last executing test programs: 2m3.640680751s ago: executing program 0 (id=3339): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x2a}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m3.450320694s ago: executing program 0 (id=3342): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x2a}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (fail_nth: 2) 2m3.018407785s ago: executing program 0 (id=3344): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0x5}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$tipc(0x1e, 0x2, 0x0) (async) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0x5}}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) (async) bind$tipc(r0, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) 2m2.934523474s ago: executing program 0 (id=3345): syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) (rerun: 64) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) pivot_root(&(0x7f0000000280)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f00000000c0)='./file0\x00') syz_open_dev$video4linux(&(0x7f0000000080), 0x100000011, 0x6a943) (async) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x6) (async, rerun: 64) landlock_restrict_self(r2, 0x2) (async, rerun: 64) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) close(0x3) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000840)={0x28, 0x2, r5, 0x0, &(0x7f0000007000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r5, 0x0, &(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x2}) (async) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000040)={0x28, 0x7, r5, r5, 0x1000, 0x0, 0x3ffe}) (async, rerun: 64) syz_open_dev$ptys(0xc, 0x3, 0x1) (async, rerun: 64) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) ioctl$VT_ACTIVATE(r3, 0x5606, 0x1) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x20, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) 2m2.784572195s ago: executing program 0 (id=3346): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) (async) r1 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x7, 0x80000000, 0x104, 0x0, 0xe}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000380)={0x4, 0x3ff, 0x101, 0x0, 0xe}) (async) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)={0x14, 0x2e, 0x9, 0xfffffffe, 0x25dfdbfe, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x2400c080}, 0x0) (async) splice(r0, &(0x7f0000000040)=0x10, r3, 0x0, 0x807, 0x0) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000001c0)=0xc) timer_create(0x4, &(0x7f0000000240)={0x0, 0x16, 0x0, @tid=r5}, &(0x7f0000000200)) (async) r6 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) r8 = inotify_init1(0x800) (async) socket$kcm(0x10, 0x2, 0x4) r9 = fcntl$dupfd(r7, 0x406, r8) setsockopt$inet_mtu(r9, 0x111, 0xa, 0x0, 0x0) (async) ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f0000000000)=0x1) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000cb1a000050000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r11 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r11, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) (async) r12 = syz_open_dev$I2C(&(0x7f0000000100), 0x20000002, 0x2) read(r12, 0x0, 0xff00) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) 2m2.619106872s ago: executing program 0 (id=3348): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bind$tipc(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0xa4, 0x24, 0x3fe3aa0262d8c583, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2c, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xc87c}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0xb}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x8}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x2, 0xee, 0x4, 0x2, 0x80, 0x3}}, {0x4}}, {{0xd, 0x1, {0x0, 0xdb, 0x602, 0xb, 0x1, 0xc84, 0x5, 0x1}}, {0x6, 0x2, [0x5]}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f00000005c0)=[{0x17, '\x00', @buffer={"204fb071383bd6ffe11ae4f228d8bd86a4b540eb314d88f9a1042c866bfe8c58", 0x20}, 0x4}, {0x4, '\x00', @buffer={"156074847dff3ec92fd15c5a5ab6e820b94f2a1ade3e311b88351c3481518fff", 0x20}, 0x20}, {0x2b, '\x00', @buffer={"70485cf53a3167753d9ec1ba3604e9f2835f0e0922d6733d1933703db243863f", 0x20}, 0xe6}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000540)={0x9, 0x0, [{0x5, 0x3, 0x0, 0x0, @sint={0xe1, 0x9}}, {0x5, 0x2, 0x1, 0x0, @msi={0x8, 0x5, 0x0, 0x5}}, {0x80000000, 0x5, 0x1, 0x0, @irqchip={0x7, 0x2}}, {0x6, 0x5, 0x0, 0x0, @msi={0x7, 0x2, 0x9, 0x80000}}, {0x2, 0x1, 0x0, 0x0, @adapter={0x6, 0xbc, 0x9, 0x10001, 0x3}}, {0xc9, 0x3, 0xd9d66b770b8c8584, 0x0, @adapter={0xffc, 0x10000, 0xfffffffffffff801, 0xfffffff8}}, {0x2, 0x3, 0x1, 0x0, @adapter={0x4, 0x9, 0x9, 0xfffffbff, 0xa}}, {0x3, 0x2, 0x0, 0x0, @adapter={0x4, 0x1, 0x0, 0x3, 0xfff}}, {0x7, 0x4, 0x0, 0x0, @irqchip={0xffffbcc5}}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x3f, 0x107, 0x70bd2e, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18}], 0x1, 0x800) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052409000105240000000d0b979d60a53067d50060200006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090b"], 0x0) 2m2.204595509s ago: executing program 32 (id=3348): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bind$tipc(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0xa4, 0x24, 0x3fe3aa0262d8c583, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2c, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xc87c}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0xb}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x8}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x2, 0xee, 0x4, 0x2, 0x80, 0x3}}, {0x4}}, {{0xd, 0x1, {0x0, 0xdb, 0x602, 0xb, 0x1, 0xc84, 0x5, 0x1}}, {0x6, 0x2, [0x5]}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f00000005c0)=[{0x17, '\x00', @buffer={"204fb071383bd6ffe11ae4f228d8bd86a4b540eb314d88f9a1042c866bfe8c58", 0x20}, 0x4}, {0x4, '\x00', @buffer={"156074847dff3ec92fd15c5a5ab6e820b94f2a1ade3e311b88351c3481518fff", 0x20}, 0x20}, {0x2b, '\x00', @buffer={"70485cf53a3167753d9ec1ba3604e9f2835f0e0922d6733d1933703db243863f", 0x20}, 0xe6}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000540)={0x9, 0x0, [{0x5, 0x3, 0x0, 0x0, @sint={0xe1, 0x9}}, {0x5, 0x2, 0x1, 0x0, @msi={0x8, 0x5, 0x0, 0x5}}, {0x80000000, 0x5, 0x1, 0x0, @irqchip={0x7, 0x2}}, {0x6, 0x5, 0x0, 0x0, @msi={0x7, 0x2, 0x9, 0x80000}}, {0x2, 0x1, 0x0, 0x0, @adapter={0x6, 0xbc, 0x9, 0x10001, 0x3}}, {0xc9, 0x3, 0xd9d66b770b8c8584, 0x0, @adapter={0xffc, 0x10000, 0xfffffffffffff801, 0xfffffff8}}, {0x2, 0x3, 0x1, 0x0, @adapter={0x4, 0x9, 0x9, 0xfffffbff, 0xa}}, {0x3, 0x2, 0x0, 0x0, @adapter={0x4, 0x1, 0x0, 0x3, 0xfff}}, {0x7, 0x4, 0x0, 0x0, @irqchip={0xffffbcc5}}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x3f, 0x107, 0x70bd2e, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18}], 0x1, 