1af7c08ba46f072db1478b2145ec2f3159ca1f7e81b913818eaed9c1f8a2b796117d5c0298d37fb3da39994dcaf6b3271f5370c2650392c4308a29b7fd2ff827a2a3fe97abf5bc95ad93c60792f0af19d3d6c"}], [{{0x9, 0x5, 0xd, 0xc32e5aff26da9f23, 0x3ff, 0x1, 0x80, 0x7a, [@generic={0xd5, 0x8, "994278ea5ffd54c070c02b54e91764da2cc15448d49887d8ea7e255652bbaef0b96e512fb52bb3d5e5f51073d6f33e9ec7969a5204c652ac4adff6b5803d30671d15b2b04887b6a9f299d8576e0c2f3e428282277c762dbea78d7b7850128af1906250c0a04dd2fb353eba9960b1b2b84d6541d7313a0ce34d098d87cd0da08aa652a38358d33bd0885fc486d3473b27df5420cc0c3b8ee610e4c8491c76f41aaf4d65bc61ad8eddd72c5e2c3d2372e5f6daf510df13fa0d165ee2a0221fa5d94bd6f4711065aa9690f6c90c235efcc63fd65b"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3df, 0x5, 0x2, 0xe6, [@generic={0x58, 0x5, "c82b18a27e911c572b197bc25864dbba444bc977fd6a944e9ad356a798008933868444945042be877fdd303bab384ae08c55b4369bfa6fbc198129403acc0eefe5d4f16a0cd7f43286910476bcea94bc977d26b57c1f"}, @generic={0xfd, 0x23, "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"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x81, 0x1, 0xf, [@generic={0x56, 0x6, "384084adc20ae107e8c4fae2b11e8cc629cdf085830d9863b87009b650957f89e2baa86ab9b56a916d5d1b7b3f2527855f8b2cd8148f2b7c3ec1a984335a3a0af897606cbaf02a8304eb27f1f58ab1ae74713fc5"}, @generic={0x6f, 0x21, "93159c0a7ee1ec8574e8f66d6cc399d7db569b2caca42d0b2fdc8ac204ce426848fb42d90523b9e6b1596c04d6452a1e69362acd68baa13292de2b13a8c220f44ecb1a196ee31ef49cb39230847e316df41b67c372af8bf038cda87674cc7ffcb102cde3839f16987746eeef7f"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x8, 0x26, 0x1, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x8}, @generic={0x3c, 0x1, "e35e0551c402462422ebea9bb50fa1e2ef90e48c963e010d2c0c8013467a37cf1f35d5c97a124f438dda7b2bd29d24ee804b5d47298ed355dd8d"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x6, 0x80, 0x1, [@generic={0xcf, 0xb, "d675b83485da53a50b013158cd64895eb84c557a79b429f2cff55a43f516d77a8827e8ec18aee49db7dff53f7f915c113c5b7b144d604c745f862c72e886cac22ef853cd6098669cfdf71f89ffa85c4138a942b78826da05697c4e2d6a59c2bed3267536c0b61760d26d0fe097f2acfd7f8718574fbc055059e3c5d5523ad4c01835ff7a8f7d6fc9f1393b2428a47de6936257607a7a146713f390c2dfbe89cb12a3878151c60775ed15a40647e2bac003ba667c54eb385ad39b9d3e2ae3e784da965fa0d9d43fb1800f4eff2a"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xd, 0x2}]}}, {{0x9, 0x5, 0x8, 0x0, 0xca25cb36cda93e3f, 0xf5, 0x2, 0x1}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0xffff}, @generic={0x4b, 0x23, "a207e6340a430b85ae9a412646f448e2c533be06fd22d44010e4d941488fd409c090f765564489eeddd64de664b19d0938beb775659b9bc4f7df5be719231c3718982e49ce1d79653a"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0xfb, 0x2c, 0x5, [@generic={0xb1, 0x0, "dcdf738c74e18b6c4fb1ba1ff897b4f7f4424d984408e5c418ad21d2640d620e2568391bdb1d391e3491bd21d48f57ac2947ac8282aab9bc1a1a9fcef6d5b8a46c84189fae4b71bb9a568ade765c0c11ea0a03e37855bbd86d3afe90898ac2133d934672386369b02679167d306c75ebd4547354b4650ec3f79ec7ec4223100e5f26b86039726eb6e15a6867aeda6627cfbf64f5bc048c79b56a8a393517b213bad469686edf4bebb641051e0801a5"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x10, 0x3, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0x3, 0x7}]}}, {{0x9, 0x5, 0xce982557c50083eb, 0x4, 0x40, 0x4, 0x6, 0x3}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x2, 0xd8, 0x5c}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0xa8, 0x80, 0xfa, 0x70, 0x7}, 0x5, &(0x7f0000000880)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x418}}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f0000000040)={0x800003, 0x3, 0xff000000}, 0xc) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r9, 0x4008b100, &(0x7f0000001000)={0x18, 0x0, {0x2, @local, 'rose0\x00'}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) 20.963459284s ago: executing program 5 (id=1253): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x16, "43720738300000000200000000000000476f8eb2940a25f0"}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') close(0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0xc0844123, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x0, {0x132e712c, 0x2fd, 0x3ff, 0x3d45}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_usb_connect(0x0, 0x3b, &(0x7f0000002080)={{0x12, 0x1, 0x110, 0x41, 0xa7, 0x38, 0x10, 0xd49, 0x7000, 0x6c67, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x8, 0x2, 0x10, 0x2, [{{0x9, 0x4, 0xc6, 0x9, 0x0, 0x91, 0xb0, 0x9b, 0xf6, [@uac_control={{0xa, 0x24, 0x1, 0x53, 0x6}, [@mixer_unit={0x5, 0x24, 0x4, 0x5, 0x3c}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x6, 0x1, [0x9], 0x4}]}]}}]}}]}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xd0f, 0x703d2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0x8}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x6}}]}}]}, 0x48}}, 0x44080) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff0000000000000400012800e0001006970366772657461700000002c00028014000700fed2"], 0x60}, 0x1, 0x0, 0x0, 0x8050}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x84002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="bd1b5c"], 0x3c}}, 0x0) 19.417538385s ago: executing program 8 (id=1254): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x1, "110100005c000000463300", 0x49433553}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)=ANY=[], 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f00000001c0)=0x3) connect$unix(r2, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4004) r7 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) futex_waitv(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80146, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0xe100000000000001) ioctl$KVM_SET_GUEST_DEBUG(r10, 0x4048ae9b, &(0x7f0000000240)={0xf0003, 0x0, [0x680, 0x3, 0x7, 0x0, 0x0, 0x0, 0x2b, 0x40000000]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r11 = socket(0xa, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) socket(0x10, 0x803, 0x0) 19.16016943s ago: executing program 6 (id=1255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x2, 0xc73ebdfa468265f4, 0x7, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x9, 0x5, 0x81}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x7ff, 0x6, 0x4, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x3, 0xea}}}}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="050f0f00010a1003"], 0x1, [{0x0, 0x0}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@gettclass={0x24, 0x2a, 0x800, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x10, 0xb}, {0x5, 0xfff1}, {0xffe0, 0xfff1}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}}, 0x4008000) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xc4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x1, 0xf}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x1b, 0x7, 0x8, 0x8, 0xfffa, 0xb, 0xfffd, 0x486048c, [{0x9, 0xffff, 0x2, 0x8}, {0x2, 0x7, 0x1, 0xfffffffd}, {0x3, 0x1, 0x7, 0x1}, {0xfffffff8, 0x4, 0x578, 0x5105}, {0x81, 0x7, 0x400, 0x81}, {0x4, 0xffffffff, 0x8, 0x15}, {0x7, 0x7ba, 0x7, 0x1}, {0x1, 0x6, 0x4, 0x9d0}]}}]}}]}, 0xc4}}, 0x2400c084) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x30, 0x2c, 0xd2b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x24040084) r8 = socket(0xa, 0x0, 0x9) sendto$inet6(r8, &(0x7f0000000100)="7800000019001f05b9409b0dffff000d0207be040205060506144007430005000f000000fac8388827a685a168d9a446040045653600648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f5090589a86c902003a03004a32000400180012000a00000000000000000000080756ede4ccbe5880", 0x78, 0x0, 0x0, 0x0) 17.887583125s ago: executing program 8 (id=1256): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x81}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) (async) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) r2 = socket(0x11, 0x3, 0x5) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000700)=0xe9, 0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000140)={0x11, 0x1, r4, 0x1, 0xb}, 0x14) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) dup2(r2, r5) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffb, 0xfe9e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) write$binfmt_script(r5, &(0x7f0000000400)={'#! ', './file0'}, 0xb) (async) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c00000004000000040000000c"], 0x50) 17.79458256s ago: executing program 6 (id=1257): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x88, @private0, 0xc07}}}, &(0x7f0000000080)=0x90) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000100), &(0x7f0000000140)=0x8) (async) getsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000040), &(0x7f00000000c0)=0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r4, 0x4068aea3, &(0x7f0000000480)={0xd4, 0x0, 0x6}) (async) r5 = gettid() socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) socket$key(0xf, 0x3, 0x2) (rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) dup(r6) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000001c0)='blacklist\x00', &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, r7) (async, rerun: 64) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r8, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x4924b68, 0x0) (async, rerun: 64) keyctl$get_persistent(0x16, 0xffffffffffffffff, r7) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x2, &(0x7f0000000180)) 17.721284686s ago: executing program 8 (id=1258): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x40000000000001}) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000040)={0x2, 0x0, 0x1, 0x0, 0x0, [{{}, 0x1}]}) ioctl$KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r5, &(0x7f0000000000)=""/6, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 17.542905949s ago: executing program 6 (id=1259): r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x0, 0x40002) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e00000028000380040001"], 0xb4}}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x80000001, 0x8, 0x1, 0x46}) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00'], 0x48}}, 0x0) r2 = syz_io_uring_setup(0x822, &(0x7f0000000480)={0x0, 0xbdbb, 0x10, 0x1, 0x34f}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000100)='/\x00', &(0x7f00000002c0)="2ac8530641539dde80863cc69e078e6fcca411475a1c72081b33a9b7ef933028e7b81cb8957453943128a723e4b7d6926f6a9fc79f00fe9bb946ba59a876922de97b48ce1728722d902d4a1144f3d7235f6026e53687707ef893097991084b7c64f39e3073edcc2dc84c809a83459a28aa937e35c6fe5419a38ed91db0a0c19027d84f3afd12a5f27a7c35df59f1bbc590d2a9b3620595c627e994c4694ede6c", 0xa0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1fffffffffffffaa, &(0x7f0000000200)=[{0x30, 0x9, 0x0, 0x6}]}, 0xfffffffffffffdf1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@dellink={0x34, 0x11, 0x82d, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc008}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x34}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x21, 0x0, 0x0) 17.507176495s ago: executing program 37 (id=1220): getrlimit(0xd, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) read$nci(r1, &(0x7f0000000280)=""/83, 0x53) personality(0x5400004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000000100003050000b8227504b16d1db4df0ebcc7398f190100e33c00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b000100697036677265000028000280060010004e220000140006002001000000000000000000000000000206000f00ffff0000"], 0x58}}, 0x0) 17.316197994s ago: executing program 5 (id=1261): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x3, &(0x7f0000000940)=@framed, 0x0, 0x4, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e20, 0xf5}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c810}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22800, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x3, &(0x7f0000000940)=@framed, 0x0, 0x4, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e20, 0xf5}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c810}, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 17.055020759s ago: executing program 6 (id=1262): r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0xf514, 0x10000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000825bd7000fedbdf25010000000000002002410000001000137564703a73797a3000c1dab116aee45ea32cd10000003bbf7f981416fe900cf68e7cabab19455b4eeaaa198bf30600cabbf2f318aee63c35cd92d591c79d1a049917e2158af417702a86e15087b0d51242e5f1b51327a0035376060889bb6f809a37ac79fe812dafda5ddceb9aaaf59c30b10d7ccb868da2c73494a577e79412ecd27b33a6cbfc51"], 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8c1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000001800), 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x50000, 0x21a18}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x8, 0x4}, @IFLA_MACSEC_ENCRYPT={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x48004) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x10, 0x40, 0x7, 0x9, {{0x6, 0x4, 0x2, 0x26, 0x18, 0x68, 0x0, 0x7, 0x4, 0x0, @empty, @empty, {[@ra={0x94, 0x4}]}}}}}) accept4$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10, 0x800) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fe857108480b0730644f01020b010902120009000000000904"], 0x0) 16.764381543s ago: executing program 5 (id=1263): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000540)=@delpolicy={0x68, 0x14, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@mcast2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@sec_ctx={0xc, 0x8, {0x8}}, @mark={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000790000000000000000e50000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r1, 0xffffffffffffffff, 0x1, 0x0, @void}, 0x10) r2 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x1, 0x200) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f00000002c0)=""/81, 0x51, 0x0, &(0x7f0000000400)=""/167, 0xa7}}, 0x10) r4 = epoll_create(0x2) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x1]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140)) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) r7 = getpgrp(0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000004140)={r1, r2, 0x15, 0x0, @val=@iter={&(0x7f0000004100)=@task={r6, r7}, 0x10}}, 0x20) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0xba31000000, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r8, 0xc00464c9, &(0x7f0000000200)) signalfd4(r5, &(0x7f0000000000), 0x8, 0x0) fanotify_init(0x200, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r9, &(0x7f0000000280)={0x2020}, 0x2020) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x34000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r11, 0x3000) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r12, &(0x7f00000020c0)={0x2020}, 0x2020) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x569c70e0, 0x0, 0x0, 0x0, 0x10000}, [@generic={0x6, 0xf, 0x7, 0xfe, 0x80}]}, &(0x7f0000000100)='GPL\x00', 0x3ff, 0x37, &(0x7f0000000180)=""/55, 0x41000, 0x9, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x9, 0x9412, 0x9}, 0x10, r3, 0x0, 0x4, &(0x7f0000000580)=[r5, r10, r1, r1, r11, r12], &(0x7f00000005c0)=[{0x1, 0x1, 0x4, 0x8}, {0x0, 0x1, 0x7}, {0x5, 0x1, 0xc}, {0x4, 0x2, 0xe, 0x8}], 0x10, 0x4, @void, @value}, 0x94) syz_usb_connect$uac1(0x2, 0xbc, &(0x7f0000004180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x3, 0x1, 0x56, 0xc0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0xbb}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x4, 0x5, [0x7, 0xa, 0x8, 0x3, 0x2], 0x5}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0xf}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x5, 0x4, [0x2, 0x2, 0xa, 0xa], 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x203, 0x2, 0x50, 0x80, 0x9, 0x1}, @feature_unit={0x11, 0x24, 0x6, 0x5, 0x2, 0x5, [0x7, 0xcd32e795acb4132e, 0xa, 0xa035d67311b4f14e, 0x2]}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x303, 0x5, 0x5, 0xf5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x93, 0x1, 0x5, {0x7, 0x25, 0x1, 0x0, 0x3, 0xf48}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xd, 0x2, 0x4, {0x7, 0x25, 0x1, 0x82, 0x8, 0x3}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 16.279644067s ago: executing program 6 (id=1264): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x48, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xffffff01}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="10042dbd000a001a0008027f02000100cd"], 0x20}, 0x1, 0x0, 0x0, 0x24000041}, 0x8d5ce61f07731cd2) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}]}, 0x40}}, 0x0) 15.956644241s ago: executing program 8 (id=1265): r0 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) gettid() r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)) sendmsg$nl_generic(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x40040) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, 0x0, 0x0) syz_usb_connect(0x5, 0x164, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100007af28810d30b55055b000000000109025201010000000009044000000e0100000824060725518827e7c8c1c20e3f4903ec", @ANYBLOB="993843f55f"], 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) readv(r6, &(0x7f0000000a00)=[{&(0x7f0000000380)=""/236, 0xec}, {&(0x7f0000000280)=""/72, 0x48}, {&(0x7f0000000480)=""/150, 0x96}, {0x0}, {&(0x7f0000000300)=""/11, 0xb}, {&(0x7f0000000680)=""/73, 0x49}, {&(0x7f0000000800)=""/207, 0xcf}, {&(0x7f0000000900)=""/209, 0xd1}, {&(0x7f0000000700)=""/14, 0xe}], 0x9) sendmsg$tipc(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a52bfb0821048f79548601020301090237000100000000090400000002fe1700052406"], 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) 15.931038584s ago: executing program 38 (id=1225): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write(r1, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2cc", 0xce) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'veth0_to_bridge\x00', @link_local}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x7, 0x1}, 0x8) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800451000380080000000019078ac1e0001ac1414c7030490781206183f2500000000670000008900007f000001e000000200186371ae9b1c0372528bea78e83d00d1f50e1195e64822ce8e68173b8d120c986b07a440e652ead0329bc02c186551488836071e560f5514ea0e38e9fdfdbb8322c9caf49837dc8b1d0e2d32d9994d86c194cbd51c504d1b258930255edc9696ee2262701ae417be5a6797973b2225260409c50ea1921206f24b91e1f76841101676bc84493ec085a199374b738f00"/218], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x2ae951fe49db0b5e) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="18080000000000000000", @ANYRES8=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) listen(0xffffffffffffffff, 