last executing test programs: 7m30.622982326s ago: executing program 0 (id=245): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x37}}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x1f, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x9, 0x9, 0x100000, 0x3}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20244564d00743a0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r4, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$vga_arbiter(r5, &(0x7f0000000180)=ANY=[], 0x8) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000040)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f00000002c0)='.', 0x1}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) close(r5) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x165002) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f00000001c0)={0x1, 0x1, "650d52614d51f9a1f47af947fefc0a017fd6d944ead6cbbfe64f9b746188f3f08973caedaa020d5caa2dea7349a5aad0f736fc719a5ba7247a04818ef71d7573d859f43117cae08c17f1c4eec565b9f2342cba6d6175ef17c56ee77c8a720260adff9914b9ccf28336a8744e02826ccca2a9b2cd4e256cf360333b301ac5eb47ef21d2124aefef512d98cb461d71cdacdf0ede957e3bd87ebadb27f57320994543b87fde25a7853955b66b0ef905f2f5283f5bbe3cc3f64c7ac952806bef33924611a3a5888e78c1e483e0d5f34dc91c41a91aed996f2ac0e9bc6d72ff25c18f1062c3da002be634b1701e92276b6edf3181b4b5b991d851efaa62bdbe209e2c"}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 7m27.755826299s ago: executing program 0 (id=249): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@ptr={0xe, 0x0, 0x0, 0x2, 0x5}, @func={0xf, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0xfad9bb328675e56, 0x61, 0x0, 0x2e, 0x0, 0x2e, 0x30]}}, &(0x7f00000007c0)=""/144, 0x39, 0x90, 0x1}, 0x28) r0 = syz_clone(0x439ee000, 0x0, 0x35, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000000c0)="ec", 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000001c0)='>', 0x1}) close(r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) process_vm_writev(r0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/178, 0xb2}, {&(0x7f0000000240)=""/189, 0xbd}, {&(0x7f0000000300)=""/235, 0xeb}], 0x3, &(0x7f0000000700)=[{&(0x7f0000000440)=""/88, 0x58}, {&(0x7f00000004c0)=""/126, 0x7e}, {&(0x7f0000000540)=""/167, 0xa7}, {&(0x7f0000000600)=""/16, 0x10}, {&(0x7f0000000640)=""/174, 0xae}], 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@private2, @in=@broadcast}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f00000009c0)=0xe8) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r3, 0x8, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 7m26.431280308s ago: executing program 0 (id=258): cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x8000}) (async) times(0xffffffffffffffff) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) syz_io_uring_setup(0x3813, &(0x7f0000000340)={0x0, 0xbe47, 0x40, 0x3, 0x144}, &(0x7f00000003c0), 0x0) (async, rerun: 32) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (rerun: 32) syz_open_procfs(0x0, 0x0) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0x10000) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7m25.692054171s ago: executing program 0 (id=260): syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa8, 0xff, 0x98, 0x8, 0x2833, 0x211, 0x2449, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x24000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$inet6_tcp(0xa, 0x1, 0x0) 7m22.425697537s ago: executing program 0 (id=267): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x96) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x168, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x148, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8, 0x16}, {0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8}, {0x8}]}}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x74, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0x4}]}]}, 0x168}}, 0x0) 7m20.462779391s ago: executing program 0 (id=273): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x76, &(0x7f0000000200)="0c00000002000000", 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7814, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x5}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x141800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000400)={0x64, 0x3c, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x14, 0x9d, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x3f, 0x18, 0x0, 0x1, [@typed={0x8, 0x10a7, 0x0, 0x0, @u32}, @generic="7f95ef8e7b21620430343227c49290dc0a3ce7c8b8caecd18d384720b21db28301acbdb487dd5e03f9d8b6406a6de911d97c42"]}]}, 0x64}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) epoll_create(0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x38) connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 7m19.92229529s ago: executing program 32 (id=273): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x76, &(0x7f0000000200)="0c00000002000000", 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7814, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x5}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x141800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000400)={0x64, 0x3c, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x14, 0x9d, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x3f, 0x18, 0x0, 0x1, [@typed={0x8, 0x10a7, 0x0, 0x0, @u32}, @generic="7f95ef8e7b21620430343227c49290dc0a3ce7c8b8caecd18d384720b21db28301acbdb487dd5e03f9d8b6406a6de911d97c42"]}]}, 0x64}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) epoll_create(0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x38) connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3m40.183530055s ago: executing program 3 (id=1020): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r3, 0x0, 0xd, 0xfffffffffffffffe) r4 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', &(0x7f0000000640)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x03\x00qf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/8\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b\x17\x1a\xa2\xedB\xd5t6e\"\x1a\x88\f\xd1\xa3O\x85\x86S\x0f\x8fm\xca\xbb\xc3\x9b\xce\xf0\xd0|!c\x0f3\x80\a\x95\xe6>\x94{\xb1\x82YU\"#\xc67\r\x11\xfe_y\xcd\xea\xc3\xf66BS\x91u\x80\xd2\"6\x03\xca\xaa\xde;,c\a|\xf4\x928t\xcaI[\'\x91Q\xa6TYwNS\xb6\x1eX', 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1, @ANYRES16=r2, @ANYRES16=0x0, @ANYRES32=r1, @ANYRESHEX=r2, @ANYRES16=0x0], 0x3c}}, 0x80) r5 = getpid() syz_pidfd_open(r5, 0x0) tkill(r5, 0xfffff2cb) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, &(0x7f0000000000)={r10}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x0, 0x200, 0x7, 0x7, 0x8, 0x3, 0x2, r10}, &(0x7f0000000140)=0x20) recvmsg(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/193, 0xc1}], 0x1}, 0x0) setsockopt$sock_void(r7, 0x1, 0x3f, 0x0, 0x0) 3m38.899935304s ago: executing program 3 (id=1028): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000240)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000019ed6e20d3131132d7cb011203010902120001000000000904"], 0x0) write$binfmt_script(r3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r3, 0x0) socket(0x11, 0x3, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)) 3m35.537650186s ago: executing program 3 (id=1036): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c00098008000f008848"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x100000000006, 0x40980) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0xc0401289, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x800, 0x300e, 0x0, 0xa, 0x3, 0x5, 0x4}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd70000000000017000000440006803f0006"], 0x58}}, 0x4000004) r5 = socket(0x1, 0xa, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x106c}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) unshare(0x24020400) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r6, 0xff, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffed0) 3m35.131853066s ago: executing program 3 (id=1038): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) (async) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000180)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/tracing', 0xc0c00, 0x0) lseek(r1, 0x8a0e, 0x0) syz_fuse_handle_req(r0, &(0x7f00000060c0)="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", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r0, &(0x7f000000c0c0)="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", 0x2000, &(0x7f0000000d00)={&(0x7f00000080c0)={0x50, 0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x2020100, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0) 3m33.813071515s ago: executing program 3 (id=1040): socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x19a) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x8, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'geneve0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$kcm(0x2, 0x200000000000001, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32, @ANYBLOB], 0x1c}}, 0x44000) r4 = getpid() sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) sched_setattr(r4, &(0x7f00000000c0)={0x38, 0x0, 0x37, 0xffffff01, 0xa7, 0x8, 0x100000001, 0x200, 0x9, 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) 3m33.808082849s ago: executing program 3 (id=1042): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000019c0)={'wlan0\x00', 0x0}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @empty, 0x7}, {0xa, 0x0, 0x0, @mcast2, 0x7ffffffe}}}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffbffffffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r5, &(0x7f0000004e00)=[{{&(0x7f0000000240)=@sco, 0x0, &(0x7f0000001880)=[{&(0x7f00000002c0)=""/67}, {&(0x7f0000000640)=""/4096}, {&(0x7f00000000c0)=""/20}, {&(0x7f0000000380)=""/241}, {&(0x7f0000000480)=""/30}, {&(0x7f0000001640)=""/251}, {&(0x7f00000004c0)=""/124}, {&(0x7f0000001a00)=""/4096}, {&(0x7f0000001740)=""/180}, {&(0x7f0000005000)=""/95}], 0x0, &(0x7f0000002a00)=""/238}, 0x10}, {{&(0x7f0000001940)=@caif=@dbg, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002b00)=""/9}, {&(0x7f0000002b40)=""/97}], 0x0, &(0x7f0000002c00)=""/85}, 0xff}, {{&(0x7f0000002c80)=@nl, 0x0, &(0x7f0000003040)=[{&(0x7f0000002d00)=""/14}, {&(0x7f0000002d40)=""/11}, {&(0x7f0000002d80)=""/132}, {&(0x7f0000002e40)=""/253}, {&(0x7f0000002f40)=""/231}]}, 0x2}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f00000030c0)=""/217}, {&(0x7f00000031c0)=""/235}, {&(0x7f00000032c0)=""/53}], 0x0, &(0x7f0000003340)=""/97}, 0x18e}, {{&(0x7f00000033c0)=@in={0x2, 0x0, @multicast2}, 0x0, &(0x7f0000003580)=[{&(0x7f0000003440)=""/158}, {&(0x7f0000003500)=""/109}], 0x0, &(0x7f00000035c0)=""/4096}, 0x35d}, {{&(0x7f00000045c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x0, &(0x7f00000047c0)=[{&(0x7f0000004640)=""/214}, {&(0x7f0000004740)=""/37}, {&(0x7f0000004780)=""/23}]}, 0x5}, {{&(0x7f0000004800)=@qipcrtr, 0x0, &(0x7f0000004a40)=[{&(0x7f0000004880)=""/100}, {&(0x7f0000004900)=""/170}, {&(0x7f00000049c0)=""/40}, {&(0x7f0000004a00)=""/24}]}}, {{&(0x7f0000004a80)=@caif=@dgm, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000004b00)=""/132}, {&(0x7f0000004bc0)=""/208}], 0x0, &(0x7f0000004d00)=""/208}, 0xff}], 0x40000000000012d, 0x0, 0x0) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000600)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0xe5}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r6, 0x29, 0x18, &(0x7f0000000000), 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="050026bd7000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="4c000e0080000000ffffffffffff08021100000008021100000000000000000000000000640001002d1a01001d0000000000a60200fe0004000000000009000000037206030303030303080026006c090000080027000100000008000c006400000008000d0000000000"], 0x88}}, 0x20000014) 3m33.807645226s ago: executing program 33 (id=1042): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000019c0)={'wlan0\x00', 0x0}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @empty, 0x7}, {0xa, 0x0, 0x0, @mcast2, 0x7ffffffe}}}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffbffffffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r5, &(0x7f0000004e00)=[{{&(0x7f0000000240)=@sco, 0x0, &(0x7f0000001880)=[{&(0x7f00000002c0)=""/67}, {&(0x7f0000000640)=""/4096}, {&(0x7f00000000c0)=""/20}, {&(0x7f0000000380)=""/241}, {&(0x7f0000000480)=""/30}, {&(0x7f0000001640)=""/251}, {&(0x7f00000004c0)=""/124}, {&(0x7f0000001a00)=""/4096}, {&(0x7f0000001740)=""/180}, {&(0x7f0000005000)=""/95}], 0x0, &(0x7f0000002a00)=""/238}, 0x10}, {{&(0x7f0000001940)=@caif=@dbg, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002b00)=""/9}, {&(0x7f0000002b40)=""/97}], 0x0, &(0x7f0000002c00)=""/85}, 0xff}, {{&(0x7f0000002c80)=@nl, 0x0, &(0x7f0000003040)=[{&(0x7f0000002d00)=""/14}, {&(0x7f0000002d40)=""/11}, {&(0x7f0000002d80)=""/132}, {&(0x7f0000002e40)=""/253}, {&(0x7f0000002f40)=""/231}]}, 0x2}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f00000030c0)=""/217}, {&(0x7f00000031c0)=""/235}, {&(0x7f00000032c0)=""/53}], 0x0, &(0x7f0000003340)=""/97}, 0x18e}, {{&(0x7f00000033c0)=@in={0x2, 0x0, @multicast2}, 0x0, &(0x7f0000003580)=[{&(0x7f0000003440)=""/158}, {&(0x7f0000003500)=""/109}], 0x0, &(0x7f00000035c0)=""/4096}, 0x35d}, {{&(0x7f00000045c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x0, &(0x7f00000047c0)=[{&(0x7f0000004640)=""/214}, {&(0x7f0000004740)=""/37}, {&(0x7f0000004780)=""/23}]}, 0x5}, {{&(0x7f0000004800)=@qipcrtr, 0x0, &(0x7f0000004a40)=[{&(0x7f0000004880)=""/100}, {&(0x7f0000004900)=""/170}, {&(0x7f00000049c0)=""/40}, {&(0x7f0000004a00)=""/24}]}}, {{&(0x7f0000004a80)=@caif=@dgm, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000004b00)=""/132}, {&(0x7f0000004bc0)=""/208}], 0x0, &(0x7f0000004d00)=""/208}, 0xff}], 0x40000000000012d, 0x0, 0x0) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000600)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0xe5}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r6, 0x29, 0x18, &(0x7f0000000000), 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="050026bd7000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="4c000e0080000000ffffffffffff08021100000008021100000000000000000000000000640001002d1a01001d0000000000a60200fe0004000000000009000000037206030303030303080026006c090000080027000100000008000c006400000008000d0000000000"], 0x88}}, 0x20000014) 2m34.459510084s ago: executing program 1 (id=1267): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002200)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000900)="104ef67a3a32e90d0e8ad9c26f637e64c0", 0x11}, {&(0x7f0000000000)="86a16f728bec87bd9f407028346893936c5d1f47b9056960e409aa9ee542a2e1f94cd1384e7a21dc75978a366a6b76", 0x2f}], 0x2, 0x0, 0x0, 0x90}], 0x1, 0x2404c410) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/37, 0x25}, {&(0x7f0000000fc0)=""/199, 0xc7}], 0x2}, 0x100) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYRES64, @ANYRES32, @ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRES16=r1, @ANYRES8=r1, @ANYRESHEX=r1, @ANYRESHEX], 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002251008000a45b456eb39e3ce0b2000000000000"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="401f1c3259431415bb6b0a002337a9bd146ec1386fe8a1353f2f16dcaf08ea519814942bc1199c3461d8d43cbe5e9b7b4f7e327b3f69cf04bc82ebaf1a0052be9078fbefc4da0eae4e4657a538c6441b2f1bc3776fece2d51c6cc8b82f0fa31539185a2e21"], 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCSUSAGES(r4, 0x501c4814, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast1}, &(0x7f0000000240)=0xc) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r9 = eventfd(0x5) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f00000017c0)={r9, 0xfffffffd, 0x0, r8}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001680)=@generic={&(0x7f0000001640)='./file0\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x18, 0x14, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2da}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @exit, @cb_func={0x18, 0x1, 0x4, 0x0, 0x7}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0xf8, &(0x7f0000000440)=""/248, 0xf2243a152e341cfe, 0x4, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000300)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xa, 0x8, 0x92a4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[r10, r6, r6, r5], 0x0, 0x10, 0x1}, 0x94) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$HIDIOCSUSAGES(r4, 0x501c4814, &(0x7f0000000600)={{0x1, 0x106, 0x6, 0x774a, 0x1400000, 0x7f}, 0x3da, [0xfffffff8, 0x4, 0x9, 0x80000001, 0x5, 0xf575, 0x5, 0x165d9756, 0x4, 0x4, 0x6a, 0xee1d, 0x7, 0xfffffffe, 0x400, 0x6, 0x8, 0x7ff, 0xfffffffb, 0x20, 0x3, 0x87, 0x4, 0xfffffff8, 0x7, 0x9, 0x5, 0x3, 0x24ed, 0x9, 0x10001, 0x1, 0x5c, 0x7608, 0x7, 0x9, 0x2bc, 0x6, 0x8, 0x8, 0x80000000, 0xfffffffb, 0x4, 0x401, 0x8, 0x9, 0x8, 0x10000, 0x2, 0x5853b8b9, 0x6, 0x1, 0x5, 0x9, 0x10, 0xaf, 0x5, 0x8, 0x8, 0x0, 0x0, 0x40, 0x101, 0xb, 0x51ac6a0e, 0xb, 0xfff00000, 0x4, 0x0, 0x9, 0x7, 0xc5d, 0xd287, 0x1, 0xd1, 0xfffffe01, 0x10001, 0x8, 0x6, 0xffffff80, 0x6, 0x2, 0xa, 0x3, 0x7, 0x9b5, 0x7, 0x2, 0x6, 0xfc14, 0x8, 0xaa1f, 0x15a, 0x6, 0x1, 0x80, 0x14, 0x2, 0xd27, 0x5a, 0xb, 0x2, 0x2, 0x1, 0x71, 0x6, 0x10001, 0x7, 0x7, 0xc, 0x4c4, 0x8001, 0x6, 0x2, 0x0, 0x7, 0xffff, 0x751d3752, 0x101, 0x200, 0xf4, 0x8, 0x1, 0x3, 0xd, 0x4, 0xead, 0x8, 0x8, 0x75, 0x3, 0x3, 0xc76, 0x9, 0xd, 0x2, 0xd929, 0xfffffffe, 0x4, 0x1, 0x7ff, 0x800, 0xfffffff4, 0x7d, 0xfff, 0x8000, 0x0, 0x3, 0x9, 0xb, 0x2ab, 0x100, 0x7, 0x3, 0x7, 0x10, 0xb, 0x3, 0x1, 0x1, 0x2, 0x0, 0x401, 0xb2c, 0xcd6, 0x2, 0xa, 0xfffffff8, 0x1, 0x522, 0xb5, 0x1, 0x7fff, 0x4, 0xce8, 0x6, 0x0, 0xdcde, 0x3, 0x3, 0x3, 0xfffffe01, 0xc, 0x6, 0x0, 0x6, 0x1, 0x6, 0x0, 0x0, 0x1f76, 0x9, 0x3, 0x4, 0xe, 0x6, 0x5, 0x2, 0x5, 0x100, 0x9932, 0x8, 0x9, 0x7fffffff, 0x8000, 0xffffffff, 0xfff, 0x80000000, 0x9, 0x81, 0x7, 0x5, 0x7f, 0x0, 0x1, 0x9, 0x9, 0x7ead, 0x3, 0xff, 0x6, 0x1, 0x5, 0x3, 0x8001, 0xbde5, 0x8, 0x4, 0x0, 0x9, 0x1, 0x7fff, 0x1000, 0x4, 0x101, 0x4, 0x8, 0x2, 0x7, 0x9, 0x729, 0x1, 0x5, 0x4, 0x200, 0x9, 0xfffffffc, 0x700000, 0x1ff, 0x9, 0xee0, 0x7, 0x1, 0x6, 0xffffffff, 0x1, 0x2, 0x0, 0x7, 0x6, 0x101, 0x5, 0x6, 0x10001, 0x7, 0x200, 0x40, 0x6, 0x6, 0x7, 0xf, 0x9, 0xe, 0x4, 0xfffffffa, 0xff, 0xf, 0x81, 0x417, 0x2, 0xcef, 0x3, 0x8, 0x9, 0xf49a, 0x3, 0x3, 0xdb5, 0x8, 0x7ff, 0x0, 0x9, 0x2924, 0x2, 0x2, 0xe, 0x2, 0x9, 0xf, 0x8, 0x26, 0x400, 0x5, 0xff, 0x6, 0x200, 0x0, 0x7fffffff, 0x8, 0xfe000000, 0xa6b, 0x7fffffff, 0x10, 0x3, 0x19, 0x3800000, 0xb1, 0xb9, 0x3, 0xd7d, 0x4, 0x8, 0xe, 0x5, 0x1a96, 0x40, 0x5, 0x9, 0x5, 0x4, 0x80000000, 0x5, 0xe61f, 0x4000000, 0x3ff, 0xb, 0x0, 0x6, 0x33, 0x10000, 0x1ff, 0x4, 0x8000, 0x6607, 0x5, 0x80000000, 0x5, 0x6, 0x1, 0x2, 0x0, 0xa, 0x480, 0x4, 0x2, 0x7, 0x8, 0x48, 0x5, 0xffffffff, 0xd05, 0x9, 0x0, 0xffffffc0, 0x0, 0xc0, 0x8, 0x5, 0x8, 0xe7f5, 0x80000001, 0x4, 0x40, 0x2, 0x60, 0x0, 0x7, 0x9, 0x7, 0x800, 0xd8b, 0x91, 0x875, 0x6, 0x8, 0x0, 0x4, 0xfffffff9, 0x6, 0x0, 0x2, 0x8b2, 0x81, 0x3, 0x2, 0x4, 0x80000001, 0x55, 0x2, 0x6637, 0x2, 0x1, 0xa8b4, 0x4c63, 0xffff, 0xe9d, 0x100000, 0x46be, 0x354f, 0x9, 0x5, 0x5f, 0x5, 0x0, 0x1ff, 0x1, 0x3, 0x8, 0x7, 0x6151, 0x1, 0x6, 0x1ff, 0x4, 0x0, 0x6, 0x101, 0x0, 0x0, 0xc33d, 0x7, 0x10001, 0x7fff, 0x8, 0xfffffff7, 0x7, 0x2, 0x80, 0xc8, 0x180, 0xfffffff8, 0x1, 0x1, 0x7, 0xf26b, 0x8, 0x95, 0x3, 0x4, 0x3, 0x2f380, 0x0, 0x6, 0x98c8, 0x8001, 0x1, 0xf31d, 0x8, 0xa6, 0x2, 0x2, 0xff800000, 0x6, 0x3ff, 0xe861, 0x7, 0xffff, 0xfffffff9, 0x3ff, 0x9, 0x80000000, 0x6, 0xa1c, 0x3, 0x5, 0x9, 0xa, 0x2, 0x3, 0x1000, 0x4, 0x246, 0x5, 0x6, 0x6, 0x6b8, 0x2, 0xd, 0xa2d, 0x7, 0x6, 0x1, 0x1, 0x623ee425, 0x0, 0x5, 0x9, 0xcad6, 0x0, 0xa, 0xfc2, 0x8ce7, 0x2, 0x8000, 0xfffffff9, 0x80, 0x2, 0xa2, 0x1, 0x9, 0x8, 0x800, 0x3, 0xfffffffa, 0x0, 0x6, 0x6, 0x1ff, 0x6, 0x997, 0x4, 0x6, 0x48ea, 0x0, 0xffffffff, 0x0, 0xdcc, 0x1, 0x3, 0x5, 0x0, 0x24000000, 0x2, 0x2, 0x40, 0x3, 0x2d7, 0x61aa, 0x2, 0xfff, 0xff, 0xfffffe01, 0x4, 0x3, 0x5, 0x3, 0x3bcd, 0x9, 0x6, 0x4, 0x0, 0x908, 0x2, 0x0, 0x6, 0x14, 0x1, 0x4b, 0x7, 0x0, 0x9, 0xffffffff, 0xef5e, 0x7, 0x8, 0x6, 0x0, 0x5, 0x7fff, 0x733, 0x3, 0x8, 0x321, 0xc, 0x8, 0x5, 0x6, 0x9, 0x7f, 0x0, 0x8, 0xffff0b72, 0x228, 0x1, 0x3, 0x3, 0x8, 0x3, 0x8, 0x2d0, 0x3, 0x1, 0xb, 0x8000, 0x0, 0x400, 0x0, 0x6, 0xffffff01, 0x9, 0x5, 0xe, 0x6, 0x3, 0x4, 0x3, 0xfffffffd, 0x4, 0x7a680014, 0x596, 0x4, 0xc, 0x4f63, 0x100, 0xfff, 0x4, 0xfff, 0x3, 0x100, 0x10000, 0x100, 0x1a80, 0x0, 0x81, 0x2, 0x9, 0x9, 0x7fff, 0x1, 0xffffffff, 0x7, 0xc75b, 0x3, 0x310e, 0x1, 0x9, 0x2, 0xf, 0x9, 0x7fff, 0x1, 0xf, 0x53a0, 0x9, 0x101, 0x6, 0x0, 0x8, 0x10, 0x0, 0x7ff, 0x20000, 0x8, 0x800, 0x5, 0x3, 0xc, 0xffffffff, 0xc050, 0x3, 0x9, 0x7, 0xf, 0x4, 0x9, 0x5, 0x400, 0xf, 0x0, 0x400, 0x9, 0x80000001, 0x7, 0x2, 0x101, 0x1, 0x5, 0x6, 0x7, 0x2, 0x1, 0xa2, 0x4, 0x6dd6, 0x3, 0x2b2, 0x7, 0x4, 0x5, 0x100, 0x9, 0x1000, 0x1, 0x10001, 0x8, 0x7fff, 0x0, 0xb, 0x7, 0x7e7, 0x3, 0x0, 0x6, 0x5, 0x8, 0xfffffffd, 0x2, 0x4, 0x211f, 0x5, 0x0, 0x2, 0xd, 0x9, 0x2, 0x8, 0x7, 0x61e, 0x3, 0x6, 0x3, 0x1, 0x9, 0x0, 0xa, 0x4, 0xabd6, 0x0, 0x29f5a5e7, 0x2, 0x5d, 0x3, 0x80000001, 0x6, 0x0, 0x80, 0xb81, 0x3, 0x6, 0x0, 0xfffffff7, 0x2, 0x9, 0x6, 0x7, 0x4, 0x8000, 0x8, 0x6, 0x401, 0x3, 0x7, 0x5, 0xbd0, 0xc54c, 0x3, 0x25a0, 0xb, 0x5, 0xfffffff1, 0x9, 0x9, 0xa, 0x5, 0xf25c, 0xf30, 0x5b15, 0x8001, 0x1713, 0x8, 0x8, 0x8, 0x4626e895, 0x16, 0x9, 0x1, 0x3, 0x400000, 0x7, 0x7, 0xf, 0x9, 0x1, 0x1, 0x7fc, 0xfffffff9, 0x4, 0x0, 0x0, 0x8000, 0x100, 0x8, 0x1, 0x0, 0x2a, 0x2, 0x1ff, 0x8, 0x9, 0x960, 0x4, 0xff, 0x401, 0x2, 0x5, 0xc0000000, 0x2, 0x8, 0x1, 0x8000, 0x200, 0x9, 0x0, 0x8, 0x7db95428, 0x893d, 0xffffff90, 0xffffffa4, 0xa, 0x4, 0x1601988, 0x20, 0x5, 0x9b1d, 0x35, 0x396742e8, 0x3, 0x8, 0x400, 0x7, 0x6, 0x9, 0x9, 0x10000, 0x7, 0x5, 0x5, 0x81, 0x4, 0x4, 0x9, 0x1, 0x22, 0x9, 0x99d, 0x8, 0x6, 0x6, 0xfff, 0x7, 0x200, 0x5, 0xd21, 0x1, 0x7, 0xffffffff, 0x5, 0xb71afb4b, 0x9d, 0x2, 0x6, 0x3, 0x0, 0x1, 0x9, 0x195f, 0xce, 0xffffffff, 0x10001, 0xb1, 0x1, 0x40, 0xff, 0x4, 0x3, 0x8, 0x101, 0x9, 0x4, 0xfff, 0x7f, 0xc99f, 0x9, 0x3, 0x0, 0x9, 0x4, 0x0, 0x9, 0x6, 0x769fee0b, 0x8000, 0x0, 0x1, 0x5, 0x4, 0x9, 0xfffffe01, 0x2, 0x1, 0xb, 0x200, 0x1, 0x7f, 0x5, 0xe58, 0x6, 0xfffffffb, 0x184, 0xffffff01, 0xffe0000, 0x1, 0x7ff, 0x101, 0xf, 0x0, 0x4, 0xfffffffc, 0x0, 0x800, 0x5, 0x5, 0x3670, 0xfffffffe, 0xc, 0x4, 0x7fff, 0x4, 0x3, 0x100, 0x8, 0xa13, 0x6, 0x7ff, 0x80000001, 0x3, 0x3, 0x6, 0x80000001, 0x8000, 0x1, 0x7fffffff, 0x8f3, 0x4, 0x7a000000, 0x9, 0x5, 0x0, 0x7fffffff, 0x494, 0xb, 0x3ab7, 0x3, 0x8, 0x100, 0x3, 0x0, 0x3, 0x8, 0x6, 0xd0469a0, 0x9, 0x9, 0x8551, 0x3ff, 0x17b7, 0x8, 0x8, 0x80, 0x2, 0x9, 0x8, 0x1f, 0x9, 0x2, 0x7f, 0xa2, 0x200, 0x8, 0x80, 0x2, 0x2ea20129, 0x9, 0x3, 0x3, 0x34, 0xffffffff, 0x3598, 0x70, 0x3ff, 0x9, 0x7, 0x0, 0x9, 0x54, 0x1, 0x8, 0xd00f, 0x10000, 0x1, 0x34, 0x45a53a2f, 0x6, 0x49, 0x7fffffff, 0xcf5e, 0xe, 0x5, 0x1, 0xee5, 0x8, 0xa, 0x9, 0xfc2, 0x7, 0x2, 0x2, 0x2, 0x20200000, 0x3, 0xa, 0x9, 0x8, 0x7c4]}) sendmsg$DCCPDIAG_GETSOCK(r11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x50) 2m31.383963838s ago: executing program 1 (id=1277): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {0x0, 0xfe, 0x4}, 0x2}, 0x18) connect$can_j1939(r2, &(0x7f0000000740)={0x1d, r3, 0x0, {0x0, 0xf0}}, 0x18) sendmmsg(r2, &(0x7f0000004580), 0x654, 0x0) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x400, {0x2, 0xff, 0x1}, 0xff}, 0x18) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x1, 0xfffff034}, {0x48, 0x0, 0x40}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x0, 0x6, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @local}}}}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000480)={0x14, &(0x7f0000000380)={0x20, 0x24, 0x2, {0x2, 0x6}}, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r6 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_RM_CTX(r6, 0xc0086421, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r7, 0x0, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x6e27, @multicast1}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) 2m29.336014058s ago: executing program 1 (id=1282): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000002280)={0x2020}, 0x2020) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe75, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffe1d, 0x0, 0x0, 0xfffffcf0, 0x10, 0x8, 0x0, 0x0}}, 0x10) pidfd_getfd(r1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="58010000100001042bbd7000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000300000000002401128009000100766c616e07000000140102807c0004800c0001000d000000070000000c00010025a400000e0000000c000100090000001c0400000c00010000000000030000000c00010003000000020000000c00010081ffffff050000000c00010003000000040000000c000100020800002e0700000c00010003000000030000000c000100090000005a091b00040004801c0003800c000100ff030000070000000c00010003000000080000000600010003000000640004800c00010006000000f7ffffff0c00010005000000060000000c00010006000000000000000c00010006000000810000000c00010001000000000000003c000100bb030000e79d00000c00010003000000030000000c00010001000000090000000600050088a8000014000300766c616e30"], 0x158}}, 0x0) 2m28.900083431s ago: executing program 1 (id=1285): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x4, 0x0, 0x0, r2}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x612a, 0x17e, 0x0, 0x0, 0x0) r6 = fanotify_init(0x200, 0x101000) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/136, 