0x800) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052409000105240000000d0b979d60a53067d50060200006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090b"], 0x0) 9.88421414s ago: executing program 5 (id=3604): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f00007fd000/0x800000)=nil, 0x800000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000d10000/0xa000)=nil, 0x930, 0x1000008, 0x28031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, r1, 0xa, 0x4f832, 0xffffffffffffffff, 0x0) socket(0x1, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x88}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) 9.7641043s ago: executing program 5 (id=3606): bpf$MAP_CREATE(0x0, 0x0, 0x66) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000080)=0xd8eb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000f00)=0x7) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000880)={0xc, 0x8, 0x144, {0x0}}, 0x10) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) recvmsg$can_bcm(r1, 0x0, 0x162) sendmmsg$unix(r4, &(0x7f0000000140), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x5, 0x5, 0x0, 0xb242, 0x800, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) r7 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r8, r9, 0x2c, 0x10000) io_uring_enter(r7, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) io_uring_enter(r7, 0x5bbb, 0xc549, 0x1, 0x0, 0x0) r10 = syz_open_dev$video4linux(&(0x7f0000000480), 0x100000000, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r10, 0xc0205647, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 9.448249675s ago: executing program 2 (id=3607): socket$kcm(0x29, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6901, &(0x7f0000000080)={0x0, 0x4137, 0x0, 0x2, 0x2ea}, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0xfffffec1) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0x15}) read$FUSE(r0, &(0x7f0000006540)={0x2020}, 0xfffffce2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000040)=0x1, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 8.496518389s ago: executing program 2 (id=3610): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b01, 0x0) 6.832923559s ago: executing program 4 (id=3618): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x111080, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000380)={&(0x7f0000000080)=[0x0], &(0x7f0000000180)=[{}, {}, {}, {}, {}], &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x5, 0x3, 0x1}) (async) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r3) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) socket$inet6(0xa, 0x2, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50) (async) io_uring_enter(r6, 0x4094, 0x7721, 0x16, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000005c0)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[{}], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x1, 0x7, 0x6}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000006c0)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0xdededede}) (async) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f00000000c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r9, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r11}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r11], &(0x7f0000000400)=[0x3], &(0x7f0000000640)=[r12, r13, r13], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) (async) r14 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0xc7) pwritev2(r14, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x1300) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000880)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[{}, {}], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x7, 0x9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000980)={0x400, 0x2, &(0x7f0000000400)=[r2, r5], &(0x7f0000000440)=[0x1], &(0x7f0000000900)=[r7, r8, r12, r15], &(0x7f0000000940)=[0x4, 0x8000, 0x9, 0x6, 0x6, 0x4, 0x5], 0x0, 0xffffffffffffffff}) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c0007"], 0x40c}}, 0x0) 6.748556764s ago: executing program 4 (id=3619): syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000140)=ANY=[@ANYBLOB="12816997e20000106b1d0101400001020301090298000301003f41ba91000000010101000a2401000000020102132406040006030000000000000000000000000924030000010000ff5b24050000f8431cfdffffffff04030204001b240404020904", @ANYRES64=0x0], 0x0) 6.68862134s ago: executing program 5 (id=3620): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setns(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)={@val={0x0, 0xf8}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@tcp={0x0, 0x6, '[}]', 0x14, 0x6, 0x0, @mcast2, @mcast1, {[], {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xe2, 0x3ff, 0x0, 0x7f}}}}}}, 0x4a) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x0, "7a8f"}]}}, 0x0}, 0x0) 5.476246459s ago: executing program 2 (id=3627): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec777000) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a0000140002800c000680080001"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc800) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000140)={0x1, @pix={0x3, 0x5, 0x38414762, 0x1, 0x0, 0xffffffff, 0x9, 0x7, 0x1, 0x3, 0x0, 0x5}}) sendto$inet6(r1, &(0x7f0000000140)='\x00', 0x1, 0x24008084, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x1d) shutdown(r1, 0x1) r4 = userfaultfd(0x80001) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x144, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@empty, 0x3502}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x0, 0x0, 0x7, 0x3}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0xff}, 0x2, @in=@empty, 0xffffffff}]}]}, 0x1fc}}, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_complete(r0, 0x0) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)=@can_delroute={0x14, 0x19, 0x1, 0x70bd25, 0x25dfdbfe, {0x1d, 0x1, 0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x40000) r7 = syz_clone(0x6088400, 0x0, 0x4c, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 5.093270049s ago: executing program 2 (id=3630): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000005eec64f8000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000005eec64f8000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000200), 0x2, 0x2) (async) syz_open_dev$vbi(&(0x7f0000000200), 0x2, 0x2) sched_setattr(0x0, &(0x7f0000000040)={0xfffffecc, 0x6, 0x2000002f, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x2004, 0x8000003}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setrlimit(0x8, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r4, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10) shmget$private(0x0, 0x3000, 0x800, &(0x7f00001b0000/0x3000)=nil) (async) shmget$private(0x0, 0x3000, 0x800, &(0x7f00001b0000/0x3000)=nil) socket$inet6(0xa, 