0xfffffffe) eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r5 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r5, 0x0, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) dup2(0xffffffffffffffff, r6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_to_hsr\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r7 = syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) getpgid(0xffffffffffffffff) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000040)={0x2000000c}) unshare(0x2040400) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, 0xffffffffffffffff, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) 15.223801428s ago: executing program 5 (id=1267): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') close(0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0xc0844123, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x0, {0x132e712c, 0x2fd, 0x3ff, 0x3d45}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_usb_connect(0x0, 0x3b, &(0x7f0000002080)={{0x12, 0x1, 0x110, 0x41, 0xa7, 0x38, 0x10, 0xd49, 0x7000, 0x6c67, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x8, 0x2, 0x10, 0x2, [{{0x9, 0x4, 0xc6, 0x9, 0x0, 0x91, 0xb0, 0x9b, 0xf6, [@uac_control={{0xa, 0x24, 0x1, 0x53, 0x6}, [@mixer_unit={0x5, 0x24, 0x4, 0x5, 0x3c}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x6, 0x1, [0x9], 0x4}]}]}}]}}]}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xd0f, 0x703d2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0x8}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x6}}]}}]}, 0x48}}, 0x44080) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff0000000000000400012800e0001006970366772657461700000002c00028014000700fed2"], 0x60}, 0x1, 0x0, 0x0, 0x8050}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x84002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="bd1b5c"], 0x3c}}, 0x0) 496.840222ms ago: executing program 39 (id=1265): r0 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) gettid() r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)) sendmsg$nl_generic(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x40040) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, 0x0, 0x0) syz_usb_connect(0x5, 0x164, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100007af28810d30b55055b000000000109025201010000000009044000000e0100000824060725518827e7c8c1c20e3f4903ec", @ANYBLOB="993843f55f"], 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) readv(r6, &(0x7f0000000a00)=[{&(0x7f0000000380)=""/236, 0xec}, {&(0x7f0000000280)=""/72, 0x48}, {&(0x7f0000000480)=""/150, 0x96}, {0x0}, {&(0x7f0000000300)=""/11, 0xb}, {&(0x7f0000000680)=""/73, 0x49}, {&(0x7f0000000800)=""/207, 0xcf}, {&(0x7f0000000900)=""/209, 0xd1}, {&(0x7f0000000700)=""/14, 0xe}], 0x9) sendmsg$tipc(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a52bfb0821048f79548601020301090237000100000000090400000002fe1700052406"], 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) 455.577858ms ago: executing program 40 (id=1264): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x48, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xffffff01}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="10042dbd000a001a0008027f02000100cd"], 0x20}, 0x1, 0x0, 0x0, 0x24000041}, 0x8d5ce61f07731cd2) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}]}, 0x40}}, 0x0) 0s ago: executing program 41 (id=1267): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') close(0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0xc0844123, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x0, {0x132e712c, 0x2fd, 0x3ff, 0x3d45}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_usb_connect(0x0, 0x3b, &(0x7f0000002080)={{0x12, 0x1, 0x110, 0x41, 0xa7, 0x38, 0x10, 0xd49, 0x7000, 0x6c67, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x8, 0x2, 0x10, 0x2, [{{0x9, 0x4, 0xc6, 0x9, 0x0, 0x91, 0xb0, 0x9b, 0xf6, [@uac_control={{0xa, 0x24, 0x1, 0x53, 0x6}, [@mixer_unit={0x5, 0x24, 0x4, 0x5, 0x3c}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x6, 0x1, [0x9], 0x4}]}]}}]}}]}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xd0f, 0x703d2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0x8}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x6}}]}}]}, 0x48}}, 0x44080) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff0000000000000400012800e0001006970366772657461700000002c00028014000700fed2"], 0x60}, 0x1, 0x0, 0x0, 0x8050}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x84002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="bd1b5c"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): cketSize 0 [ 465.563154][ T47] usb 9-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=3e.bb [ 465.603997][ T47] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.632076][ T47] usb 9-1: Product: syz [ 465.660334][ T47] usb 9-1: Manufacturer: syz [ 465.699398][ T47] usb 9-1: SerialNumber: syz [ 465.735149][ T47] usb 9-1: config 0 descriptor?? [ 465.777321][ T47] HFC-S_USB 9-1:0.86: probe with driver HFC-S_USB failed with error -5 [ 466.157582][ T47] usb 9-1: USB disconnect, device number 42 [ 466.399810][ T5887] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 466.573567][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 466.629378][ T5887] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 466.669767][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 466.708197][ T5887] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 466.785826][ T5887] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 466.815353][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.880910][ T5887] usb 6-1: config 0 descriptor?? [ 467.333408][ T5887] hdpvr 6-1:0.0: unexpected answer of status request, len -71 [ 467.473560][ T5887] hdpvr 6-1:0.0: device init failed [ 467.514213][ T5887] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 467.582814][T10394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.682762][ T5887] usb 6-1: USB disconnect, device number 39 [ 468.086976][T10394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.160805][ T7579] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 469.006989][ T7579] usb 9-1: config 0 has no interfaces? [ 469.020315][ T7579] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 469.030063][ T7579] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.056280][ T7579] usb 9-1: Product: syz [ 469.068006][T10410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.085929][ T7579] usb 9-1: Manufacturer: syz [ 469.108953][ T7579] usb 9-1: SerialNumber: syz [ 469.169809][ T7579] usb 9-1: config 0 descriptor?? [ 469.220588][T10410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.339117][T10410] netlink: 20 bytes leftover after parsing attributes in process `syz.7.885'. [ 469.405756][T10400] netlink: 452 bytes leftover after parsing attributes in process `syz.8.888'. [ 469.841048][T10427] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 470.672880][T10440] netlink: 'syz.6.894': attribute type 4 has an invalid length. [ 470.710765][ T5827] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 470.728187][ T5887] usb 8-1: USB disconnect, device number 32 [ 470.876001][ T5827] usb 10-1: device descriptor read/64, error -71 [ 471.245701][ T5827] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 471.445889][ T5827] usb 10-1: device descriptor read/64, error -71 [ 471.573480][ T5885] usb 9-1: USB disconnect, device number 43 [ 471.619399][ T5827] usb usb10-port1: attempt power cycle [ 471.806588][T10453] x_tables: ip_tables: CT.0 target: invalid size 40 (kernel) != (user) 48 [ 472.055175][ T5827] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 472.065537][T10453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.078941][T10453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.193095][ T5827] usb 10-1: device descriptor read/8, error -71 [ 472.315927][ T5885] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 472.435762][ T5827] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 472.466524][ T5827] usb 10-1: device descriptor read/8, error -71 [ 472.577866][ T5827] usb usb10-port1: unable to enumerate USB device [ 472.589930][ T5885] usb 9-1: Using ep0 maxpacket: 16 [ 472.795494][ T5885] usb 9-1: unable to get BOS descriptor or descriptor too short [ 472.824415][ T5885] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 472.838930][ T5885] usb 9-1: can't read configurations, error -71 [ 473.956168][ T5885] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 474.136321][ T5885] usb 9-1: Using ep0 maxpacket: 16 [ 474.199553][ T5885] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 474.609421][ T5885] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.847128][ T5885] usb 9-1: config 0 has no interface number 0 [ 474.891264][ T5885] usb 9-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 475.003575][ T5885] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.114843][ T5885] usb 9-1: config 0 descriptor?? [ 475.169509][ T5885] usb 9-1: Found UVC 0.00 device (0bd3:0555) [ 475.195845][ T5885] usb 9-1: No valid video chain found. [ 475.393324][T10478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.402269][T10478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.745720][ T5887] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 475.940709][ T5887] usb 6-1: config 0 has no interfaces? [ 475.947274][ T5887] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 476.097649][T10520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.116412][T10520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.145970][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.188675][T10520] netlink: 452 bytes leftover after parsing attributes in process `syz.6.908'. [ 476.242255][ T5887] usb 6-1: config 0 descriptor?? [ 476.466946][T10512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.545132][T10512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.574335][ T5887] usb 6-1: USB disconnect, device number 40 [ 476.743984][ T7625] usb 9-1: USB disconnect, device number 45 [ 477.025690][ T5887] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 477.186371][ T5887] usb 6-1: Using ep0 maxpacket: 16 [ 477.339776][ T5887] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 477.354362][ T5887] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 477.383813][ T5887] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 477.402101][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.456550][T10535] netlink: 40 bytes leftover after parsing attributes in process `syz.9.912'. [ 477.488191][ T5887] usb 6-1: Product: syz [ 477.519075][ T5887] usb 6-1: Manufacturer: syz [ 477.648571][ T5887] usb 6-1: SerialNumber: syz [ 477.838621][T10543] fuse: Bad value for 'group_id' [ 477.860406][T10543] fuse: Bad value for 'group_id' [ 477.891596][T10547] tun0: tun_chr_ioctl cmd 1074025673 [ 477.935961][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 477.935980][ T30] audit: type=1800 audit(1746880795.714:578): pid=10546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.914" name="file1" dev="tmpfs" ino=555 res=0 errno=0 [ 478.120604][ T5887] usb 6-1: 0:2 : does not exist [ 478.137272][T10548] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 478.326915][T10512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.401262][T10512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.946029][ T7625] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 479.312779][ T5887] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 479.330239][ T5887] usb 6-1: 5:0: cannot get min/max values for control 4 (id 5) [ 479.462894][ T7625] usb 10-1: Using ep0 maxpacket: 16 [ 479.482989][ T5887] usb 6-1: USB disconnect, device number 41 [ 479.531082][ T7625] usb 10-1: config 0 has an invalid interface number: 64 but max is 0 [ 479.558930][ T8122] udevd[8122]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 479.581934][ T7625] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.619098][ T7625] usb 10-1: config 0 has no interface number 0 [ 479.692591][ T7625] usb 10-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 479.728841][ T7625] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.772726][ T7625] usb 10-1: config 0 descriptor?? [ 479.801290][ T7625] usb 10-1: Found UVC 0.00 device (0bd3:0555) [ 479.819587][ T7625] usb 10-1: No valid video chain found. [ 480.010566][T10564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.020771][T10564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.167317][T10585] x_tables: ip_tables: CT.0 target: invalid size 40 (kernel) != (user) 48 [ 480.398177][T10589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.460056][T10589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.698670][ T5887] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 480.708571][T10589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.786074][T10589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.882664][ T5887] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 480.931818][ T5887] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 481.052766][T10602] fuse: Bad value for 'group_id' [ 481.063822][T10602] fuse: Bad value for 'group_id' [ 481.091277][ T5887] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 481.176203][ T5887] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.384407][T10585] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 481.469835][ T5887] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 481.691481][T10614] netlink: 12 bytes leftover after parsing attributes in process `syz.6.929'. [ 481.937765][T10615] binder: BINDER_SET_CONTEXT_MGR already set [ 481.950765][T10615] binder: 10608:10615 ioctl 4018620d 200000000040 returned -16 [ 482.461691][ T7579] usb 10-1: USB disconnect, device number 40 [ 482.535846][ T978] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 482.726891][ T978] usb 9-1: config 0 has no interfaces? [ 482.740030][ T978] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 482.749563][ T978] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.758592][ T978] usb 9-1: Product: syz [ 482.768554][ T978] usb 9-1: Manufacturer: syz [ 482.777928][ T978] usb 9-1: SerialNumber: syz [ 482.810428][ T978] usb 9-1: config 0 descriptor?? [ 483.152893][T10624] netlink: 452 bytes leftover after parsing attributes in process `syz.8.933'. [ 483.184391][T10647] fuse: Bad value for 'group_id' [ 483.252539][T10647] fuse: Bad value for 'group_id' [ 483.567882][T10652] netlink: 8 bytes leftover after parsing attributes in process `syz.9.939'. [ 483.665491][T10655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.691203][T10655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.716657][ T5888] usb 8-1: USB disconnect, device number 33 [ 483.737495][ T30] audit: type=1326 audit(1746880801.514:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10651 comm="syz.9.939" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f284058e969 code=0x0 [ 484.157718][T10658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.183747][T10658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.871047][T10663] binder_alloc: binder_alloc_mmap_handler: 10661 2000003d8000-2000003d9000 already mapped failed -16 [ 485.187978][T10672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.365944][T10672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.405904][ T978] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 485.575950][ T978] usb 10-1: Using ep0 maxpacket: 16 [ 485.603865][ T978] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.759567][ T978] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 485.834722][ T978] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 485.931889][ T978] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 485.965184][ T978] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 485.976711][ T7579] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 485.988606][ T978] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 486.026054][ T978] usb 10-1: SerialNumber: syz [ 486.072034][T10673] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 486.081828][T10673] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 486.091346][ T978] hub 10-1:1.0: bad descriptor, ignoring hub [ 486.139886][ T978] hub 10-1:1.0: probe with driver hub failed with error -5 [ 486.167793][ T7579] usb 8-1: Using ep0 maxpacket: 16 [ 486.206506][ T7579] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 486.218530][ T7579] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.229664][ T7579] usb 8-1: config 0 has no interface number 0 [ 486.260016][ T7579] usb 8-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 486.285354][ T7625] usb 9-1: USB disconnect, device number 46 [ 486.293491][T10672] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 486.320838][ T7579] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.421964][ T7579] usb 8-1: config 0 descriptor?? [ 486.429267][ T978] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 486.500202][ T7579] usb 8-1: Found UVC 0.00 device (0bd3:0555) [ 486.538328][ T7579] usb 8-1: No valid video chain found. [ 486.607076][ T978] usb 10-1: USB disconnect, device number 41 [ 486.698791][T10679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.710851][T10679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.728510][T10695] netlink: 12 bytes leftover after parsing attributes in process `syz.9.949'. [ 486.768975][T10700] ptrace attach of "./syz-executor exec"[7398] was attempted by "./syz-executor exec"[10700] [ 488.716006][ T978] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 488.947899][T10731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.957096][T10731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.108613][ T978] usb 10-1: config 0 has no interfaces? [ 489.164420][ T978] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 489.213787][ T978] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.224660][ T978] usb 10-1: Product: syz [ 489.324925][ T978] usb 10-1: Manufacturer: syz [ 489.412875][ T978] usb 10-1: SerialNumber: syz [ 489.569497][ T978] usb 10-1: config 0 descriptor?? [ 489.808741][T10724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.856073][T10724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.997619][ T7579] usb 8-1: USB disconnect, device number 34 [ 