0x88}], 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x6, 0x207, 0x9, 0x0, 0x19, "0400"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) 2m27.927841198s ago: executing program 1 (id=1289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x80, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x54, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0x8, 0x1, 0xa0}, {0x7, 0x8, 0xe, 0x1}, {0x4, 0x4, 0x9, 0x8000}, {0x5, 0x6, 0x0, 0xfff}, {0x401, 0x9, 0x2, 0xd}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0xb}}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async, rerun: 64) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x9, 0xd}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) 2m27.599264768s ago: executing program 2 (id=1292): syz_usb_connect(0x2, 0x305, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x9a, 0xb4, 0x97, 0x40, 0x17ef, 0x304b, 0x55eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f3, 0x1, 0xfc, 0x1, 0x110, 0x0, [{{0x9, 0x4, 0x10, 0x1, 0xe, 0xff, 0xff, 0x0, 0x0, [], [{{0x9, 0x5, 0x9, 0x0, 0x3ff, 0xf4, 0x6, 0x1}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x53, 0x5, 0x1, [@generic={0x24, 0x23, "7b9f236c237290fd17b1ef59f15f09763997afbca9504cd8020df2fcb496d93a4428"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfd}]}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3, 0x10, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x6}]}}, {{0x9, 0x5, 0x92d7c8e503476f4a, 0x10, 0x8, 0x6, 0x0, 0x19, [@generic={0xa3, 0x30, "5ad9c26146d6437a3c68995d89b7d173642cc68145a34133506893b70165d8cc2d9f18b3df83faf4923de2faa36f07e513f69f6dee43c560809294ef7e4240d77da3d8aa7b397ef7893e2648d804ebe9e7606ae94cbb33296a392684435df6f45036c99c48a5cf33acb5d968f62c4b146db6fe816abbd5fb3798f7f0e818a3c011dcca73b6c824bfef8e74c44b7cd2f5e695358fda8b51f9e487aff9550816ea12"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x0, 0xcd, 0x9}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x9, 0xf9, 0x0, [@generic={0x8b, 0xb, "d10b3b721424b67b81ef708c1feada4aab5b2473414e9f7b4a3c7aec5520f06aef93cbe31a5a0f31812021b24e8e6881f8d03f2a3634294e4598055091e322dfe7d8a0784f5d43f6d148c6917bee5d0876a869ec6fc64a455b2b21bc0cd29cacf5f37280707e936970450f02358a8c64c27e87c4e9659d1a195390fb78b28c910efe4de0a28699d5f6"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x2461}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x1, 0x6, 0x8}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x3, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x1ff}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x4, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfd, 0x6}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x80, 0x6, 0x3}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0xc, 0x7, 0x5}}, {{0x9, 0x5, 0x9, 0x8, 0x40, 0x7, 0x6, 0xf}}, {{0x9, 0x5, 0x0, 0x4, 0x200, 0x3, 0x2, 0x1e, [@generic={0x84, 0x5, "1dcb35325bdc6982ec9014938f90595e1ec5c5c493c8f5828a6eaf8f12e0c8337d834d655032a98145a2d2fd858ef2bfb60e0e7009ec144e10ea845b0ed643a6a7ebcd31cc236b0f928362b2d074fceeb656ee0238d974a4d395b87e8be37bffcb6d287ed8de9d10bf819fb5e82cc162059b421ee70dadf85480f561ab945c4c4035"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x1, 0x1, 0x1, [@generic={0x6a, 0x2, "67da9c68a0f11e1f6df6d52a22d23df67da508953821a121961638cfd75af0033cb5a9eb7824ce87e020a9ef11c037fb8c4323541d67083504425be358667218832f36440c805503d5f1dc83b1dedf121f48b0c12a354c37665e9d61548d42f76c22ca5c57918210"}]}}]}}]}}]}}, 0x0) syz_usb_connect(0x2, 0x305, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x9a, 0xb4, 0x97, 0x40, 0x17ef, 0x304b, 0x55eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f3, 0x1, 0xfc, 0x1, 0x110, 0x0, [{{0x9, 0x4, 0x10, 0x1, 0xe, 0xff, 0xff, 0x0, 0x0, [], [{{0x9, 0x5, 0x9, 0x0, 0x3ff, 0xf4, 0x6, 0x1}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x53, 0x5, 0x1, [@generic={0x24, 0x23, "7b9f236c237290fd17b1ef59f15f09763997afbca9504cd8020df2fcb496d93a4428"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfd}]}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3, 0x10, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x6}]}}, {{0x9, 0x5, 0x92d7c8e503476f4a, 0x10, 0x8, 0x6, 0x0, 0x19, [@generic={0xa3, 0x30, "5ad9c26146d6437a3c68995d89b7d173642cc68145a34133506893b70165d8cc2d9f18b3df83faf4923de2faa36f07e513f69f6dee43c560809294ef7e4240d77da3d8aa7b397ef7893e2648d804ebe9e7606ae94cbb33296a392684435df6f45036c99c48a5cf33acb5d968f62c4b146db6fe816abbd5fb3798f7f0e818a3c011dcca73b6c824bfef8e74c44b7cd2f5e695358fda8b51f9e487aff9550816ea12"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x0, 0xcd, 0x9}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x9, 0xf9, 0x0, [@generic={0x8b, 0xb, "d10b3b721424b67b81ef708c1feada4aab5b2473414e9f7b4a3c7aec5520f06aef93cbe31a5a0f31812021b24e8e6881f8d03f2a3634294e4598055091e322dfe7d8a0784f5d43f6d148c6917bee5d0876a869ec6fc64a455b2b21bc0cd29cacf5f37280707e936970450f02358a8c64c27e87c4e9659d1a195390fb78b28c910efe4de0a28699d5f6"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x2461}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x1, 0x6, 0x8}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x3, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x1ff}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x4, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfd, 0x6}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x80, 0x6, 0x3}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0xc, 0x7, 0x5}}, {{0x9, 0x5, 0x9, 0x8, 0x40, 0x7, 0x6, 0xf}}, {{0x9, 0x5, 0x0, 0x4, 0x200, 0x3, 0x2, 0x1e, [@generic={0x84, 0x5, "1dcb35325bdc6982ec9014938f90595e1ec5c5c493c8f5828a6eaf8f12e0c8337d834d655032a98145a2d2fd858ef2bfb60e0e7009ec144e10ea845b0ed643a6a7ebcd31cc236b0f928362b2d074fceeb656ee0238d974a4d395b87e8be37bffcb6d287ed8de9d10bf819fb5e82cc162059b421ee70dadf85480f561ab945c4c4035"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x1, 0x1, 0x1, [@generic={0x6a, 0x2, "67da9c68a0f11e1f6df6d52a22d23df67da508953821a121961638cfd75af0033cb5a9eb7824ce87e020a9ef11c037fb8c4323541d67083504425be358667218832f36440c805503d5f1dc83b1dedf121f48b0c12a354c37665e9d61548d42f76c22ca5c57918210"}]}}]}}]}}]}}, 0x0) (async) 2m27.427476903s ago: executing program 1 (id=1293): io_uring_enter(0xffffffffffffffff, 0x234f, 0xb1e6, 0x234f, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x8000, 0x7, 0x7ff800, 0x6, {{0x23, 0x4, 0x0, 0x4, 0x8c, 0x66, 0x0, 0x6f, 0x29, 0x0, @empty, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0xb7, 0x3, 0xf, [{@multicast1, 0x9}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x200}, {@broadcast, 0x4}, {@multicast2, 0xbb7}]}, @timestamp_addr={0x44, 0x14, 0xe7, 0x1, 0x9, [{@loopback, 0x8}, {@remote, 0x4}]}, @lsrr={0x83, 0x17, 0x10, [@multicast1, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x1b, 0x45, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x15}, @multicast2, @empty]}]}}}}}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000380)=@deltfilter={0x608, 0x2d, 0x500, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, {0x10, 0x6}, {0xd, 0xfff3}, {0x3, 0x8}}, [@f_rsvp6={{0xa}, {0x5d8, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_RSVP_POLICE={0x48, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2a}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x3, 0x6a, 0x637, 0x101, {0x9, 0x0, 0x0, 0x9, 0x8001, 0x5}, {0x6, 0x0, 0x7, 0x9, 0x6, 0x10001}, 0x2, 0x7, 0xb8cc}}]}, @TCA_RSVP_ACT={0x55c, 0x6, [@m_xt={0x2ac, 0xc, 0x0, 0x0, {{0x7}, {0x19c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd9, 0x6, {0x2, 'raw\x00', 0x1, 0x0, "b58723012ca422adfb830f5c2dd2d433a518b801c77cd6fb2c5f7c8bf3c53dd2141347e9ba707c1d8278499c9f8ff0e696464c3adb93903bc5ab2db13482fedecd1f7e6b43565a80d2e6e13276161ca6e2b2c7de8fcda9ae79e4b8833d11205ad2b51610b703084620919cf934bc9390b45c91b5b7f89b0c71649296874f9fb2017d5629cd8fa946e5572a018c082af290b9edbefac537be1949247b6d5174988de2b7eb000c0c9b84e43836044975"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x59, 0x6, {0x2, 'mangle\x00', 0x8, 0xf8, "944dfe37884ae925d9a2b3640e5476f4a86b2f8234d8d14d3dcf68192be37c8840c79acc85920da98bcd752334ffe8"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0xe9, 0x6, "9e44b214545caea84beef68d6b497d571cd2fd5437913daf3b98f6b3ac98c9f86c4c92f5bf5ccc7ddc4fcfff1694902a63bf863ed44d92fe9604d36c269d4660987ed3695d1f04cc1cf5a8903f5b117ee7d0521be888ae6e88fb219fc920ca9249d27d9a43207a4a663c437e52f86b437534d8693f97f1918c88986692464b090f58c05c19e81c012017434968472c77e37c525df0930c227ea6aa5191df796afd2ba92bf80d45b90367afbce14b514998dabedc569373806e36dd936800f9866393375e6147583dbd579ef7e093d74290a927819cc6c89fe79f3b7438f77734cb6d2c84f7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x124, 0x14, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x401}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8d}]}, {0xcf, 0x6, "23ec225fe781a31722070ccb4fd7bbb9e56663d1421feba57e99e966c059833068c3e77dfb0edaa202eeac032ced415302f8e8abdb48ec0c5a7f47c4bd6225b53b7323f877e9abce912701ec843d973d4f0874014b0f2bc5c73bee8b1436fd8de005bdaec53e5510d8134f78d2a1e84bdc3b328060032ab41b34bd698d02b05624f04c20411e747c70e71c5b0129b62936093988c7d5ab83231fad6efbc0a9da5e1b976857dbf8b16f95e07c43f613ffd90fbe43ccbe034809260de17278ee8a9a6a09efc528e30d5cd96e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x84, 0x19, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0x1}}]}, {0x4d, 0x6, "57172b6cdd95696a5ce7e07848d008326f99a48e518a226ba9b80d1cf8a0817eb8e1582b32b25f2ca61525271fb3fad75ea9a118823d2e90adc891d7457aa9724cbf79811c8d2456e0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ctinfo={0x104, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0xd7, 0x6, "2312ed8bc31aad7b09739c5b71b23ed868226235b7c5d92e48d2e4a60986279d45aa467c56d5b5ff27d9f9ec52065728dd225b43a86d51e031c5dcd0d1db30a232c43af4e0dc72270768d60c25e9fcb1622c827f81043c6d45dec18d90d6d2c889e58c963e17958f3ca311b5b4946a7c40aaa3747e8dd901367b46f80af4fc4753f5baabf8943df00091ddf33988471445a1108157e41438b2a947aab53cf69b0bfbd942ca8fabba6e2fb5556e549bfc191c8d0c2f7148969ec159fafc7fa2de4a1c2d19845c3d72442383a321d6f3adbeb1cb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_RSVP_DST={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0x9}}]}}]}, 0x608}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/192, 0xc0}], 0x1, 0xda, 0x3) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x94) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r2, 0x4068aea3, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000a40)={0x0, 0x5, 0x6, 0x5}, &(0x7f0000000a80)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000b80)={r3, 0x90, &(0x7f0000000ac0)=[@in6={0xa, 0x4e20, 0x7, @private2={0xfc, 0x2, '\x00', 0xc3}, 0x2}, @in6={0xa, 0x4e22, 0xb2a, @dev={0xfe, 0x80, '\x00', 0x35}, 0x2}, @in6={0xa, 0x4e20, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000001}, @in6={0xa, 0x4e20, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @multicast1}]}, &(0x7f0000000bc0)=0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880), 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r7, 0xc040565e, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x9, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r8, 0x0) 2m25.795716992s ago: executing program 2 (id=1299): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x102) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f00000001c0)={0x3d, 0x3, 0x595f, 0x1, 0x1, 0x7, "2c2100045b7081fa637bf92fc6e88cad", 0x81, 0xfd, 0x5, 0x10, 0x0, 0x9}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = io_uring_setup(0x764d, &(0x7f00000000c0)={0x0, 0x212, 0x100, 0x1, 0x3c9}) r5 = syz_io_uring_setup(0x8d2, &(0x7f0000000280)={0x0, 0x7c4d, 0x80, 0x1, 0xfb, 0x0, r4}, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)="16", 0x1}], 0x1, &(0x7f0000001400)=ANY=[], 0x10}, 0x0, 0x4040092}) io_uring_enter(r5, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 2m24.827415474s ago: executing program 2 (id=1303): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) memfd_secret(0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/47) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x1, 0x704d, 0x1, 0x3, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x200001, 0x100, 0xfe, 0x4a, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x200, 0x40, 0x19b2, 0x8000, 0x7, 0xc1, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x4, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x4, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x7, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xc6b, 0x7fffffff, 0xffff, 0x7, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0xf, 0x7, 0x800, 0x6c368000, 0x4, 0x1000007, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x5, 0x4, 0x4, 0x8, 0x40, 0xc14, 0x80000001, 0x3, 0x3, 0x7, 0x7, 0x8, 0x8, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x4, 0x0, 0xfff, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x0, 0x0, 0x6, 0x8, 0x9, 0x4, 0x1000068], [0x1, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x405, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0xa, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x10000, 0x7f, 0x7ff, 0xd, 0x400, 0x0, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0xfffffffc, 0x2, 0x5d9fff6, 0x3ff, 0xff, 0x4, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x0, 0x9, 0x0, 0xffff, 0x7, 0x6, 0x0, 0x81, 0x9, 0x2000002, 0x3, 0x100, 0x8, 0x0, 0x6, 0x10], [0xffefff80, 0xd5800000, 0xfffffffc, 0x4, 0x2, 0x62a, 0x6, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x7, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x201, 0xfff, 0x3, 0x0, 0x3c65, 0xa, 0x6, 0x80, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0x0, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13b, 0x7, 0x8, 0xb757, 0x2, 0x117, 0x996, 0x54, 0x8c1, 0x0, 0x5, 0x5, 0xf, 0x100, 0x10000400, 0x9, 0x5, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000500)={0x0, 0x2000000, 0x800, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2m24.445140638s ago: executing program 2 (id=1305): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x1}, @IFLA_MACSEC_REPLAY_PROTECT={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904000002ffffff0009050b0000000000000905ece2"], 0x0) 2m22.936060488s ago: executing program 2 (id=1309): unshare(0x24020400) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r0, 0xff, 0x1, 0x0, 0x0) 2m22.738965752s ago: executing program 2 (id=1310): syz_open_dev$usbmon(&(0x7f0000000000), 0x7fffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) r5 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f00000002c0)=@urb_type_iso={0x0, {0xa}, 0x2, 0x41, &(0x7f0000000140)="b1a8f31c6bb0c95ec0382958aed2b47c6a81fd2f30a0218e79b9237c17e556ded7a6b2f04f25e5f3b541900316f50f6f5afd9c8d101fd374e907b9f5e2218c167617da331e87fdce42a8fe5a4a2a0bea", 0x50, 0x22, 0x1, 0x3e, 0x7, 0x36, &(0x7f00000001c0)="2bfbdda2d5a58e52cd30d65e9e81ccf5ca69c35973f503494a419d9261f0cb5a9e8ffd86bfe2777a1284f14b2ea2a99ea525259bfdb60f852928b5f39383ce94ab7eb4ad089e360543cca84985af6d6ec523f052d0821a8a771e752ea6817100fb92c95c3a85559ea7dace56fed09f8467c6f2ac4bc391c5e688a6069d5919c35ae32ad6de8d2348b2b913c4f74d3bc4ec4f808cedbc0155da569cb611d8d40b92f4d5b1542dc21d9d5ed8dda06e9efc8dc685a2e1fd6294f64f21f21102c7560a96c9", [{0x7, 0x1, 0x9}, {0xf, 0x8, 0xfffffff8}, {0xaf, 0xb, 0x401}, {0xfff, 0x8, 0xa}, {0x7ff, 0x0, 0x5}, {0x7, 0x81, 0x1}, {0x5, 0x98, 0x100}, {0x2, 0x6, 0x1}, {0x10000, 0x8, 0x667f}, {0x7, 0x5, 0x6}, {0x3ff, 0x7fff, 0x8}, {0x0, 0x2ff, 0x9}, {0x0, 0x99, 0x4}, {0x0, 0x5, 0x7fff}, {0x58b, 0x0, 0x6}, {0xffffffff, 0x14000000, 0x8}, {0x8, 0xfffffffe, 0x3}, {0x6c1, 0xb, 0x5}, {0x7ac7, 0x3, 0x2}, {0x4937, 0x8, 0x6}, {0x7, 0x2, 0x35}, {0xffff, 0x3, 0x9}, {0x7, 0x7, 0x9}, {0x7, 0x1, 0x2}, {0x4, 0x8, 0x100}, {0x9, 0xfff, 0x81}, {0x58, 0x8, 0x2}, {0x2, 0x7, 0x7}, {0x0, 0x9, 0x101}, {0x7, 0x4a, 0x6}, {0x7, 0x8, 0x6ee}, {0x0, 0x6, 0x4}, {0x10, 0x6652, 0xd}, {0x7, 0x7, 0xffffff6d}, {0x800, 0xffffffff, 0x7fff}, {0x0, 0x4, 0xba5e}, {0x1000, 0xc4a, 0x10001}, {0x3, 0x40}, {0x9, 0x65aa, 0x9}, {0x1, 0xfffffffc, 0x1ff}, {0x9, 0x7, 0x1}, {0x200, 0x0, 0x6}, {0x0, 0x48, 0x6}, {0x1, 0x0, 0x5}, {0x3, 0x7, 0x87}, {0x1, 0x1d5, 0x2}, {0x6, 0xd, 0x8}, {0x4, 0x3ff}, {0x10001, 0x9, 0x10000}, {0x7, 0x200, 0x9}, {0x0, 0x1, 0x9}, {0x4, 0x0, 0x200}, {0x7fff, 0x1, 0x6}, {0x6, 0x9}, {0x8, 0x4, 0x7e}, {0x1, 0xa, 0x6}, {0x2, 0x1, 0x9}, {0x4, 0x5}, {0x3ff, 0x2, 0x8}, {0x7, 0x5ff, 0x4}, {0x1, 0x5, 0x2}, {0x800000, 0x5, 0xffffff80}]}) 2m12.303110176s ago: executing program 34 (id=1293): io_uring_enter(0xffffffffffffffff, 0x234f, 0xb1e6, 0x234f, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x8000, 0x7, 0x7ff800, 0x6, {{0x23, 0x4, 0x0, 0x4, 0x8c, 0x66, 0x0, 0x6f, 0x29, 0x0, @empty, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0xb7, 0x3, 0xf, [{@multicast1, 0x9}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x200}, {@broadcast, 0x4}, {@multicast2, 0xbb7}]}, @timestamp_addr={0x44, 0x14, 0xe7, 0x1, 0x9, [{@loopback, 0x8}, {@remote, 0x4}]}, @lsrr={0x83, 0x17, 0x10, [@multicast1, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x1b, 0x45, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x15}, @multicast2, @empty]}]}}}}}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000380)=@deltfilter={0x608, 0x2d, 0x500, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, {0x10, 0x6}, {0xd, 0xfff3}, {0x3, 0x8}}, [@f_rsvp6={{0xa}, {0x5d8, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_RSVP_POLICE={0x48, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2a}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x3, 0x6a, 0x637, 0x101, {0x9, 0x0, 0x0, 0x9, 0x8001, 0x5}, {0x6, 0x0, 0x7, 0x9, 0x6, 0x10001}, 0x2, 0x7, 0xb8cc}}]}, @TCA_RSVP_ACT={0x55c, 0x6, [@m_xt={0x2ac, 0xc, 0x0, 0x0, {{0x7}, {0x19c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd9, 0x6, {0x2, 'raw\x00', 0x1, 0x0, "b58723012ca422adfb830f5c2dd2d433a518b801c77cd6fb2c5f7c8bf3c53dd2141347e9ba707c1d8278499c9f8ff0e696464c3adb93903bc5ab2db13482fedecd1f7e6b43565a80d2e6e13276161ca6e2b2c7de8fcda9ae79e4b8833d11205ad2b51610b703084620919cf934bc9390b45c91b5b7f89b0c71649296874f9fb2017d5629cd8fa946e5572a018c082af290b9edbefac537be1949247b6d5174988de2b7eb000c0c9b84e43836044975"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x59, 0x6, {0x2, 'mangle\x00', 0x8, 0xf8, "944dfe37884ae925d9a2b3640e5476f4a86b2f8234d8d14d3dcf68192be37c8840c79acc85920da98bcd752334ffe8"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0xe9, 0x6, "9e44b214545caea84beef68d6b497d571cd2fd5437913daf3b98f6b3ac98c9f86c4c92f5bf5ccc7ddc4fcfff1694902a63bf863ed44d92fe9604d36c269d4660987ed3695d1f04cc1cf5a8903f5b117ee7d0521be888ae6e88fb219fc920ca9249d27d9a43207a4a663c437e52f86b437534d8693f97f1918c88986692464b090f58c05c19e81c012017434968472c77e37c525df0930c227ea6aa5191df796afd2ba92bf80d45b90367afbce14b514998dabedc569373806e36dd936800f9866393375e6147583dbd579ef7e093d74290a927819cc6c89fe79f3b7438f77734cb6d2c84f7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x124, 0x14, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x401}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8d}]}, {0xcf, 0x6, "23ec225fe781a31722070ccb4fd7bbb9e56663d1421feba57e99e966c059833068c3e77dfb0edaa202eeac032ced415302f8e8abdb48ec0c5a7f47c4bd6225b53b7323f877e9abce912701ec843d973d4f0874014b0f2bc5c73bee8b1436fd8de005bdaec53e5510d8134f78d2a1e84bdc3b328060032ab41b34bd698d02b05624f04c20411e747c70e71c5b0129b62936093988c7d5ab83231fad6efbc0a9da5e1b976857dbf8b16f95e07c43f613ffd90fbe43ccbe034809260de17278ee8a9a6a09efc528e30d5cd96e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x84, 0x19, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0x1}}]}, {0x4d, 0x6, "57172b6cdd95696a5ce7e07848d008326f99a48e518a226ba9b80d1cf8a0817eb8e1582b32b25f2ca61525271fb3fad75ea9a118823d2e90adc891d7457aa9724cbf79811c8d2456e0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ctinfo={0x104, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0xd7, 0x6, "2312ed8bc31aad7b09739c5b71b23ed868226235b7c5d92e48d2e4a60986279d45aa467c56d5b5ff27d9f9ec52065728dd225b43a86d51e031c5dcd0d1db30a232c43af4e0dc72270768d60c25e9fcb1622c827f81043c6d45dec18d90d6d2c889e58c963e17958f3ca311b5b4946a7c40aaa3747e8dd901367b46f80af4fc4753f5baabf8943df00091ddf33988471445a1108157e41438b2a947aab53cf69b0bfbd942ca8fabba6e2fb5556e549bfc191c8d0c2f7148969ec159fafc7fa2de4a1c2d19845c3d72442383a321d6f3adbeb1cb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_RSVP_DST={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0x9}}]}}]}, 0x608}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/192, 0xc0}], 0x1, 0xda, 0x3) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x94) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r2, 0x4068aea3, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000a40)={0x0, 0x5, 0x6, 0x5}, &(0x7f0000000a80)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000b80)={r3, 0x90, &(0x7f0000000ac0)=[@in6={0xa, 0x4e20, 0x7, @private2={0xfc, 0x2, '\x00', 0xc3}, 0x2}, @in6={0xa, 0x4e22, 0xb2a, @dev={0xfe, 0x80, '\x00', 0x35}, 0x2}, @in6={0xa, 0x4e20, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000001}, @in6={0xa, 0x4e20, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @multicast1}]}, &(0x7f0000000bc0)=0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880), 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r7, 0xc040565e, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x9, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r8, 0x0) 2m7.384422125s ago: executing program 35 (id=1310): syz_open_dev$usbmon(&(0x7f0000000000), 0x7fffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) r5 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f00000002c0)=@urb_type_iso={0x0, {0xa}, 0x2, 0x41, &(0x7f0000000140)="b1a8f31c6bb0c95ec0382958aed2b47c6a81fd2f30a0218e79b9237c17e556ded7a6b2f04f25e5f3b541900316f50f6f5afd9c8d101fd374e907b9f5e2218c167617da331e87fdce42a8fe5a4a2a0bea", 0x50, 0x22, 0x1, 0x3e, 0x7, 0x36, &(0x7f00000001c0)="2bfbdda2d5a58e52cd30d65e9e81ccf5ca69c35973f503494a419d9261f0cb5a9e8ffd86bfe2777a1284f14b2ea2a99ea525259bfdb60f852928b5f39383ce94ab7eb4ad089e360543cca84985af6d6ec523f052d0821a8a771e752ea6817100fb92c95c3a85559ea7dace56fed09f8467c6f2ac4bc391c5e688a6069d5919c35ae32ad6de8d2348b2b913c4f74d3bc4ec4f808cedbc0155da569cb611d8d40b92f4d5b1542dc21d9d5ed8dda06e9efc8dc685a2e1fd6294f64f21f21102c7560a96c9", [{0x7, 0x1, 0x9}, {0xf, 0x8, 0xfffffff8}, {0xaf, 0xb, 0x401}, {0xfff, 0x8, 0xa}, {0x7ff, 0x0, 0x5}, {0x7, 0x81, 0x1}, {0x5, 0x98, 0x100}, {0x2, 0x6, 0x1}, {0x10000, 0x8, 0x667f}, {0x7, 0x5, 0x6}, {0x3ff, 0x7fff, 0x8}, {0x0, 0x2ff, 0x9}, {0x0, 0x99, 0x4}, {0x0, 0x5, 0x7fff}, {0x58b, 0x0, 0x6}, {0xffffffff, 0x14000000, 0x8}, {0x8, 0xfffffffe, 0x3}, {0x6c1, 0xb, 0x5}, {0x7ac7, 0x3, 0x2}, {0x4937, 0x8, 0x6}, {0x7, 0x2, 0x35}, {0xffff, 0x3, 0x9}, {0x7, 0x7, 0x9}, {0x7, 0x1, 0x2}, {0x4, 0x8, 0x100}, {0x9, 0xfff, 0x81}, {0x58, 0x8, 0x2}, {0x2, 0x7, 0x7}, {0x0, 0x9, 0x101}, {0x7, 0x4a, 0x6}, {0x7, 0x8, 0x6ee}, {0x0, 0x6, 0x4}, {0x10, 0x6652, 0xd}, {0x7, 0x7, 0xffffff6d}, {0x800, 0xffffffff, 0x7fff}, {0x0, 0x4, 0xba5e}, {0x1000, 0xc4a, 0x10001}, {0x3, 0x40}, {0x9, 0x65aa, 0x9}, {0x1, 0xfffffffc, 0x1ff}, {0x9, 0x7, 0x1}, {0x200, 0x0, 0x6}, {0x0, 0x48, 0x6}, {0x1, 0x0, 0x5}, {0x3, 0x7, 0x87}, {0x1, 0x1d5, 0x2}, {0x6, 0xd, 0x8}, {0x4, 0x3ff}, {0x10001, 0x9, 0x10000}, {0x7, 0x200, 0x9}, {0x0, 0x1, 0x9}, {0x4, 0x0, 0x200}, {0x7fff, 0x1, 0x6}, {0x6, 0x9}, {0x8, 0x4, 0x7e}, {0x1, 0xa, 0x6}, {0x2, 0x1, 0x9}, {0x4, 0x5}, {0x3ff, 0x2, 0x8}, {0x7, 0x5ff, 0x4}, {0x1, 0x5, 0x2}, {0x800000, 0x5, 0xffffff80}]}) 11.492049846s ago: executing program 6 (id=1791): r0 = socket(0x26, 0x800, 0x3fc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000880)="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", 0x155}, {&(0x7f0000001280)="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", 0xdeb}, {&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000000500)="3f989e591dc33398742ad5283953bc28fc069c8baf8a49d42bd5316eae3b39be428d1ba70e0521ae162ee0e5452b050aa45b71cb65766f30f40e14f2530cf22ce567a1e45917004154764e9f052391dd1609f4b873ff91ef8f50a736930479dddac1f56381bf0aa5fb31a1ff9ba5d1e5561ba3fd244de061fae8e7fbb448444dced2358d34be45952de7db7e65e7ee18f7708dffb940c391c2a08b8fc04a3429c5f3d61c1a5a98b6bea912b1ae7b81eb7b302f988f35", 0xb6}], 0x4}, 0x800) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0, 0xffffffffffffffff}) mkdirat(r4, 0x0, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x0, 0x6}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6e65772064656661756c7437757365723a737971eb08b2e0a763c73e7fbb258766ed3b1ce4801ae27a20303030303030303030303030303030303430393300"], 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}}, 0x84) msgget$private(0x0, 0x40) r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r7, &(0x7f00000002c0)={0x1, 0x5}, 0x2) 11.491615327s ago: executing program 6 (id=1792): syslog(0x3, 0xffffffffffffffff, 0x1000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x80000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000140001002bbd7000ffdbdf25020000fd", @ANYRES32=r2, @ANYBLOB="08000b00e000000108000200a4"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.490844952s ago: executing program 6 (id=1793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x8, 0x0) r2 = syz_open_procfs$namespace(r1, 0x0) ioctl$NS_GET_NSTYPE(r2, 0x8004b706, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28050900000000000109022400010000000009040200010300000009210000000122050009058103"], 