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000ffe0f50571103f0000000000670000000080008095f600000040000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d6f121226ccbdd4ff44700000057122ea180b8b25ad6c006c3e4e86dd319c92de83f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a12777127e2a96561b75d73fc659f39d1470e7d85b0eb777bc1b418598233dbcc85fe7d5c80a359a819c313208a3ed0240f7488afaf33d3ec48286ab9a1017f36be87e0a570cf2951b8c0ac9d3a76697c7582e2a6"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/182, 0x0, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000000)={0x2000, 0xfffffffc, 0x0, 0x80000}, 0x10}, 0xfffffe2b) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@empty, 0x57}) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@empty, 0x57}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000), 0x0) (async) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000), 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/fib_triestat\x00') preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, &(0x7f0000000280)={0x6, 0xb0, 0x9}) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000002000000000000273983bf18110000", @ANYRES32=r0, @ANYRESHEX=0x0], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 4.680863398s ago: executing program 5 (id=3633): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000001280)={0x14, &(0x7f00000011c0)={0x0, 0xb, 0x3b, {0x3b, 0xa, "b2d9c08938b66c2aeee23a22054b071c3819e84f9948e8afb0c75af24d051aaf038147a6b2f8819e197d80c0a51f802196e79b5179b037720d"}}, &(0x7f0000001240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001440)={0x1c, &(0x7f00000012c0)={0x40, 0x17, 0xbd, "303078909262873200c6476d0fb7ead47e42dbee51ae550902562d3a91c177f559ab233d1f50b0231ff0716b37b62f01625a927dfbe64ddb7029d37da96df7af5fbddd11600e98371b7afca8fcc62d161694863ab11464d107108351da3ca0f0e484b36c1315ecfa761c88b27b088e15f1df3e47c29dd835191ffd03244b5d686ce83c0ae7c21f53e2ab7107ce3b4beb2e90e406a33868995e7e2c41cab74c481c5b101b0068d0f546eef9540bdd3b1c24b0d134cd99ca8f5f9f95f530"}, &(0x7f00000013c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001400)={0x0, 0x8, 0x1, 0x8}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "33803fbae7579b75", "558963da244db07ec464b3a7ed03322c", "066d4ddb", "b807fdcd00"}, 0x28) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000001480), &(0x7f0000001500)=0x6e, 0x80000) recvmmsg$unix(r3, &(0x7f0000002b00)=[{{&(0x7f0000001540), 0x6e, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/114, 0x72}, {&(0x7f0000001640)=""/35, 0x23}, {&(0x7f0000001680)=""/227, 0xe3}], 0x3, &(0x7f00000017c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000001880), 0x6e, &(0x7f0000002a00)=[{&(0x7f0000001900)=""/207, 0xcf}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x2, &(0x7f0000002a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x2, 0x1, &(0x7f0000002b80)={0x77359400}) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x18, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x14}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x37) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[@ANYBLOB='&\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000ffdbdf255d0000000400a680"], 0x18}}, 0x40000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) sendmsg$key(r4, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x8, 0x2, 0x3, 0x3, 0x1, 0x8001}, &(0x7f00000002c0)=0x20) openat$kvm(0xffffffffffffff9c, 0x0, 0x80000, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xffffffffffffffdf, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="320000002000010027bd7000000000000a00204000001c34bf34ff7cc900000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 4.135091644s ago: executing program 3 (id=3635): keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x50, 0x0, 0x7, 0x7fffffff}, {0x6, 0xfc}]}) write$ppp(r0, &(0x7f0000000480)="1e08", 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x13, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x2000000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000540)="86731424d5c8f60a0000009921fbec19b9ab2e34003e9f21fc79cf3dda0c9b8c85a9255d19ebd42350b4f85fdc77f54eabe8009549d45653d3d954c2d414d2eeb6ef679058df3c6f4a3bd8ba8f965c3ba81ada00834efa9cd10000f9ff31ba90bfa178897e848e72b34737eb2688e539efdcf3a6e00d0800a20f52bb2654a5ffd7b6ade2b5a7321a8cc9a84ec028a551132962fd00f0ecf5f2503252a01c525e00000000002c00"/179, 0x30) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x38, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x47}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) recvmsg$can_raw(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x4000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff2000/0x4000)=nil, 0x0, 0x0, r6}, 0x68) r7 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2000008, 0x3b7}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r7, 0x6145, 0x8309, 0x13, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000da5811649c51ab8ae32e22277c877e5956ca6fbd553522f90f2eef67c9d752f12cfd0001136f3b6f0de2aed87c92bc326bf51f433e54a0826047c2050c62", @ANYRES16=r2, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r9, @ANYBLOB="0500340000000000"], 0x24}, 0x1, 0x0, 0x0, 0x7044}, 0x20004800) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r8], 0x0) 3.720873823s ago: executing program 4 (id=3636): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {0x0}, {&(0x7f00000005c0)="f2b314c96d50", 0x6}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x400, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)="a22caaffe37d4620d1a9427c00787b63b26c5b83ef8ce8f8fe823d77c642dd73361c1f115fdce55de92bede6e812191b9780a257fa4fb3", 0x37}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7", 0x77}, {&(0x7f00000006c0)="138b9f129daf1d79da8ee1c8c74f2040f7892fe9", 0x14}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70ab992", 0x5d}], 0x6}}], 0x2, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0xeeee8000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000030000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="000000000000e7ffb6080000090000007b8af8ff00000000bfa200000000000007020000b70400000100000085000000820000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000580)="2c385a7af3be", 0x5d) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.560590878s ago: executing program 5 (id=3637): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0005010010004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x8e, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv4={0x800, @tipc={{0x15, 0x4, 0x3, 0x0, 0x80, 0x64, 0x0, 0x1, 0x6, 0x0, @remote, @loopback, {[@cipso={0x86, 0x3d, 0x3, [{0x1, 0x12, "06da6d730d21ff7b9c11d0e3d824a25a"}, {0x2, 0x12, "b901b839ce65ec54136f3e3d756c6432"}, {0x6, 0x8, "476c260656d3"}, {0x2, 0xb, "58588c2e026746c734"}]}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x1, 0x0, 0xb, 0x3, 0x2, 0x1000, 0x0, 0x1, 0x9, 0x5, 0x1, 0x2, 0x1, 0x3, 0x4e24, 0x4e23}, 0x4, 0x3}, 0x0, 0x3}, 0x1}}}}}}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x5277c0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x7a0, 