490.097481][T10724] netlink: 20 bytes leftover after parsing attributes in process `syz.9.952'. [ 490.577107][T10735] netlink: 4 bytes leftover after parsing attributes in process `syz.5.956'. [ 490.976176][ T5888] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 491.262628][T10735] team0 (unregistering): Port device team_slave_0 removed [ 491.297717][ T5888] usb 8-1: config 0 has no interfaces? [ 491.358071][T10735] team0 (unregistering): Port device team_slave_1 removed [ 491.409291][ T5888] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 491.529353][ T978] usb 10-1: USB disconnect, device number 42 [ 491.560124][ T5888] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.659136][ T5888] usb 8-1: Product: syz [ 491.690979][ T5888] usb 8-1: Manufacturer: syz [ 491.867306][T10771] x_tables: ip_tables: CT.0 target: invalid size 40 (kernel) != (user) 48 [ 491.890595][ T5888] usb 8-1: SerialNumber: syz [ 491.937562][ T5888] usb 8-1: config 0 descriptor?? [ 492.163597][T10760] netlink: 452 bytes leftover after parsing attributes in process `syz.7.958'. [ 492.275731][ T5888] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 492.464370][ T5888] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 492.480120][ T5888] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 492.490705][ T5888] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 492.500241][ T5888] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.518151][T10770] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 492.538506][ T5888] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 493.033751][T10784] pim6reg1: entered promiscuous mode [ 493.135957][T10784] pim6reg1: entered allmulticast mode [ 495.274262][ T978] usb 8-1: USB disconnect, device number 35 [ 495.829049][T10827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.883799][T10827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.965828][ T5931] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 496.155891][ T5931] usb 9-1: Using ep0 maxpacket: 16 [ 496.195951][ T5931] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 496.204377][ T5931] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.214755][ T5931] usb 9-1: config 0 has no interface number 0 [ 496.221065][ T5931] usb 9-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 496.447397][ T5931] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.553610][ T5931] usb 9-1: config 0 descriptor?? [ 496.578367][ T5931] usb 9-1: Found UVC 0.00 device (0bd3:0555) [ 496.585359][ T5931] usb 9-1: No valid video chain found. [ 496.593013][ T7625] usb 10-1: USB disconnect, device number 43 [ 496.800309][T10825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.810578][T10825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.325078][T10849] Context (ID=0x0) not attached to queue pair (handle=0x2:0x0) [ 497.343094][ T7625] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 497.545722][ T7625] usb 10-1: Using ep0 maxpacket: 32 [ 497.580365][ T7625] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 497.626059][ T5931] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 497.642857][ T7625] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 497.661183][ T7625] usb 10-1: New USB device strings: Mfr=1, Product=8, SerialNumber=0 [ 497.685408][T10859] ======================================================= [ 497.685408][T10859] WARNING: The mand mount option has been deprecated and [ 497.685408][T10859] and is ignored by this kernel. Remove the mand [ 497.685408][T10859] option from the mount to silence this warning. [ 497.685408][T10859] ======================================================= [ 497.884283][ T7625] usb 10-1: Product: syz [ 497.889098][ T7625] usb 10-1: Manufacturer: syz [ 497.902213][ T7625] usb 10-1: config 0 descriptor?? [ 497.911192][T10850] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 497.937089][ T5931] usb 8-1: device descriptor read/64, error -71 [ 498.205692][ T5931] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 498.295143][ T7625] usb 10-1: USB disconnect, device number 44 [ 498.352618][ T5931] usb 8-1: device descriptor read/64, error -71 [ 498.476437][ T5931] usb usb8-port1: attempt power cycle [ 498.685697][ T24] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 498.905889][ T5931] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 498.928150][ T5931] usb 8-1: device descriptor read/8, error -71 [ 499.045701][ T24] usb 6-1: config 0 has no interfaces? [ 499.057887][ T24] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 499.070837][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.186307][ T5931] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 499.221045][ T24] usb 6-1: Product: syz [ 499.251152][ T24] usb 6-1: Manufacturer: syz [ 499.276997][ T24] usb 6-1: SerialNumber: syz [ 499.282256][ T5931] usb 8-1: device descriptor read/8, error -71 [ 499.323754][ T24] usb 6-1: config 0 descriptor?? [ 499.408825][ T5931] usb usb8-port1: unable to enumerate USB device [ 499.602412][ T978] usb 9-1: USB disconnect, device number 47 [ 499.820233][T10867] netlink: 452 bytes leftover after parsing attributes in process `syz.5.977'. [ 500.118720][T10896] x_tables: unsorted underflow at hook 3 [ 500.818294][T10904] x_tables: ip_tables: CT.0 target: invalid size 40 (kernel) != (user) 48 [ 501.221205][T10911] netlink: 68 bytes leftover after parsing attributes in process `syz.6.984'. [ 501.284589][T10911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.297821][T10911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.375642][ T978] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 501.540522][ T978] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 501.580127][ T978] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 501.616527][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.622881][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.725699][ T978] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 501.804595][ T978] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.898592][T10904] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 502.026451][ T7625] usb 10-1: new full-speed USB device number 45 using dummy_hcd [ 502.082648][ T978] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 502.116477][ T7579] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 502.192207][ T9] usb 6-1: USB disconnect, device number 42 [ 502.250499][ T7625] usb 10-1: config index 0 descriptor too short (expected 63186, got 210) [ 502.323067][ T7625] usb 10-1: config 0 has an invalid interface number: 106 but max is 0 [ 502.335705][ T7579] usb 9-1: Using ep0 maxpacket: 16 [ 502.367951][ T7579] usb 9-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 502.381231][ T7625] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.411991][ T7579] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 502.449172][ T7625] usb 10-1: config 0 has no interface number 0 [ 502.492618][ T7579] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 502.511058][ T7625] usb 10-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 502.547081][ T7579] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.579377][ T7625] usb 10-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 2560, setting to 64 [ 502.612482][ T7579] usb 9-1: Product: syz [ 502.625796][ T7579] usb 9-1: Manufacturer: syz [ 502.660457][ T7625] usb 10-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 502.679459][ T7579] usb 9-1: SerialNumber: syz [ 502.804678][ T7625] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 502.842395][ T7625] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.887802][ T7625] usb 10-1: config 0 descriptor?? [ 503.010785][ T7579] usb 9-1: 0:2 : does not exist [ 503.065700][ T5931] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 503.068192][ T7625] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 503.109634][ T7579] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 503.166944][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.9.985'. [ 503.184761][ T7579] usb 9-1: USB disconnect, device number 48 [ 503.199364][T10914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.239957][T10914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.308346][ T5931] usb 6-1: config 0 has no interfaces? [ 503.357544][ T5931] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 503.374302][ T8122] udevd[8122]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 503.397352][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.436270][ T5931] usb 6-1: Product: syz [ 503.464533][ T5931] usb 6-1: Manufacturer: syz [ 503.846501][ T7579] usb 10-1: USB disconnect, device number 45 [ 503.908932][ T64] usb 10-1: Failed to submit usb control message: -71 [ 503.939148][ T5931] usb 6-1: SerialNumber: syz [ 504.073165][ T64] usb 10-1: unable to send the bmi data to the device: -71 [ 504.100951][ T5931] usb 6-1: config 0 descriptor?? [ 504.116010][ T7625] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 504.130105][ T64] usb 10-1: unable to get target info from device [ 504.200109][ T64] usb 10-1: could not get target info (-71) [ 504.222988][ T64] usb 10-1: could not probe fw (-71) [ 504.266685][ T7625] usb 9-1: Using ep0 maxpacket: 8 [ 504.300876][ T7625] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.342746][ T7625] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.404701][T10946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.415068][T10946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.478275][ T7625] usb 9-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 504.488543][ T7625] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.508275][ T7625] usb 9-1: config 0 descriptor?? [ 504.718297][T10960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.738751][T10960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.166919][T10960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.214125][T10960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.346863][ T7625] aureal 0003:0755:2626.0015: unknown main item tag 0x0 [ 505.383750][ T7625] aureal 0003:0755:2626.0015: unknown main item tag 0x0 [ 505.407910][ T7625] aureal 0003:0755:2626.0015: unknown main item tag 0x0 [ 505.455320][ T7625] aureal 0003:0755:2626.0015: unknown main item tag 0x0 [ 505.497965][ T7625] aureal 0003:0755:2626.0015: unknown main item tag 0x0 [ 505.532714][ T7625] aureal 0003:0755:2626.0015: unknown main item tag 0x0 [ 505.596902][ T7625] aureal 0003:0755:2626.0015: unknown main item tag 0x0 [ 505.613453][ T5931] usb 8-1: USB disconnect, device number 40 [ 505.652401][ T7625] aureal 0003:0755:2626.0015: unknown main item tag 0x0 [ 505.706416][ T7625] aureal 0003:0755:2626.0015: unknown main item tag 0x0 [ 505.745726][ T7625] aureal 0003:0755:2626.0015: unknown main item tag 0x0 [ 505.785500][ T7625] aureal 0003:0755:2626.0015: unknown main item tag 0x0 [ 505.839499][ T7625] aureal 0003:0755:2626.0015: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.8-1/input0 [ 505.920450][ T7625] usb 9-1: USB disconnect, device number 49 [ 506.080977][T10981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.095944][T10981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.166987][T10981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.177186][T10981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.207712][T10978] fido_id[10978]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 506.225673][ T5931] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 506.410682][ T5931] usb 8-1: Using ep0 maxpacket: 8 [ 506.469746][ T5931] usb 8-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 506.487907][ T5931] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.515884][ T5931] usb 8-1: Product: syz [ 506.525671][ T5931] usb 8-1: Manufacturer: syz [ 506.548363][ T5931] usb 8-1: SerialNumber: syz [ 506.574313][ T5931] usb 8-1: config 0 descriptor?? [ 506.619678][ T5931] gspca_main: sq905-2.14.0 probing 2770:9120 [ 506.919789][T10991] syz.8.992: attempt to access beyond end of device [ 506.919789][T10991] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 507.408311][T10998] netlink: 'syz.9.993': attribute type 2 has an invalid length. [ 507.418688][ T7625] usb 6-1: USB disconnect, device number 43 [ 507.457744][T10975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.480503][T10975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.511155][ T5931] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 507.518975][ T5931] sq905 8-1:0.0: probe with driver sq905 failed with error -71 [ 507.531017][T10998] netlink: 8 bytes leftover after parsing attributes in process `syz.9.993'. [ 507.600709][ T5931] usb 8-1: USB disconnect, device number 41 [ 507.602475][T10998] : entered promiscuous mode [ 507.644062][T11000] syzkaller1: entered promiscuous mode [ 507.651374][T11000] syzkaller1: entered allmulticast mode [ 508.521385][T11019] tipc: Started in network mode [ 508.526906][T11019] tipc: Node identity 8000008, cluster identity 4711 [ 508.533906][T11019] tipc: Node number set to 134217736 [ 508.816079][ T5931] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 509.080399][ T5931] usb 8-1: config 0 has no interfaces? [ 509.105755][ T24] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 509.124775][ T5931] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 509.134076][ T5931] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.146603][ T5931] usb 8-1: Product: syz [ 509.150969][ T5931] usb 8-1: Manufacturer: syz [ 509.178379][ T5931] usb 8-1: SerialNumber: syz [ 509.216604][ T5931] usb 8-1: config 0 descriptor?? [ 509.335899][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 509.420462][ T24] usb 10-1: unable to get BOS descriptor or descriptor too short [ 509.451433][ T24] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 509.501262][ T24] usb 10-1: config 1 has no interface number 1 [ 509.548422][ T24] usb 10-1: too many endpoints for config 1 interface 2 altsetting 6: 223, using maximum allowed: 30 [ 509.572143][ T24] usb 10-1: config 1 interface 2 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 509.618236][ T24] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7 [ 509.646758][T11018] netlink: 452 bytes leftover after parsing attributes in process `syz.7.997'. [ 509.725727][ T24] usb 10-1: config 1 interface 2 has no altsetting 2 [ 509.871111][ T24] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 509.924675][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.935353][ T24] usb 10-1: Product: syz [ 509.939976][ T24] usb 10-1: Manufacturer: syz [ 509.944858][ T24] usb 10-1: SerialNumber: syz [ 510.159633][T11022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.177509][T11022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.320022][ T24] usb 10-1: USB disconnect, device number 46 [ 510.339498][T11038] x_tables: ip_tables: CT.0 target: invalid size 40 (kernel) != (user) 48 [ 510.696250][ T8122] udevd[8122]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.745991][ T978] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 510.944755][ T978] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 510.983945][ T978] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 511.035047][ T978] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 511.073205][ T978] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.205478][T11031] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 511.221936][T11048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.253891][T11048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.309137][ T978] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 511.536756][ T24] usb 10-1: new full-speed USB device number 47 using dummy_hcd [ 511.719257][T11056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.733978][T11056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.785685][ T24] usb 10-1: device descriptor read/64, error -71 [ 512.025710][ T24] usb 10-1: new full-speed USB device number 48 using dummy_hcd [ 512.181948][ T24] usb 10-1: device descriptor read/64, error -71 [ 512.297762][ T24] usb usb10-port1: attempt power cycle [ 512.447491][ T7625] usb 8-1: USB disconnect, device number 42 [ 512.706872][ T24] usb 10-1: new full-speed USB device number 49 using dummy_hcd [ 512.875226][ T7625] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 512.943846][ T24] usb 10-1: device descriptor read/8, error -71 [ 513.077429][ T7625] usb 8-1: config 0 has no interfaces? [ 513.083210][ T7625] usb 8-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 513.100223][ T7625] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.135401][ T7625] usb 8-1: config 0 descriptor?? [ 513.206004][ T24] usb 10-1: new full-speed USB device number 50 using dummy_hcd [ 513.373856][T11068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.387180][ T24] usb 10-1: device descriptor read/8, error -71 [ 513.426389][T11068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.464232][ T7625] usb 8-1: USB disconnect, device number 43 [ 513.536074][ T24] usb usb10-port1: unable to enumerate USB device [ 513.915824][ T7625] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 514.085757][ T7625] usb 8-1: Using ep0 maxpacket: 8 [ 514.106413][ T7625] usb 8-1: config 0 has no interfaces? [ 514.111931][ T7625] usb 8-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 0.00 [ 514.259307][ T7625] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.325015][ T5931] usb 9-1: USB disconnect, device number 50 [ 514.327774][ T7625] usb 8-1: config 0 descriptor?? [ 514.618380][ T7625] usb 8-1: USB disconnect, device number 44 [ 514.976704][ T5931] usb 9-1: new low-speed USB device number 51 using dummy_hcd [ 515.188934][ T5931] usb 9-1: config 0 has an invalid interface number: 214 but max is 3 [ 515.229658][ T5931] usb 9-1: config 0 has an invalid interface descriptor of length 3, skipping [ 515.275670][ T5931] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.302607][ T5931] usb 9-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 515.339035][ T5931] usb 9-1: config 0 has no interface number 0 [ 515.362056][ T5931] usb 9-1: config 0 interface 214 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 515.435345][ T5931] usb 9-1: config 0 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 515.521708][ T5931] usb 9-1: config 0 interface 214 has no altsetting 0 [ 515.545618][ T5931] usb 9-1: config 0 interface 1 has no altsetting 0 [ 516.045710][ T5888] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 