0x0) syz_usb_connect$cdc_ncm(0x5, 0xb5, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x2, 0x1, 0x9, 0x0, 0x42, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "dcc7df220499"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x8000, 0x2, 0x6}, {0x6, 0x24, 0x1a, 0x400, 0x8}, [@obex={0x5, 0x24, 0x15, 0xe2}, @mbim={0xc, 0x24, 0x1b, 0x5008, 0x0, 0x0, 0x4, 0xfff8, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x3, 0x8, 0xff, 0x1, 0xf5}, @country_functional={0xa, 0x24, 0x7, 0xf9, 0x2, [0x5, 0x1ff]}, @obex={0x5, 0x24, 0x15, 0x40}, @mdlm={0x15, 0x24, 0x12, 0xab67}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x5f, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x5, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x8, 0x9, 0x5}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x6, 0x1, 0x0, 0x8, 0x40}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0xa, [{0x7a, &(0x7f0000000340)=@string={0x7a, 0x3, "0d562a2253623842ed8aecf65a71924bba3bf0e7b57ef166040584d558df7db2e95d8755fb6c1b359bea6fc8d98c0d32ec227bd99237341f70351c8df76f4a19e41c35767cb0aa4d63699005327a90691723ade86cd2c1f2432a2ab195b879ee6bc9d0930978e41460788390df297fe8d4e4e5a9c21e8930"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3801}}, {0xf8, &(0x7f0000000440)=@string={0xf8, 0x3, "751559955db15c3748335d287d9ba284080a65e155b7f17de2087c902fa30475b8cb9fb1c75f91c08d5c7aa1f11a79d7a2444445d06d4d5988ac9b816c2f0a9b76f5939295fac5ebb08b9067bda72aa61fa1c72b588a86997942604d7f44faa0db37e18d202ff0d3ecc1a59e220a33b3eaba98ea69000338bb5da6e8b5c9115f5ae43eeab6a6b6ecd66ab805dc16e9e9af3f1e7d62b6256cf312b30511fadad12d6d3d7836822a13b140329f31c86bbe6a5a820805671cfc01fdb9c80af03110dbaeeff754190a9db5302a32f326f52f85a8ba050f41708b1cbc79924e37d2347263485617d05035521165ea8e210a3106609d5df4d5"}}, {0x4c, &(0x7f0000000540)=@string={0x4c, 0x3, "28175fd5b1510a5fc29ca7f2b0a438ed1ffa2619f3c6e9cedef78f777656b5f44e6063702a9ee7bdbb4f79913e231cb5e8395c44caf735626a60426e605ecd84ff2186cb882187fa25b6"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x820}}, {0x76, &(0x7f0000000640)=@string={0x76, 0x3, "6408faa0e488cbe13afa45545920814b3ef706e47fe9ecebe7c59669e71b37394af5eaecb899a3b3f452511176ffc91611d09636b39df4051a847634e210446c0bf5aa29bcaa39b9d02a6f83279673bf84d180b2aea7bc8a7f755ed10d13a3b5698270e6b333eb9172f16cebdf9f56cd09472a03"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x407}}]}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00017c"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000110001"], 0xe8}}, 0x0) 11.051827606s ago: executing program 6 (id=1799): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000) sched_setattr(0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r4, 0x4, 0x42800) close(0x3) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000002300)="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", 0xf00) r6 = fanotify_init(0x200, 0x0) r7 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r8 = dup(r7) fanotify_mark(r6, 0x1, 0x48001059, r8, 0x0) r9 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r9, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='cubic', 0x5) unshare(0x68040200) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x6, 0x71, 0x0, 0x0) 9.418023202s ago: executing program 7 (id=1801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050129bd7000fbdbdf251c0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="8153d3241245a0a68066bbbf2ecde37beb31f2ba3aa5eaa5ed942f5b60bcdab89a918b1041a60c67ae133d95a7f6103dc9d15ed7be30544ee1ce447ab5d6665d1b4ec5d42872d9601c085daa32f32b55da71c29086c0de35a6a298230239b87aef0000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40006) 9.255871337s ago: executing program 7 (id=1803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) (async) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x2000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa, 0x3}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) (async) r3 = syz_open_dev$video(&(0x7f0000000280), 0xff, 0x40) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000002c0)=0x1000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 9.042264276s ago: executing program 7 (id=1805): r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000980)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x206, 0x4, 0x9, 0x0, 0xf3b, 0xfa11, 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) lremovexattr(0x0, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f0000000280)=[{0x1, 0x6, 0xa, 0x9}, {0x3, 0x4, 0x7, 0xffffffff}, {0x7fff, 0x5, 0x0, 0x1}]}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'wlan1\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x8, 0x7, [0x1]}}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f00000000c0)={r4}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffffffffffff8e) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000100)={@local}) alarm(0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) 8.050255316s ago: executing program 8 (id=1807): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2041, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x20000, 0x10, "0062ba5d8200"}) r2 = syz_open_pts(r1, 0x20800) r3 = dup3(r2, r2, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) io_submit(r4, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x3, 0x5, r1, 0x0, 0x0, 0x1, 0x0, 0x0, r3}]) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x10092, 0xfffffffffffffe2d) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000000), &(0x7f0000000040)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2400000000002) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x1ce) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0xe}, 0x18) r9 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$packet(0x11, 0x2, 0x300) close(0x3) 7.526079232s ago: executing program 4 (id=1810): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x3c, r1, 0x1, 0x1000000, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x3ff}]}]}]}, 0x3c}}, 0x0) syz_usb_connect(0x2, 0x607, &(0x7f0000000b40)=ANY=[@ANYBLOB="120110019177a610f70a01013491010203010902f505040004f004090441"], 0x0) 7.279248681s ago: executing program 6 (id=1811): r0 = open(&(0x7f0000000000)='.\x00', 0x624502, 0x0) inotify_add_watch(r0, 0x0, 0x20000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}, @in6={0xa, 0x4e20, 0x7f, @mcast2, 0x2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r1}, 0x8) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000003200)={'ip6tnl0\x00', &(0x7f0000003180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x3a, 0x1, 0x3, "d30580c9042b7275077bafe6410c2087850000000000000000000080001500", 0x50565559}) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r5, 0x501c4814, &(0x7f00000000c0)={0x2}) 6.788018113s ago: executing program 8 (id=1812): keyctl$reject(0x13, 0x0, 0xff, 0x200, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401", @ANYRES16], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000080)=0x5) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0xc048aeca, &(0x7f0000000080)) syz_genetlink_get_family_id$smc(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r6, @ANYBLOB="83040500010000003000128008000100677265002400028008000700ac14140005000a000000000005000800000000000500130001"], 0x50}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty}}}], 0x20}}], 0x1, 0x0) 6.091923985s ago: executing program 4 (id=1816): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = mq_open(&(0x7f00000001c0)='batadv_s\x8e(\x85ZL\x7f\x89%\x85fRTZ\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x5, 0x8, 0x1, 0xc05}) mq_timedreceive(r3, &(0x7f0000000300)=""/120, 0x78, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) io_uring_setup(0x47691, &(0x7f0000000140)={0x0, 0x58fb, 0x10, 0x801, 0x23f}) (async) io_uring_setup(0x47691, &(0x7f0000000140)={0x0, 0x58fb, 0x10, 0x801, 0x23f}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x2) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r5, 0x4068aea3, &(0x7f0000000040)={0xc5, 0x0, r5}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket(0x1d, 0x2, 0x6) (async) r6 = socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000100)) r8 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) sched_setattr(0x0, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) (async) r9 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r8, 0xc2604111, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800ee94c3a500001500180927bd7000fddbdf250a3812fe", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0xc080) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) (async) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) (async) pread64(0xffffffffffffffff, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002100)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}}, 0x40) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002100)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="bf0500000000000061ee9d000000000004000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="bf0500000000000061ee9d000000000004000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 5.847812628s ago: executing program 7 (id=1817): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000011f}, 0x40004) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x7, "809b8685"}]}}, 0x0}, 0x0) 5.303946962s ago: executing program 8 (id=1818): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2c, r1, 0x1, 0x0, 0x80000004, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newlink={0xf8, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb4, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb0, 0x2, '\xb1\xef\x1e\xd09\x18\xd6\x7f\xe9\x94\f\xc2\xc2\x06\xb3\x8ac\xe0X\x9a\xc9\x7f\x90\xcdL\x8cC\x98\xbcC\xea\x00\x89\xa6\xd2\x1fs\x05\x82\xeb\xf3\xd4}\xbd\x1b\x89\xc3?c\x19D-\x8c\xbf\xc9\xf9u\x1e\xd2*\xbc\xf00~?5V84X\x85\x1e\x14\xdd\v#\xc75\xc9\xee\xd7W\x98\xedu\xed\x12\xa0\xf4T\xc9\x94\xdfx\xd1\xca\xe3V\xa5[\xe3\xde\xd3>\xc1?\xb2\x1f\xfbwyw\xcb\xae\x8aA\xbcd\xf8I\xed3M\xe6\x9f3\xa8\xa6\x9a}\xb7\x1b\xf5b\x9dVuk\xfa\xe2\aLZo{\x19\xcf\xeb\xa6/g\xfc\xe72\xdd\x03\xb9\x95\xf6\xeb\xbe\x9e\xa2\xa9e\x8c\xf0\xaa\\\xda\xfe`'}]}, @IFLA_IFALIAS={0x14, 0x14, 'tunl0\x00'}, @IFLA_LINKMODE={0x5, 0x11, 0x7}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newlink={0xf8, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb4, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb0, 0x2, '\xb1\xef\x1e\xd09\x18\xd6\x7f\xe9\x94\f\xc2\xc2\x06\xb3\x8ac\xe0X\x9a\xc9\x7f\x90\xcdL\x8cC\x98\xbcC\xea\x00\x89\xa6\xd2\x1fs\x05\x82\xeb\xf3\xd4}\xbd\x1b\x89\xc3?c\x19D-\x8c\xbf\xc9\xf9u\x1e\xd2*\xbc\xf00~?5V84X\x85\x1e\x14\xdd\v#\xc75\xc9\xee\xd7W\x98\xedu\xed\x12\xa0\xf4T\xc9\x94\xdfx\xd1\xca\xe3V\xa5[\xe3\xde\xd3>\xc1?\xb2\x1f\xfbwyw\xcb\xae\x8aA\xbcd\xf8I\xed3M\xe6\x9f3\xa8\xa6\x9a}\xb7\x1b\xf5b\x9dVuk\xfa\xe2\aLZo{\x19\xcf\xeb\xa6/g\xfc\xe72\xdd\x03\xb9\x95\xf6\xeb\xbe\x9e\xa2\xa9e\x8c\xf0\xaa\\\xda\xfe`'}]}, @IFLA_IFALIAS={0x14, 0x14, 'tunl0\x00'}, @IFLA_LINKMODE={0x5, 0x11, 0x7}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 5.24978125s ago: executing program 4 (id=1819): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=ANY=[@ANYBLOB="4000000410000104004000000101000000000000", @ANYRES32=0x0, @ANYBLOB="09000200800d0000140003007465616d3000000000000000000000000a000100ffffffffffff0000"], 0x40}, 0x1, 0x0, 0x0, 0xc014}, 0x8090) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x7e, 0x401, 0x10, @empty, @loopback={0x30000000000, 0xffff888101827518}, 0x8000, 0x0, 0x240000, 0x5}}) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000080), 0x4) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)={{r1}, 0xfffffffffffffffd, 0x2, 0x621}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x7) 5.208568444s ago: executing program 5 (id=1820): listen(0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0xcae, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x1, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000240)=0xffff7c00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x1, 0x1}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 5.0918529s ago: executing program 8 (id=1821): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)=@delchain={0x1ac, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0xfff2, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x178, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0x3ff, 0xc, 0x1, 0x28f6b1d8}, {0x9, 0x4, 0x4, 0xecd}, {0x1, 0x6, 0x0, 0xfffffffc}, {0x7, 0x6, 0x3, 0xfffffffb}, {0x6, 0x0, 0x7f}]}}, @TCA_BPF_ACT={0x140, 0x1, [@m_skbmod={0x13c, 0x10, 0x0, 0x0, {{0xb}, {0xd0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfc3c, 0x5, 0x20000000, 0xffffff57, 0x5}, 0x9}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x40, 0x2, 0x368, 0x6}, 0x1}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4d, 0x100, 0x20000000, 0x7f, 0x4}, 0x8}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x8000, 0x3f81e60c40737b20, 0xfff, 0x4}, 0x3}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x2, 0x5, 0xfffffffa, 0x7}, 0x1}}]}, {0x41, 0x6, "7a47669728dce6acf31d40cc7d7616f977a7ee969d04ff66cf038816e0e106584bcac02b05f5b6b8a59657b9c8097d1eee7f99524eff4c436b1270d95b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x7, 0x4) (async) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000000040)=0x8, 0x4) (async) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRESDEC=r1], 0x0) 5.051968551s ago: executing program 8 (id=1822): syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100b4970000000109021200010800000a0904650200afce4d08000000000000000000b2b1a6b9950d01ab7bca5f15c335b1fca11b097dd8ed542ff6fa7944fa549a1eb8dc2336859906bc4d3ce640989166"], 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000004c0)=@newqdisc={0x108, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0x2}, {0x0, 0xfff1}}, [@TCA_STAB={0xc4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0x2, 0x3, 0x200, 0x1, 0x6, 0x60, 0x1}}, {0x6, 0x2, [0x48]}}, {{0x1c, 0x1, {0x0, 0x7, 0x9, 0x75, 0x1, 0x7, 0x0, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x3, 0x4, 0x9, 0x9, 0x2, 0x7ff, 0x5, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x6, 0xf, 0x2, 0x5, 0x2, 0x5, 0x2, 0x5}}, {0xe, 0x2, [0x3c47, 0x0, 0x10, 0x6, 0x81]}}, {{0x1c, 0x1, {0x2, 0x6, 0x0, 0x10, 0x1, 0x7, 0x2, 0x3}}, {0xa, 0x2, [0x3, 0xf1, 0x40]}}]}, @TCA_RATE={0x6, 0x5, {0x4, 0x9}}, @TCA_RATE={0x6, 0x5, {0x4, 0xff}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3ff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x100, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xd, 0xfff1}}, [@TCA_STAB={0xdc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x1, 0x1, 0xfffff001, 0x2, 0x4, 0xe92, 0x7}}, {0x12, 0x2, [0x6, 0x3, 0x7, 0x800, 0xa, 0x9645, 0x3]}}, {{0x1c, 0x1, {0x4, 0x8, 0xfff, 0x6, 0x1, 0xce3d, 0x80000000, 0x5}}, {0xe, 0x2, [0x1000, 0x6, 0x7, 0x95, 0x5]}}, {{0x1c, 0x1, {0x80, 0x57, 0x6, 0xc, 0x2, 0x2, 0x1, 0xa}}, {0x18, 0x2, [0x9, 0xb, 0x2, 0x1, 0x4, 0x2, 0xb, 0x8000, 0xf32, 0x5]}}, {{0x1c, 0x1, {0xa, 0xcb, 0x3, 0x5, 0x2, 0x1, 0x800, 0x2}}, {0x8, 0x2, [0x6, 0x4]}}, {{0x1c, 0x1, {0x9, 0x7, 0x5, 0x651, 0x2, 0x400, 0x400, 0x2}}, {0x8, 0x2, [0x8000, 0x5]}}]}]}, 0x100}}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000080)=""/53, 0x35}, &(0x7f00000000c0), 0x60}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) syz_open_dev$dri(&(0x7f0000000240), 0x156, 0x200000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/custom0\x00', 0x0, 0x0) r11 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r11, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_REG(r9, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000900)=ANY=[@ANYBLOB="00010000", @ANYRES16=r10, @ANYBLOB="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"/273], 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x8084) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r9) 4.995998844s ago: executing program 4 (id=1823): socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000003c0)=0x560, 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000020c0)=ANY=[@ANYBLOB="1201010200000010f3044d0740000102030109022d"], 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000002100)=ANY=[@ANYBLOB="12010200000000000000a8a440000102030109021b0001018140950904006d01070101050905ee827937c33d089e0b117141386b8d1a0102ff030d090d08a894ed3097a625910d73e9c2f09081ad74e46a073be233222d"], &(0x7f0000002440)={0xa, &(0x7f0000002240)={0xa, 0x6, 0x201, 0x6, 0x1, 0x2, 0x10, 0xd}, 0x5, &(0x7f0000002280)={0x5, 0xf, 0x5}, 0x2, [{0x0, 0x0}, {0xb, &(0x7f0000002400)=@string={0xb, 0x3, "c422d81f7246c032ff"}}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r4, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x48000) r6 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r6, &(0x7f0000000100)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000002b00)=@multiplanar_overlay={0x66906dc8, 0x1, 0x4, 0x4000, 0xff, {0x0, 0x2710}, {0x0, 0xc, 0x1, 0x0, 0x8, 0x9, "88998790"}, 0x9, 0x3, {0x0}, 0x101}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 4.943012391s ago: executing program 5 (id=1824): syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) (async) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000100)=0x101) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000095}, 0x4009) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.635792698s ago: executing program 5 (id=1825): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x80801) r1 = getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000a24000/0x1000)=nil, 0x1000, 0x200000c, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$kcm(0x29, 0x2, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x28, 0x8001, 0x0, 0x8000009, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="020029bd7000fddbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e6574640008008b0000000000000000", @ANYRES32=0x0, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB], 0x100}}, 0x90) get_robust_list(0x0, &(0x7f0000000340)=&(0x7f00000002c0)={&(0x7f0000000140), 0x0, &(0x7f0000000240)={&(0x7f00000001c0)}}, &(0x7f00000003c0)=0x18) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000000040)={0x2}) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) shutdown(0xffffffffffffffff, 0x0) sendto$inet(r5, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0xfea8, 0xa) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) 4.157401695s ago: executing program 6 (id=1826): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cf", 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x2, 0x3, 0x10000000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000", @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x50) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) r6 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) socket$kcm(0x11, 0x5, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000340), 0x4) unshare(0x42000000) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) 2.790264547s ago: executing program 5 (id=1827): socket$alg(0x26, 0x5, 0x0) read$snddsp(0xffffffffffffffff, &(0x7f0000000180)=""/233, 0xe9) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r0, &(0x7f0000000040), 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffe7) write$FUSE_INIT(r3, &(0x7f0000002200)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x1dd880, 0x0, 0x0, 0x0, 0x80}}, 0x50) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000002600)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000400", @ANYRES32=0x0, @ANYBLOB="8006620e33c7d1e3ffff943769"], 0x2c, 0x0) sched_setattr(r5, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x200001, 0xfffffffc, 0xb49, 0xa, 0x8, 0x3, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000002c0)={0x10f, @time={0xf2ee}}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x84) socket$nl_generic(0x10, 0x3, 0x10) 2.715639982s ago: executing program 7 (id=1828): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000680), 0x7fd, 0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) pipe(&(0x7f0000002740)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r4 = memfd_create(&(0x7f0000000a00)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf6\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf60xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) unshare(0x66000080) syz_usb_connect(0x5, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="2b010000fcee33403e20888871a8010203010902"], 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="4000000010001fff008012157383df337445000081e9ff44d7c907758710eb8937339d40de9c462312234cea7cae73ea032a1af7b375d0b04a1487ea93348be6e9e757ce38c70c23", @ANYRES32=0x0, @ANYBLOB="0012000000940400200012800b00010065727370616e00001000028008000700e000000104001200"], 0x40}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="03000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000100"/24, @ANYRES8=r5, @ANYRES8=r4, @ANYRES16=r8, @ANYBLOB="020f221fd3236455d17a6232b32d836fd3deb4cd7577b5eea8cc5d6f541817a824546b2bbbd8c13a94e89c276f0c70199bde865a8554f944de4ce2bf04b1dfe2b9c8fe0f3af6", @ANYRES64=r0], 0x50) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x3, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000580)="460f015f1dc441f97f4364b9800000c00f3235004000000f3066baf80cb84b70f986ef66bafc0cb000ee470f73d3ccb9800000c00f3235010000000f3066b801008ec00f0866baf80cb88e1e5e83ef66bafc0c66edc423f963fc47", 0x5b}], 0x1, 0x65, 0x0, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="424e4ef626f51af45bb32f7e80be181238652b5b01fb3905b27b646df52549001b9ed3b4e5ab124ab94882822aa23d54f2ddcfa3c3148892f891586b66f763596fcec47fd55e4786f7a220f173ce16875a074c502a978730160dab", 0x5b}], 0x1}, 0x0) r10 = openat$dir(0xffffffffffffff9c, 0x0, 0x2c1, 0x1c8) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, r10, 0x0) 1.463636743s ago: executing program 4 (id=1830): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r2, 0x1) mq_open(&(0x7f0000000040)='kfree\x00', 0x40, 0x5, &(0x7f0000000080)={0xffffffffffffff88, 0x3}) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000009c0)={0x0, @in6={{0xa, 0x4e23, 0xab9, @local, 0x8}}}, &(0x7f0000000100)=0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000800)={r3, @in6={{0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x41}, 0xa9}}, 0x80, 0x7}, 0x90) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r5, 0x0, 0x0) (async) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000000080)) (async) ioctl$TUNDETACHFILTER(r6, 0x8903, 0x1000000000000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$ptp(r7, &(0x7f00000022c0)=""/247, 0xf7) ioctl$SNDCTL_SEQ_TESTMIDI(r5, 0x40045108, &(0x7f00000003c0)) (async) splice(r0, 0x0, r4, 0x0, 0xd9d7, 0x8) (async) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x1, 0xc002e38, 0x7ff, 0x80, 0x10000, 0xa79, 0x0, 0x0, 0x100}}, 0xffffffed) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r8, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x23, {[@main=@item_4={0x3, 0x0, 0xa, "00001000"}, @local=@item_4={0x3, 0x2, 0x1, "984c5d8c"}, @global=@item_4={0x3, 0x1, 0x3, '\f\x00'}, @local=@item_012={0x1, 0x2, 0x2, "90"}, @global=@item_012={0x2, 0x1, 0x5, "8800"}, @global=@item_4={0x3, 0x1, 0xa, "e448aa5b"}, @local=@item_4={0x3, 0x2, 0x0, "09a57a2a"}, @main=@item_4={0x3, 0x0, 0xb, "31654111"}]}}, 0x0}, 0x0) (async) r9 = syz_usb_connect(0x5, 0x3f, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0xe, 0xde, 0x84, 0x20, 0x85a, 0x9, 0xa347, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xeb, 0x0, 0x2, 0x79, 0x16, 0xfd, 0x0, [], [{{0x9, 0x5, 0x1, 0x8, 0x400, 0x7, 0x4, 0x97, [@generic={0x9, 0x4, "0cc57295551d3e"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xf9, 0xb, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) (async) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000240)={0x30, 0x5, 0x0, {0x0, 0x4, 0xe, 0x880}}, 0x30) (async) syz_usb_control_io$cdc_ecm(r9, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x40, 0xf, 0xd2, {0xd2, 0x3, "b69babecbef4fe0c467135fe9443c0b11ce86ad718cb4091b4742f8319c562d2d49a47bc48027896ecdc7c10d4f06636608e94c51c561ac218842d802195ba8050addd7dc794185730e9834e083ccd5c2585a471f4bcaf6793aa188c01df8f3ea7ef4bc9e99d159150343609246f99cb4e24c71aac734c31d80420637ea7ecfeddabf00f5f95f403b3f70a60169d6da468ef0da599ba4cbdcfb1dca30051371c22c6ce3a4e73be9f308acabd733427b911d3e7ab259afc8229485e94d2d78791cc721e3c63cc755a3b68c98d1d467a3b"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="201727000000afd4af09aec395bb8f4db0696b58621d4fb606f1bd5d5cbf2618e29ba8f53104000000000000000000800000640c"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x69}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}}) (async) r10 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d00011000002f0904000003fe03010009cd8d1f00020000000905050200de"], 0x0) syz_usb_disconnect(r10) (async) syz_usb_control_io$uac1(r10, &(0x7f0000000400)={0xfffffffffffffdc3, &(0x7f0000000780)={0x0, 0x2b, 0x69, {0x69, 0x4, "e7a59f24b4522013bbdfaf496c4c728d1b00830e9721f40ed9ca006887b5d1108436364b2459e76bf4036b3f5ea08f5f28ec31317f19c88e9d78cb1dd873a6ecf6c50864c4e5168c25c81ef16c47f9b388fe8653df2949e23ba793d94d8b1aae4581828ce79e2b"}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000440)={0x39801a6f49df7e07, 0x16, 