0x0, 0x228, 0x0, 0x5b8, 0x5b8, 0x6d0, 0x6d0, 0x6d0, 0x6d0, 0x6d0, 0x6, &(0x7f0000000380), {[{{@ipv6={@empty, @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0x0, 0xff], 'veth1_virt_wifi\x00', 'batadv0\x00', {}, {0x1cd2af259700f990}, 0x33, 0x66, 0x0, 0x60}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x1, [0x10, 0x5], 0x2, 0xa11b7ddcf662e78e, 0x4, [@loopback, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @local, @loopback, @dev={0xfe, 0x80, '\x00', 0x21}, @loopback, @dev={0xfe, 0x80, '\x00', 0x10}, @loopback, @mcast2, @local, @loopback, @private0, @private1], 0xf}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa010101, @ipv4=@local, 0x80, 0x2c, 0x4}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0x12, "b02b"}}, @common=@hbh={{0x48}, {0x386b, 0x3, 0x0, [0x347, 0x9, 0x81, 0x6, 0x0, 0xd, 0x1, 0x8000, 0xe5, 0xff, 0xff01, 0x5, 0x3, 0x5, 0x8, 0x6], 0x10}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x6c03, @ipv4=@private=0xa010101, 0x4e22}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@remote, 0x21, 0x35, 0x500}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x37}, [0x0, 0xff, 0x0, 0xffffffff], [0xff000000, 0x0, 0xff, 0xff], 'bridge_slave_0\x00', 'gretap0\x00', {0xff}, {}, 0x8, 0xf, 0x1, 0x20}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x21, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@mcast2, 0x30, 0x3b, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x800) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) close(0x3) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000180)=0x6f) r8 = dup2(r7, r7) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, 0x0) 3.368016381s ago: executing program 4 (id=3638): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x24000025}, 0x4800) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x2, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x6}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x5}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r1 = socket(0xa, 0x1, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000000)=@raw={0xfe, 0x4, "21f6aa26fe1c"}) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32, @ANYRES32=r1], 0x0) 3.351620858s ago: executing program 2 (id=3639): r0 = socket$inet6(0xa, 0x2, 0x0) umount2(&(0x7f00000003c0)='./cgroup\x00', 0xd) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0xe22, 0x8000}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000280)={0xa, 0xe22, 0x8000}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60e1000000081101fe8000000000000000000004000000aaff0200000000000000000000000044e2a411014bd0a416a8"], 0x0) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804870000000000000109022400010000800009040000090300040009210000000122290009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.252013405s ago: executing program 3 (id=3640): r0 = socket(0x11, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000004200)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f00000005c0)="d4350281fecc5272ac077550d8005fc5bd43ae3bce6a584c05b7fa383bd34b1045bab3e6713150dbbb059e0aaa84b334a27625dbe78aeac18dc957dd768b1ffcaccf4d34282de02b08d7bc21c138aa0b021d95264055876ab66e21ba6a9c0356243a0776cc06014ee62468a67bad82dd583200a5129ae8155ab9253a69d507cfaeba7ff704ca277d58b1488bf59e212a37afaf9f8139e58270bd0d163d3c28c9759673eb48681118301107b742e8b8875a4048ce7f1a1c32", 0xb8}], 0x1, &(0x7f0000002700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r3, r2, r1, r0, r1, r0, r4]}}], 0x140, 0x40800}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000c700000000000000950000"], &(0x7f0000000040)='GPL\x00'}, 0x94) sched_setattr(0x0, &(0x7f00000002c0)={0x32, 0x5, 0x9, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0x3, 0x6}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) timer_create(0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e000900000000080018000dac0f0004001e00000000080000000000"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e000108000740000000001c001080"], 0x80}}, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(0xffffffffffffffff, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r10 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r10, 0x403c6f2b, &(0x7f0000000000)={0x8000, {"8604a0a71359a294b7585622d5b25618", "398e9cb8b9ef106c55992b65958724b1", "04641700"}, 0x2, 0x6}) ioctl$DVB_DEMUX_DMX_GET_PES_PIDS(r10, 0x800a6f2f, &(0x7f0000000380)) r11 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES32=r5, @ANYRES64=r11, @ANYRES8, @ANYRESDEC=r7, @ANYRES64=r5, @ANYRESDEC=r2, @ANYRESOCT=r7, @ANYRES32], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) 2.801548226s ago: executing program 1 (id=3641): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) landlock_restrict_self(r1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYBLOB="3f00000006020400280012800b0001"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) 2.537865752s ago: executing program 1 (id=3642): ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x9, @pix_mp={0x3, 0xff, 0x34324152, 0x7, 0xa, [{0xc6, 0x9}, {0xfffffff9}, {0x3ff, 0x8}, {0x5, 0x80004ae}, {0x4}, {0xfffffffb, 0x7}, {0x1, 0x8}, {0xf, 0x4}], 0x3, 0x3, 0x3, 0x2}}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x10, 0xfff3}, {}, {0xa, 0x17}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40040) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000600), 0x8002, 0x0) ioctl$TCSETSW(r9, 0x5403, &(0x7f00000027c0)={0xab6, 0x3, 0xffffffc0, 0x80, 0x1, "e625b7fcf9fe176d572f93d8e16b493ad3f282"}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8], 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40000) add_key$keyring(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x331002, 0x0) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000100)={0x60, 0xf0, 0x60, 0x0, 0x0, 0x4db, 0x8, 0x0, {0x5, 0x40, 0x1}, {0xffffffff, 0x1}, {0x8000}, {0x3, 0x0, 0x1}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x101, 0xfffffc00, 0x0, 0x400, 0x0, 0x0, 0x21, 0x0, 0x0, 0x7}) 2.218227766s ago: executing program 3 (id=3643): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x200801, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x6165237c8f36ca9, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x48, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}, @in6={0xa, 0x4e22, 0x9c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, &(0x7f0000000040)=0x84) r6 = dup(r2) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000000c0)={r5, 0x7, 0x3644, 0xf62, 0x4, 0x8}, 0x14) creat(&(0x7f0000000040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f000000c3c0)={0x2020}, 0x2020) r8 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x10000008efe, 0xf) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000140)) ppoll(&(0x7f0000000080)=[{r0, 0x5300}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000600)) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) 1.844090542s ago: executing program 4 (id=3644): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000300)={0x2, 0x86e, 0x0, &(0x7f0000000340)="0000040000cf3b2ba333ffff956e6e6551b5d99f85", 0x0, 0x15}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@deltfilter={0x24, 0x2d, 0x601, 0xfffffffd, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xd}, {0x1, 0xffe0}, {0xe, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c0a1}, 0x4008000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x7000, 0x0, 0x77, 0x8, 0x0, 0xcb, 0x2, 0x0, 0x8, 0x6}, {0xe000, 0x9000, 0xc, 0xeb, 0x2, 0x0, 0x0, 0x0, 0x7}, {0xeeee0000, 0x1000, 0x10, 0x0, 0x7, 0xc4, 0x0, 0x1, 0x45, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x1, 0x0, 0x9, 0x0, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x34, 0x7}, {0xffff1000, 0x0, 0x0, 0x78, 0x5, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x80a0000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0x5000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0xe, 0xf801, 0x0, [0x80000001, 0x0, 0x1, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x4, 0xa462}, 0x0, &(0x7f0000000100)={0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x0, 0x100000000}, 0x0, 0x0) connect$inet(r6, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r6, &(0x7f00000005c0)='P', 0x1, 0x408c845, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x48, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x4d}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x48}, 0x1, 0x0, 0x0, 0x8050}, 0x240048c0) 1.242848392s ago: executing program 1 (id=3645): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x40800) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100"], 0x18}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x8) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) 1.222892193s ago: executing program 3 (id=3646): r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0xb, 0x101000) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x10002008}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x94, 0x7fff0010}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r3, r3, 0x2) syz_io_uring_setup(0x2952, &(0x7f0000000400)={0x0, 0x79b0, 0x1000, 0x3, 0x40024f}, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0xfffffffa, 0x0, 0x9, 0x68, 0x0, 0x1, 0x1}, &(0x7f0000000300)=0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000340)={0x0, 0x3, 0x4, 0x18400000, r4}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="1d0300800000fb8f44dee26949c9db808149822e4781382342a9d6"], 0x18}}, 0x0) 1.166331424s ago: executing program 1 (id=3647): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@deltfilter={0x1dc0, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x1d88, 0x2, [@TCA_CGROUP_ACT={0x1d84, 0x1, [@m_connmark={0xa8, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xe, 0x7, 0x9, 0x5ff}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0xffffffffffffffff, 0x5, 0x5854}, 0xfffc}}]}, {0x3d, 0x6, "8603f539b6a7af824d262bf654e2998b1ef3d2c0c3dcff5329f40e2a6613622a8e0c660697488dd9d3852466b5f92790cca8a42cadda0bea24"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x50, 0x14, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x40, 0x2}, 0x8003}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_pedit={0x1c88, 0x5, 0x0, 0x0, {{0xa}, {0x1c5c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x3fe}, 0xb1, 0x3, [{0xf7b7, 0x5, 0x9, 0xd, 0xdd, 0x5}]}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x82, 0x8}, {0x7, 0x5, 0x2, 0x212, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cc, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x5, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x80000000, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0xa, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x209, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x1ff, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff80000, 0x2, 0xa}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0xffffffff, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43a, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0xff, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x6, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x2, 0x7f, 0x13760, 0x10001, 0x9}, {0x3c, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xdc1, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0xffff0000, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x2, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x8, 0x9, 0x5, 0x8, 0x9}, 0x75, 0x6}, [{0x0, 0x7, 0x8, 0x20000, 0x440, 0x60}, {0xb, 0x779, 0x6, 0x8, 0x7fff, 0xff}, {0x9, 0x1, 0x81, 0x7fff, 0x7}, {0x10001, 0xfd27, 0x10, 0x81, 0x80, 0x200}, {0x1ff, 0x8, 0x2c3, 0x4, 0x174, 0x2}, {0xfffffff9, 0x6, 0x563, 0x8, 0xc, 0x6}, {0x2, 0x0, 0x8, 0xb3, 0x5, 0x200}, {0x5, 0xffff, 0x2f, 0xc, 0x1, 0x6cb}, {0x61, 0x222, 0x7651, 0x80000001, 0x1, 0x80}, {0x5, 0x93, 0x1, 0x3165, 0x2, 0x4}, {0x9, 0x7, 0x5, 0x9, 0x2, 0x4}, {0x4, 0x6, 0x9, 0x3, 0xfffffff7, 0x2}, {0x2, 0x6, 0x0, 0x3, 0x4221, 0x7}, {0x455, 0x35, 0x2, 0x2, 0x2, 0xc265}, {0x8, 0x3, 0x1, 0x2, 0x6, 0xa}, {0x2, 0x9, 0xfffffe58, 0x7fffffff, 0x1, 0x56}, {0x6, 0x5, 0x8, 0x6, 0x9, 0x7}, {0x8, 0xf69e, 0xf79, 0x3, 0x6, 0x8}, {0x100, 0x0, 0x9, 0x74b3, 0x2, 0x10000}, {0x400, 0x0, 0x1ff, 0x2, 0xffffffe6, 0x6}, {0x1, 0x59ad8e51, 0x8, 0x7f, 0x4, 0x9}, {0x6, 0xef7, 0xe, 0x400, 0x4, 0xfffffffc}, {0x7a, 0x6, 0x3, 0x7, 0x1800, 0x51f4}, {0xfffe0000, 0x2, 0xfffffffd, 0x8, 0x7, 0x7}, {0xfffffff9, 0x8, 0x8, 0x6, 0x6, 0x5}, {0xa23, 0x6, 0x0, 0x7, 0x2, 0x40}, {0x5e6, 0x6, 0x6, 0x6, 0x3, 0x3}, {0x7fff, 0xb, 0x4, 0xb6, 0xe, 0xdb}, {0xfffffffa, 0xb11, 0x100, 0x9, 0x7ff, 0x1}, {0x4, 0x8, 0x200, 0x9, 0xfffffffb, 0x2}, {0x80000000, 0x1, 0x0, 0x5, 0x81}, {0x9, 0x8, 0x3, 0x2, 0x4, 0xe}, {0x80000001, 0x81, 0x8, 0x5, 0x6, 0xf609}, {0x8000, 0x1, 0x1ff, 0x5, 0xfff, 0x101}, {0x7, 0x3e2, 0x5a1, 0x7, 0x5, 0x5}, {0x5, 0x2, 0x80000000, 0x63674b04, 0x7, 0x923}, {0x8ade, 0x1, 0x4, 0x8, 0x2, 0xd9f5}, {0x5, 0x5, 0x1, 0x9, 0x14, 0x5}, {0x3ff, 0xb, 0x40, 0x2, 0x2, 0x401}, {0x9, 0x9, 0x9, 0x3, 0x0, 0x40}, {0x6, 0x8001, 0x6, 0x5, 0x8000000, 0x1000}, {0x7f, 0xffffac09, 0x3, 0x0, 0x8, 0x101}, {0x7b, 0x6, 0x371, 0x0, 0x6, 0x100}, {0x9f, 0x5, 0x3, 0xc, 0x7, 0x4}, {0x3, 0x1, 0x1d2, 0x2, 0x6db}, {0x1000, 0x51f, 0xe2c, 0x8, 0x206, 0x6}, {0x7, 0x69680000, 0x401, 0x45b, 0x10001, 0x80000000}, {0x0, 0x6, 0x1000, 0x7, 0x4, 0xa}, {0x4, 0x7, 0x10000001, 0xee, 0x0, 0x1}, {0x101, 0x0, 0x9, 0xb539, 0xd7, 0xe3e}, {0xe00c, 0x9, 0xd34, 0x4cc, 0x1ff, 0x6}, {0xa2, 0xbf9, 0x3, 0xa77, 0x2, 0xfffffff9}, {0x87, 0x5, 0x5, 0x5c1, 0x2000000, 0x9}, {0x1ff, 0x200, 0xffffffff, 0xfffffffa, 0x4, 0xbc6a}, {0x40, 0xffffffff, 0x80000001, 0xc, 0xf91, 0x7fffffff}, {0xffffffff, 0x52, 0x6, 0x80000000, 0x8, 0xbf}, {0x1, 0x8001, 0x5, 0x3, 0xda0, 0x2}, {0x9, 0x5, 0x5, 0x0, 0x9, 0x5}, {0x7ff, 0x4cbf, 0xbdde, 0x7, 0x80, 0x8001}, {0x5, 0x4, 0xb, 0x7fff, 0x7}, {0x161, 0x8, 0xfffffffc, 0x5, 