516.292211][ T5888] usb 6-1: config 0 has no interfaces? [ 516.399684][ T5888] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 516.475870][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.570033][ T5888] usb 6-1: Product: syz [ 516.597446][ T5888] usb 6-1: Manufacturer: syz [ 516.602100][ T5888] usb 6-1: SerialNumber: syz [ 516.629332][ T5888] usb 6-1: config 0 descriptor?? [ 516.843423][T11118] netlink: 452 bytes leftover after parsing attributes in process `syz.5.1016'. [ 516.941283][ T36] bridge_slave_1: left allmulticast mode [ 516.953093][T11144] x_tables: ip_tables: CT.0 target: invalid size 40 (kernel) != (user) 48 [ 516.963054][ T5827] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 516.995624][ T36] bridge_slave_1: left promiscuous mode [ 517.001629][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.080288][ T36] bridge_slave_0: left allmulticast mode [ 517.109105][ T36] bridge_slave_0: left promiscuous mode [ 517.308806][ T5827] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 517.320363][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.332165][ T5827] usb 8-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 517.341678][ T5827] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 517.384064][ T5827] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.510620][T11147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.520083][T11147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.681175][ T5931] usb 9-1: New USB device found, idVendor=12d1, idProduct=01ee, bcdDevice=79.b4 [ 517.744282][ T5931] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.795487][ T5931] usb 9-1: config 0 descriptor?? [ 517.808533][ T5931] usb 9-1: can't set config #0, error -71 [ 517.871661][ T5931] usb 9-1: USB disconnect, device number 51 [ 518.039785][T11150] fuse: Unknown parameter 'grou00000000000000000000' [ 518.271933][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 518.286070][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 518.300664][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 518.317279][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 518.335133][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 519.005899][ T5827] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 519.275767][ T5827] usb 9-1: Using ep0 maxpacket: 16 [ 519.406213][ T5827] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 519.415829][ T5827] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.494736][ T5827] usb 9-1: config 0 has no interface number 0 [ 519.572168][ T5827] usb 9-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 519.595756][ T5827] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.642883][ T5827] usb 9-1: config 0 descriptor?? [ 519.685200][ T5827] usb 9-1: Found UVC 0.00 device (0bd3:0555) [ 519.698263][ T5827] usb 9-1: No valid video chain found. [ 519.821711][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.905165][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.905222][ T5827] usb 8-1: USB disconnect, device number 45 [ 520.027317][ T36] bond0 (unregistering): Released all slaves [ 520.189118][T11163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.200825][ T978] usb 6-1: USB disconnect, device number 44 [ 520.306000][T11163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.406765][ T36] : left promiscuous mode [ 520.411515][ T5831] Bluetooth: hci0: command tx timeout [ 520.574021][ T36] tipc: Left network mode [ 520.606121][ T5918] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 520.730736][T11174] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1023'. [ 520.759190][ T5918] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 520.772252][ T5918] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 520.784963][ T5918] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.808823][ T5918] usb 8-1: Product: syz [ 520.814073][ T5918] usb 8-1: Manufacturer: syz [ 520.832262][T11177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.868463][ T5918] usb 8-1: SerialNumber: syz [ 520.892782][T11177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.914892][ T5918] usb 8-1: config 0 descriptor?? [ 521.072589][ T36] hsr_slave_0: left promiscuous mode [ 521.096146][ T36] hsr_slave_1: left promiscuous mode [ 521.108357][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.117059][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.230041][T11184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.239504][T11184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.496109][ T5918] usb 8-1: USB disconnect, device number 46 [ 521.564974][ T7578] udevd[7578]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 522.475786][ T7579] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 522.486179][ T5831] Bluetooth: hci0: command tx timeout [ 522.578140][ T5918] usb 9-1: USB disconnect, device number 52 [ 522.648806][ T30] audit: type=1326 audit(1746880840.424:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.5.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff337d8e969 code=0x7ffc0000 [ 522.679372][ T7579] usb 8-1: config 15 has an invalid interface number: 212 but max is 0 [ 522.688486][ T7579] usb 8-1: config 15 has no interface number 0 [ 522.699861][ T30] audit: type=1326 audit(1746880840.424:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.5.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff337d8e969 code=0x7ffc0000 [ 522.754195][ T7579] usb 8-1: config 15 interface 212 altsetting 103 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 522.784232][ T30] audit: type=1326 audit(1746880840.424:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.5.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff337d2ab39 code=0x7ffc0000 [ 522.828510][T11202] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1027'. [ 522.848498][ T7579] usb 8-1: config 15 interface 212 altsetting 103 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 522.866303][ T30] audit: type=1326 audit(1746880840.434:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.5.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff337d8e969 code=0x7ffc0000 [ 522.928448][ T7579] usb 8-1: config 15 interface 212 altsetting 103 has a duplicate endpoint with address 0x9, skipping [ 522.960606][ T30] audit: type=1326 audit(1746880840.464:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.5.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff337d8e969 code=0x7ffc0000 [ 523.038649][ T7579] usb 8-1: config 15 interface 212 altsetting 103 has a duplicate endpoint with address 0x6, skipping [ 523.071750][ T30] audit: type=1326 audit(1746880840.464:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.5.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff337d8e969 code=0x7ffc0000 [ 523.161434][ T7579] usb 8-1: config 15 interface 212 altsetting 103 has a duplicate endpoint with address 0xA, skipping [ 523.199598][ T30] audit: type=1326 audit(1746880840.464:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.5.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff337d8e969 code=0x7ffc0000 [ 523.222446][ T7579] usb 8-1: config 15 interface 212 altsetting 103 has an endpoint descriptor with address 0x27, changing to 0x7 [ 523.314730][ T7579] usb 8-1: config 15 interface 212 altsetting 103 endpoint 0x7 has an invalid bInterval 27, changing to 7 [ 523.337464][ T7579] usb 8-1: config 15 interface 212 altsetting 103 endpoint 0x7 has invalid maxpacket 49558, setting to 1024 [ 523.365966][ T36] team0 (unregistering): Port device team_slave_1 removed [ 523.380047][ T30] audit: type=1326 audit(1746880840.484:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.5.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff337d2ab39 code=0x7ffc0000 [ 523.456669][ T7579] usb 8-1: config 15 interface 212 altsetting 103 has a duplicate endpoint with address 0x2, skipping [ 523.471946][ T30] audit: type=1326 audit(1746880840.484:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.5.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff337d8e969 code=0x7ffc0000 [ 523.554838][ T7579] usb 8-1: config 15 interface 212 altsetting 103 has a duplicate endpoint with address 0xF, skipping [ 523.578892][ T30] audit: type=1326 audit(1746880840.514:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.5.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff337d2ab39 code=0x7ffc0000 [ 523.667135][ T36] team0 (unregistering): Port device team_slave_0 removed [ 523.671811][ T7579] usb 8-1: config 15 interface 212 altsetting 103 has a duplicate endpoint with address 0x4, skipping [ 523.795633][ T7579] usb 8-1: config 15 interface 212 altsetting 103 has a duplicate endpoint with address 0x8, skipping [ 523.845750][ T7579] usb 8-1: config 15 interface 212 altsetting 103 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 523.891713][ T7579] usb 8-1: config 15 interface 212 has no altsetting 0 [ 523.942526][ T7579] usb 8-1: Dual-Role OTG device on HNP port [ 523.949620][ T7579] usb 8-1: New USB device found, idVendor=12d1, idProduct=1404, bcdDevice= 0.00 [ 523.961350][ T7579] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.004514][ T7579] usb 8-1: Product:   [ 524.024760][ T7579] usb 8-1: Manufacturer: 싗äƒä†±î³ªë‡êº¨é ¶ï‚·æ­Ÿì¬•íŽ¢å¯ìŽ·î¤Šæ¹“ᒚ粋ੀ힋å™êƒ­å­å´žè¿‡â»²æŒŸë¶¦ä´…✛옔⣭☈ᢲඈ㌷墴氇ꗚ胓崌夎Dz㲀稞ㇹ樞ç°à¤­ä—®æ¶¤ë¥˜ë²±ë䑵ꀩä¢áŒ‘곥渚䈹é»å „∟鳧ä¾ç§€ê¯™Ö’쬹喸䀨 [ 524.047013][ T5931] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 524.049273][ T7579] usb 8-1: SerialNumber: 玉 픓áŸë¥‹ç€‰å¥²á¨‡å¡ã°œï‡Ÿå¡°ÇŽè¯®ç á¬•å†žæ•»â¿åŠ†ã‚€ï¾Žï§¯á˜ˆ [ 524.094035][T11198] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 524.289964][ T5931] usb 9-1: config 0 has no interfaces? [ 524.302835][ T5931] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 524.342612][ T5931] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.377695][ T5931] usb 9-1: Product: syz [ 524.381926][ T5931] usb 9-1: Manufacturer: syz [ 524.418473][ T5931] usb 9-1: SerialNumber: syz [ 524.431228][ T7579] usb-storage 8-1:15.212: USB Mass Storage device detected [ 524.469283][ T5931] usb 9-1: config 0 descriptor?? [ 524.548259][ T7579] usb 8-1: USB disconnect, device number 47 [ 524.565996][ T5831] Bluetooth: hci0: command tx timeout [ 524.814643][ T5931] usb 9-1: USB disconnect, device number 53 [ 524.904715][T11215] fuse: Unknown parameter 'grou00000000000000000000' [ 525.083593][T11217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.116401][T11217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.628034][ T5931] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 525.774505][T11226] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 525.797146][ T5931] usb 8-1: config 0 has no interfaces? [ 525.808211][ T5931] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 525.823898][ T5931] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.840553][ T5931] usb 8-1: Product: syz [ 525.850558][ T5931] usb 8-1: Manufacturer: syz [ 525.890067][ T5931] usb 8-1: SerialNumber: syz [ 525.918588][ T5931] usb 8-1: config 0 descriptor?? [ 526.129091][T11154] chnl_net:caif_netlink_parms(): no params data found [ 526.195222][T11221] netlink: 452 bytes leftover after parsing attributes in process `syz.7.1033'. [ 526.435682][ T5918] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 526.588429][ T5918] usb 6-1: config 8 has an invalid interface number: 80 but max is 0 [ 526.597062][ T5918] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 526.652007][ T5831] Bluetooth: hci0: command tx timeout [ 526.738791][ T5918] usb 6-1: config 8 has no interface number 0 [ 526.770088][ T5918] usb 6-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 526.904778][ T5918] usb 6-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 526.934494][ T5918] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 526.944005][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.976763][ T5918] usb 6-1: NFC: intf ffff8880596a8000 id ffffffff8e93be80 [ 527.151816][T11154] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.166453][T11154] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.193638][T11251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.224265][T11251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.262197][ T5931] usb 6-1: USB disconnect, device number 45 [ 527.304861][T11154] bridge_slave_0: entered allmulticast mode [ 527.367811][T11154] bridge_slave_0: entered promiscuous mode [ 527.377165][T11154] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.384399][T11154] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.394745][T11154] bridge_slave_1: entered allmulticast mode [ 527.405460][T11256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.418590][T11256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.438635][T11154] bridge_slave_1: entered promiscuous mode [ 527.872271][T11154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.905114][T11154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.309403][T11154] team0: Port device team_slave_0 added [ 528.359382][T11154] team0: Port device team_slave_1 added [ 528.654155][T11154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.661652][T11154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.765614][T11154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.870481][T11154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.891438][T11154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.965440][ T978] usb 8-1: USB disconnect, device number 48 [ 529.076964][T11154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.201775][T11272] fuse: Unknown parameter 'grou00000000000000000000' [ 529.420129][T11154] hsr_slave_0: entered promiscuous mode [ 529.453738][T11154] hsr_slave_1: entered promiscuous mode [ 529.706375][ T5931] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 529.966557][ T5931] usb 6-1: config 0 has an invalid interface number: 98 but max is 0 [ 529.983021][ T5931] usb 6-1: config 0 has no interface number 0 [ 530.014697][ T5931] usb 6-1: config 0 interface 98 has no altsetting 0 [ 530.108455][ T5931] usb 6-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 530.120377][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.132235][ T5931] usb 6-1: Product: syz [ 530.136561][ T5931] usb 6-1: Manufacturer: syz [ 530.141164][ T5931] usb 6-1: SerialNumber: syz [ 530.233806][ T5931] usb 6-1: config 0 descriptor?? [ 530.335943][ T978] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 530.357042][T11287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.367979][T11287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.515324][ T978] usb 8-1: config 0 has no interfaces? [ 530.524950][ T5931] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 530.588628][ T978] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 530.627094][ T978] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.795673][ T978] usb 8-1: Product: syz [ 530.806249][ T978] usb 8-1: Manufacturer: syz [ 530.815218][ T978] usb 8-1: SerialNumber: syz [ 530.831187][ T978] usb 8-1: config 0 descriptor?? [ 531.187104][ T5931] usb 6-1: reset high-speed USB device number 46 using dummy_hcd [ 531.255093][T11154] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 531.298388][T11154] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 531.468055][T11154] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 531.625054][T11154] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 531.633366][ T5931] usb 6-1: failed to restore interface 98 altsetting 4 (error=-71) [ 531.708176][ T5931] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 531.731470][ T5931] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 531.740515][ T5827] usb 6-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 531.769075][ T5827] usb 6-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 531.792830][ T5931] usb 6-1: USB disconnect, device number 46 [ 532.080204][T11154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.161640][T11154] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.180649][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.188036][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.234344][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.241545][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.693576][T11154] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 532.837858][T11312] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 532.912810][T11154] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 533.827171][T11154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.926330][ T5918] usb 8-1: USB disconnect, device number 49 [ 533.996118][T11326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.009742][T11326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.239998][T11154] veth0_vlan: entered promiscuous mode [ 534.295992][T11154] veth1_vlan: entered promiscuous mode [ 534.456041][T11154] veth0_macvtap: entered promiscuous mode [ 534.505862][ T5918] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 534.571508][T11154] veth1_macvtap: entered promiscuous mode [ 534.624478][T11154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.645127][T11154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.673359][T11154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.686896][ T5918] usb 9-1: Using ep0 maxpacket: 16 [ 534.702558][T11342] fuse: Unknown parameter 'group_i00000000000000000000' [ 534.727686][ T5918] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.758229][ T5918] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 534.797683][ T5918] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 534.810456][T11154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.845935][ T5918] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 534.849013][T11154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.903021][T11154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.935426][ T5918] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 534.950144][T11154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.037942][ T5918] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 535.048059][ T5918] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 535.056828][T11154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.066874][ T5918] usb 9-1: Manufacturer: syz [ 535.083135][T11154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.145462][ T5918] usb 9-1: config 0 descriptor?? [ 