0x63, "ac4753cd68a71740cba4c5c5c6a874d08703c2ca3b6433fa2a4c4e93404533e74de17ca63f11c1cb58ac4039d38c3c2b4bb873d7cab56a0a28cb567b0583fe4e238b4ad0504da6c2c4abf74f5bb1dc7ab79225e7b45652ff33e3b417e36569ef429ffc"}, &(0x7f00000004c0)={0x0, 0xa, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000540)={0x20, 0x81, 0x3, "040000"}, &(0x7f0000000580)={0x20, 0x82, 0x1, "92"}, &(0x7f0000000600)={0x20, 0x83, 0x3, "7e9718"}, &(0x7f0000000640)={0x20, 0x84, 0x4, "bcb277df"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "0f6900"}}) 1.059980863s ago: executing program 5 (id=1831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x108}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x108}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) 734.053369ms ago: executing program 5 (id=1832): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000108000240000000000800044000000002080003400000000008000540000000af0900010073797a30000000000900020073797a3200000000140000001100010000000004000000000000000a83802872fe595ed37176cbf432a19b895ec7"], 0x98}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r3 = socket(0x1d, 0x2, 0x6) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000300)=0x8) sendmmsg$sock(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x0) sendmsg$can_j1939(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)="f4e78d4837b4c64b7bce30d85066e820619c9624346344714b2b454ea8f4eef1584fbfa34491c5c24c7b75198d6f0f7b69933483ee784106987e85d5f2a77f21d1c0cb9eb183e1a76d856e5ebd44bf761e52cefa49f6232ab391b4625ed815a87d9eed921d95eaf0cfb3eb3a921c34394f5fe05b9effc5", 0x77}, 0x1, 0x0, 0x0, 0x20048000}, 0x810) socket(0x400000000010, 0x3, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) poll(&(0x7f0000000200), 0x51, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x80ffffd, 0x0, 0x1, 0xa, 0x7f, 0x7}, 0x20) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000200)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @value=0x100}}) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x12, 0x60a, 0x1c0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@inet=@socket2={{0x28}, 0x2}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfffffffffffffecd) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x18, 0x13, @l2={'ib', 0x3a, 'bridge_slave_0\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x7, 0x0, &(0x7f0000000280)="61df718305a359", 0x0, 0xe697, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 471.230093ms ago: executing program 7 (id=1833): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000007c0)={0x14, 0x38, 0x1, 0x70bd2c, 0x25dfdbfc, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x24040080) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x10000) ioctl$VIDIOC_DECODER_CMD(r6, 0xc0485660, &(0x7f0000000200)={0x2, 0x1, @raw_data=[0x9, 0x3, 0x2, 0x0, 0x7d, 0x8, 0x0, 0x400, 0x2, 0x5, 0xdc, 0x8, 0x8, 0x2, 0x200000, 0x55fc211e]}) r7 = dup(r5) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$KVM_SET_SREGS2(r8, 0x4140aecd, &(0x7f0000000440)={{0xeeef0000, 0xdddd0000, 0xeeed4697ee73812, 0x8, 0xd, 0xb, 0x4, 0xf0, 0xdb, 0x5, 0x0, 0x1}, {0x80a0000, 0x2000, 0xb, 0x3, 0x3, 0xd, 0x3, 0x9, 0x5, 0x6, 0x9, 0x3}, {0xd000, 0xfbd5e0737987b8cc, 0x9, 0x6, 0x8, 0xa, 0x40, 0x5, 0x8, 0x5, 0xa, 0x1a}, {0x8000000, 0xffff1000, 0x3, 0xfd, 0x48, 0x0, 0x2, 0x7, 0x3, 0x9, 0xa, 0x8}, {0x6000, 0xeeee0000, 0xe, 0x0, 0x9, 0xf9, 0x9, 0x5, 0x9, 0xd8, 0x6, 0x6}, {0xddddf800, 0x8080000, 0x8, 0x3, 0x3, 0x3, 0xe, 0xd9, 0xd1, 0xca, 0x5, 0x2}, {0xd000, 0x80a0000, 0xc, 0x23, 0xff, 0x9, 0x2, 0x7, 0xb0, 0x3, 0x1, 0x4}, {0x3000, 0x1000, 0xa, 0x7, 0x2, 0x68, 0x81, 0x6, 0x73, 0x4d, 0x80, 0x5}, {0x1, 0x8}, {0x5000, 0x6}, 0x2, 0x0, 0x7000, 0x202023, 0x3, 0x8000, 0x100000, 0x1, [0x1, 0x8, 0x7, 0x7]}) r9 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) mount_setattr(r8, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000100)={0x100087, 0x0, 0x100000, {r9}}, 0x20) syz_kvm_setup_cpu$x86(r1, r8, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000080)="66b9ef02000066b8c8db9a3166ba58bef7720f303a2366b8010000000f01c10f40d3baf80c66b85494508b66efbafc0c66ed0f217c66b9800000c00f326635000400000f30dc6092ea0c008500c02080", 0x50}], 0x1, 0x0, 0x0, 0x0) time(&(0x7f0000000280)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040041}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 4 (id=1834): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000640)=ANY=[@ANYBLOB="180000002d00010026bdf0007cdbdf2504000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000003bbbbbbbbbbbb080045ffff3700000000000190780a010101ac1414bb030490781200183f2500000000680000000100007f000001ac14140e00016337febb18"], 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000005000000030000008400000000000000", @ANYRESHEX=r1, @ANYRES16=r1, @ANYRES8=r1, @ANYRES32, @ANYRESOCT=r0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000040), &(0x7f0000000400)="fd83ca21fde31fedfd69d1ae6c5133cc6f84f47e0a5ee55240a8c611793ee9fb3e1d80fab32286a7585df05debd107549b31318e3e1daeba00"/72, 0x7, r3}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r3}, 0x38) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x84) (async) fcntl$setstatus(r2, 0x4, 0x800) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) r7 = io_uring_setup(0x6613, &(0x7f0000000580)={0x0, 0x100, 0x10000, 0xfffffffd, 0x1fb}) r8 = io_uring_setup(0x7b38, &(0x7f0000000380)={0x0, 0x0, 0x1000, 0x1, 0x2ac}) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) (async, rerun: 32) io_uring_register$IORING_UNREGISTER_RING_FDS(r7, 0x15, &(0x7f0000000600)=[{0x4, 0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, {0x6, 0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000000480)=""/80, 0x50}, {&(0x7f0000000840)=""/93, 0x5d}, {&(0x7f0000000080)=""/15, 0xf}, {&(0x7f0000000a00)=""/204, 0x103}, {&(0x7f0000000680)=""/149, 0x95}], &(0x7f0000000140)}], 0x2) (async, rerun: 32) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) (async) setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) kernel console output (not intermixed with test programs): sb 7-1: USB disconnect, device number 9 [ 466.646133][ T7361] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 466.716754][ T7361] usb 5-1: Invalid ep0 maxpacket: 9 [ 466.743724][ T5872] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 466.778121][ T5872] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 466.800675][ T5872] usb 3-1: USB disconnect, device number 71 [ 466.855995][ T7361] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 466.877117][ T7361] usb 5-1: Invalid ep0 maxpacket: 9 [ 466.949592][ T848] savu 0003:1E7D:2D5A.0015: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 466.984716][ T7361] usb usb5-port1: unable to enumerate USB device [ 467.122970][ T848] usb 6-1: USB disconnect, device number 66 [ 467.228616][T11404] fido_id[11404]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 468.054970][T11427] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 468.062662][T11427] IPv6: NLM_F_CREATE should be set when creating new route [ 468.156002][ T5956] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 468.330827][ T5956] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.364199][T11434] binder: BINDER_SET_CONTEXT_MGR already set [ 468.373876][ T5956] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 468.389704][T11434] binder: 11433:11434 ioctl 4018620d 200000000040 returned -16 [ 468.403526][ T5956] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 468.424613][T11435] binder: 11433:11435 ioctl 80044df9 200000000040 returned -22 [ 468.430561][ T5956] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.452321][ T5956] usb 7-1: config 0 descriptor?? [ 468.499280][ T5956] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 468.510035][T11439] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1251'. [ 468.516458][ T5947] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 468.519654][ T5956] dvb-usb: bulk message failed: -22 (3/0) [ 468.553445][T11440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1252'. [ 468.591740][T11440] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 468.604468][ T5956] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 468.631057][ T5956] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 468.643757][ T5956] usb 7-1: media controller created [ 468.675126][ T5956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 468.697078][ T5947] usb 6-1: Using ep0 maxpacket: 8 [ 468.698730][T11409] dvb-usb: bulk message failed: -22 (2/0) [ 468.718847][ T5956] dvb-usb: bulk message failed: -22 (6/0) [ 468.742912][ T5947] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 468.747913][ T5956] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 468.766351][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.792865][ T5956] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input85 [ 468.830132][ T5947] pvrusb2: Hardware description: Terratec Grabster AV400 [ 468.856956][ T5947] pvrusb2: ********** [ 468.864844][ T5956] dvb-usb: schedule remote query interval to 150 msecs. [ 468.865279][ T5947] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 468.891607][ T5956] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 468.973500][ T5947] pvrusb2: Important functionality might not be entirely working. [ 468.985891][ T7361] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 468.992630][ T5947] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 469.010589][ T5947] pvrusb2: ********** [ 469.019997][ T2344] pvrusb2: Invalid write control endpoint [ 469.046674][ T5956] dvb-usb: bulk message failed: -22 (1/0) [ 469.064298][ T5956] dvb-usb: error while querying for an remote control event. [ 469.149010][ T7361] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.179358][ T7361] usb 2-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85 [ 469.189556][ T2344] pvrusb2: Invalid write control endpoint [ 469.205818][ T7361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.214048][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 469.226911][T11431] dvb-usb: bulk message failed: -22 (5/0) [ 469.253104][ T7361] usb 2-1: Product: syz [ 469.258759][ T5956] dvb-usb: bulk message failed: -22 (1/0) [ 469.264678][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 469.272959][ T7361] usb 2-1: Manufacturer: syz [ 469.283426][ T5956] dvb-usb: error while querying for an remote control event. [ 469.295786][ T7361] usb 2-1: SerialNumber: syz [ 469.301294][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 469.321409][ T5956] usb 7-1: USB disconnect, device number 10 [ 469.336503][ T7361] usb 2-1: config 0 descriptor?? [ 469.348622][ T2344] pvrusb2: Device being rendered inoperable [ 469.359552][ T7361] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 469.373081][ T2344] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 469.382910][ T2344] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 469.415882][ T7361] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 469.422285][ T7361] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 469.433897][ T2344] pvrusb2: Attached sub-driver cx25840 [ 469.448841][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 469.460743][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 469.576196][ T7361] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 469.593671][ T7361] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 469.682181][ T7361] usb 2-1: dvb_usb_v2: found a 'DVBSky T330' in warm state [ 469.724481][ T7361] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 469.740627][T11449] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 469.747186][T11449] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 469.747722][ T7361] usb 2-1: USB disconnect, device number 85 [ 469.772457][T11449] vhci_hcd vhci_hcd.0: Device attached [ 469.792730][T11462] vhci_hcd: connection closed [ 469.792999][ T4441] vhci_hcd: stop threads [ 469.815949][ T4441] vhci_hcd: release socket [ 469.820418][ T4441] vhci_hcd: disconnect device [ 470.436214][ T5947] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 470.676388][ T5947] usb 2-1: Using ep0 maxpacket: 16 [ 470.714605][ T5947] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 470.723936][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.732185][ T5947] usb 2-1: Product: syz [ 470.742459][ T5947] usb 2-1: Manufacturer: syz [ 470.758871][ T5947] usb 2-1: SerialNumber: syz [ 470.804560][ T5947] usb 2-1: config 0 descriptor?? [ 470.863005][ T5947] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 470.889959][ T5947] usb 2-1: Detected FT4233HP [ 471.067216][T11492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.077261][T11492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.106833][ T5947] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 471.146780][ T5947] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 471.176460][ T5947] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 471.205988][ T5955] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 471.237229][ T5947] usb 2-1: USB disconnect, device number 86 [ 471.286083][ T5947] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 471.345169][ T5947] ftdi_sio 2-1:0.0: device disconnected [ 471.399534][ T5955] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 471.438470][ T5955] usb 5-1: config 0 has no interface number 0 [ 471.464174][ T5955] usb 5-1: config 0 interface 31 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 471.539619][ T5955] usb 5-1: config 0 interface 31 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 471.569946][ T5955] usb 5-1: New USB device found, idVendor=2013, idProduct=0264, bcdDevice=cb.0c [ 471.610484][T11494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.638164][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.641431][T11494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.668022][ T5955] usb 5-1: config 0 descriptor?? [ 471.689586][T11488] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 472.312930][ T7359] usb 5-1: USB disconnect, device number 75 [ 472.386047][ T5947] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 472.515915][ T5947] usb 2-1: device descriptor read/64, error -71 [ 472.698553][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1269'. [ 472.758236][ T5947] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 472.905876][ T5947] usb 2-1: device descriptor read/64, error -71 [ 473.016451][ T5947] usb usb2-port1: attempt power cycle [ 473.295817][ T5955] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 473.376304][ T5947] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 473.406704][ T5947] usb 2-1: device descriptor read/8, error -71 [ 473.470508][ T5955] usb 5-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 473.480471][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.493564][ T5955] usb 5-1: config 0 descriptor?? [ 473.646192][ T5947] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 473.686535][ T5947] usb 2-1: device descriptor read/8, error -71 [ 473.808554][ T5947] usb usb2-port1: unable to enumerate USB device [ 474.063174][T11517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.072623][T11517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.158235][ T5947] usb 5-1: USB disconnect, device number 76 [ 474.893787][T11527] netlink: 'syz.6.1276': attribute type 1 has an invalid length. [ 474.947630][T11527] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 474.959901][T11527] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 475.000506][T11532] gretap1: entered promiscuous mode [ 475.054986][T11532] bond1: (slave gretap1): making interface the new active one [ 475.072944][T11532] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 475.105843][ T5955] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 475.153522][T11535] vcan0: tx drop: invalid da for name 0x0000000000000400 [ 475.306111][ T5955] usb 3-1: Using ep0 maxpacket: 16 [ 475.314239][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.345492][ T5955] usb 3-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 475.371883][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.389414][ T5955] usb 3-1: config 0 descriptor?? [ 475.389662][T11523] ptrace attach of "./syz-executor exec"[5883] was attempted by "./syz-executor exec"[11523] [ 475.829838][ T5955] semitek 0003:1EA7:0907.0017: item fetching failed at offset 0/2 [ 475.849434][ T5955] semitek 0003:1EA7:0907.0017: probe with driver semitek failed with error -22 [ 476.066490][ T7359] usb 3-1: USB disconnect, device number 72 [ 478.666431][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 478.666450][ T30] audit: type=1326 audit(1758710768.169:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.4.1291" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae46f8eec9 code=0x0 [ 478.980657][ T5872] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 479.758212][T11596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.782198][T11596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.826171][ T5872] usb 3-1: unable to get BOS descriptor or descriptor too short [ 479.843914][ T5872] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 479.852765][ T5872] usb 3-1: can't read configurations, error -71 [ 479.878272][T11616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.902379][T11616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.198954][T11625] input: syz1 as /devices/virtual/input/input86 [ 480.971678][T11651] netlink: 'syz.6.1301': attribute type 3 has an invalid length. [ 480.979782][T11651] netlink: 'syz.6.1301': attribute type 1 has an invalid length. [ 480.995614][T11651] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.1301'. [ 481.521482][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1302'. [ 481.566417][T11658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1302'. [ 481.585431][T11658] netlink: 'syz.4.1302': attribute type 7 has an invalid length. [ 481.708428][T11658] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1302'. [ 481.739642][T11658] team0: mtu less than device minimum [ 481.984683][T11671] ptrace attach of "./syz-executor exec"[10561] was attempted by "./syz-executor exec"[11671] [ 482.028136][ T7359] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 482.175823][ T5947] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 482.217290][ T7359] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 230 [ 482.237754][ T7359] usb 5-1: can't read configurations, error -22 [ 482.325830][ T5947] usb 3-1: Using ep0 maxpacket: 8 [ 482.338277][ T5947] usb 3-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 482.348333][ T5947] usb 3-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 482.374098][ T5947] usb 3-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 482.388475][ T5947] usb 3-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 482.391116][ T7359] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 482.402188][ T5947] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 482.423681][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.437662][ T5947] usb 3-1: Product: syz [ 482.441872][ T5947] usb 3-1: Manufacturer: syz [ 482.456825][ T5947] usb 3-1: SerialNumber: syz [ 482.483259][ T5947] hso 3-1:6.0: Can't find BULK OUT endpoint [ 482.630414][ T7359] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 230 [ 482.655121][ T7359] usb 5-1: can't read configurations, error -22 [ 482.673437][ T7359] usb usb5-port1: attempt power cycle [ 482.683403][ T5947] usb 3-1: USB disconnect, device number 75 [ 482.937269][T11685] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 483.017108][T11678] vivid-007: ================= START STATUS ================= [ 483.076069][ T7359] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 483.107172][T11678] vivid-007: Enable Output Cropping: true [ 483.123984][ T7359] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 230 [ 483.135364][ T7359] usb 5-1: can't read configurations, error -22 [ 483.157692][T11678] vivid-007: Enable Output Composing: true [ 483.262822][T11678] vivid-007: Enable Output Scaler: true [ 483.306320][T11678] vivid-007: Tx RGB Quantization Range: Automatic [ 483.312768][T11678] vivid-007: Transmit Mode: HDMI [ 483.326018][ T7359] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 483.336580][T11678] vivid-007: Hotplug Present: 0x00000000 [ 483.342240][T11678] vivid-007: RxSense Present: 0x00000000 [ 483.368250][ T7359] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 230 [ 483.415845][ T7359] usb 5-1: can't read configurations, error -22 [ 483.468239][ T7359] usb usb5-port1: unable to enumerate USB device [ 483.475181][T11678] vivid-007: EDID Present: 0x00000000 [ 483.503498][T11678] vivid-007: ================== END STATUS ================== [ 483.789538][T11710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.804561][T11710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.372226][T11726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.384785][T11726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.229770][T11739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.239857][T11739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.340333][T11739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.360894][T11744] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073290121217) [ 485.361884][T11739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.410748][T11746] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 485.487393][ T5872] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 485.650645][ T5872] usb 5-1: not running at top speed; connect to a high speed hub [ 485.662760][ T5872] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 485.675278][ T5872] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 485.822820][ T5872] usb 5-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.40 [ 485.857709][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.877540][ T5872] usb 5-1: Product: à°Œ [ 485.882299][ T5872] usb 5-1: Manufacturer: 倊 [ 485.887976][ T5872] usb 5-1: SerialNumber: 觥í¿é¹ [ 485.911261][T11738] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 486.138657][ T5872] usbhid 5-1:1.0: can't add hid device: -71 [ 486.145097][ T5872] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 486.278592][ T5872] usb 5-1: USB disconnect, device number 81 [ 486.706275][T11760] netlink: 'syz.6.1322': attribute type 1 has an invalid length. [ 486.930701][T11767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1323'. [ 487.205832][ T7359] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 487.329691][T11771] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 487.408888][T11771] netlink: 'syz.6.1324': attribute type 2 has an invalid length. [ 487.425247][T11771] : entered promiscuous mode [ 487.472654][ T7359] usb 5-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 487.484181][ T7359] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 487.535678][ T7359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 487.605585][ T7359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 487.626054][ T7359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 25304, setting to 64 [ 487.644053][ T7359] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 487.768092][ T7359] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 487.777432][ T7359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.785511][ T7359] usb 5-1: Product: syz [ 487.790581][ T7359] usb 5-1: Manufacturer: syz [ 487.795216][ T7359] usb 5-1: SerialNumber: syz [ 487.826216][ T7359] usb 5-1: config 0 descriptor?? [ 487.832325][T11767] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 487.840307][T11767] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 489.586064][T11792] RDS: rds_bind could not find a transport for ::4006:0:20:0, load rds_tcp or rds_rdma? [ 489.955622][T11801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.974333][T11801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.995417][T11803] dummy0: mtu less than device minimum [ 490.035883][ T7359] rc_core: IR keymap rc-snapstream-firefly not found [ 490.049705][ T7359] Registered IR keymap rc-empty [ 490.065250][ T7359] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 490.145378][ T7359] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input87 [ 490.221481][ T7359] input: syz syz mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input88 [ 490.264481][ T7359] usb 5-1: USB disconnect, device number 82 [ 490.264545][ C0] ati_remote 5-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 490.426965][ T49] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 490.459941][ T5872] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 490.472975][ T49] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 490.642297][ T30] audit: type=1326 audit(1758710780.159:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.5.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 490.732996][T11821] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1333'. [ 490.745911][ T30] audit: type=1326 audit(1758710780.179:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.5.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 490.774513][ T30] audit: type=1326 audit(1758710780.179:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.5.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 490.797559][ T30] audit: type=1326 audit(1758710780.179:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.5.