0x40, 0x2}, {0xb, 0x6, 0x3, 0x8, 0x6, 0x5}, {0x10, 0x9, 0x6, 0x0, 0x8, 0x3f8}, {0x9, 0xe, 0x7, 0x3, 0x4, 0x2}, {0xffff, 0x2, 0x919c, 0x1000, 0x4, 0x7}, {0x35, 0xfffffff9, 0x117, 0x2, 0x6, 0x6}, {0x42d, 0x57, 0x80000000, 0x30000000, 0x3, 0x400e}, {0x3, 0x7bf, 0xff, 0x6, 0xd, 0x2}, {0x3, 0x3, 0x8000, 0x5, 0x2972a4da, 0x2}, {0x101, 0x40, 0x4, 0x6, 0x0, 0x3f47}, {0x4, 0x4, 0x60dc, 0x6, 0x0, 0x9}, {0x0, 0x0, 0x5, 0x5, 0x401, 0x10001}, {0x8, 0x1, 0xd, 0xfffffff7, 0xc08}, {0x8, 0x0, 0x8000, 0x589, 0xfffffffd, 0x4}, {0xcb83, 0x3, 0x491, 0x4, 0x3, 0xb6e2}, {0x3, 0x2, 0xfff, 0xd48, 0x3, 0x8}, {0x3, 0x2, 0x8, 0x3, 0x3}, {0xb, 0x8, 0x5, 0x69, 0x0, 0x9}, {0x7ff, 0x2, 0x4, 0x5, 0x9, 0x6}, {0x5, 0xfffffffb, 0x6, 0xff, 0x3, 0xb1c}, {0x7, 0x9, 0xfffffffa, 0x4, 0x7, 0x2}, {0x28, 0x3, 0x46, 0x7, 0xffffffff, 0x8}, {0xf, 0xffffffe6, 0x1, 0x100, 0x100, 0x1}, {0x4, 0xfe, 0x46, 0x6, 0x9, 0x5}, {0x4, 0x10, 0x9, 0xfee1, 0x2cc, 0x9}, {0x279b, 0x8f, 0x4, 0x0, 0x3, 0x10001}, {0x7, 0x2, 0x5d, 0x80, 0x10, 0x8d}, {0x2, 0xa6, 0xe4f, 0x400, 0x3de, 0x4}, {0xf, 0x10000, 0x800, 0x0, 0x7, 0xf59}, {0x10, 0x10, 0x7fffffff, 0x2, 0x4e34, 0xd6}, {0x9, 0xfffffffa, 0x9, 0x926, 0x5a2b, 0x7}, {0x3, 0xe7c8, 0x5, 0x9, 0x4, 0x1000}, {0x5, 0x1, 0x5, 0x4, 0x8, 0x6}, {0xfe3, 0x0, 0x9, 0x4, 0x2f8, 0x80000000}, {0x0, 0x9, 0x8, 0x5, 0x7de9, 0x1}, {0x2, 0x0, 0x16000000, 0x8, 0xd5, 0x4c3c}, {0x847c, 0x6, 0xaa5, 0x594ac942, 0xfb7, 0x3}, {0x0, 0x1, 0x2, 0x4, 0x8a, 0xfff}, {0x3, 0xa, 0x9, 0x1, 0x9, 0x80}, {0x5, 0xffff, 0xfffff801, 0xc, 0x6, 0x5}, {0x6e0, 0x5, 0x1, 0x7, 0x9, 0x7}, {0x8, 0x0, 0xffffe1ce, 0x9, 0x800}, {0x6, 0xf, 0x8, 0x2f, 0xfffffff7, 0xc9}, {0xa843, 0x0, 0x5, 0x8eb8, 0x3, 0xfffffffd}, {0x8000, 0x6, 0x7, 0x7, 0x7, 0x1}, {0x4, 0x900, 0x4, 0x3, 0x6, 0xf216}, {0x4, 0xffff, 0x0, 0x9, 0xeb, 0x2}, {0x22c77d2a, 0x200, 0x0, 0x4, 0x8, 0x2e03666f}, {0xf529, 0x800, 0x3, 0x5, 0xe9, 0x1}, {0x5, 0x1, 0x4, 0xc, 0x3, 0xf}, {0xc23ff6c, 0xfffffffc, 0x1, 0x0, 0x0, 0x7}, {0xff, 0x5, 0x800, 0x3, 0x2, 0x7fffffff}, {0x7, 0x6, 0x2, 0x60, 0xd, 0x70}, {0x0, 0xe, 0x200, 0x7, 0x1, 0x7}, {0x7, 0xde27, 0x8, 0x7f, 0xb09, 0x4}, {0xff, 0xac, 0xffffffff, 0x9c07, 0x84f4, 0x7ae3f5e2}, {0x80000001, 0x0, 0x1c00000, 0x1, 0x9, 0x1}, {0x8, 0x5, 0x9, 0xfffffffe, 0x5, 0x62f}, {0x8001, 0x3, 0x0, 0xb, 0x1, 0x9e3b}, {0x40, 0xfffffffc, 0xc, 0x4, 0x9cad, 0x101}, {0xfffffffc, 0xa388a14b, 0x1, 0x6, 0x5, 0x3ff}, {0xffffffff, 0x1, 0x6, 0xc913, 0x401, 0x2}, {0x7ff, 0x3, 0xabf, 0x3cb, 0x9d, 0x3}, {0x7, 0x0, 0x10001, 0x80000000, 0x800, 0x400}, {0xaf1, 0x7f, 0x2, 0x9, 0x80000000, 0x3}, {0x8, 0x0, 0x2, 0x200, 0x80000001, 0xe32}, {0x2, 0x8, 0xce0, 0x71, 0x9, 0x9}, {0x0, 0x2, 0x101, 0x6, 0xfffffbff, 0x1}], [{0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {0x4, 0x1}, {0x4, 0x1}, {}, {}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x4}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x2}, {}, {0xf64cd08961e131e7}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x14750f306444a36}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x39ee92b2e05c055b}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x4}, {0x3}, {0x4, 0x1}, {0x1}, {0x460300743d89969c, 0x1}, {0x3}, {0x4}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x2d7ee143859a3e1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x1, 0xc196dd3e82dc6dcc}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x7, 0x1}, {}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x1dc0}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x18810100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r1, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x27, 0xa8, @random="e47729e329c51e5196b061d728778aa49275275a00ef8fd613b9d273014ec3db3a6bec"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x404c880}, 0x4014) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x801, 0xe4340000}, 0x14}}, 0x2) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x10001000, 0x9, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@deltfilter={0x1dc0, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x1d88, 0x2, [@TCA_CGROUP_ACT={0x1d84, 0x1, [@m_connmark={0xa8, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xe, 0x7, 0x9, 0x5ff}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0xffffffffffffffff, 0x5, 0x5854}, 0xfffc}}]}, {0x3d, 0x6, "8603f539b6a7af824d262bf654e2998b1ef3d2c0c3dcff5329f40e2a6613622a8e0c660697488dd9d3852466b5f92790cca8a42cadda0bea24"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x50, 0x14, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x40, 0x2}, 0x8003}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_pedit={0x1c88, 0x5, 0x0, 0x0, {{0xa}, {0x1c5c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x3fe}, 0xb1, 0x3, [{0xf7b7, 0x5, 0x9, 0xd, 0xdd, 0x5}]}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x82, 0x8}, {0x7, 0x5, 0x2, 0x212, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cc, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x5, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x80000000, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0xa, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x209, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x1ff, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff80000, 0x2, 0xa}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0xffffffff, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43a, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0xff, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x6, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x2, 0x7f, 0x13760, 0x10001, 0x9}, {0x3c, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xdc1, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0xffff0000, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x2, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x8, 0x9, 0x5, 0x8, 0x9}, 0x75, 0x6}, [{0x0, 0x7, 0x8, 0x20000, 0x440, 0x60}, {0xb, 0x779, 0x6, 0x8, 0x7fff, 0xff}, {0x9, 0x1, 0x81, 0x7fff, 0x7}, {0x10001, 0xfd27, 0x10, 0x81, 0x80, 0x200}, {0x1ff, 0x8, 0x2c3, 0x4, 0x174, 0x2}, {0xfffffff9, 0x6, 0x563, 0x8, 0xc, 0x6}, {0x2, 0x0, 0x8, 0xb3, 0x5, 0x200}, {0x5, 0xffff, 0x2f, 0xc, 0x1, 0x6cb}, {0x61, 0x222, 0x7651, 0x80000001, 0x1, 0x80}, {0x5, 0x93, 0x1, 0x3165, 0x2, 0x4}, {0x9, 0x7, 0x5, 0x9, 0x2, 0x4}, {0x4, 0x6, 0x9, 0x3, 0xfffffff7, 0x2}, {0x2, 0x6, 0x0, 0x3, 0x4221, 0x7}, {0x455, 0x35, 0x2, 0x2, 0x2, 0xc265}, {0x8, 0x3, 0x1, 0x2, 0x6, 0xa}, {0x2, 0x9, 0xfffffe58, 0x7fffffff, 0x1, 0x56}, {0x6, 0x5, 0x8, 0x6, 0x9, 0x7}, {0x8, 0xf69e, 0xf79, 0x3, 0x6, 0x8}, {0x100, 0x0, 0x9, 0x74b3, 0x2, 0x10000}, {0x400, 0x0, 0x1ff, 0x2, 0xffffffe6, 0x6}, {0x1, 0x59ad8e51, 0x8, 0x7f, 0x4, 0x9}, {0x6, 0xef7, 0xe, 0x400, 0x4, 0xfffffffc}, {0x7a, 0x6, 0x3, 0x7, 0x1800, 0x51f4}, {0xfffe0000, 0x2, 0xfffffffd, 0x8, 0x7, 0x7}, {0xfffffff9, 0x8, 0x8, 0x6, 0x6, 0x5}, {0xa23, 0x6, 0x0, 0x7, 0x2, 0x40}, {0x5e6, 0x6, 0x6, 0x6, 0x3, 0x3}, {0x7fff, 0xb, 0x4, 0xb6, 0xe, 0xdb}, {0xfffffffa, 