535.232960][T11154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.245268][T11154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.255973][T11154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.267968][T11154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.277945][T11154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.308624][T11154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.392823][T11154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.476487][T11356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.485460][T11356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.530712][T11154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.563700][T11154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.642020][T11154] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.691698][T11154] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.701363][ T5918] rc_core: IR keymap rc-hauppauge not found [ 535.717594][ T5918] Registered IR keymap rc-empty [ 535.756180][ T5918] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 535.767838][T11367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.778821][T11367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.788917][T11154] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.825686][ T5918] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 535.845630][T11154] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.896971][ T5918] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 535.912759][ T5918] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input37 [ 535.944700][ T5918] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 536.017351][ T5918] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 536.046122][ T5918] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 536.140339][ T5918] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 536.227186][ T5918] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 536.265747][ T5918] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 536.295924][ T5918] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 536.425851][ T5918] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 536.523701][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.560865][ T5918] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 536.605912][ T5918] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 536.615059][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.659697][ T5918] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 536.709636][ T5918] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 536.780320][ T5918] usb 9-1: USB disconnect, device number 54 [ 536.816959][ T6181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.852429][ T6181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.155997][ T9] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 538.332314][ T9] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 538.608443][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.641617][ T9] usb 6-1: config 0 descriptor?? [ 539.672005][ T9] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 539.717960][ T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 539.764640][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 539.848305][ T9] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 539.904331][ T9] [drm] Initialized udl on minor 2 [ 539.931404][ T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 539.975959][ T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 540.015221][ T978] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 540.046372][ T9] usb 6-1: USB disconnect, device number 47 [ 540.056014][ T978] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 540.211891][T11401] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1061'. [ 540.271023][T11427] fuse: Unknown parameter 'group_i00000000000000000000' [ 541.945639][ T7579] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 542.238071][ T7579] usb 10-1: config 0 has no interfaces? [ 542.397587][ T7579] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 542.528236][ T5918] usb 9-1: new full-speed USB device number 55 using dummy_hcd [ 542.652701][ T7579] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.698892][ T5918] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.712254][ T7579] usb 10-1: Product: syz [ 542.736056][ T7579] usb 10-1: Manufacturer: syz [ 542.771976][ T7579] usb 10-1: SerialNumber: syz [ 542.781768][ T5918] usb 9-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 542.804177][ T5918] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.906465][ T5918] usb 9-1: Product: syz [ 542.915770][ T5918] usb 9-1: Manufacturer: syz [ 542.920440][ T5918] usb 9-1: SerialNumber: syz [ 542.988859][T11474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.000319][T11474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.008315][ T7579] usb 10-1: config 0 descriptor?? [ 543.012711][T11474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.056657][ T5918] usb 9-1: config 0 descriptor?? [ 543.080616][ T5918] option 9-1:0.0: GSM modem (1-port) converter detected [ 543.129527][T11474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.444519][T11457] netlink: 452 bytes leftover after parsing attributes in process `syz.9.1070'. [ 543.699602][T11491] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1076'. [ 543.721286][T11467] could not allocate digest TFM handle tgr128-generic [ 543.748052][ T5888] usb 9-1: USB disconnect, device number 55 [ 543.755282][ T5888] option 9-1:0.0: device disconnected [ 544.534553][T11500] fuse: Unknown parameter 'group_i00000000000000000000' [ 545.086963][ T978] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 545.327992][ T978] usb 9-1: Using ep0 maxpacket: 32 [ 545.348394][ T978] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.461973][ T978] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.578572][ T978] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 545.625087][ T978] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.677100][ T978] usb 9-1: config 0 descriptor?? [ 545.715094][ T978] hub 9-1:0.0: USB hub found [ 545.918209][T11514] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1080'. [ 545.941338][ T978] hub 9-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 546.020129][T11514] netlink: 'syz.7.1080': attribute type 1 has an invalid length. [ 546.036124][ T5888] usb 10-1: USB disconnect, device number 51 [ 546.075705][T11514] netlink: 'syz.7.1080': attribute type 2 has an invalid length. [ 546.245692][ T978] usbhid 9-1:0.0: can't add hid device: -71 [ 546.251725][ T978] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 546.379673][ T978] usb 9-1: USB disconnect, device number 56 [ 547.433249][T11554] fuse: Unknown parameter 'group_id00000000000000000000' [ 547.446612][ T7579] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 547.481679][ T5918] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 547.646409][ T5918] usb 10-1: Using ep0 maxpacket: 32 [ 547.663658][ T5918] usb 10-1: config 0 interface 0 has no altsetting 0 [ 547.682396][ T5918] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 547.724159][ T5918] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.735903][ T7579] usb 8-1: Using ep0 maxpacket: 32 [ 547.748296][ T5918] usb 10-1: Product: syz [ 547.761449][ T5918] usb 10-1: Manufacturer: syz [ 547.788531][ T7579] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 547.790068][ T5918] usb 10-1: SerialNumber: syz [ 547.839727][ T5918] usb 10-1: config 0 descriptor?? [ 547.860717][T11569] FAULT_INJECTION: forcing a failure. [ 547.860717][T11569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.890238][T11569] CPU: 1 UID: 0 PID: 11569 Comm: syz.5.1092 Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 PREEMPT(full) [ 547.890268][T11569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 547.890282][T11569] Call Trace: [ 547.890290][T11569] [ 547.890300][T11569] dump_stack_lvl+0x189/0x250 [ 547.890337][T11569] ? __lock_acquire+0xaac/0xd20 [ 547.890368][T11569] ? __pfx_dump_stack_lvl+0x10/0x10 [ 547.890396][T11569] ? __pfx__printk+0x10/0x10 [ 547.890417][T11569] ? __might_fault+0xb0/0x130 [ 547.890456][T11569] should_fail_ex+0x414/0x560 [ 547.890494][T11569] _copy_from_user+0x2d/0xb0 [ 547.890522][T11569] mptcp_getsockopt+0x1136/0x1b90 [ 547.890567][T11569] ? __pfx_process_measurement+0x10/0x10 [ 547.890591][T11569] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 547.890611][T11569] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 547.890641][T11569] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 547.890663][T11569] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 547.890701][T11569] ? __lock_acquire+0xaac/0xd20 [ 547.890735][T11569] ? __lock_acquire+0xaac/0xd20 [ 547.890774][T11569] ? __lock_acquire+0xaac/0xd20 [ 547.890818][T11569] ? is_bpf_text_address+0x26/0x2b0 [ 547.890874][T11569] ? __might_fault+0xb0/0x130 [ 547.890901][T11569] ? _parse_integer_limit+0x1ae/0x1f0 [ 547.890922][T11569] ? aa_label_sk_perm+0x413/0x560 [ 547.890947][T11569] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 547.890997][T11569] ? __lock_acquire+0xaac/0xd20 [ 547.891033][T11569] ? __might_fault+0xb0/0x130 [ 547.891075][T11569] ? sock_common_getsockopt+0x2d/0xb0 [ 547.891100][T11569] do_sock_getsockopt+0x35d/0x650 [ 547.891129][T11569] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 547.891153][T11569] ? do_syscall_64+0x40/0x210 [ 547.891177][T11569] ? __fget_files+0x2a/0x420 [ 547.891200][T11569] ? __fget_files+0x3a0/0x420 [ 547.891224][T11569] ? __fget_files+0x2a/0x420 [ 547.891257][T11569] __x64_sys_getsockopt+0x1a5/0x250 [ 547.891282][T11569] ? do_syscall_64+0x40/0x210 [ 547.891307][T11569] ? do_syscall_64+0x40/0x210 [ 547.891335][T11569] do_syscall_64+0xf6/0x210 [ 547.891361][T11569] ? clear_bhb_loop+0x45/0xa0 [ 547.891387][T11569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.891406][T11569] RIP: 0033:0x7ff337d8e969 [ 547.891426][T11569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.891443][T11569] RSP: 002b:00007ff338b89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 547.891465][T11569] RAX: ffffffffffffffda RBX: 00007ff337fb5fa0 RCX: 00007ff337d8e969 [ 547.891480][T11569] RDX: 0000000000000004 RSI: 000000000000011c RDI: 0000000000000004 [ 547.891492][T11569] RBP: 00007ff338b89090 R08: 0000200000000080 R09: 0000000000000000 [ 547.891505][T11569] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 547.891517][T11569] R13: 0000000000000000 R14: 00007ff337fb5fa0 R15: 00007ff3380dfa28 [ 547.891585][T11569] [ 547.894410][ T7579] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 548.325107][T11574] x_tables: ip_tables: CT.0 target: invalid size 40 (kernel) != (user) 48 [ 548.346575][ T5918] gs_usb 10-1:0.0: Configuring for 1 interfaces [ 548.714683][ T7579] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 548.765109][ T7579] usb 8-1: Product: syz [ 548.782053][ T7579] usb 8-1: Manufacturer: syz [ 548.788716][T11590] veth0: entered promiscuous mode [ 548.812285][T11596] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1096'. [ 548.829347][ T7579] usb 8-1: SerialNumber: syz [ 548.856433][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1096'. [ 548.912298][ T7579] usb 8-1: config 0 descriptor?? [ 548.956358][T11544] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 549.043972][ T5918] usb 10-1: USB disconnect, device number 52 [ 549.296022][ T9] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 549.335300][ T7579] usb 8-1: USB disconnect, device number 50 [ 549.507129][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 549.518762][ T9] usb 6-1: config 0 has an invalid interface number: 190 but max is 1 [ 549.544060][ T9] usb 6-1: config 0 has an invalid interface number: 2 but max is 1 [ 549.601333][ T9] usb 6-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 549.613269][ T9] usb 6-1: config 0 has no interface number 1 [ 549.619985][ T9] usb 6-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 549.633158][ T9] usb 6-1: config 0 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 549.672049][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 549.681136][ T9] usb 6-1: config 0 interface 2 has no altsetting 0 [ 549.691605][ T9] usb 6-1: New USB device found, idVendor=0499, idProduct=150a, bcdDevice=f6.7f [ 549.706154][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.720584][ T9] usb 6-1: Product: syz [ 549.725324][ T9] usb 6-1: Manufacturer: syz [ 549.730458][ T9] usb 6-1: SerialNumber: syz [ 549.739316][ T9] usb 6-1: config 0 descriptor?? [ 549.956398][ T9] usb 6-1: selecting invalid altsetting 0 [ 550.035724][ T5918] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 550.058590][ T9] usb 6-1: USB disconnect, device number 48 [ 550.124697][ T8122] udevd[8122]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.190/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.150648][ T7579] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 550.216578][ T5918] usb 9-1: Using ep0 maxpacket: 16 [ 550.296524][ T5918] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 550.315997][ T7579] usb 10-1: device descriptor read/64, error -71 [ 550.329167][T11618] fuse: Unknown parameter 'group_id00000000000000000000' [ 550.343598][ T5918] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.406942][ T5918] usb 9-1: config 0 has no interface number 0 [ 550.464029][ T5918] usb 9-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 550.500833][ T5918] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.556218][ T7579] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 550.569125][ T5918] usb 9-1: config 0 descriptor?? [ 550.683534][ T5918] usb 9-1: Found UVC 0.00 device (0bd3:0555) [ 550.730704][ T5918] usb 9-1: No valid video chain found. [ 550.818284][ T7579] usb 10-1: device descriptor read/64, error -71 [ 550.940317][T11608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.950609][T11608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.960832][ T7579] usb usb10-port1: attempt power cycle [ 551.235300][T11635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.306015][ T7579] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 551.324171][T11635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.397092][ T7579] usb 10-1: device descriptor read/8, error -71 [ 551.507859][ T9] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 551.677433][ T7579] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 551.740148][ T7579] usb 10-1: device descriptor read/8, error -71 [ 551.776179][ T9] usb 8-1: config 0 has an invalid interface number: 122 but max is 3 [ 551.813638][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.859538][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 551.907533][ T7579] usb usb10-port1: unable to enumerate USB device [ 551.908798][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 551.908816][ T30] audit: type=1326 audit(1746880869.694:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11624 comm="syz.5.1105" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff337d8e969 code=0x0 [ 551.944418][ T9] usb 8-1: config 0 has no interface number 0 [ 551.966374][ T9] usb 8-1: config 0 interface 122 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 552.009091][ T9] usb 8-1: config 0 interface 122 has no altsetting 0 [ 552.063145][ T9] usb 8-1: New USB device found, idVendor=10cf, idProduct=8066, bcdDevice=76.cb [ 552.078414][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.095018][ T9] usb 8-1: Product: syz [ 552.101476][ T9] usb 8-1: Manufacturer: syz [ 552.121365][ T9] usb 8-1: SerialNumber: syz [ 552.234689][ T9] usb 8-1: config 0 descriptor?? [ 552.807628][T11656] netlink: 'syz.5.1110': attribute type 21 has an invalid length. [ 553.188084][T11665] netlink: 'syz.7.1106': attribute type 5 has an invalid length. [ 553.357037][T11668] netlink: 'syz.9.1111': attribute type 2 has an invalid length. [ 553.391181][T11668] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1111'. [ 553.688562][ T5918] usb 9-1: USB disconnect, device number 57 [ 554.368771][T11691] fuse: Unknown parameter 'group_id00000000000000000000' [ 554.629773][ T7625] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 554.832389][ T7625] usb 10-1: config 0 has no interfaces? [ 554.843375][ T7625] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 554.853052][ T7625] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.861895][ T7625] usb 10-1: Product: syz [ 554.866744][ T7625] usb 10-1: Manufacturer: syz [ 554.871558][ T7625] usb 10-1: SerialNumber: syz [ 554.893048][ T7625] usb 10-1: config 0 descriptor?? [ 554.939786][ T9] vmk80xx 8-1:0.122: driver 'vmk80xx' failed to auto-configure device. [ 555.018893][ T9] usb 8-1: USB disconnect, device number 51 [ 555.047083][ T7579] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 555.183806][T11692] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 555.197092][T11692] netlink: 'syz.9.1113': attribute type 4 has an invalid length. [ 555.371203][ T7579] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 555.388153][ T7579] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.226266][ T7579] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16384, setting to 1024 [ 556.308111][ T7579] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 556.323940][ T7579] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 556.346530][ T7579] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 556.365008][ T7579] usb 9-1: Manufacturer: syz [ 556.387358][ T7579] usb 9-1: config 0 descriptor?? [ 556.841871][ T7579] appleir 0003:05AC:8243.0016: unknown main item tag 0x0 [ 557.015072][ T7579] appleir 0003:05AC:8243.0016: No inputs registered, leaving [ 557.182451][T11723] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 557.295080][ T7579] appleir 0003:05AC:8243.0016: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 557.480435][T11727] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1119'. [ 558.119401][T11732] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1120'. [ 558.167139][ T5918] usb 10-1: USB disconnect, device number 57 [ 558.338995][ T7579] usb 9-1: USB disconnect, device number 58 [ 558.389962][T11742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.400171][T11742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.413514][T11742] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1121'. [ 558.716588][ T5918] usb 10-1: new full-speed USB device number 58 using dummy_hcd [ 558.845725][ T24] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 558.880587][ T5918] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.922807][ T5918] usb 10-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 558.948036][ T5918] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.974743][ T5918] usb 10-1: config 0 descriptor?? [ 558.974907][T11751] fuse: Bad value for 'user_id' [ 559.034520][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 559.034699][T11751] fuse: Bad value for 'user_id' [ 559.057051][T11753] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1126'. [ 559.158220][ T24] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 559.166761][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.235090][ T24] usb 6-1: config 0 has no interface number 0 [ 559.289047][ T24] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 559.375665][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.503306][ T24] usb 6-1: config 0 descriptor?? [ 559.510965][ T5918] hkems 0003:2006:0118.0017: unknown main item tag 0x3 [ 559.518316][ T5918] hkems 0003:2006:0118.0017: unknown main item tag 0x2 [ 559.529030][ T24] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 559.536089][ T5918] hkems 0003:2006:0118.0017: unknown main item tag 0x0 [ 559.543075][ T24] usb 6-1: No valid video chain found. [ 559.553241][ T5918] hkems 0003:2006:0118.0017: hidraw0: USB HID v0.01 Device [HID 2006:0118] on usb-dummy_hcd.9-1/input0 [ 559.564739][ T5918] hkems 0003:2006:0118.0017: no inputs found [ 559.577364][ T5918] hkems 0003:2006:0118.0017: force feedback init failed [ 559.635972][ T9] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 559.723434][ T7579] usb 10-1: USB disconnect, device number 58 [ 559.873234][T11762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.888317][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 559.913779][ T9] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 559.929723][ T9] usb 9-1: config 0 has no interface number 0 [ 559.950168][ T9] usb 9-1: config 0 interface 85 has no altsetting 0 [ 559.959039][T11759] fido_id[11759]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 559.988146][T11762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.060554][ T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 560.078027][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.190607][ T9] usb 9-1: Product: syz [ 560.202428][ T9] usb 9-1: Manufacturer: syz [ 560.238288][ T9] usb 9-1: SerialNumber: syz [ 560.260701][ T9] usb 9-1: config 0 descriptor?? [ 560.280478][ T9] appletouch 9-1:0.85: Could not find int-in endpoint [ 560.334483][ T9] appletouch 9-1:0.85: probe with driver appletouch failed with error -5 [ 560.397209][ T9] usbhid 9-1:0.85: couldn't find an input interrupt endpoint [ 560.599101][ T9] usb 9-1: USB disconnect, device number 59 [ 560.689583][T11774] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 560.821951][T11776] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1131'. [ 560.895724][ T5918] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 561.204548][ T5918] usb 10-1: Using ep0 maxpacket: 16 [ 561.262312][ T5918] usb 10-1: config 0 has an invalid interface number: 64 but max is 0 [ 561.271272][ T5918] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.383971][ T5918] usb 10-1: config 0 has no interface number 0 [ 561.482158][ T5918] usb 10-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 561.571892][T11781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.609617][T11781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.627195][ T5918] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.648117][ T5918] usb 10-1: config 0 descriptor?? [ 561.832899][ T5918] usb 10-1: Found UVC 0.00 device (0bd3:0555) [ 561.849438][ T5918] usb 10-1: No valid video chain found. [ 561.934843][ T5918] usb 6-1: USB disconnect, device number 49 [ 562.039674][T11767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.049975][T11767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.402192][ T24] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 562.545719][ T5918] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 562.578309][ T24] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 562.591822][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.638762][ T24] usb 9-1: config 0 descriptor?? [ 562.662800][ T24] cp210x 9-1:0.0: cp210x converter detected [ 562.695842][ T5918] usb 6-1: device descriptor read/64, error -71 [ 562.936327][ T5918] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 563.052413][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.058930][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.068850][ T24] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 563.093946][ T5918] usb 6-1: device descriptor read/64, error -71 [ 563.107640][ T24] usb 9-1: cp210x converter now attached to ttyUSB0 [ 563.225983][ T5918] usb usb6-port1: attempt power cycle [ 563.287882][T11787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.305344][T11787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.360810][ T5887] usb 9-1: USB disconnect, device number 60 [ 563.369075][ T5887] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 563.460499][ T24] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 563.488156][ T5887] cp210x 9-1:0.0: device disconnected [ 563.534307][T11798] fuse: Bad value for 'user_id' [ 563.541515][T11798] fuse: Bad value for 'user_id' [ 563.585730][ T5918] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 563.613959][ T9] usb 10-1: USB disconnect, device number 59 [ 563.620838][ T5918] usb 6-1: device descriptor read/8, error -71 [ 563.638226][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 563.669621][ T24] usb 8-1: config 2 has an invalid interface number: 169 but max is 0 [ 563.679100][ T24] usb 8-1: config 2 has no interface number 0 [ 563.685451][ T24] usb 8-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 563.714756][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.743089][ T24] cypress_m8 8-1:2.169: DeLorme Earthmate USB converter detected [ 563.763796][ T24] earthmate ttyUSB0: required endpoint is missing [ 563.904060][ T5918] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 563.960276][ T5918] usb 6-1: device descriptor read/8, error -71 [ 563.968370][ T24] usb 8-1: USB disconnect, device number 52 [ 563.979228][ T24] cypress_m8 8-1:2.169: device disconnected [ 564.076020][ T5918] usb usb6-port1: unable to enumerate USB device [ 564.696170][T11817] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1141'. [ 564.753503][ T30] audit: type=1326 audit(1746880882.534:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11814 comm="syz.6.1140" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f402d18e969 code=0x0 [ 564.896670][T11825] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 564.923316][T11815] @: renamed from vlan0 (while UP) [ 564.961082][T11815] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1140'. [ 564.988259][T11815] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5) [ 565.154206][T11833] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1143'. [ 565.533490][T11848] fuse: Bad value for 'user_id' [ 565.538937][ T24] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 565.553302][T11848] fuse: Bad value for 'user_id' [ 565.706001][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 565.716861][ T24] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 565.725389][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.744114][ T24] usb 8-1: config 0 has no interface number 0 [ 565.753029][ T24] usb 8-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 565.809539][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.871135][ T24] usb 8-1: config 0 descriptor?? [ 565.893674][ T24] usb 8-1: Found UVC 0.00 device (0bd3:0555) [ 565.904852][ T24] usb 8-1: No valid video chain found. [ 566.106956][T11840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.117193][T11840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.219169][T11863] netlink: 'syz.6.1152': attribute type 5 has an invalid length. [ 566.227558][T11863] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1152'. [ 566.267203][ T24] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 566.425725][ T24] usb 9-1: device descriptor read/64, error -71 [ 566.705708][ T24] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 566.913793][T11877] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1156'. [ 566.996887][ T24] usb 9-1: device descriptor read/64, error -71 [ 567.106562][ T24] usb usb9-port1: attempt power cycle [ 567.117269][T11881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.135898][T11881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.166039][ T5918] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 567.222793][ T5887] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 567.330292][T11882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.341728][T11882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.387834][ T5918] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 567.414931][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.435683][ T5887] usb 10-1: device descriptor read/64, error -71 [ 567.446306][ T24] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 567.455630][ T5918] usb 6-1: config 0 descriptor?? [ 567.480243][ T5918] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 567.496594][ T24] usb 9-1: device descriptor read/8, error -71 [ 567.675846][ T5887] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 567.755840][ T24] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 567.796604][ T24] usb 9-1: device descriptor read/8, error -71 [ 567.815622][ T5887] usb 10-1: device descriptor read/64, error -71 [ 567.887712][ T5918] gspca_cpia1: usb_control_msg 03, error -32 [ 567.896835][ T5918] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 567.906636][ T24] usb usb9-port1: unable to enumerate USB device [ 567.926810][ T5887] usb usb10-port1: attempt power cycle [ 568.040855][T11885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.050038][T11885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.102315][ T5918] gspca_cpia1: usb_control_msg 01, error -32 [ 568.104560][T11878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.123293][T11878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.139138][ T5918] gspca_cpia1: usb_control_msg 01, error -71 [ 568.145599][ T5918] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 568.164719][ T5918] usb 6-1: USB disconnect, device number 54 [ 568.285760][ T5887] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 568.310494][ T5887] usb 10-1: device descriptor read/8, error -71 [ 568.555712][ T5887] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 568.577448][ T5887] usb 10-1: device descriptor read/8, error -71 [ 568.696139][ T5887] usb usb10-port1: unable to enumerate USB device [ 568.809484][ T5918] usb 8-1: USB disconnect, device number 53 [ 568.902935][T11891] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 569.024203][T11893] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1160'. [ 569.123053][T11896] fuse: Bad value for 'fd' [ 569.236811][T11900] fuse: Unknown parameter '000000000000000000040x0000000000000003' [ 569.580622][T11907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.608109][T11907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.161238][T11903] syz.8.1164 (11903) used greatest stack depth: 19432 bytes left [ 570.226969][T11915] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1168'. [ 570.227321][T11914] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1168'. [ 570.736131][ T9] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 570.810767][T11933] fuse: Bad value for 'fd' [ 570.910499][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 570.943818][ T9] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 570.982766][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.069704][ T9] usb 9-1: config 0 has no interface number 0 [ 571.191232][ T9] usb 9-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 571.207034][T11937] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 571.221829][T11937] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1174'. [ 571.252573][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.253181][T11937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1174'. [ 571.290476][T11937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1174'. [ 571.321083][ T9] usb 9-1: config 0 descriptor?? [ 571.339134][ T9] usb 9-1: Found UVC 0.00 device (0bd3:0555) [ 571.435616][ T9] usb 9-1: No valid video chain found. [ 571.551816][T11929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.562611][T11929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.698148][T11945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.762771][T11945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.823152][T11951] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 571.952697][T11954] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1178'. [ 572.222951][T11959] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1180'. [ 572.706569][T11968] fuse: Bad value for 'fd' [ 572.892200][ T5918] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 572.961402][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1186'. [ 573.031130][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1186'. [ 573.061791][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.083263][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.094392][ T5918] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 573.118345][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.130765][T11975] netlink: 'syz.6.1186': attribute type 14 has an invalid length. [ 573.132817][ T5918] usb 6-1: config 0 descriptor?? [ 573.387602][ T7579] usb 9-1: USB disconnect, device number 65 [ 573.617665][ T5918] playstation 0003:054C:0DF2.0018: unknown main item tag 0x0 [ 573.635603][ T5918] playstation 0003:054C:0DF2.0018: unknown main item tag 0x0 [ 573.643233][ T5918] playstation 0003:054C:0DF2.0018: unknown main item tag 0x0 [ 573.654279][ T5918] playstation 0003:054C:0DF2.0018: unknown main item tag 0x0 [ 573.687314][ T5918] playstation 0003:054C:0DF2.0018: unknown main item tag 0x0 [ 573.720203][ T5918] playstation 0003:054C:0DF2.0018: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 573.790504][T11997] netlink: 'syz.8.1193': attribute type 2 has an invalid length. [ 573.826287][ T5918] playstation 0003:054C:0DF2.0018: Invalid byte count transferred, expected 20 got 0 [ 573.835670][T11997] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1193'. [ 573.838622][ T5918] playstation 0003:054C:0DF2.0018: Failed to retrieve DualSense pairing info: -22 [ 573.881962][ T5918] playstation 0003:054C:0DF2.0018: Failed to get MAC address from DualSense [ 573.896348][ T5918] playstation 0003:054C:0DF2.0018: Failed to create dualsense. [ 573.919352][ T5918] playstation 0003:054C:0DF2.0018: probe with driver playstation failed with error -22 [ 573.984552][ T30] audit: type=1326 audit(1746880891.764:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.8.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2154b8e969 code=0x7ffc0000 [ 574.078514][ T30] audit: type=1326 audit(1746880891.794:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.8.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f2154b8e969 code=0x7ffc0000 [ 574.106311][ T30] audit: type=1326 audit(1746880891.794:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.8.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2154b8e969 code=0x7ffc0000 [ 574.172325][ T5918] usb 6-1: USB disconnect, device number 55 [ 574.202123][ T30] audit: type=1326 audit(1746880891.794:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.8.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2154b8e969 code=0x7ffc0000 [ 574.241232][T12007] netlink: 'syz.6.1195': attribute type 16 has an invalid length. [ 574.267490][T12009] netlink: 'syz.8.1196': attribute type 13 has an invalid length. [ 574.276367][ T30] audit: type=1326 audit(1746880891.794:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.8.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f2154b8e969 code=0x7ffc0000 [ 574.337979][T12009] syz_tun: refused to change device tx_queue_len [ 574.363401][ T30] audit: type=1326 audit(1746880891.794:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.8.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2154b8e969 code=0x7ffc0000 [ 574.365595][T12009] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 574.737250][T12016] loop2: detected capacity change from 0 to 7 [ 574.762426][T12016] buffer_io_error: 270 callbacks suppressed [ 574.762440][T12016] Buffer I/O error on dev loop2, logical block 0, async page read [ 574.805821][T12016] Buffer I/O error on dev loop2, logical block 0, async page read [ 574.846203][T12016] Buffer I/O error on dev loop2, logical block 0, async page read [ 574.873176][T12016] Buffer I/O error on dev loop2, logical block 0, async page read [ 575.016790][T12022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.044816][T12022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.057422][T12022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.066859][T12022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.374323][T12016] Buffer I/O error on dev loop2, logical block 0, async page read [ 575.397746][T12027] set match dimension is over the limit! [ 575.462448][T12016] Buffer I/O error on dev loop2, logical block 0, async page read [ 575.502240][T12016] Buffer I/O error on dev loop2, logical block 0, async page read [ 575.523485][T12016] ldm_validate_partition_table(): Disk read failed. [ 575.533151][T12016] Buffer I/O error on dev loop2, logical block 0, async page read [ 575.544582][T12016] Buffer I/O error on dev loop2, logical block 0, async page read [ 575.554395][T12016] Buffer I/O error on dev loop2, logical block 0, async page read [ 575.565369][T12016] Dev loop2: unable to read RDB block 0 [ 575.655915][T12016] loop2: unable to read partition table [ 575.662079][T12016] loop2: partition table beyond EOD, truncated [ 575.668483][T12016] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 575.736385][ T7579] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 575.943763][ T7579] usb 6-1: config 0 has no interfaces? [ 575.958734][ T7579] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 575.973842][ T7579] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.989606][ T7579] usb 6-1: Product: syz [ 575.998612][ T7579] usb 6-1: Manufacturer: syz [ 576.059395][ T7579] usb 6-1: SerialNumber: syz [ 576.233925][T12030] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 576.453931][ T7579] usb 6-1: config 0 descriptor?? [ 576.578835][ T5887] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 576.793040][ T5887] usb 8-1: Using ep0 maxpacket: 16 [ 576.798375][ T30] audit: type=1326 audit(1746880894.554:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12017 comm="syz.5.