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 490.882752][ T30] audit: type=1326 audit(1758710780.179:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.5.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 490.936187][ T30] audit: type=1326 audit(1758710780.179:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.5.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 490.936207][ T5947] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 490.959015][ T30] audit: type=1326 audit(1758710780.179:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.5.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 490.992565][ T30] audit: type=1326 audit(1758710780.179:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.5.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 491.044198][ T30] audit: type=1326 audit(1758710780.179:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.5.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 491.169573][ T30] audit: type=1326 audit(1758710780.179:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.5.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 491.386641][ T5872] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 492.510237][T11843] tipc: Enabled bearer , priority 0 [ 492.517486][T11842] tipc: Enabling of bearer rejected, already enabled [ 492.530355][T11843] syzkaller0: entered promiscuous mode [ 492.537308][T11843] syzkaller0: entered allmulticast mode [ 492.575201][T11843] tipc: Resetting bearer [ 492.634696][T11843] tipc: Disabling bearer [ 493.108464][T11850] dummy0: entered promiscuous mode [ 493.113720][T11850] macsec1: entered promiscuous mode [ 493.145650][T11850] macsec1: entered allmulticast mode [ 493.154216][T11850] dummy0: entered allmulticast mode [ 493.165103][T11850] dummy0: left allmulticast mode [ 493.171391][T11850] dummy0: left promiscuous mode [ 493.546074][ T7359] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 493.708805][ T7359] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.719434][ T7359] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 493.728650][ T7359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.739959][ T7359] usb 5-1: config 0 descriptor?? [ 493.751389][ T7359] pwc: Askey VC010 type 2 USB webcam detected. [ 493.995416][T11857] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1345'. [ 494.013799][T11858] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1345'. [ 494.154048][ T7359] pwc: recv_control_msg error -32 req 02 val 2b00 [ 494.181321][ T7359] pwc: recv_control_msg error -32 req 02 val 2700 [ 494.205667][ T7359] pwc: recv_control_msg error -32 req 02 val 2c00 [ 494.220009][ T7359] pwc: recv_control_msg error -32 req 04 val 1000 [ 494.238718][ T7359] pwc: recv_control_msg error -32 req 04 val 1300 [ 494.259921][ T7359] pwc: recv_control_msg error -32 req 04 val 1400 [ 494.276234][ T7359] pwc: recv_control_msg error -32 req 02 val 2000 [ 494.283912][ T7359] pwc: recv_control_msg error -32 req 02 val 2100 [ 494.302670][ T7359] pwc: recv_control_msg error -32 req 04 val 1500 [ 494.313746][ T7359] pwc: recv_control_msg error -32 req 02 val 2500 [ 494.425919][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 494.500589][ T7359] pwc: recv_control_msg error -32 req 02 val 2400 [ 494.526119][T11867] netlink: 'syz.6.1346': attribute type 1 has an invalid length. [ 494.545992][T11867] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1346'. [ 494.636869][T10559] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 494.644389][ T7359] pwc: recv_control_msg error -71 req 02 val 2600 [ 494.653622][T10559] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 494.662499][T10559] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 494.673789][T10559] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 494.682695][T10559] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 494.791947][ T7359] pwc: recv_control_msg error -71 req 02 val 2900 [ 494.821264][ T7359] pwc: recv_control_msg error -71 req 02 val 2800 [ 494.843108][ T7359] pwc: recv_control_msg error -71 req 04 val 1100 [ 494.893075][ T7359] pwc: recv_control_msg error -71 req 04 val 1200 [ 494.951654][ T7359] pwc: Registered as video103. [ 494.964562][T11874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.001841][ T7359] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input89 [ 495.016264][T11874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.043425][ T7359] usb 5-1: USB disconnect, device number 83 [ 496.751015][ T5864] Bluetooth: hci5: command tx timeout [ 497.177813][T11869] chnl_net:caif_netlink_parms(): no params data found [ 497.432940][T11907] input: syz0 as /devices/virtual/input/input90 [ 497.732080][T11869] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.746572][T11869] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.754993][T11869] bridge_slave_0: entered allmulticast mode [ 497.763486][T11869] bridge_slave_0: entered promiscuous mode [ 497.781749][T11869] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.789011][T11869] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.796631][T11869] bridge_slave_1: entered allmulticast mode [ 497.803686][T11869] bridge_slave_1: entered promiscuous mode [ 498.074259][T11869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.106847][T11869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.226735][ T5947] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 498.240467][T11918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.251806][T11918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.255543][T11869] team0: Port device team_slave_0 added [ 498.286565][T11869] team0: Port device team_slave_1 added [ 498.375813][ T5947] usb 5-1: device descriptor read/64, error -71 [ 498.399215][T11922] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.406762][T11922] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.512109][T11922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.528417][T11922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.616982][ T5947] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 498.641188][T11922] gretap1: left promiscuous mode [ 498.648554][T11869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.655512][T11869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.684068][T11869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.766780][ T5947] usb 5-1: device descriptor read/64, error -71 [ 498.781274][ T3541] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.811396][ T3541] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.825841][ T5864] Bluetooth: hci5: command tx timeout [ 498.888138][ T5947] usb usb5-port1: attempt power cycle [ 498.894500][T11869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.942196][T11869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.014412][T11869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.038157][T11930] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1358'. [ 499.041627][ T3541] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.077863][ T3541] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.296411][ T5947] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 499.404564][ T5947] usb 5-1: device descriptor read/8, error -71 [ 499.414700][T11936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.464310][T11936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.518552][T11869] hsr_slave_0: entered promiscuous mode [ 499.542335][T11869] hsr_slave_1: entered promiscuous mode [ 499.549679][T11936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.588016][T11936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.597398][T11869] debugfs: 'hsr0' already exists in 'hsr' [ 499.613474][T11869] Cannot create hsr debugfs directory [ 499.646066][ T5947] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 499.666963][ T5947] usb 5-1: device descriptor read/8, error -71 [ 499.896596][ T5947] usb usb5-port1: unable to enumerate USB device [ 499.991149][T10559] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 500.009533][T10559] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 500.022612][T10559] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 500.048037][T10559] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 500.061765][T10559] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 500.906450][T10559] Bluetooth: hci5: command tx timeout [ 501.327021][T11869] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 501.352567][T11869] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 501.372836][T11869] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 501.387918][T11942] chnl_net:caif_netlink_parms(): no params data found [ 501.412671][T11869] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 501.468486][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.476581][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.530978][T11942] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.538517][T11942] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.546266][T11942] bridge_slave_0: entered allmulticast mode [ 501.554179][T11942] bridge_slave_0: entered promiscuous mode [ 501.563360][T11942] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.570929][T11942] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.578252][T11942] bridge_slave_1: entered allmulticast mode [ 501.585523][T11942] bridge_slave_1: entered promiscuous mode [ 501.596107][ T7361] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 501.643456][T11942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.683737][T11942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.737740][T11966] netlink: 'syz.6.1363': attribute type 12 has an invalid length. [ 501.755270][T11942] team0: Port device team_slave_0 added [ 501.766135][ T7361] usb 5-1: Using ep0 maxpacket: 32 [ 501.775015][T11942] team0: Port device team_slave_1 added [ 501.785085][ T7361] usb 5-1: unable to get BOS descriptor or descriptor too short [ 501.809800][ T7361] usb 5-1: config 9 has an invalid interface number: 3 but max is 2 [ 501.818102][ T7361] usb 5-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 501.827695][ T7361] usb 5-1: config 9 has an invalid interface number: 150 but max is 2 [ 501.836181][ T7361] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 501.846675][ T7361] usb 5-1: config 9 has no interface number 1 [ 501.852816][ T7361] usb 5-1: config 9 has no interface number 2 [ 501.859547][ T7361] usb 5-1: config 9 interface 150 altsetting 253 has a duplicate endpoint with address 0xD, skipping [ 501.871780][ T7361] usb 5-1: config 9 interface 150 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 501.885509][ T7361] usb 5-1: config 9 interface 150 has no altsetting 0 [ 501.895436][ T7361] usb 5-1: New USB device found, idVendor=05c6, idProduct=9002, bcdDevice=b2.3d [ 501.905134][ T7361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.913705][ T7361] usb 5-1: Product: syz [ 501.918153][ T7361] usb 5-1: Manufacturer: syz [ 501.920384][T11942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.922947][ T7361] usb 5-1: SerialNumber: syz [ 501.937203][T11942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.964755][T11942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.991053][T11942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.001958][T11942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.035566][T11942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.106029][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 502.113286][T11942] hsr_slave_0: entered promiscuous mode [ 502.121393][T11942] hsr_slave_1: entered promiscuous mode [ 502.128734][T11942] debugfs: 'hsr0' already exists in 'hsr' [ 502.134621][T11942] Cannot create hsr debugfs directory [ 502.181044][ T7361] usb 5-1: USB disconnect, device number 88 [ 502.188049][T10559] Bluetooth: hci6: command tx timeout [ 502.342663][T11869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.409967][T11869] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.487920][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.495141][ T3541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.942831][ T7059] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.950009][ T7059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.986839][T10559] Bluetooth: hci5: command tx timeout [ 503.020460][T11977] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1366'. [ 503.030948][T11977] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1366'. [ 503.100431][T11942] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 503.117006][ T5987] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 503.153282][T11942] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 503.351981][ T5987] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.369005][T11942] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 503.443642][ T5987] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 503.486451][T11942] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 503.491708][ T5987] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 503.518378][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.693849][ T5987] usb 5-1: Product: syz [ 503.737109][ T5987] usb 5-1: Manufacturer: syz [ 503.755402][ T5987] usb 5-1: SerialNumber: syz [ 503.924131][T11869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.984888][T11942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.046796][T11942] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.074226][T11975] geneve2: entered promiscuous mode [ 504.093751][ T5987] usb 5-1: 0:2 : does not exist [ 504.094484][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.105859][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.133288][ T5987] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 504.163713][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.171035][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.183806][ T5987] usb 5-1: USB disconnect, device number 89 [ 504.266372][T10559] Bluetooth: hci6: command tx timeout [ 504.278376][T11869] veth0_vlan: entered promiscuous mode [ 504.323889][T11869] veth1_vlan: entered promiscuous mode [ 504.338028][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 504.511365][T11869] veth0_macvtap: entered promiscuous mode [ 504.526956][T11942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.549213][T11869] veth1_macvtap: entered promiscuous mode [ 504.618857][T11869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.690702][T11869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.761727][T11942] veth0_vlan: entered promiscuous mode [ 504.773021][ T7057] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.812154][ T7057] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.836280][ T7057] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.903273][ T7057] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.939410][T11942] veth1_vlan: entered promiscuous mode [ 505.204296][T11942] veth0_macvtap: entered promiscuous mode [ 505.268800][T11942] veth1_macvtap: entered promiscuous mode [ 505.333069][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.365853][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.411821][T11942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.528598][ T7059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.529166][T12014] netlink: 'syz.6.1375': attribute type 1 has an invalid length. [ 505.610858][T11942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.618408][ T7059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.679649][T12012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.692691][T12012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.741321][ T7359] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 505.751790][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1375'. [ 505.957746][ T7359] usb 5-1: Using ep0 maxpacket: 16 [ 505.999857][ T7359] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 506.017477][ T7359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 506.054425][ T7059] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.067782][ T7059] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.071206][ T7359] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 506.089345][ T7359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.101707][ T7359] usb 5-1: Product: syz [ 506.134425][ T7359] usb 5-1: Manufacturer: syz [ 506.162583][ T7059] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.178416][ T7359] usb 5-1: SerialNumber: syz [ 506.196000][ T7059] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.212052][ T7359] usb 5-1: config 0 descriptor?? [ 506.223010][T12023] program syz.7.1344 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 506.251327][ T7359] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 506.295869][ T7359] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 506.349812][T10559] Bluetooth: hci6: command tx timeout [ 506.442953][T11979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.512837][T11979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.619110][ T7055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.628387][ T7055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.663153][ T7359] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 506.675638][ T7359] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 506.716427][ T7359] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 506.724582][ T7359] em28xx 5-1:0.0: No AC97 audio processor [ 506.764807][ T7359] usb 5-1: USB disconnect, device number 90 [ 506.806010][ T7359] em28xx 5-1:0.0: Disconnecting em28xx [ 506.852809][ T7359] em28xx 5-1:0.0: Freeing device [ 507.505917][ T5947] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 507.661132][ T5947] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.679462][ T5947] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 507.698433][ T5947] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 507.712336][ T5947] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 507.721907][ T5947] usb 9-1: SerialNumber: syz [ 507.952347][ T5947] usb 9-1: 0:2 : does not exist [ 507.980753][ T5947] usb 9-1: USB disconnect, device number 2 [ 508.099361][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 508.427513][T10559] Bluetooth: hci6: command tx timeout [ 510.846207][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 510.846233][ T30] audit: type=1326 audit(1758710800.369:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae46f8eec9 code=0x7ffc0000 [ 510.909379][T12100] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1397'. [ 510.921745][ T30] audit: type=1326 audit(1758710800.379:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae46f8eec9 code=0x7ffc0000 [ 510.945344][T12100] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1397'. [ 511.036011][ T30] audit: type=1326 audit(1758710800.409:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fae46f8eec9 code=0x7ffc0000 [ 511.112532][T12107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1398'. [ 511.135824][ T30] audit: type=1326 audit(1758710800.409:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae46f8eec9 code=0x7ffc0000 [ 511.182183][T12107] hsr0: entered promiscuous mode [ 511.193600][ T30] audit: type=1326 audit(1758710800.409:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae46f8eec9 code=0x7ffc0000 [ 511.221139][T12107] macvlan0: entered allmulticast mode [ 511.230211][T12107] hsr0: entered allmulticast mode [ 511.246137][T12107] hsr_slave_0: entered allmulticast mode [ 511.251944][T12107] hsr_slave_1: entered allmulticast mode [ 511.262457][ T30] audit: type=1326 audit(1758710800.409:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae46f8eec9 code=0x7ffc0000 [ 511.386183][ T30] audit: type=1326 audit(1758710800.409:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fae46f8eec9 code=0x7ffc0000 [ 511.432568][T12112] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1400'. [ 511.435941][ T30] audit: type=1326 audit(1758710800.409:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae46f8eec9 code=0x7ffc0000 [ 511.463972][ C1] vkms_vblank_simulate: vblank timer overrun [ 511.505657][ T30] audit: type=1326 audit(1758710800.409:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae46f8eec9 code=0x7ffc0000 [ 511.532899][ T30] audit: type=1326 audit(1758710800.409:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae46f8eec9 code=0x7ffc0000 [ 512.106974][T12130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.205492][T12146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1409'. [ 513.428344][T12152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.476130][T12152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.714333][T12161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1413'. [ 513.976023][ T5872] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 514.148178][ T5872] usb 5-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 514.271924][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 514.383907][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 514.409833][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 514.441484][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 25304, setting to 64 [ 514.649504][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 514.701392][ T5872] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 514.716428][T12176] netlink: 'syz.8.1417': attribute type 29 has an invalid length. [ 514.727762][T12176] netlink: 'syz.8.1417': attribute type 29 has an invalid length. [ 514.752277][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.765066][T12180] netlink: 'syz.5.1419': attribute type 30 has an invalid length. [ 514.780829][ T5872] usb 5-1: Product: syz [ 514.783936][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1419'. [ 514.791584][ T5872] usb 5-1: Manufacturer: syz [ 514.815897][T12176] netlink: 596 bytes leftover after parsing attributes in process `syz.8.1417'. [ 514.827514][T12176] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1417'. [ 514.864378][T12176] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1417'. [ 514.896232][T12180] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 514.919738][T12181] dlm: no locking on control device [ 514.924269][ T5872] usb 5-1: SerialNumber: syz [ 514.953364][ T5872] usb 5-1: config 0 descriptor?? [ 514.971237][T12161] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 515.042148][T12161] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 515.330565][T12185] program syz.7.1420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 517.059654][T12216] __nla_validate_parse: 1 callbacks suppressed [ 517.059672][T12216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1427'. [ 517.243090][T12219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.262480][T12219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.348311][ T5872] rc_core: IR keymap rc-snapstream-firefly not found [ 517.355163][ T5872] Registered IR keymap rc-empty [ 517.362391][ T5872] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 517.400302][ T5872] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input91 [ 517.468483][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 517.470640][ T5872] input: syz syz mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input93 [ 517.642206][ T5872] usb 5-1: USB disconnect, device number 91 [ 517.648233][ C1] ati_remote 5-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 518.113795][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 518.113813][ T30] audit: type=1326 audit(1758710807.639:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.4.1430" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fae46f8eec9 code=0x0 [ 518.125934][ T7359] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 518.293848][T12233] input: syz1 as /devices/virtual/input/input94 [ 518.302615][ T7359] usb 9-1: Using ep0 maxpacket: 32 [ 518.312723][ T7359] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 518.326225][T12233] program syz.5.1431 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 518.341853][ T7359] usb 9-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 518.352129][ T7359] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.360456][ T7359] usb 9-1: Product: syz [ 518.364816][ T7359] usb 9-1: Manufacturer: syz [ 518.369677][ T7359] usb 9-1: SerialNumber: syz [ 518.388785][ T7359] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input95 [ 518.584222][ T5219] bcm5974 9-1:1.0: could not read from device [ 518.593575][ T5219] bcm5974 9-1:1.0: could not read from device [ 518.610351][ T5219] bcm5974 9-1:1.0: could not read from device [ 518.627903][ T5219] bcm5974 9-1:1.0: could not read from device [ 518.647937][ T7359] usb 9-1: USB disconnect, device number 3 [ 519.133095][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1436'. [ 519.209149][ T848] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 519.297088][ T848] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 519.377509][T12260] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1439'. [ 519.395621][T12260] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1439'. [ 519.407713][T12260] chnl_net:caif_netlink_parms(): no params data found [ 519.815824][ T5987] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 519.827132][T12252] vivid-001: disconnect [ 519.966256][T12270] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1441'. [ 519.983475][T12270] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 520.048914][T12251] vivid-001: reconnect [ 520.064859][ T5987] usb 9-1: config index 0 descriptor too short (expected 8192, got 77) [ 520.120013][ T5987] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.160446][ T5987] usb 9-1: config 0 has no interfaces? [ 520.179955][ T5987] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 520.326345][ T5987] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.367774][ T5987] usb 9-1: Product: syz [ 520.402846][ T5987] usb 9-1: Manufacturer: syz [ 520.436190][ T5987] usb 9-1: SerialNumber: syz [ 520.478867][ T5987] usb 9-1: config 0 descriptor?? [ 520.746274][ T5947] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 520.831971][T12260] : entered promiscuous mode [ 520.896126][ T5947] usb 5-1: device descriptor read/64, error -71 [ 521.145942][ T5947] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 521.200080][T12290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.210599][T12290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.232655][T12290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.251420][T12290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.286201][ T5947] usb 5-1: device descriptor read/64, error -71 [ 521.407034][ T5947] usb usb5-port1: attempt power cycle [ 521.756194][ T5947] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 521.786924][ T5947] usb 5-1: device descriptor read/8, error -71 [ 522.002288][ T30] audit: type=1326 audit(1758710811.529:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.5.