0xb11, 0x100, 0x9, 0x7ff, 0x1}, {0x4, 0x8, 0x200, 0x9, 0xfffffffb, 0x2}, {0x80000000, 0x1, 0x0, 0x5, 0x81}, {0x9, 0x8, 0x3, 0x2, 0x4, 0xe}, {0x80000001, 0x81, 0x8, 0x5, 0x6, 0xf609}, {0x8000, 0x1, 0x1ff, 0x5, 0xfff, 0x101}, {0x7, 0x3e2, 0x5a1, 0x7, 0x5, 0x5}, {0x5, 0x2, 0x80000000, 0x63674b04, 0x7, 0x923}, {0x8ade, 0x1, 0x4, 0x8, 0x2, 0xd9f5}, {0x5, 0x5, 0x1, 0x9, 0x14, 0x5}, {0x3ff, 0xb, 0x40, 0x2, 0x2, 0x401}, {0x9, 0x9, 0x9, 0x3, 0x0, 0x40}, {0x6, 0x8001, 0x6, 0x5, 0x8000000, 0x1000}, {0x7f, 0xffffac09, 0x3, 0x0, 0x8, 0x101}, {0x7b, 0x6, 0x371, 0x0, 0x6, 0x100}, {0x9f, 0x5, 0x3, 0xc, 0x7, 0x4}, {0x3, 0x1, 0x1d2, 0x2, 0x6db}, {0x1000, 0x51f, 0xe2c, 0x8, 0x206, 0x6}, {0x7, 0x69680000, 0x401, 0x45b, 0x10001, 0x80000000}, {0x0, 0x6, 0x1000, 0x7, 0x4, 0xa}, {0x4, 0x7, 0x10000001, 0xee, 0x0, 0x1}, {0x101, 0x0, 0x9, 0xb539, 0xd7, 0xe3e}, {0xe00c, 0x9, 0xd34, 0x4cc, 0x1ff, 0x6}, {0xa2, 0xbf9, 0x3, 0xa77, 0x2, 0xfffffff9}, {0x87, 0x5, 0x5, 0x5c1, 0x2000000, 0x9}, {0x1ff, 0x200, 0xffffffff, 0xfffffffa, 0x4, 0xbc6a}, {0x40, 0xffffffff, 0x80000001, 0xc, 0xf91, 0x7fffffff}, {0xffffffff, 0x52, 0x6, 0x80000000, 0x8, 0xbf}, {0x1, 0x8001, 0x5, 0x3, 0xda0, 0x2}, {0x9, 0x5, 0x5, 0x0, 0x9, 0x5}, {0x7ff, 0x4cbf, 0xbdde, 0x7, 0x80, 0x8001}, {0x5, 0x4, 0xb, 0x7fff, 0x7}, {0x161, 0x8, 0xfffffffc, 0x5, 0x40, 0x2}, {0xb, 0x6, 0x3, 0x8, 0x6, 0x5}, {0x10, 0x9, 0x6, 0x0, 0x8, 0x3f8}, {0x9, 0xe, 0x7, 0x3, 0x4, 0x2}, {0xffff, 0x2, 0x919c, 0x1000, 0x4, 0x7}, {0x35, 0xfffffff9, 0x117, 0x2, 0x6, 0x6}, {0x42d, 0x57, 0x80000000, 0x30000000, 0x3, 0x400e}, {0x3, 0x7bf, 0xff, 0x6, 0xd, 0x2}, {0x3, 0x3, 0x8000, 0x5, 0x2972a4da, 0x2}, {0x101, 0x40, 0x4, 0x6, 0x0, 0x3f47}, {0x4, 0x4, 0x60dc, 0x6, 0x0, 0x9}, {0x0, 0x0, 0x5, 0x5, 0x401, 0x10001}, {0x8, 0x1, 0xd, 0xfffffff7, 0xc08}, {0x8, 0x0, 0x8000, 0x589, 0xfffffffd, 0x4}, {0xcb83, 0x3, 0x491, 0x4, 0x3, 0xb6e2}, {0x3, 0x2, 0xfff, 0xd48, 0x3, 0x8}, {0x3, 0x2, 0x8, 0x3, 0x3}, {0xb, 0x8, 0x5, 0x69, 0x0, 0x9}, {0x7ff, 0x2, 0x4, 0x5, 0x9, 0x6}, {0x5, 0xfffffffb, 0x6, 0xff, 0x3, 0xb1c}, {0x7, 0x9, 0xfffffffa, 0x4, 0x7, 0x2}, {0x28, 0x3, 0x46, 0x7, 0xffffffff, 0x8}, {0xf, 0xffffffe6, 0x1, 0x100, 0x100, 0x1}, {0x4, 0xfe, 0x46, 0x6, 0x9, 0x5}, {0x4, 0x10, 0x9, 0xfee1, 0x2cc, 0x9}, {0x279b, 0x8f, 0x4, 0x0, 0x3, 0x10001}, {0x7, 0x2, 0x5d, 0x80, 0x10, 0x8d}, {0x2, 0xa6, 0xe4f, 0x400, 0x3de, 0x4}, {0xf, 0x10000, 0x800, 0x0, 0x7, 0xf59}, {0x10, 0x10, 0x7fffffff, 0x2, 0x4e34, 0xd6}, {0x9, 0xfffffffa, 0x9, 0x926, 0x5a2b, 0x7}, {0x3, 0xe7c8, 0x5, 0x9, 0x4, 0x1000}, {0x5, 0x1, 0x5, 0x4, 0x8, 0x6}, {0xfe3, 0x0, 0x9, 0x4, 0x2f8, 0x80000000}, {0x0, 0x9, 0x8, 0x5, 0x7de9, 0x1}, {0x2, 0x0, 0x16000000, 0x8, 0xd5, 0x4c3c}, {0x847c, 0x6, 0xaa5, 0x594ac942, 0xfb7, 0x3}, {0x0, 0x1, 0x2, 0x4, 0x8a, 0xfff}, {0x3, 0xa, 0x9, 0x1, 0x9, 0x80}, {0x5, 0xffff, 0xfffff801, 0xc, 0x6, 0x5}, {0x6e0, 0x5, 0x1, 0x7, 0x9, 0x7}, {0x8, 0x0, 0xffffe1ce, 0x9, 0x800}, {0x6, 0xf, 0x8, 0x2f, 0xfffffff7, 0xc9}, {0xa843, 0x0, 0x5, 0x8eb8, 0x3, 0xfffffffd}, {0x8000, 0x6, 0x7, 0x7, 0x7, 0x1}, {0x4, 0x900, 0x4, 0x3, 0x6, 0xf216}, {0x4, 0xffff, 0x0, 0x9, 0xeb, 0x2}, {0x22c77d2a, 0x200, 0x0, 0x4, 0x8, 0x2e03666f}, {0xf529, 0x800, 0x3, 0x5, 0xe9, 0x1}, {0x5, 0x1, 0x4, 0xc, 0x3, 0xf}, {0xc23ff6c, 0xfffffffc, 0x1, 0x0, 0x0, 0x7}, {0xff, 0x5, 0x800, 0x3, 0x2, 0x7fffffff}, {0x7, 0x6, 0x2, 0x60, 0xd, 0x70}, {0x0, 0xe, 0x200, 0x7, 0x1, 0x7}, {0x7, 0xde27, 0x8, 0x7f, 0xb09, 0x4}, {0xff, 0xac, 0xffffffff, 0x9c07, 0x84f4, 0x7ae3f5e2}, {0x80000001, 0x0, 0x1c00000, 0x1, 0x9, 0x1}, {0x8, 0x5, 0x9, 0xfffffffe, 0x5, 0x62f}, {0x8001, 0x3, 0x0, 0xb, 0x1, 0x9e3b}, {0x40, 0xfffffffc, 0xc, 0x4, 0x9cad, 0x101}, {0xfffffffc, 0xa388a14b, 0x1, 0x6, 0x5, 0x3ff}, {0xffffffff, 0x1, 0x6, 0xc913, 0x401, 0x2}, {0x7ff, 0x3, 0xabf, 0x3cb, 0x9d, 0x3}, {0x7, 0x0, 0x10001, 0x80000000, 0x800, 0x400}, {0xaf1, 0x7f, 0x2, 0x9, 0x80000000, 0x3}, {0x8, 0x0, 0x2, 0x200, 0x80000001, 0xe32}, {0x2, 0x8, 0xce0, 0x71, 0x9, 0x9}, {0x0, 0x2, 0x101, 0x6, 0xfffffbff, 0x1}], [{0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {0x4, 0x1}, {0x4, 0x1}, {}, {}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x4}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x2}, {}, {0xf64cd08961e131e7}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x14750f306444a36}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x39ee92b2e05c055b}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x4}, {0x3}, {0x4, 0x1}, {0x1}, {0x460300743d89969c, 0x1}, {0x3}, {0x4}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x2d7ee143859a3e1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x1, 0xc196dd3e82dc6dcc}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x7, 0x1}, {}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x1dc0}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x18810100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r1, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x27, 0xa8, @random="e47729e329c51e5196b061d728778aa49275275a00ef8fd613b9d273014ec3db3a6bec"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x404c880}, 0x4014) (async) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x801, 0xe4340000}, 0x14}}, 0x2) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) landlock_restrict_self(0xffffffffffffffff, 0xc) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x10001000, 0x9, 0x0) (async) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) (async) 1.012423562s ago: executing program 3 (id=3648): syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x3}]}}}}}}}}, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904"], 0x0) 1.005729769s ago: executing program 1 (id=3649): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1ff000, 0x6, 0x2000007f, 0x1}, 0x50) ftruncate(r0, 0x35) 903.618253ms ago: executing program 1 (id=3650): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000300)="ceddd1", 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x18000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x81, 0x7f, 0x1, 'queue0\x00', 0x1}) syz_clone3(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ba3000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000a18000/0x2000)=nil, &(0x7f0000e1d000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) syz_open_dev$sg(0x0, 0xd, 0x553503) r3 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r4 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r5, &(0x7f00000010c0)=""/4096, 0x1000) io_uring_enter(r4, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000080)={{}, {0x0, 0x2710}}, 0x0) 788.106286ms ago: executing program 4 (id=3651): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x9, 0x4) r3 = geteuid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009740)=[{&(0x7f0000000600)={0x4a8, 0x3f, 0x22d, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x4, 0xf3}, @nested={0xb9, 0xbb, 0x0, 0x1, [@typed={0x14, 0x23, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x4, 