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff337d8e969 code=0x7ffc0000 [ 576.798435][ T30] audit: type=1326 audit(1746880894.554:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12017 comm="syz.5.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7ff337d8e969 code=0x7ffc0000 [ 576.798481][ T30] audit: type=1326 audit(1746880894.554:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12017 comm="syz.5.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff337d8e969 code=0x7ffc0000 [ 576.798526][ T30] audit: type=1326 audit(1746880894.554:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12017 comm="syz.5.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff337d8e969 code=0x7ffc0000 [ 577.116743][ T5887] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 577.129860][ T5887] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 577.158010][ T5887] usb 8-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=f4.95 [ 577.172567][ T5887] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.182457][ T5887] usb 8-1: Product: syz [ 577.193416][ T5887] usb 8-1: Manufacturer: syz [ 577.210906][ T5887] usb 8-1: SerialNumber: syz [ 577.395019][ T5887] usb 8-1: config 0 descriptor?? [ 577.405934][T12030] raw-gadget.4 gadget.7: fail, usb_ep_enable returned -22 [ 577.413546][T12030] raw-gadget.4 gadget.7: fail, usb_ep_enable returned -22 [ 577.664704][ T5887] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 577.679492][ T5887] asix 8-1:0.0: probe with driver asix failed with error -71 [ 577.771919][ T5887] usb 8-1: USB disconnect, device number 54 [ 578.464211][T12043] __nla_validate_parse: 151 callbacks suppressed [ 578.464234][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1205'. [ 578.539441][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1205'. [ 578.628797][T12043] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3 [ 578.729000][T12043] ip6gretap3: entered allmulticast mode [ 578.835916][ T5887] usb 6-1: USB disconnect, device number 56 [ 579.175666][ T5918] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 579.243080][T12061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.259001][T12061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.535658][ T5887] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 579.589358][T12065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.626645][T12065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.700056][ T5887] usb 8-1: Using ep0 maxpacket: 8 [ 579.716132][ T5887] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.738508][ T5887] usb 8-1: config 0 has no interfaces? [ 579.759318][ T5887] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.782432][ T5887] usb 8-1: config 0 has no interfaces? [ 579.936422][ T5887] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.995416][ T5918] usb 10-1: config 0 has no interfaces? [ 580.013046][ T5887] usb 8-1: config 0 has no interfaces? [ 580.032486][ T5887] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 580.048846][ T5887] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.059623][ T5887] usb 8-1: Product: syz [ 580.069463][ T5918] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 580.088785][ T5887] usb 8-1: Manufacturer: syz [ 580.096309][ T5918] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.110862][ T5887] usb 8-1: SerialNumber: syz [ 580.260801][ T5887] usb 8-1: config 0 descriptor?? [ 580.271418][ T5918] usb 10-1: Product: syz [ 580.398604][ T5918] usb 10-1: Manufacturer: syz [ 580.472037][T12087] tipc: Started in network mode [ 580.492487][T12087] tipc: Node identity ac14142f, cluster identity 4711 [ 580.527776][ T5918] usb 10-1: SerialNumber: syz [ 580.548985][T12087] tipc: New replicast peer: 0.0.0.0 [ 580.562435][ T5918] usb 10-1: config 0 descriptor?? [ 580.603275][T12087] tipc: Enabled bearer , priority 10 [ 580.624922][ T5887] usb 8-1: USB disconnect, device number 55 [ 580.837682][T12055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.848566][T12055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.862223][T12055] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1207'. [ 581.606029][ T7579] tipc: Node number set to 2886997039 [ 581.869196][ T5887] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 582.055683][ T5887] usb 8-1: Using ep0 maxpacket: 16 [ 582.097266][ T5887] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 582.106606][ T5887] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.132839][ T5887] usb 8-1: config 0 has no interface number 0 [ 582.169922][ T5887] usb 8-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 582.250988][ T5887] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.290939][ T5887] usb 8-1: config 0 descriptor?? [ 582.352950][ T5887] usb 8-1: Found UVC 0.00 device (0bd3:0555) [ 582.360634][T12112] veth1_to_bridge: entered allmulticast mode [ 582.388088][ T5887] usb 8-1: No valid video chain found. [ 582.413676][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.555673][ T7579] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 582.584899][T12105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.594586][T12105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.015607][ T7579] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 583.046913][ T7579] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 583.087173][ T7579] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 583.117978][ T7579] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.447944][T12111] raw-gadget.6 gadget.5: fail, usb_ep_enable returned -22 [ 583.531361][ T7579] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 583.959463][ T5918] usb 10-1: USB disconnect, device number 64 [ 584.191010][T12126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.254617][T12126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.635792][ T5918] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 584.753563][ T5885] usb 8-1: USB disconnect, device number 56 [ 584.801650][ T5918] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.847442][ T5918] usb 10-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 584.913603][ T5918] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.959020][ T5918] usb 10-1: config 0 descriptor?? [ 584.965992][ T24] usb 9-1: new low-speed USB device number 66 using dummy_hcd [ 585.007728][ T5918] gspca_main: kinect-2.14.0 probing 045e:02bf [ 585.188558][ T24] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 585.196409][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 585.220523][ T5887] usb 10-1: USB disconnect, device number 65 [ 585.243360][ T24] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 585.374347][T12145] netlink: 'syz.6.1222': attribute type 2 has an invalid length. [ 585.431978][T12145] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1222'. [ 586.149370][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 586.224996][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 586.276725][ T24] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 586.315680][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 586.368318][ T24] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 586.418596][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 586.463482][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 586.483533][ T24] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 586.491558][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 586.510429][ T24] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 586.541918][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 586.609985][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 586.661084][ T24] usb 9-1: string descriptor 0 read error: -22 [ 586.671569][ T24] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 586.692529][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.740139][ T24] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 586.759318][T12134] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1220'. [ 586.838889][T12162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.863179][T12162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.065163][ T24] usb 9-1: USB disconnect, device number 66 [ 587.194089][T12157] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 587.206152][T12157] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 587.272030][T12157] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 587.283769][T12157] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 587.314743][T12157] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 587.329074][ T9] usb 6-1: USB disconnect, device number 57 [ 587.330921][T12157] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 587.362245][T12157] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 587.383791][T12157] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 587.472695][T12157] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 587.493220][T12157] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 587.647183][T12171] xt_hashlimit: max too large, truncated to 1048576 [ 587.667850][T12171] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 587.925880][ T9] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 588.077354][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 588.093210][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.113519][ T9] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 588.123789][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.144514][ T9] usb 6-1: config 0 descriptor?? [ 588.358645][T12170] netlink: 'syz.5.1228': attribute type 6 has an invalid length. [ 588.366531][T12170] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1228'. [ 588.381525][T12170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.390735][T12170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.613284][ T9] hid-thrustmaster 0003:044F:B65D.0019: unknown main item tag 0x0 [ 588.636550][ T9] hid-thrustmaster 0003:044F:B65D.0019: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 588.685579][ T9] hid-thrustmaster 0003:044F:B65D.0019: Wrong number of endpoints? [ 588.829200][ C0] hid-thrustmaster 0003:044F:B65D.0019: Unknown packet type 0x0, unable to proceed further with wheel init [ 589.031973][ T24] usb 6-1: USB disconnect, device number 58 [ 589.215781][ T9] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 589.505961][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 589.535150][ T9] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 589.574699][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.611886][ T9] usb 9-1: config 0 has no interface number 0 [ 589.618300][ T9] usb 9-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 589.632332][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.642884][ T9] usb 9-1: config 0 descriptor?? [ 589.680347][ T9] usb 9-1: Found UVC 0.00 device (0bd3:0555) [ 589.694943][ T9] usb 9-1: No valid video chain found. [ 589.889616][T12178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.899749][T12178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.980330][T12182] binder: 12181:12182 ioctl c0306201 2000000003c0 returned -14 [ 590.828038][T12197] kvm_intel: kvm [12196]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 590.955107][T12198] netlink: 'syz.5.1235': attribute type 20 has an invalid length. [ 591.068727][T12200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.078894][T12200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.896306][ T9] usb 9-1: USB disconnect, device number 67 [ 592.250932][T12218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.261576][T12218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.376434][ T9] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 592.436034][ T7625] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 592.473382][T12218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.482300][T12218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.505709][ T9] usb 9-1: device descriptor read/64, error -71 [ 592.588477][ T7625] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.598399][ T7625] usb 6-1: config 0 interface 0 has no altsetting 0 [ 592.605026][ T7625] usb 6-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 592.619576][ T7625] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.630857][ T7625] usb 6-1: config 0 descriptor?? [ 592.765954][ T9] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 592.864759][ T7625] usbhid 6-1:0.0: can't add hid device: -71 [ 592.885007][ T7625] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 592.905654][ T9] usb 9-1: device descriptor read/64, error -71 [ 592.920834][ T7625] usb 6-1: USB disconnect, device number 59 [ 593.026008][ T9] usb usb9-port1: attempt power cycle [ 593.256174][ T7625] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 593.365639][ T9] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 593.387773][ T9] usb 9-1: device descriptor read/8, error -71 [ 593.405969][ T7625] usb 6-1: Using ep0 maxpacket: 32 [ 593.413455][ T7625] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.424419][ T7625] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.434245][ T7625] usb 6-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 593.443673][ T7625] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.454397][ T7625] usb 6-1: config 0 descriptor?? [ 593.625817][ T9] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 593.657979][ T9] usb 9-1: device descriptor read/8, error -71 [ 593.682664][ T7625] usbhid 6-1:0.0: can't add hid device: -32 [ 593.699733][ T7625] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 593.710236][T12229] netlink: 'syz.6.1245': attribute type 10 has an invalid length. [ 593.727299][T12229] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1245'. [ 593.747592][T12229] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 593.776152][ T9] usb usb9-port1: unable to enumerate USB device [ 593.778212][ T5827] usb 6-1: [UEAGLE-ATM] firmware is not available [ 593.830002][T12232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.840829][T12232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.931165][T12237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.940689][T12237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.588726][T12239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.599537][T12239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.106366][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 595.106386][ T30] audit: type=1326 audit(1746880912.884:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12240 comm="syz.8.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2154b8e969 code=0x7ffc0000 [ 595.143652][ T30] audit: type=1326 audit(1746880912.894:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12240 comm="syz.8.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2154b8e969 code=0x7ffc0000 [ 595.170986][ T30] audit: type=1326 audit(1746880912.944:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12240 comm="syz.8.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2154b8e969 code=0x7ffc0000 [ 595.193279][ C0] vkms_vblank_simulate: vblank timer overrun [ 595.203128][ T30] audit: type=1326 audit(1746880912.944:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12240 comm="syz.8.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2154b8e969 code=0x7ffc0000 [ 595.225623][ C0] vkms_vblank_simulate: vblank timer overrun [ 595.233719][ T30] audit: type=1326 audit(1746880912.944:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12240 comm="syz.8.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2154b8e969 code=0x7ffc0000 [ 595.318192][ T30] audit: type=1326 audit(1746880912.944:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12240 comm="syz.8.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2154b8e969 code=0x7ffc0000 [ 595.345490][ T30] audit: type=1326 audit(1746880912.944:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12240 comm="syz.8.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2154b8e969 code=0x7ffc0000 [ 595.376718][T12246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.385988][T12246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.398357][T12246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.407589][T12246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.477259][ T30] audit: type=1326 audit(1746880912.944:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12240 comm="syz.8.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f2154b8e969 code=0x7ffc0000 [ 595.506223][ T30] audit: type=1326 audit(1746880913.044:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12240 comm="syz.8.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2154b8e969 code=0x7ffc0000 [ 595.528634][ C0] vkms_vblank_simulate: vblank timer overrun [ 595.604565][ T30] audit: type=1326 audit(1746880913.044:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12240 comm="syz.8.