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 522.024698][ C1] vkms_vblank_simulate: vblank timer overrun [ 522.044973][ T5947] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 522.106363][ T5947] usb 5-1: device descriptor read/8, error -71 [ 522.114902][ T30] audit: type=1326 audit(1758710811.529:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.5.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 522.154989][ T30] audit: type=1326 audit(1758710811.529:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.5.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 522.183388][ T30] audit: type=1326 audit(1758710811.529:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.5.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 522.213306][ T30] audit: type=1326 audit(1758710811.529:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.5.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 522.253835][ T30] audit: type=1326 audit(1758710811.529:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.5.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 522.276415][ T5947] usb usb5-port1: unable to enumerate USB device [ 522.422878][ T30] audit: type=1326 audit(1758710811.529:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.5.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 522.506620][ T30] audit: type=1326 audit(1758710811.529:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.5.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 522.529510][ C1] vkms_vblank_simulate: vblank timer overrun [ 522.543997][ T30] audit: type=1326 audit(1758710811.529:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.5.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 522.874608][ T5987] usb 9-1: USB disconnect, device number 4 [ 523.062620][T12303] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1451'. [ 523.080576][T12303] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1451'. [ 523.555816][ T5987] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 523.836119][ T5987] usb 9-1: Using ep0 maxpacket: 8 [ 523.955860][ T5947] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 524.069368][T12322] tipc: Started in network mode [ 524.074384][T12322] tipc: Node identity a26b635ebc6f, cluster identity 4711 [ 524.111667][T12322] tipc: Enabled bearer , priority 0 [ 524.156689][ T5947] usb 5-1: Using ep0 maxpacket: 8 [ 524.186424][ T5947] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 524.211757][ T5947] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 524.221761][T12321] syzkaller0: entered promiscuous mode [ 524.230140][ T5987] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 524.235878][ T5947] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 524.255890][T12321] syzkaller0: entered allmulticast mode [ 524.309474][ T5947] usb 5-1: Product: syz [ 524.320759][ T5987] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.329286][ T5947] usb 5-1: Manufacturer: syz [ 524.348902][ T5947] usb 5-1: SerialNumber: syz [ 524.395461][ T5987] usb 9-1: Product: syz [ 524.434796][ T5987] usb 9-1: Manufacturer: syz [ 524.461064][T12329] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 524.472633][ T5987] usb 9-1: SerialNumber: syz [ 524.548369][ T5987] usb 9-1: config 0 descriptor?? [ 524.582548][ T5947] usb 5-1: Handspring Visor / Palm OS: port 79, is for unknown use [ 524.592698][T12318] tipc: Resetting bearer [ 524.609170][ T5947] usb 5-1: Handspring Visor / Palm OS: port 0, is for Debugger use [ 524.726242][ T5947] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 524.785594][ T5947] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 524.794250][T12317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.820720][ T5947] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 524.830146][T12317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.866348][ T5987] usb 9-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 524.891984][T12318] tipc: Disabling bearer [ 524.937887][ T5947] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 525.056086][ T5947] usb 5-1: USB disconnect, device number 96 [ 525.072715][ T5947] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 525.126802][ T5947] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 525.145584][T12339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.158503][T12339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.162423][ T5947] visor 5-1:1.0: device disconnected [ 525.177500][T12339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.196982][T12339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.204036][T12359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.233518][T12359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.893055][ T5987] usb write operation failed. (-71) [ 527.901882][ T5987] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 527.978618][ T5987] dvbdev: DVB: registering new adapter (Terratec H7) [ 527.978751][ T5864] Bluetooth: hci5: command 0x0406 tx timeout [ 527.985453][ T5987] usb 9-1: media controller created [ 528.122668][ T5987] usb read operation failed. (-71) [ 528.273152][ T5987] usb write operation failed. (-71) [ 528.377495][ T5987] dvb_usb_az6007 9-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 528.413294][ T5987] usb 9-1: USB disconnect, device number 5 [ 530.296248][T12402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.336033][T12402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.416789][T12402] tipc: Enabled bearer , priority 0 [ 530.462415][T12402] syzkaller0: entered promiscuous mode [ 530.487663][T12402] syzkaller0: entered allmulticast mode [ 530.529461][T12410] netlink: 'syz.7.1479': attribute type 1 has an invalid length. [ 530.768276][T12410] 8021q: adding VLAN 0 to HW filter on device bond1 [ 530.835301][T12420] tipc: Resetting bearer [ 530.912126][T12423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1481'. [ 530.965211][T12423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 530.989870][T12425] bond1: (slave batadv2): Opening slave failed [ 531.497839][T12437] syzkaller1: entered promiscuous mode [ 531.503447][T12437] syzkaller1: entered allmulticast mode [ 531.916022][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 531.916042][ T30] audit: type=1326 audit(1758710821.429:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.8.1485" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2a198eec9 code=0x400000 [ 533.303432][T12402] tipc: Resetting bearer [ 533.376333][T12402] tipc: Disabling bearer [ 533.788705][T12459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.797698][T12459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.962999][T12475] vti0: entered promiscuous mode [ 535.997819][T12475] vti0: entered allmulticast mode [ 539.711270][T12513] netlink: 'syz.4.1501': attribute type 3 has an invalid length. [ 539.719533][T12513] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1501'. [ 540.409139][T12524] vivid-001: disconnect [ 540.702143][T12522] vivid-001: reconnect [ 541.669485][T12542] @ÿ: renamed from bond_slave_0 (while UP) [ 541.825933][ T5872] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 541.989785][ T5872] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.005866][ T5872] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.052798][ T5872] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 542.088232][ T5872] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 542.196434][ T5872] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 542.205553][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.254466][ T5872] usb 5-1: Product: syz [ 542.259095][ T5872] usb 5-1: Manufacturer: syz [ 542.263713][ T5872] usb 5-1: SerialNumber: syz [ 542.380708][ T5872] cdc_mbim 5-1:1.0: skipping garbage [ 542.565233][T12540] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 542.792698][ T5872] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS [ 542.800337][ T5872] cdc_mbim 5-1:1.0: bind() failure [ 542.820707][T12555] input: syz1 as /devices/virtual/input/input97 [ 542.833457][ T5872] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 542.849482][ T5872] cdc_ncm 5-1:1.1: bind() failure [ 542.886171][ T5872] usb 5-1: USB disconnect, device number 97 [ 542.943458][T12555] netlink: 'syz.8.1514': attribute type 1 has an invalid length. [ 543.110571][T12558] gretap1: entered allmulticast mode [ 543.236571][T12558] bond1: (slave gretap1): making interface the new active one [ 543.246261][T12558] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 543.328428][ T30] audit: type=1326 audit(1758710832.859:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12563 comm="syz.7.1516" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ee298eec9 code=0x0 [ 545.032297][T12605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.041167][T12605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.517221][T12634] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1531'. [ 547.715917][ T30] audit: type=1326 audit(1758710837.209:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 547.895010][T12643] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1537'. [ 547.952674][T12643] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1537'. [ 547.972040][ T30] audit: type=1326 audit(1758710837.209:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 548.101746][ T30] audit: type=1326 audit(1758710837.209:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 548.247261][ T30] audit: type=1326 audit(1758710837.209:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 548.288344][ T30] audit: type=1326 audit(1758710837.209:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 548.342415][T12649] fuse: Bad value for 'fd' [ 548.375388][ T30] audit: type=1326 audit(1758710837.209:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 548.465246][ T30] audit: type=1326 audit(1758710837.209:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 548.523274][T12658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.559811][ T30] audit: type=1326 audit(1758710837.209:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 548.583405][T12658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.600904][T12658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.610142][ T30] audit: type=1326 audit(1758710837.209:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 548.663642][T12658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.682090][ T30] audit: type=1326 audit(1758710837.209:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 548.753879][ T30] audit: type=1326 audit(1758710837.209:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 548.786320][ T30] audit: type=1326 audit(1758710837.209:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 548.829843][ T30] audit: type=1326 audit(1758710837.209:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f468672af79 code=0x7ffc0000 [ 548.852507][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 549.073712][T12672] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20003 [ 549.130949][ T30] audit: type=1326 audit(1758710837.209:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 549.240606][ T30] audit: type=1326 audit(1758710837.209:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468678eec9 code=0x7ffc0000 [ 549.310141][T12679] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1549'. [ 549.348202][T12683] netlink: 212388 bytes leftover after parsing attributes in process `syz.5.1549'. [ 549.396382][ T5872] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 549.418743][T12683] openvswitch: netlink: Message has 5 unknown bytes. [ 549.550188][ T5864] Bluetooth: hci6: command 0x0405 tx timeout [ 550.015953][ T5872] usb 9-1: device descriptor read/64, error -71 [ 550.396019][ T5872] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 550.535920][ T5872] usb 9-1: device descriptor read/64, error -71 [ 550.606112][T12698] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1551'. [ 550.759912][ T5872] usb usb9-port1: attempt power cycle [ 551.105830][ T5872] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 551.126595][ T5872] usb 9-1: device descriptor read/8, error -71 [ 551.255854][ T5955] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 551.366102][ T5872] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 551.396892][ T5872] usb 9-1: device descriptor read/8, error -71 [ 551.408331][T12714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.420419][T12714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.441800][ T5955] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.453056][ T5955] usb 5-1: config 0 interface 0 has no altsetting 0 [ 551.464665][ T5955] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 551.474008][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.482098][ T5955] usb 5-1: Product: syz [ 551.486522][ T5955] usb 5-1: Manufacturer: syz [ 551.491142][ T5955] usb 5-1: SerialNumber: syz [ 551.498890][ T5955] usb 5-1: config 0 descriptor?? [ 551.508765][ T5955] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 551.519968][ T5872] usb usb9-port1: unable to enumerate USB device [ 551.522694][ T5955] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 551.536853][ T5955] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 551.545515][ T5955] usb 5-1: media controller created [ 551.571109][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 551.613001][ T5955] DVB: Unable to find symbol tda10046_attach() [ 551.619561][ T5955] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 551.628519][ T5955] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 552.410983][ T5955] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 552.422866][ T5955] usb 5-1: USB disconnect, device number 98 [ 552.986324][ T5872] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 553.182884][ T5872] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.255349][ T5872] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 553.403910][ T5872] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 553.475181][ T5872] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 553.586618][ T5872] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 553.627732][T12735] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 553.635140][ T5872] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 553.723668][T12735] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 553.751557][ T5872] usb 9-1: Manufacturer: syz [ 553.853272][ T5872] usb 9-1: config 0 descriptor?? [ 554.274665][T12744] netlink: 'syz.5.1564': attribute type 15 has an invalid length. [ 554.489109][ T5872] rc_core: IR keymap rc-hauppauge not found [ 554.496740][ T5872] Registered IR keymap rc-empty [ 554.531941][ T5872] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 554.586722][ T5872] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 554.608122][ T5872] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 554.632518][ T5872] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input98 [ 554.795903][ T7359] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 554.808010][ T5872] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 554.856726][ T5872] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 554.888071][ T5872] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 554.950112][ T5872] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 554.977682][ T5872] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 555.011566][ T7359] usb 5-1: config 0 has no interfaces? [ 555.040785][ T5872] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 555.064852][T12758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.090278][T12758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.098691][ T5872] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 555.126960][ T5872] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 555.136239][ T7359] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 555.183952][ T7359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.190664][ T5872] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 555.249121][ T5872] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 555.297189][ T7359] usb 5-1: Product: syz [ 555.322754][ T7359] usb 5-1: Manufacturer: syz [ 555.332131][ T7359] usb 5-1: SerialNumber: syz [ 555.383574][ T7359] usb 5-1: config 0 descriptor?? [ 555.403915][ T5872] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 555.761646][ T5872] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 556.003493][ T5872] usb 9-1: USB disconnect, device number 10 [ 556.033620][T12771] tipc: Enabled bearer , priority 0 [ 556.041024][T12771] syzkaller0: entered promiscuous mode [ 556.046792][T12771] syzkaller0: entered allmulticast mode [ 556.064709][T12771] tipc: Resetting bearer [ 556.084143][T12771] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1572'. [ 556.322367][T12775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 556.412180][T12779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.415652][T12779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.422255][T12779] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1573'. [ 556.439381][T12777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.440982][T12777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.564277][T12782] input: syz1 as /devices/virtual/input/input99 [ 556.578686][T12775] vim2m vim2m.0: vidioc_s_fmt queue busy [ 556.974999][T12774] tipc: Resetting bearer [ 557.125197][T12774] tipc: Disabling bearer [ 558.210337][ T7359] usb 5-1: USB disconnect, device number 99 [ 559.145458][T12807] netlink: 'syz.8.1580': attribute type 5 has an invalid length. [ 559.156944][T12807] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.1580'. [ 559.488037][T12811] openvswitch: netlink: Key type 303 is out of range max 32 [ 559.545601][T12817] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 559.643794][ T30] audit: type=1326 audit(1758710849.159:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.8.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a198eec9 code=0x7ffc0000 [ 559.720013][ T30] audit: type=1326 audit(1758710849.169:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.8.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a198eec9 code=0x7ffc0000 [ 559.762447][T12823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.764701][ T30] audit: type=1326 audit(1758710849.169:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.8.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc2a198eec9 code=0x7ffc0000 [ 559.793738][ T30] audit: type=1326 audit(1758710849.169:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.8.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a198eec9 code=0x7ffc0000 [ 559.817070][T12823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.830124][T12823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 559.909554][ T30] audit: type=1326 audit(1758710849.229:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.8.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc2a198eec9 code=0x7ffc0000 [ 559.934471][ T30] audit: type=1326 audit(1758710849.229:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.8.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a198eec9 code=0x7ffc0000 [ 559.935960][ T5947] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 559.958589][ T30] audit: type=1326 audit(1758710849.249:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.8.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a198eec9 code=0x7ffc0000 [ 559.990502][ T30] audit: type=1326 audit(1758710849.249:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.8.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc2a198eec9 code=0x7ffc0000 [ 560.019619][ T30] audit: type=1326 audit(1758710849.249:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.8.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a198eec9 code=0x7ffc0000 [ 560.046371][ T30] audit: type=1326 audit(1758710849.249:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.8.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc2a198eec9 code=0x7ffc0000 [ 560.145872][ T5947] usb 5-1: device descriptor read/64, error -71 [ 560.385842][ T5947] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 560.443855][T12825] binder: BINDER_SET_CONTEXT_MGR already set [ 560.451268][T12825] binder: 12824:12825 ioctl 4018620d 2000000000c0 returned -16 [ 560.477576][T12825] binder: BINDER_SET_CONTEXT_MGR already set [ 560.502022][T12825] binder: 12824:12825 ioctl 4018620d 2000000002c0 returned -16 [ 560.515829][T12825] binder: 12824:12825 ioctl c0306201 200000000240 returned -11 [ 560.536052][ T5947] usb 5-1: device descriptor read/64, error -71 [ 560.592490][T12830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.607054][T12830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.652987][ T5947] usb usb5-port1: attempt power cycle [ 561.015944][ T5947] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 561.045890][ T5872] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 561.074718][ T5947] usb 5-1: device descriptor read/8, error -71 [ 561.186692][ T5872] usb 9-1: device descriptor read/64, error -71 [ 561.326375][ T5947] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 561.359537][ T5947] usb 5-1: device descriptor read/8, error -71 [ 561.425869][ T5872] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 561.476680][ T5947] usb usb5-port1: unable to enumerate USB device [ 561.556132][ T5872] usb 9-1: device descriptor read/64, error -71 [ 561.667323][ T5872] usb usb9-port1: attempt power cycle [ 562.016014][ T5872] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 562.036803][ T5872] usb 9-1: device descriptor read/8, error -71 [ 562.276132][ T5872] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 562.298054][ T5872] usb 9-1: device descriptor read/8, error -71 [ 562.410848][ T5872] usb usb9-port1: unable to enumerate USB device [ 562.908140][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.914592][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.096120][ T5872] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 563.256160][ T5872] usb 5-1: Using ep0 maxpacket: 16 [ 563.264335][ T5872] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 563.275141][ T5872] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 563.288110][ T5872] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 563.297692][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.305686][ T5872] usb 5-1: Product: syz [ 563.312790][ T5872] usb 5-1: Manufacturer: syz [ 563.317734][ T5872] usb 5-1: SerialNumber: syz [ 563.573797][T12859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.601453][T12859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.797293][T12862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.826649][T12862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.897661][ T5947] hid-generic 0000:0004:0007.0019: unknown main item tag 0x0 [ 563.906389][ T5947] hid-generic 0000:0004:0007.0019: unknown main item tag 0x0 [ 563.914028][ T5947] hid-generic 0000:0004:0007.0019: unknown main item tag 0x0 [ 563.928963][ T5947] hid-generic 0000:0004:0007.0019: hidraw0: HID v0.00 Device [syz0] on syz0 [ 564.145212][ T5872] usb 5-1: 0:2 : does not exist [ 564.168229][ T5872] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 564.263635][ T5872] usb 5-1: USB disconnect, device number 104 [ 564.407579][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.485206][T12870] netlink: 'syz.7.1600': attribute type 1 has an invalid length. [ 564.578757][T12875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.590444][T12875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.600660][T12876] loop2: detected capacity change from 0 to 7 [ 564.686600][T12876] loop2: [ 564.689610][T12876] loop2: partition table partially beyond EOD, truncated [ 565.058065][T12874] gretap1: entered promiscuous mode [ 565.075444][T12874] bond2: (slave gretap1): making interface the new active one [ 565.135638][T12874] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 565.189506][T12875] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 565.224564][T12882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.243852][T12882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.312802][T12875] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 565.476440][T12886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1604'. [ 565.502654][T12886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1604'. [ 565.999665][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1606'. [ 566.203709][T12892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.215515][T12892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.092040][T12864] delete_channel: no stack [ 567.786340][T12024] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 567.955867][T12024] usb 9-1: Using ep0 maxpacket: 16 [ 567.977585][T12024] usb 9-1: config index 0 descriptor too short (expected 16456, got 72) [ 568.005873][T12024] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 568.041285][T12024] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 568.081721][T12024] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 568.115927][T12024] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 568.151017][T12024] usb 9-1: config 0 has no interface number 0 [ 568.161443][T12024] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 568.172831][T12024] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 568.186280][T12024] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 568.197083][T12024] usb 9-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 568.211021][T12024] usb 9-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30 [ 568.222661][T12024] usb 9-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 568.260736][T12024] usb 9-1: config 0 interface 125 has no altsetting 0 [ 568.314121][T12024] usb 9-1: config 0 interface 125 has no altsetting 2 [ 568.363798][T12024] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 568.395748][T12024] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.424632][T12024] usb 9-1: Product: syz [ 568.429947][T12024] usb 9-1: Manufacturer: syz [ 568.439705][T12024] usb 9-1: SerialNumber: syz [ 568.464321][T12024] usb 9-1: config 0 descriptor?? [ 568.484591][T12024] usb 9-1: selecting invalid altsetting 2 [ 568.683948][ C0] usb 9-1: async_complete: urb error -71 [ 568.689741][ C0] usb 9-1: async_complete: urb error -71 [ 568.695462][ C0] usb 9-1: async_complete: urb error -71 [ 568.701155][ C0] usb 9-1: async_complete: urb error -71 [ 568.712340][T12024] get_1284_register: usb error -71 [ 568.717589][T12024] uss720 9-1:0.125: probe with driver uss720 failed with error -71 [ 568.735695][T12024] usb 9-1: USB disconnect, device number 15 [ 570.307868][T12936] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1618'. [ 571.015455][T12959] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1623'. [ 571.179056][T12967] netlink: 'syz.5.1622': attribute type 1 has an invalid length. [ 571.365858][ T5955] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 571.400052][T12967] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1622'. [ 571.507843][T12969] netlink: 140 bytes leftover after parsing attributes in process `syz.6.1624'. [ 571.947570][ T5955] usb 9-1: config 252 has an invalid interface descriptor of length 8, skipping [ 571.990486][ T5955] usb 9-1: config 252 descriptor has 1 excess byte, ignoring [ 572.072199][ T5955] usb 9-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 572.192981][ T5955] usb 9-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 572.555763][ T5955] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.579709][ T5955] usb 9-1: Product: syz [ 572.597486][ T5955] usb 9-1: Manufacturer: syz [ 572.652031][ T5955] usb 9-1: SerialNumber: syz [ 572.659786][ T5955] usb 9-1: rejected 1 configuration due to insufficient available bus power [ 572.733455][ T5955] usb 9-1: no configuration chosen from 1 choice [ 572.815967][T12987] tipc: Enabled bearer , priority 0 [ 572.823297][T12987] syzkaller0: entered promiscuous mode [ 572.832364][T12987] syzkaller0: entered allmulticast mode [ 572.847612][T12987] tipc: Resetting bearer [ 572.896024][T12986] tipc: Resetting bearer [ 572.937417][T12986] tipc: Disabling bearer [ 573.364193][T12998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.373434][T12998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.919926][ T5932] usb 9-1: USB disconnect, device number 16 [ 574.037624][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1634'. [ 574.046829][ T5940] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 574.197875][ T5940] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.211010][ T5940] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 574.271254][ T5940] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 574.350213][ T5940] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 574.366344][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.390514][ T5940] usb 5-1: Product: syz [ 574.417263][ T5940] usb 5-1: Manufacturer: syz [ 574.428692][ T5940] usb 5-1: SerialNumber: syz [ 574.467244][ T5940] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 574.474043][ T5940] cdc_ncm 5-1:1.0: bind() failure [ 575.063629][ T5987] usb 5-1: USB disconnect, device number 106 [ 575.866172][ T5987] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 576.074122][ T5987] usb 9-1: config 0 has an invalid interface number: 255 but max is 0 [ 576.207457][ T5987] usb 9-1: config 0 has no interface number 0 [ 576.373525][ T5987] usb 9-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 576.435669][ T5987] usb 9-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 576.510416][ T5987] usb 9-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 576.519804][ T5987] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.528314][ T5987] usb 9-1: Product: syz [ 576.535978][ T5987] usb 9-1: Manufacturer: syz [ 576.540598][ T5987] usb 9-1: SerialNumber: syz [ 576.611457][ T5987] usb 9-1: config 0 descriptor?? [ 576.668064][ T5987] vmk80xx 9-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 576.697841][ T5987] vmk80xx 9-1:0.255: probe with driver vmk80xx failed with error -22 [ 576.721780][T13068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.797662][T13068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.275856][ T5955] usb 5-1: new low-speed USB device number 107 using dummy_hcd [ 577.384641][T13078] input: syz0 as /devices/virtual/input/input100 [ 577.426162][ T5955] usb 5-1: device descriptor read/64, error -71 [ 577.622467][T13083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.638626][T13083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.686988][ T5955] usb 5-1: new low-speed USB device number 108 using dummy_hcd [ 577.856039][ T5955] usb 5-1: device descriptor read/64, error -71 [ 577.977326][ T5955] usb usb5-port1: attempt power cycle [ 578.325353][T13086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.337544][T13086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.341916][ T5955] usb 5-1: new low-speed USB device number 109 using dummy_hcd [ 578.386923][ T5955] usb 5-1: device descriptor read/8, error -71 [ 578.656143][ T5955] usb 5-1: new low-speed USB device number 110 using dummy_hcd [ 578.676586][ T5955] usb 5-1: device descriptor read/8, error -71 [ 578.778110][ T7359] usb 9-1: USB disconnect, device number 17 [ 578.789082][ T5955] usb usb5-port1: unable to enumerate USB device [ 579.185377][T13101] bridge0: port 3(macsec0) entered blocking state [ 579.193597][T13101] bridge0: port 3(macsec0) entered disabled state [ 579.208209][T13101] macsec0: entered allmulticast mode [ 579.213665][T13101] veth1_macvtap: entered allmulticast mode [ 579.252051][T13101] macsec0: entered promiscuous mode [ 579.271855][T13101] bridge0: port 3(macsec0) entered blocking state [ 579.278626][T13101] bridge0: port 3(macsec0) entered forwarding state [ 580.977445][T13121] netlink: 'syz.4.1666': attribute type 4 has an invalid length. [ 581.417916][T13128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.432144][T13123] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 581.456198][T13128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.076387][ T5947] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 582.228234][ T5947] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 582.269815][ T5947] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 582.345513][ T5947] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 582.425798][ T5947] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 582.476854][ T5947] usb 9-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 582.514660][ T5947] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.569778][ T5947] usb 9-1: Product: syz [ 582.612259][ T5947] usb 9-1: Manufacturer: syz [ 582.670764][ T5947] usb 9-1: SerialNumber: syz [ 582.733828][ T5947] usb 9-1: config 0 descriptor?? [ 582.745788][ T5947] kvaser_usb 9-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 582.948914][T13157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.958611][T13157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.970828][ T5940] usb 9-1: USB disconnect, device number 18 [ 583.080271][ T7359] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 583.263065][ T7359] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.266101][T13163] kernel read not supported for file /¡sxt (pid: 13163 comm: syz.5.1677) [ 583.289098][ T7359] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 16 [ 583.302627][ T7359] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 583.328003][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 583.328020][ T30] audit: type=1800 audit(1758710872.829:583): pid=13163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1677" name=A17378741A dev="mqueue" ino=55385 res=0 errno=0 [ 583.354992][ T7359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.376334][ T7359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.393486][ T7359] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 583.415797][ T7359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 583.440322][ T7359] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 583.462497][ T7359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.488185][ T7359] usb 5-1: Product: syz [ 583.492390][ T7359] usb 5-1: Manufacturer: syz [ 583.506511][ T7359] usb 5-1: SerialNumber: syz [ 583.542533][T13171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.557201][ T7359] usb 5-1: config 0 descriptor?? [ 583.587346][T13171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.786727][ T7359] usb 5-1: ucan: probing device on interface #0 [ 583.808281][ T7359] usb 5-1: ucan: invalid endpoint configuration [ 583.814714][ T7359] usb 5-1: ucan: probe failed; try to update the device firmware [ 583.860539][ T7359] usb 5-1: USB disconnect, device number 111 [ 583.873842][ T6027] udevd[6027]: setting mode of /dev/bus/usb/005/111 to 020664 failed: No such file or directory [ 583.918576][ T6027] udevd[6027]: setting owner of /dev/bus/usb/005/111 to uid=0, gid=0 failed: No such file or directory [ 584.756220][T13184] binder: BINDER_SET_CONTEXT_MGR already set [ 584.772162][T13184] binder: 13183:13184 ioctl 4018620d 2000000000c0 returned -16 [ 584.848409][T13184] binder: BINDER_SET_CONTEXT_MGR already set [ 584.854488][T13184] binder: 13183:13184 ioctl 4018620d 200000000040 returned -16 [ 584.900554][T13184] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 584.908650][T13184] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 584.933529][T13184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.978595][T13184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.896094][ T5932] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 587.075517][ T5932] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 587.086643][ T5932] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 587.097142][ T5932] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 587.110426][ T5932] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 587.125902][ T5932] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.134050][ T5932] usb 9-1: Product: syz [ 587.139621][ T5932] usb 9-1: Manufacturer: syz [ 587.144351][ T5932] usb 9-1: SerialNumber: syz [ 587.164901][ T5932] usb 9-1: config 0 descriptor?? [ 587.402499][ T5932] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 587.616281][ T5932] usb 9-1: USB disconnect, device number 19 [ 587.750433][T13225] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1693'. [ 588.681369][T13233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.463055][T13245] binder: BINDER_SET_CONTEXT_MGR already set [ 589.477302][T13245] binder: 13239:13245 ioctl 4018620d 2000000000c0 returned -16 [ 589.503051][T13245] binder_alloc: binder_alloc_mmap_handler: 13239 200000ffd000-200001000000 already mapped failed -16 [ 589.523931][T13244] binder_alloc: 13239: binder_alloc_buf, no vma [ 589.553526][T13244] binder: 13239:13244 ioctl c0306201 2000000005c0 returned -14 [ 589.570598][T13246] binder: 13239:13246 ioctl ae01 21 returned -22 [ 590.077142][ T5932] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 590.125888][ T30] audit: type=1800 audit(1758710879.639:584): pid=13264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1703" name="bus" dev="ramfs" ino=54729 res=0 errno=0 [ 590.248530][ T5932] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 590.279299][ T5932] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 590.330160][ T5932] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 590.392039][ T5932] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 590.454552][ T5932] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 590.485604][ T5932] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.512541][ T5932] usb 9-1: config 0 descriptor?? [ 591.183243][T13276] netlink: 408 bytes leftover after parsing attributes in process `syz.5.1706'. [ 591.299311][T13277] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1706'. [ 592.115851][ T7359] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 592.215069][ T5932] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 592.317789][ T7359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.341790][ T7359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.385869][ T7359] usb 5-1: New USB device found, idVendor=258a, idProduct=6a80, bcdDevice= 0.00 [ 592.422946][ T7359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.466875][ T7359] usb 5-1: config 0 descriptor?? [ 592.681082][T13298] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1712'. [ 592.696101][T13298] input: syz0 as /devices/virtual/input/input102 [ 592.724970][ T7359] hid-generic 0003:258A:6A80.001B: hidraw1: USB HID v0.00 Device [HID 258a:6a80] on usb-dummy_hcd.4-1/input0 [ 592.909033][ T7359] usb 5-1: USB disconnect, device number 112 [ 593.035601][ T5987] usb 9-1: USB disconnect, device number 20 [ 594.161149][T13331] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 594.326287][ T5932] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 594.506002][ T5932] usb 5-1: Using ep0 maxpacket: 32 [ 594.543309][ T5932] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 594.564228][ T5932] usb 5-1: config 0 has no interface number 0 [ 594.579201][ T5932] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 594.591660][ T5932] usb 5-1: config 0 interface 85 has no altsetting 0 [ 594.601909][ T5932] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 594.623456][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.632392][ T5932] usb 5-1: Product: syz [ 594.637167][ T5940] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 594.644940][ T5932] usb 5-1: Manufacturer: syz [ 594.650263][ T5932] usb 5-1: SerialNumber: syz [ 594.667093][ T5932] usb 5-1: config 0 descriptor?? [ 594.799990][ T5940] usb 9-1: config 3 has an invalid interface number: 168 but max is 0 [ 594.813997][ T5940] usb 9-1: config 3 has no interface number 0 [ 594.822671][ T5940] usb 9-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 594.845871][ T5940] usb 9-1: config 3 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 1024 [ 594.864869][ T5940] usb 9-1: config 3 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 594.888397][ T5940] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 594.903726][ T5940] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.921693][T13334] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 595.152499][T13346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.156176][ T5940] usb 9-1: string descriptor 0 read error: -71 [ 595.169877][ T5940] keyspan 9-1:3.168: Keyspan 2 port adapter converter detected [ 595.173346][T13346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.182836][ T5940] keyspan 9-1:3.168: found no endpoint descriptor for endpoint 1 [ 595.200924][ T5940] keyspan 9-1:3.168: found no endpoint descriptor for endpoint 84 [ 595.210059][ T5940] keyspan 9-1:3.168: found no endpoint descriptor for endpoint 2 [ 595.220312][ T5940] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 595.237876][ T5940] keyspan 9-1:3.168: found no endpoint descriptor for endpoint 88 [ 595.246499][ T5940] keyspan 9-1:3.168: found no endpoint descriptor for endpoint 6 [ 595.255550][ T5940] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 595.277054][ T5940] usb 9-1: USB disconnect, device number 21 [ 595.286299][ T5932] appletouch 5-1:0.85: Geyser mode initialized. [ 595.302338][ T5932] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input103 [ 595.313506][ T5940] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 595.326743][ T5940] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 595.363472][ T5940] keyspan 9-1:3.168: device disconnected [ 595.490332][ T7359] usb 5-1: USB disconnect, device number 113 [ 595.518168][ T7359] appletouch 5-1:0.85: input: appletouch disconnected [ 596.049114][ T5940] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 596.187555][ T5940] usb 9-1: device descriptor read/64, error -71 [ 596.436220][ T5940] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 596.672981][ T5940] usb 9-1: device descriptor read/64, error -71 [ 596.727053][T13376] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1737'. [ 596.730862][ T5932] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 596.804563][ T5940] usb usb9-port1: attempt power cycle [ 596.933729][ T5932] usb 5-1: config 0 has no interfaces? [ 596.960931][ T5932] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 596.976191][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.984311][ T5932] usb 5-1: Product: syz [ 596.989222][ T5932] usb 5-1: Manufacturer: syz [ 596.993831][ T5932] usb 5-1: SerialNumber: syz [ 597.033036][ T5932] usb 5-1: config 0 descriptor?? [ 597.110388][T13382] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1738'. [ 597.137145][T13382] chnl_net:caif_netlink_parms(): no params data found [ 597.155970][ T5940] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 597.211772][ T5940] usb 9-1: device descriptor read/8, error -71 [ 597.566013][ T5940] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 597.586938][ T5940] usb 9-1: device descriptor read/8, error -71 [ 597.697132][ T5940] usb usb9-port1: unable to enumerate USB device [ 598.080890][T13387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.091672][T13387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.105445][T13387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.113147][T13387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.173768][T13387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.181709][T13387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.167764][ T5955] usb 5-1: USB disconnect, device number 114 [ 601.069065][T13419] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 602.450460][ T5955] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 602.450460][ T5872] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 602.592032][ T5955] usb 9-1: device descriptor read/64, error -71 [ 602.636837][ T5872] usb 5-1: Using ep0 maxpacket: 32 [ 602.732300][ T5872] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 602.802530][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.846082][ T5955] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 602.987733][ T5955] usb 9-1: device descriptor read/64, error -71 [ 602.988678][ T5872] usb 5-1: config 0 descriptor?? [ 603.096453][ T5955] usb usb9-port1: attempt power cycle [ 603.244888][T13454] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1756'. [ 603.298403][ T5872] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 603.340991][T13454] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 603.387492][ T5872] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 603.460758][ T5955] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 603.471023][T13452] program syz.5.1756 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 603.496599][ T5955] usb 9-1: device descriptor read/8, error -71 [ 603.547082][ T5872] dib0700: firmware download failed at 7 with -22 [ 604.435331][ T5955] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 604.528909][ T5955] usb 9-1: device descriptor read/8, error -71 [ 604.636256][ T5955] usb usb9-port1: unable to enumerate USB device [ 605.705959][ T5955] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 605.875952][ T5955] usb 9-1: Using ep0 maxpacket: 32 [ 605.893611][ T5955] usb 9-1: config 0 has an invalid interface number: 133 but max is 0 [ 605.931892][ T5955] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.968725][ T5955] usb 9-1: config 0 has no interface number 0 [ 606.211043][ T5955] usb 9-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 606.255880][ T5955] usb 9-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 606.329550][ T5955] usb 9-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 606.365846][ T5955] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.373878][ T5955] usb 9-1: Product: syz [ 606.415831][ T5955] usb 9-1: Manufacturer: syz [ 606.427552][ T5955] usb 9-1: SerialNumber: syz [ 606.481404][ T5955] usb 9-1: config 0 descriptor?? [ 606.506645][T13465] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 606.718521][T13465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.727997][T13465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.779900][T12024] usb 5-1: USB disconnect, device number 115 [ 606.788058][ T5955] usb 9-1: probing VID:PID(0424:012C) [ 606.830145][ T5955] usb 9-1: vub300 testing BULK OUT EndPoint(0) 0B [ 606.850387][ T5955] usb 9-1: Could not find two sets of bulk-in/out endpoint pairs [ 606.886490][T13483] tipc: New replicast peer: 0.0.0.0 [ 606.893580][T13483] tipc: Enabled bearer , priority 10 [ 606.935973][ T5955] vub300 9-1:0.133: probe with driver vub300 failed with error -22 [ 607.000627][ T5955] usb 9-1: USB disconnect, device number 30 [ 607.904358][T13506] program syz.8.1769 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 609.020950][T13515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.051969][T13515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.403798][ T5947] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 609.593856][ T5947] usb 5-1: Using ep0 maxpacket: 32 [ 609.654265][ T5947] usb 5-1: config 0 has an invalid interface number: 68 but max is 0 [ 609.705522][ T5947] usb 5-1: config 0 has no interface number 0 [ 609.743072][ T5947] usb 5-1: config 0 interface 68 altsetting 128 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 609.787056][ T5947] usb 5-1: config 0 interface 68 altsetting 128 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 609.822108][ T5947] usb 5-1: config 0 interface 68 altsetting 128 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 609.837238][ T5947] usb 5-1: config 0 interface 68 has no altsetting 0 [ 609.849169][ T5947] usb 5-1: New USB device found, idVendor=0711, idProduct=0901, bcdDevice=a8.06 [ 609.862291][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.878391][ T5947] usb 5-1: Product: syz [ 609.882768][ T5947] usb 5-1: Manufacturer: syz [ 609.887787][ T5947] usb 5-1: SerialNumber: syz [ 609.899700][ T5947] usb 5-1: config 0 descriptor?? [ 610.181412][T13518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.269530][T13518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.415266][ T5947] sisusb 5-1:0.68: Invalid USB2VGA device [ 610.425253][ T5947] sisusb 5-1:0.68: probe with driver sisusb failed with error -22 [ 610.466077][ T5947] usb 5-1: USB disconnect, device number 116 [ 612.442970][T13570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.452498][T13570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.627265][ T5932] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 612.781797][ T5932] usb 5-1: device descriptor read/64, error -71 [ 613.025991][ T5932] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 613.226077][ T5932] usb 5-1: device descriptor read/64, error -71 [ 613.321206][T13578] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1789'. [ 613.337424][ T5932] usb usb5-port1: attempt power cycle [ 613.570678][T13581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.586529][T13581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.685829][ T5932] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 613.717033][ T5932] usb 5-1: device descriptor read/8, error -71 [ 613.938325][T13584] sctp: [Deprecated]: syz.6.1791 (pid 13584) Use of int in max_burst socket option. [ 613.938325][T13584] Use struct sctp_assoc_value instead [ 613.958222][ T5932] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 613.986589][ T5932] usb 5-1: device descriptor read/8, error -71 [ 614.078984][T13586] netlink: 'syz.6.1792': attribute type 11 has an invalid length. [ 614.087416][T13586] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1792'. [ 614.100259][ T5932] usb usb5-port1: unable to enumerate USB device [ 614.116103][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 614.130666][T13586] netlink: 'syz.6.1792': attribute type 11 has an invalid length. [ 614.139035][T13586] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1792'. [ 614.155061][T13586] netlink: 'syz.6.1792': attribute type 11 has an invalid length. [ 614.164856][T13586] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1792'. [ 614.472065][T13595] program syz.5.1795 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 614.522030][T13588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.547314][T13588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.386267][ T5940] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 615.568421][ T5940] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.579104][ T5940] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 615.865089][ T5940] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.901061][T12024] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 615.917113][ T5940] usb 9-1: config 0 descriptor?? [ 615.941078][ T5940] pwc: Askey VC010 type 2 USB webcam detected. [ 616.133318][T12024] usb 5-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config [ 616.151460][T12024] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 79, using maximum allowed: 30 [ 616.232729][T12024] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 79 [ 616.274838][T12024] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 616.303478][T12024] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.318171][T12024] usb 5-1: Product: syz [ 616.328470][T12024] usb 5-1: Manufacturer: syz [ 616.330149][ T5940] pwc: recv_control_msg error -32 req 02 val 2b00 [ 616.351350][T12024] usb 5-1: SerialNumber: syz [ 616.373364][T12024] usb 5-1: config 0 descriptor?? [ 616.560297][T13605] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1798'. [ 616.617615][T12024] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 616.648586][T12024] usb 5-1: USB disconnect, device number 121 [ 617.096567][T13624] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1802'. [ 617.397095][T13633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.485969][ T5947] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 617.686767][ T5947] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 617.700434][ T5947] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 617.762858][ T5947] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 617.782601][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 617.807988][ T5947] usb 5-1: SerialNumber: syz [ 618.044900][ T5947] usb 5-1: 0:2 : does not exist [ 618.129571][ T5947] usb 5-1: USB disconnect, device number 122 [ 618.172833][ T5940] pwc: recv_control_msg error -71 req 02 val 2c00 [ 618.228451][ T5940] pwc: recv_control_msg error -71 req 04 val 1000 [ 618.272345][ T5940] pwc: recv_control_msg error -71 req 04 val 1300 [ 618.312482][T13640] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1808'. [ 618.323528][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 618.346176][ T5940] pwc: recv_control_msg error -71 req 04 val 1400 [ 618.367489][ T5940] pwc: recv_control_msg error -71 req 02 val 2000 [ 618.386403][ T5940] pwc: recv_control_msg error -71 req 02 val 2100 [ 618.404333][ T5940] pwc: recv_control_msg error -71 req 04 val 1500 [ 618.514348][T13641] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 618.520911][T13641] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 618.536354][ T5940] pwc: recv_control_msg error -71 req 02 val 2500 [ 618.564116][ T5940] pwc: recv_control_msg error -71 req 02 val 2400 [ 618.582080][ T5940] pwc: recv_control_msg error -71 req 02 val 2600 [ 618.630775][ T5940] pwc: recv_control_msg error -71 req 02 val 2900 [ 618.637929][T13641] vhci_hcd vhci_hcd.0: Device attached [ 618.684916][T13647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.707262][ T5940] pwc: recv_control_msg error -71 req 02 val 2800 [ 618.716469][T13644] vhci_hcd: connection closed [ 618.716601][ T5940] pwc: recv_control_msg error -71 req 04 val 1100 [ 618.736443][T13647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.746359][ T7055] vhci_hcd: stop threads [ 618.761365][ T5940] pwc: recv_control_msg error -71 req 04 val 1200 [ 618.770776][ T7055] vhci_hcd: release socket [ 618.806034][ T7055] vhci_hcd: disconnect device [ 618.817054][ T5872] vhci_hcd: vhci_device speed not set [ 618.825556][ T5940] pwc: Registered as video103. [ 618.832088][T13649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1810'. [ 618.842882][ T5940] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input106 [ 618.852992][T13647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1809'. [ 618.882084][T13649] tipc: Enabled bearer , priority 3 [ 618.906228][T13647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.917360][T13647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.934262][ T5940] usb 9-1: USB disconnect, device number 31 [ 619.136096][ T5955] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 619.298267][ T5955] usb 5-1: config 0 has an invalid interface number: 65 but max is 3 [ 619.306690][ T5955] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.317469][ T5955] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 619.326953][ T5955] usb 5-1: config 0 has no interface number 0 [ 619.335133][ T5955] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=91.34 [ 619.344459][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.352593][ T5955] usb 5-1: Product: syz [ 619.356935][ T5955] usb 5-1: Manufacturer: syz [ 619.361560][ T5955] usb 5-1: SerialNumber: syz [ 619.368788][ T5955] usb 5-1: config 0 descriptor?? [ 619.515398][T13656] fuse: Bad value for 'fd' [ 619.544081][T13656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1813'. [ 619.581438][ T5955] flexcop_usb: set interface failed. [ 619.590278][ T5955] b2c2_flexcop_usb 5-1:0.65: probe with driver b2c2_flexcop_usb failed with error -22 [ 619.608127][ T5955] usb 5-1: USB disconnect, device number 123 [ 619.647648][T12024] usb 9-1: new full-speed USB device number 32 using dummy_hcd [ 619.836216][T13662] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1815'. [ 619.847349][T12024] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 619.880282][T12024] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 619.890536][T13662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1815'. [ 619.900226][T13662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1815'. [ 619.910687][T12024] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 619.919960][T12024] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 619.928590][T13662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1815'. [ 619.937597][T12024] usb 9-1: SerialNumber: syz [ 619.947781][T12024] usb 9-1: 0:2 : does not exist [ 619.955992][T12024] usb 9-1: unit 255 not found! [ 619.970948][T13662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1815'. [ 619.994262][T13662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1815'. [ 620.010525][T13662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1815'. [ 620.338375][ T5932] usb 9-1: USB disconnect, device number 32 [ 620.939433][T13674] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 621.015108][T13675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 621.491912][ T5940] usb 9-1: new full-speed USB device number 33 using dummy_hcd [ 621.636424][ T5940] usb 9-1: device descriptor read/64, error -71 [ 621.746544][ T5932] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 621.876094][ T5940] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 621.966080][ T5932] usb 5-1: Using ep0 maxpacket: 16 [ 622.005931][ T5940] usb 9-1: device descriptor read/64, error -71 [ 622.145561][ T5940] usb usb9-port1: attempt power cycle [ 622.550671][ T5940] usb 9-1: new full-speed USB device number 35 using dummy_hcd [ 622.689566][ T5940] usb 9-1: device descriptor read/8, error -71 [ 623.096114][ T5940] usb 9-1: new full-speed USB device number 36 using dummy_hcd [ 623.116710][ T5940] usb 9-1: device descriptor read/8, error -71 [ 623.226941][ T5940] usb usb9-port1: unable to enumerate USB device [ 624.356069][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.362451][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.739626][ T5932] usb 5-1: unable to get BOS descriptor or descriptor too short [ 624.833727][ T5932] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 624.895439][ T5932] usb 5-1: can't read configurations, error -71 [ 624.965866][T12024] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 625.133721][T12024] usb 9-1: config 0 has no interfaces? [ 625.162242][T12024] usb 9-1: New USB device found, idVendor=203e, idProduct=8888, bcdDevice=a8.71 [ 625.204107][T12024] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.239657][T12024] usb 9-1: Product: syz [ 625.254314][T12024] usb 9-1: Manufacturer: syz [ 625.261330][T12024] usb 9-1: SerialNumber: syz [ 625.280135][T12024] usb 9-1: config 0 descriptor?? [ 625.333312][ T5932] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 625.493931][T13722] __nla_validate_parse: 36 callbacks suppressed [ 625.493944][T13722] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1829'. [ 625.516146][ T5932] usb 5-1: Using ep0 maxpacket: 16 [ 625.562413][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.585253][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.624328][ T5932] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 625.665320][ T5932] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 625.722278][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.759597][ T5932] usb 5-1: config 0 descriptor?? [ 625.978357][T13725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.987357][T13725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.078606][T13744] vivid-000: disconnect [ 626.114115][ T5932] usbhid 5-1:0.0: can't add hid device: -71 [ 626.133281][T12024] usb 9-1: USB disconnect, device number 37 [ 626.169843][ T5932] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 626.212712][ T5932] usb 5-1: USB disconnect, device number 125 [ 626.267056][ T31] INFO: task kworker/0:4:5956 blocked for more than 143 seconds. [ 626.276399][ T31] Not tainted syzkaller #0 [ 626.281367][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 626.422801][ T31] task:kworker/0:4 state:D stack:21480 pid:5956 tgid:5956 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 626.436929][ T5864] Bluetooth: hci6: command 0x0405 tx timeout [ 626.437169][ T31] Workqueue: usb_hub_wq hub_event [ 626.448494][ T31] Call Trace: [ 626.451830][ T31] [ 626.455168][ T31] __schedule+0x1798/0x4cc0 [ 626.461083][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 626.469895][ T31] ? __pfx___schedule+0x10/0x10 [ 626.475353][ T31] ? schedule+0x91/0x360 [ 626.484457][ T31] schedule+0x165/0x360 [ 626.491760][ T31] schedule_timeout+0x9a/0x270 [ 626.497678][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 626.503782][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 626.512253][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 626.518864][ T31] ? wait_for_completion+0x267/0x5d0 [ 626.524295][ T31] wait_for_completion+0x2bf/0x5d0 [ 626.532668][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 626.544204][ T31] i2c_del_adapter+0x581/0x6e0 [ 626.552715][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 626.559095][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 626.565383][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 626.573815][ T31] dvb_usb_device_exit+0x1be/0x350 [ 626.579866][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 626.585499][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 626.598147][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 626.604207][ T31] ? usb_disable_interface+0x31d/0x350 [ 626.612705][ T31] usb_unbind_interface+0x26b/0x910 [ 626.659682][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 626.665935][ T31] device_release_driver_internal+0x4d6/0x800 [ 626.672146][ T31] bus_remove_device+0x34d/0x410 [ 626.677255][ T31] device_del+0x511/0x8e0 [ 626.681644][ T31] ? __pm_runtime_barrier+0x212/0x460 [ 626.687157][ T31] ? __pfx_device_del+0x10/0x10 [ 626.692154][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 626.697935][ T31] usb_disable_device+0x3e9/0x8a0 [ 626.709403][ T31] usb_disconnect+0x330/0x950 [ 626.714228][ T31] hub_event+0x1cf5/0x4a20 [ 626.719070][ T31] ? do_raw_spin_lock+0x121/0x290 [ 626.724223][ T31] ? register_lock_class+0x51/0x320 [ 626.729685][ T31] ? __pfx_hub_event+0x10/0x10 [ 626.734570][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 626.740776][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 626.749592][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 626.776927][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 626.786314][ T31] process_scheduled_works+0xae1/0x17b0 [ 626.792728][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 626.801110][ T31] worker_thread+0x8a0/0xda0 [ 626.807408][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 626.813907][ T31] ? __kthread_parkme+0x7b/0x200 [ 626.819695][ T31] kthread+0x70e/0x8a0 [ 626.823805][ T31] ? __pfx_worker_thread+0x10/0x10 [ 626.832446][ T31] ? __pfx_kthread+0x10/0x10 [ 626.843903][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 626.856162][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 626.862779][ T31] ? __pfx_kthread+0x10/0x10 [ 626.871770][ T31] ret_from_fork+0x439/0x7d0 [ 626.877298][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 626.886031][ T31] ? __switch_to_asm+0x39/0x70 [ 626.891009][ T31] ? __switch_to_asm+0x33/0x70 [ 626.896944][ T31] ? __pfx_kthread+0x10/0x10 [ 626.904626][ T31] ret_from_fork_asm+0x1a/0x30 [ 626.912350][ T31] [ 626.917739][ T31] INFO: task syz.1.1293:11607 blocked for more than 144 seconds. [ 626.932483][ T31] Not tainted syzkaller #0 [ 626.937988][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 626.949153][ T31] task:syz.1.1293 state:D stack:27944 pid:11607 tgid:11600 ppid:5880 task_flags:0x400140 flags:0x00004004 [ 626.966367][ T31] Call Trace: [ 626.970597][ T31] [ 626.974890][ T31] __schedule+0x1798/0x4cc0 [ 626.980023][ T31] ? __pfx___schedule+0x10/0x10 [ 626.985030][ T31] ? schedule+0x91/0x360 [ 626.989918][ T31] schedule+0x165/0x360 [ 626.994388][ T31] schedule_preempt_disabled+0x13/0x30 [ 627.000962][ T31] __mutex_lock+0x7e6/0x1350 [ 627.005927][ T31] ? __mutex_lock+0x5bb/0x1350 [ 627.010720][ T31] ? usbdev_open+0x16e/0x760 [ 627.015410][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 627.020843][ T31] ? bus_find_device+0x273/0x2b0 [ 627.026028][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 627.031446][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 627.036693][ T31] ? usbdev_open+0xa7/0x760 [ 627.041613][ T31] usbdev_open+0x16e/0x760 [ 627.046423][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 627.051741][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 627.058338][ T31] chrdev_open+0x4c9/0x5e0 [ 627.065013][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 627.073764][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 627.080509][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 627.086070][ T31] do_dentry_open+0x950/0x13f0 [ 627.091095][ T31] vfs_open+0x3b/0x340 [ 627.095177][ T31] ? path_openat+0x2ecd/0x3830 [ 627.100535][ T31] path_openat+0x2ee5/0x3830 [ 627.105261][ T31] ? arch_stack_walk+0xfc/0x150 [ 627.110582][ T31] ? stack_depot_save_flags+0x40/0x860 [ 627.116628][ T31] ? __pfx_path_openat+0x10/0x10 [ 627.121590][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.128233][ T31] do_filp_open+0x1fa/0x410 [ 627.132752][ T31] ? __lock_acquire+0xab9/0xd20 [ 627.138128][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 627.143331][ T31] ? _raw_spin_unlock+0x28/0x50 [ 627.149101][ T31] ? alloc_fd+0x64c/0x6c0 [ 627.153465][ T31] do_sys_openat2+0x121/0x1c0 [ 627.158308][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 627.163635][ T31] ? exc_page_fault+0x76/0xf0 [ 627.170117][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 627.175469][ T31] __x64_sys_openat+0x138/0x170 [ 627.181311][ T31] do_syscall_64+0xfa/0x3b0 [ 627.185920][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 627.191136][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.197270][ T31] ? clear_bhb_loop+0x60/0xb0 [ 627.201960][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.207928][ T31] RIP: 0033:0x7f9f9298d710 [ 627.212348][ T31] RSP: 002b:00007f9f937e6b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 627.220840][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f9f9298d710 [ 627.228896][ T31] RDX: 0000000000000002 RSI: 00007f9f937e6c10 RDI: 00000000ffffff9c [ 627.237015][ T31] RBP: 00007f9f937e6c10 R08: 0000000000000000 R09: 0000000000000000 [ 627.245002][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 627.253047][ T31] R13: 00007f9f92be6218 R14: 00007f9f92be6180 R15: 00007f9f92d0fa28 [ 627.261085][ T31] [ 627.264165][ T31] [ 627.264165][ T31] Showing all locks held in the system: [ 627.304662][ T31] 5 locks held by kworker/u8:1/13: [ 627.310267][ T31] 1 lock held by ksoftirqd/1/23: [ 627.315218][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 627.325634][ T31] 1 lock held by khungtaskd/31: [ 627.330590][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 627.340551][ T31] 2 locks held by udevd/5234: [ 627.345241][ T31] 2 locks held by getty/5624: [ 627.350008][ T31] #0: ffff88814d0de0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 627.359877][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 627.370119][ T31] 5 locks held by kworker/0:4/5956: [ 627.375332][ T31] #0: ffff888021ae9d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 627.392955][ T31] #1: ffffc9000468fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 627.405032][ T31] #2: ffff8881447f7198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 627.414082][ T31] #3: ffff88807ae13198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 627.423358][ T31] #4: ffff88801e2c6160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 627.434051][ T31] 2 locks held by kworker/u8:10/7055: [ 627.439477][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 627.449501][ T31] #1: ffffc90003f4fbc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 627.462738][ T31] 3 locks held by kworker/0:7/7359: [ 627.468066][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 627.479113][ T31] #1: ffffc9000440fbc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 627.490457][ T31] #2: ffffffff8e13fa40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 627.500473][ T31] 1 lock held by syz.1.1293/11607: [ 627.505589][ T31] #0: ffff8881447f7198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 627.514643][ T31] 1 lock held by syz.2.1310/11706: [ 627.519822][ T31] #0: ffff8881447f7198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 627.528917][ T31] 1 lock held by syz.6.1826/13705: [ 627.534037][ T31] #0: ffff8881447f7198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 627.543054][ T31] 3 locks held by syz.4.1834/13746: [ 627.548415][ T31] #0: ffff88807f695608 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 627.558724][ T31] #1: ffffffff8f59dcf0 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 627.570136][ T31] #2: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 627.580084][ T31] [ 627.582511][ T31] ============================================= [ 627.582511][ T31] [ 627.591982][ T31] NMI backtrace for cpu 0 [ 627.592007][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 627.592026][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 627.592037][ T31] Call Trace: [ 627.592045][ T31] [ 627.592052][ T31] dump_stack_lvl+0x189/0x250 [ 627.592076][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.592093][ T31] ? __pfx__printk+0x10/0x10 [ 627.592125][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 627.592149][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 627.592171][ T31] ? __pfx__printk+0x10/0x10 [ 627.592194][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 627.592219][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 627.592242][ T31] watchdog+0xf93/0xfe0 [ 627.592267][ T31] ? watchdog+0x1de/0xfe0 [ 627.592289][ T31] kthread+0x70e/0x8a0 [ 627.592310][ T31] ? __pfx_watchdog+0x10/0x10 [ 627.592328][ T31] ? __pfx_kthread+0x10/0x10 [ 627.592346][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 627.592364][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 627.592379][ T31] ? __pfx_kthread+0x10/0x10 [ 627.592400][ T31] ret_from_fork+0x439/0x7d0 [ 627.592419][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 627.592440][ T31] ? __switch_to_asm+0x39/0x70 [ 627.592458][ T31] ? __switch_to_asm+0x33/0x70 [ 627.592477][ T31] ? __pfx_kthread+0x10/0x10 [ 627.592495][ T31] ret_from_fork_asm+0x1a/0x30 [ 627.592530][ T31] [ 627.592538][ T31] Sending NMI from CPU 0 to CPUs 1: [ 627.741823][ C1] NMI backtrace for cpu 1 [ 627.741847][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 627.741865][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 627.741875][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 627.741896][ C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 d9 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 627.741910][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 627.741925][ C1] RAX: f418060d8fa00800 RBX: ffffffff819683f8 RCX: f418060d8fa00800 [ 627.741937][ C1] RDX: 0000000000000001 RSI: ffffffff8d9ba32d RDI: ffffffff8be33f80 [ 627.741949][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 627.741961][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa3a830 [ 627.741973][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40 [ 627.741984][ C1] FS: 0000000000000000(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 627.741997][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 627.742009][ C1] CR2: 00005555593f05c8 CR3: 000000007fa9a000 CR4: 00000000003526f0 [ 627.742024][ C1] DR0: fffffffffffffff1 DR1: 0000000000000000 DR2: 0000000000000000 [ 627.742035][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 627.742045][ C1] Call Trace: [ 627.742053][ C1] [ 627.742060][ C1] default_idle+0x13/0x20 [ 627.742077][ C1] default_idle_call+0x74/0xb0 [ 627.742096][ C1] do_idle+0x1e8/0x510 [ 627.742114][ C1] ? __pfx_do_idle+0x10/0x10 [ 627.742137][ C1] cpu_startup_entry+0x44/0x60 [ 627.742152][ C1] start_secondary+0x101/0x110 [ 627.742172][ C1] common_startup_64+0x13e/0x147 [ 627.742198][ C1] [ 627.743262][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 627.925518][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 627.934619][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 627.944666][ T31] Call Trace: [ 627.947940][ T31] [ 627.950867][ T31] dump_stack_lvl+0x99/0x250 [ 627.955455][ T31] ? __asan_memcpy+0x40/0x70 [ 627.960036][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.965235][ T31] ? __pfx__printk+0x10/0x10 [ 627.969913][ T31] vpanic+0x281/0x750 [ 627.973892][ T31] ? __pfx_vpanic+0x10/0x10 [ 627.978386][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 627.983924][ T31] ? preempt_schedule+0xae/0xc0 [ 627.988762][ T31] ? preempt_schedule_common+0x83/0xd0 [ 627.994211][ T31] panic+0xb9/0xc0 [ 627.997922][ T31] ? __pfx_panic+0x10/0x10 [ 628.002335][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 628.007707][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 628.013858][ T31] watchdog+0xfd2/0xfe0 [ 628.018010][ T31] ? watchdog+0x1de/0xfe0 [ 628.022335][ T31] kthread+0x70e/0x8a0 [ 628.026400][ T31] ? __pfx_watchdog+0x10/0x10 [ 628.031064][ T31] ? __pfx_kthread+0x10/0x10 [ 628.035644][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 628.040833][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 628.046017][ T31] ? __pfx_kthread+0x10/0x10 [ 628.050607][ T31] ret_from_fork+0x439/0x7d0 [ 628.055191][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 628.060293][ T31] ? __switch_to_asm+0x39/0x70 [ 628.065057][ T31] ? __switch_to_asm+0x33/0x70 [ 628.069812][ T31] ? __pfx_kthread+0x10/0x10 [ 628.074394][ T31] ret_from_fork_asm+0x1a/0x30 [ 628.079157][ T31] [ 628.082427][ T31] Kernel Offset: disabled [ 628.086749][ T31] Rebooting in 86400 seconds..