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2154b8e969 code=0x7ffc0000 [ 595.628176][ C0] vkms_vblank_simulate: vblank timer overrun [ 595.945309][ T5887] usb 6-1: USB disconnect, device number 60 [ 596.407035][ T5887] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 596.585635][ T5887] usb 9-1: Using ep0 maxpacket: 16 [ 596.592730][ T5887] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 596.605447][ T5887] usb 9-1: config 0 has no interface number 0 [ 596.707083][ T5887] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 596.750009][ T5887] usb 9-1: config 0 interface 41 has no altsetting 0 [ 596.760529][ T5887] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 596.770161][ T5887] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.779290][ T5887] usb 9-1: Product: syz [ 596.783904][ T5887] usb 9-1: Manufacturer: syz [ 596.791056][ T5887] usb 9-1: SerialNumber: syz [ 596.820113][ T5887] usb 9-1: config 0 descriptor?? [ 596.832374][T12250] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 596.844840][ T5887] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -22 [ 596.875769][ T24] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 597.061259][T12250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.074003][T12250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.101107][T12250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.121143][T12250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.136280][ T24] usb 6-1: config 0 has no interfaces? [ 597.168413][T12250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.202207][T12250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.300207][ T24] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 597.323580][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.345959][ T24] usb 6-1: Product: syz [ 597.350303][ T24] usb 6-1: Manufacturer: syz [ 597.357341][ T7625] usb 9-1: USB disconnect, device number 72 [ 597.391547][ T24] usb 6-1: SerialNumber: syz [ 597.412613][ T24] usb 6-1: config 0 descriptor?? [ 597.654362][T12256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.664688][T12256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.682265][T12256] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1253'. [ 598.333188][T12265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.351909][T12265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.956936][T12283] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1259'. [ 599.973789][T12283] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1259'. [ 600.012035][T12283] veth1_macvtap: left promiscuous mode [ 600.087771][ T24] usb 6-1: USB disconnect, device number 61 [ 600.093232][ T7625] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 600.325685][ T7625] usb 9-1: Using ep0 maxpacket: 32 [ 600.346686][ T7625] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 600.419997][ T7625] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 600.435851][ T7625] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 600.444144][ T7625] usb 9-1: Product: syz [ 600.462745][ T7625] usb 9-1: Manufacturer: syz [ 600.485271][ T7625] usb 9-1: SerialNumber: syz [ 600.497493][T12291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.507085][ T7625] usb 9-1: config 0 descriptor?? [ 600.536935][T12280] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 600.549170][T12291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.808272][ T7625] usb 9-1: USB disconnect, device number 73 [ 601.105661][ T5888] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 601.155912][T12297] bond0: entered promiscuous mode [ 601.161192][T12297] bond_slave_0: entered promiscuous mode [ 601.167813][T12297] bond_slave_1: entered promiscuous mode [ 601.175315][T12297] batadv0: entered promiscuous mode [ 601.182218][T12297] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 601.280297][ T5888] usb 6-1: unable to get BOS descriptor or descriptor too short [ 601.288930][ T5888] usb 6-1: not running at top speed; connect to a high speed hub [ 601.300937][ T5888] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 601.314352][ T5888] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 601.323703][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.331806][ T5888] usb 6-1: Product: syz [ 601.337075][ T5888] usb 6-1: Manufacturer: syz [ 601.341703][ T5888] usb 6-1: SerialNumber: syz [ 601.696027][ T5888] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 601.730793][ T5888] usb 6-1: USB disconnect, device number 62 [ 601.817896][ T8122] udevd[8122]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 617.046331][ T5885] usb 7-1: USB disconnect, device number 8 [ 624.490726][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.497442][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.930992][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.937794][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 738.406263][ T31] INFO: task kworker/0:7:7579 blocked for more than 143 seconds. [ 738.414070][ T31] Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 [ 738.422011][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 738.430960][ T31] task:kworker/0:7 state:D stack:19928 pid:7579 tgid:7579 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 738.443088][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 738.450002][ T31] Call Trace: [ 738.453313][ T31] [ 738.457894][ T31] __schedule+0x16e2/0x4cd0 [ 738.462601][ T31] ? schedule+0x165/0x360 [ 738.467389][ T31] ? __pfx___schedule+0x10/0x10 [ 738.472310][ T31] ? schedule+0x91/0x360 [ 738.477806][ T31] schedule+0x165/0x360 [ 738.482031][ T31] schedule_preempt_disabled+0x13/0x30 [ 738.488538][ T31] __mutex_lock+0x724/0xe80 [ 738.493097][ T31] ? __mutex_lock+0x51b/0xe80 [ 738.497893][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 738.504346][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 738.509667][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 738.515488][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 738.521279][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 738.527760][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 738.533544][ T31] process_scheduled_works+0xadb/0x17a0 [ 738.539224][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 738.545255][ T31] worker_thread+0x8a0/0xda0 [ 738.549923][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 738.556673][ T31] ? __kthread_parkme+0x7b/0x200 [ 738.561649][ T31] kthread+0x70e/0x8a0 [ 738.565957][ T31] ? __pfx_worker_thread+0x10/0x10 [ 738.571111][ T31] ? __pfx_kthread+0x10/0x10 [ 738.577494][ T31] ? __pfx_kthread+0x10/0x10 [ 738.582136][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 738.588539][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 738.593802][ T31] ? __pfx_kthread+0x10/0x10 [ 738.598654][ T31] ret_from_fork+0x4b/0x80 [ 738.603102][ T31] ? __pfx_kthread+0x10/0x10 [ 738.607889][ T31] ret_from_fork_asm+0x1a/0x30 [ 738.612716][ T31] [ 738.615901][ T31] INFO: task syz.7.1220:12133 blocked for more than 143 seconds. [ 738.623648][ T31] Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 [ 738.631464][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 738.640248][ T31] task:syz.7.1220 state:D stack:25272 pid:12133 tgid:12133 ppid:7405 task_flags:0x400040 flags:0x00004004 [ 738.652397][ T31] Call Trace: [ 738.656119][ T31] [ 738.659102][ T31] __schedule+0x16e2/0x4cd0 [ 738.663648][ T31] ? schedule+0x165/0x360 [ 738.668147][ T31] ? __pfx___schedule+0x10/0x10 [ 738.673039][ T31] ? schedule+0x91/0x360 [ 738.677377][ T31] schedule+0x165/0x360 [ 738.681559][ T31] schedule_preempt_disabled+0x13/0x30 [ 738.688120][ T31] __mutex_lock+0x724/0xe80 [ 738.692661][ T31] ? kobject_put+0x43f/0x480 [ 738.697442][ T31] ? __mutex_lock+0x51b/0xe80 [ 738.702414][ T31] ? rfkill_unregister+0xc8/0x220 [ 738.707532][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 738.712608][ T31] ? __pfx_device_del+0x10/0x10 [ 738.717561][ T31] rfkill_unregister+0xc8/0x220 [ 738.722441][ T31] nfc_unregister_device+0x96/0x2a0 [ 738.727762][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 738.733512][ T31] virtual_ncidev_close+0x56/0x90 [ 738.738655][ T31] __fput+0x449/0xa70 [ 738.742700][ T31] task_work_run+0x1d1/0x260 [ 738.747394][ T31] ? __pfx_task_work_run+0x10/0x10 [ 738.752542][ T31] resume_user_mode_work+0x5e/0x80 [ 738.757741][ T31] syscall_exit_to_user_mode+0x9a/0x120 [ 738.763312][ T31] do_syscall_64+0x103/0x210 [ 738.768356][ T31] ? clear_bhb_loop+0x45/0xa0 [ 738.773064][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.779045][ T31] RIP: 0033:0x7fea07d8e969 [ 738.783488][ T31] RSP: 002b:00007fea080dfb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 738.792009][ T31] RAX: 0000000000000000 RBX: 000000000008ecfa RCX: 00007fea07d8e969 [ 738.800208][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 738.808543][ T31] RBP: 00007fea07fb7ba0 R08: 0000000000000001 R09: 00000009080dfe7f [ 738.816615][ T31] R10: 00007fea07c00000 R11: 0000000000000246 R12: 00007fea07fb5fac [ 738.824629][ T31] R13: 00007fea07fb5fa0 R14: ffffffffffffffff R15: 00007fea080dfca0 [ 738.832780][ T31] [ 738.836119][ T31] INFO: task syz.9.1225:12157 blocked for more than 143 seconds. [ 738.843866][ T31] Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 [ 738.851895][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 738.860649][ T31] task:syz.9.1225 state:D stack:25112 pid:12157 tgid:12156 ppid:11154 task_flags:0x400140 flags:0x00004006 [ 738.872860][ T31] Call Trace: [ 738.876483][ T31] [ 738.879444][ T31] __schedule+0x16e2/0x4cd0 [ 738.883988][ T31] ? schedule+0x165/0x360 [ 738.888572][ T31] ? __pfx___schedule+0x10/0x10 [ 738.893516][ T31] ? schedule+0x91/0x360 [ 738.898360][ T31] schedule+0x165/0x360 [ 738.902612][ T31] schedule_preempt_disabled+0x13/0x30 [ 738.910414][ T31] __mutex_lock+0x724/0xe80 [ 738.915079][ T31] ? __mutex_lock+0x51b/0xe80 [ 738.920033][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 738.925390][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 738.930512][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 738.935872][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 738.941805][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 738.949218][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 738.955004][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 738.960349][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 738.966258][ T31] rfkill_set_block+0x1cf/0x440 [ 738.971155][ T31] rfkill_fop_write+0x44b/0x570 [ 738.976200][ T31] ? common_file_perm+0x199/0x200 [ 738.981261][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 738.987081][ T31] ? security_file_permission+0x30/0x290 [ 738.992766][ T31] ? rw_verify_area+0x258/0x650 [ 738.997865][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 739.003291][ T31] vfs_write+0x27b/0xa90 [ 739.007644][ T31] ? __pfx_vfs_write+0x10/0x10 [ 739.012466][ T31] ? __pfx_do_futex+0x10/0x10 [ 739.017374][ T31] ksys_write+0x145/0x250 [ 739.021736][ T31] ? rcu_is_watching+0x15/0xb0 [ 739.026607][ T31] ? __pfx_ksys_write+0x10/0x10 [ 739.031499][ T31] ? do_syscall_64+0xba/0x210 [ 739.036420][ T31] do_syscall_64+0xf6/0x210 [ 739.040966][ T31] ? clear_bhb_loop+0x45/0xa0 [ 739.045787][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.051747][ T31] RIP: 0033:0x7fd80698e969 [ 739.056332][ T31] RSP: 002b:00007fd8047f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 739.064780][ T31] RAX: ffffffffffffffda RBX: 00007fd806bb5fa0 RCX: 00007fd80698e969 [ 739.072832][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000a [ 739.081019][ T31] RBP: 00007fd806a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 739.089562][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 739.097718][ T31] R13: 0000000000000000 R14: 00007fd806bb5fa0 R15: 00007fd806cdfa28 [ 739.105867][ T31] [ 739.109007][ T31] [ 739.109007][ T31] Showing all locks held in the system: [ 739.117293][ T31] 2 locks held by ksoftirqd/1/23: [ 739.122371][ T31] #0: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 739.132583][ T31] #1: ffff8880b8923b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 739.144192][ T31] 1 lock held by khungtaskd/31: [ 739.149378][ T31] #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 739.159452][ T31] 2 locks held by getty/5590: [ 739.164177][ T31] #0: ffff88814d5a20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 739.174123][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 739.184549][ T31] 3 locks held by kworker/0:7/7579: [ 739.189792][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 739.200904][ T31] #1: ffffc9000419fc60 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 739.214811][ T31] #2: ffffffff8f5c87a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 739.226333][ T31] 2 locks held by syz.7.1220/12133: [ 739.231561][ T31] #0: ffff88805649c100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 739.241777][ T31] #1: ffffffff8f5c87a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 739.252256][ T31] 2 locks held by syz.9.1225/12157: [ 739.257528][ T31] #0: ffffffff8f5c87a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 739.268077][ T31] #1: ffff88805649c100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 739.278203][ T31] 2 locks held by syz-executor/12281: [ 739.283633][ T31] #0: ffff888027fd0118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 739.293909][ T31] #1: ffffffff8f5c87a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 739.304226][ T31] 2 locks held by syz.6.1264/12299: [ 739.309482][ T31] #0: ffffffff8e7ad4e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 739.318055][ T31] #1: ffffffff8f5c87a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 739.328597][ T31] 1 lock held by syz.8.1265/12304: [ 739.333759][ T31] #0: ffffffff8e7ad4e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 739.342289][ T31] 1 lock held by syz-executor/12301: [ 739.347647][ T31] #0: ffffffff8e7ad4e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 739.356523][ T31] 1 lock held by syz.5.1267/12308: [ 739.361661][ T31] #0: ffffffff8e7ad4e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 739.370210][ T31] 1 lock held by syz-executor/12312: [ 739.375549][ T31] #0: ffffffff8e7ad4e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 739.384087][ T31] 1 lock held by syz-executor/12313: [ 739.389845][ T31] #0: ffffffff8e7ad4e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 739.398718][ T31] 1 lock held by syz-executor/12318: [ 739.404059][ T31] #0: ffffffff8e7ad4e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 739.412596][ T31] 2 locks held by dhcpcd/12366: [ 739.417791][ T31] #0: ffff88807b1bd008 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 739.428110][ T31] #1: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 739.439160][ T31] [ 739.441517][ T31] ============================================= [ 739.441517][ T31] [ 739.450602][ T31] NMI backtrace for cpu 0 [ 739.450622][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 PREEMPT(full) [ 739.450646][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 739.450659][ T31] Call Trace: [ 739.450667][ T31] [ 739.450676][ T31] dump_stack_lvl+0x189/0x250 [ 739.450709][ T31] ? __wake_up_klogd+0xd9/0x110 [ 739.450735][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 739.450762][ T31] ? __pfx__printk+0x10/0x10 [ 739.450802][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 739.450828][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 739.450849][ T31] ? _printk+0xcf/0x120 [ 739.450866][ T31] ? __pfx__printk+0x10/0x10 [ 739.450882][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 739.450899][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 739.450925][ T31] watchdog+0xfee/0x1030 [ 739.450944][ T31] ? watchdog+0x1de/0x1030 [ 739.450968][ T31] kthread+0x70e/0x8a0 [ 739.450988][ T31] ? __pfx_watchdog+0x10/0x10 [ 739.451005][ T31] ? __pfx_kthread+0x10/0x10 [ 739.451023][ T31] ? __pfx_kthread+0x10/0x10 [ 739.451039][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 739.451055][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 739.451072][ T31] ? __pfx_kthread+0x10/0x10 [ 739.451088][ T31] ret_from_fork+0x4b/0x80 [ 739.451102][ T31] ? __pfx_kthread+0x10/0x10 [ 739.451119][ T31] ret_from_fork_asm+0x1a/0x30 [ 739.451143][ T31] [ 739.451149][ T31] Sending NMI from CPU 0 to CPUs 1: [ 739.599388][ C1] NMI backtrace for cpu 1 [ 739.599412][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 PREEMPT(full) [ 739.599433][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 739.599444][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 739.599469][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 0b 12 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 739.599484][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 739.599500][ C1] RAX: 55ff0abfa485da00 RBX: ffffffff81974f08 RCX: 55ff0abfa485da00 [ 739.599514][ C1] RDX: 0000000000000001 RSI: ffffffff8d74ab54 RDI: ffffffff8bc1d260 [ 739.599526][ C1] RBP: ffffc90000197f20 R08: ffff8880b8932b5b R09: 1ffff1101712656b [ 739.599540][ C1] R10: dffffc0000000000 R11: ffffed101712656c R12: ffffffff8f7ed170 [ 739.599553][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110037deb40 [ 739.599565][ C1] FS: 0000000000000000(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000 [ 739.599580][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 739.599592][ C1] CR2: 0000561bf8ec3168 CR3: 000000000dd36000 CR4: 00000000003526f0 [ 739.599607][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 739.599618][ C1] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 739.599629][ C1] Call Trace: [ 739.599637][ C1] [ 739.599643][ C1] default_idle+0x13/0x20 [ 739.599665][ C1] default_idle_call+0x74/0xb0 [ 739.599690][ C1] do_idle+0x1e8/0x510 [ 739.599709][ C1] ? __pfx_do_idle+0x10/0x10 [ 739.599733][ C1] cpu_startup_entry+0x44/0x60 [ 739.599749][ C1] start_secondary+0x101/0x110 [ 739.599766][ C1] common_startup_64+0x13e/0x147 [ 739.599799][ C1] [ 739.600376][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 739.785127][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 PREEMPT(full) [ 739.796943][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 739.807017][ T31] Call Trace: [ 739.810321][ T31] [ 739.813258][ T31] dump_stack_lvl+0x99/0x250 [ 739.817866][ T31] ? __asan_memcpy+0x40/0x70 [ 739.822465][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 739.827675][ T31] ? __pfx__printk+0x10/0x10 [ 739.832284][ T31] panic+0x2db/0x790 [ 739.836199][ T31] ? __pfx_panic+0x10/0x10 [ 739.840651][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 739.846483][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 739.851864][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 739.858041][ T31] watchdog+0x102d/0x1030 [ 739.862385][ T31] ? watchdog+0x1de/0x1030 [ 739.866819][ T31] kthread+0x70e/0x8a0 [ 739.870909][ T31] ? __pfx_watchdog+0x10/0x10 [ 739.875622][ T31] ? __pfx_kthread+0x10/0x10 [ 739.880264][ T31] ? __pfx_kthread+0x10/0x10 [ 739.884865][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 739.890087][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 739.895298][ T31] ? __pfx_kthread+0x10/0x10 [ 739.899909][ T31] ret_from_fork+0x4b/0x80 [ 739.904338][ T31] ? __pfx_kthread+0x10/0x10 [ 739.908940][ T31] ret_from_fork_asm+0x1a/0x30 [ 739.913725][ T31] [ 739.917069][ T31] Kernel Offset: disabled [ 739.921400][ T31] Rebooting in 86400 seconds..