0x2e}, @nested={0x4, 0x81}, @generic="673bf83c1bd94c9281e72e4583a3734cbcc6a6b451a4fda1f6183474077eef3451870476788e6c13cc0fc3d3d7eabc581fac186b72de6864c895d48bc9d35e55c40a98ef4a62b755e8b0202b70190235c4000ba3f9aa219d1224cf498edd735a0b45fefcdf906e8141cdc1c10a2779435cd4f2a851045a721f226bf5c6d2f5e3683592684e662fbd5b8e305c49", @nested={0x4, 0x68}, @typed={0x8, 0x9, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0x36d, 0x13b, 0x0, 0x1, [@nested={0x4, 0x2c}, @generic="663f98afc4124dfaedba25ebf2c36a3fa72791579cf441690ce5bfea5221bae40c040c7ab837dbc407f1b975c472472ea9015939a219c09fa9c0bde7b3c730de91fb907b3b38e1f9cbd79157367bc82a05c9637d8089cdf4f935cb0d0811453c000954ee964bafce9abae2bd0628f1661c8e6b37f5a70153e322d77d8069", @nested={0x2c1, 0x155, 0x0, 0x1, [@typed={0x8, 0x80, 0x0, 0x0, @pid}, @generic="9f27587af031fa4834efed1fca5a8ae0b7f91e8501ef4affad0af00e21299dacdf1d20ce04b2402242e211cc22cd96597e4744727e9f9bfe46cace1f54a63c18172bd2a0ca39f22d6473110b9165dc9adaa71d4b31fbe0a1313362aa13accfaf23d95f8744df2042d157c8ab1ef56ff7bb30003c4ad87edf962d82925662c72ff191759dced7c357f10abbdcadbd4f72a00c907de5684fc17537444b9f17afb6d4402ab37a3d6fae25c40d0952b08b10a5162356eac21fa532ff2c7b14f13055f0", @nested={0x1f4, 0x168, 0x0, 0x1, [@nested={0x189, 0x1, 0x0, 0x1, [@nested={0x4, 0x12b}, @typed={0x4, 0xd3}, @typed={0x8, 0x4d, 0x0, 0x0, @fd}, @generic="232da66cf2f54b14b4bca03ded55", @generic="022f25ad54a4ff0f9d066d6c8088c53cbe8247d46bbd087b15ce6a1717abaaf10ed12d062d516324404218867c03dd550e15bedacfeda2efcb0e7a0a18ed6cebada03085a807876cda5a2ccbef4b254b04bea560021a874c462c11f10198d5d817dbdc", @generic="eb60febd8ab1d78cdd1900b0bd74629fe65abec5739565d53937f19b1612aead3dff6e4bda7fc017fba40577f98b1bce1c59aa88f43451f3d2d26fdad2a4649a3d397b1fa82263385188d8c42cfebac33ab561974f70dcc7aef0c87f4083fba4ec42ffd232b952c8a90feea1f44592c7063dddb17e66f2abe670d239889979458730f252de7f4b2623d04703a17024a9e6100eab38cdfd197bd61c5c0564753262d90e372ef9bee5a94987a998ec518e8a205a5e6e360dab27a85830f7d1a80e36725a7e0ea87afcd31f95d371555fa842941e887607739bcd37e0eeccb7f955ee913aca", @nested={0x4, 0x3d}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r1}, @typed={0x14, 0x54, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x5a, 0x145, 0x0, 0x1, [@typed={0x8, 0xb6, 0x0, 0x0, @uid=r3}, @nested={0x4, 0x115}, @nested={0x4, 0x6d}, @nested={0x4, 0x83}, @nested={0x4, 0x92}, @generic="e60ed74a64388e37a9a304220d87b42866c6a07f5481aeaf1f2ab2adf7f6c65b1b5a9bfe470a68e8b1c95d83e37e936ebfd7a027293c005025ee36d7539e"]}, @typed={0x8, 0x34, 0x0, 0x0, @pid}]}]}, @generic="44aef74d5de93f6df06de488caf9efca1255d5dbc7881eddb8a87e81c054ac06ac7a4b"]}, @nested={0x68, 0xed, 0x0, 0x1, [@nested={0x55, 0xdb, 0x0, 0x1, [@generic="aab43d7c8923d0cfe5df93d0492c22143b7d1352f41de9c211e19f3fb4b8ba98d8dc98ef9d31214f50a4", @generic="82f6a4b2896b2e2f0ad9338f819fd652e8e256aba8a46f306c5860c18dcb2f", @typed={0x8, 0x3b, 0x0, 0x0, @fd=r1}]}, @typed={0xc, 0x4c, 0x0, 0x0, @u64=0x1}]}]}, 0x4a8}], 0x1, 0x0, 0x0, 0x4000007}, 0x20004800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000040)=0x1) 461.786416ms ago: executing program 5 (id=3652): getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000280)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8008}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}]}, 0x44}}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f00000002c0)=0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x32}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 336.2786ms ago: executing program 3 (id=3653): socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000010450c1251000000000001090224000100000000090400071903000000092100020301432d0009058103000400ff03624a751dff15ac8606b47ba537581eefaa8c3f9ba5dad47b259a5df89b9b0e32e7cad678044750eed100ccaaa1080a931537886da3ed142a8f0a47032aa315faf8baa6a2f2c73276250c2ad51f097c1523bfe5f230dc5336a60596"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = inotify_init1(0x80000) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0xa4000021) inotify_init() inotify_add_watch(r3, &(0x7f0000000100)='./file1\x00', 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r4 = inotify_init1(0x80800) inotify_add_watch(r4, &(0x7f0000000300)='./file1\x00', 0x10000200) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4e2603, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0xaf, 0x24000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x2, 0xfffffffffffffffa, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000080)={@host, 0x20000005}) set_mempolicy(0x6005, &(0x7f0000000080)=0x5, 0x7) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, 0x0, 0x5000) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=3654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c0000001b0a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040010) close(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) write$UHID_CREATE(r2, &(0x7f0000000500)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000240)=""/14, 0xe, 0x0, 0x4, 0x261d, 0x3, 0xc06}}, 0x120) readv(r2, &(0x7f0000000400)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) write$UHID_DESTROY(r2, &(0x7f0000000200), 0x4) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000040)={0x0, &(0x7f0000000540)=[@cpuid={0x64, 0x18, {0x1f}}], 0x18}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000080)) ioctl$KVM_RUN(r6, 0xae80, 0x0) kernel console output (not intermixed with test programs): sc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.357241][ T5781] usb 5-1: config 2 has an invalid interface number: 207 but max is 1 [ 783.387136][ T5781] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 783.418561][ T5781] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 783.449260][ T5781] usb 5-1: config 2 has no interface number 0 [ 783.456687][ T5781] usb 5-1: config 2 interface 207 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 783.471902][ T5781] usb 5-1: config 2 interface 207 has no altsetting 0 [ 783.481959][ T5781] usb 5-1: New USB device found, idVendor=1410, idProduct=9010, bcdDevice=95.7e [ 783.492430][ T5781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.502120][ T5781] usb 5-1: Product: syz [ 783.506991][ T5781] usb 5-1: Manufacturer: syz [ 783.511666][ T5781] usb 5-1: SerialNumber: syz [ 783.564080][T18433] syz_tun: entered allmulticast mode [ 783.643131][T14114] IPVS: stop unused estimator thread 0... [ 783.781551][T18427] tipc: Enabling of bearer rejected, failed to enable media [ 783.879938][T18286] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 783.888500][ T4950] Bluetooth: hci2: command tx timeout [ 783.954146][T18286] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 783.989406][T18286] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 784.052984][T18286] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 784.062885][T12656] mcp2221 0003:04D8:00DD.0040: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 784.182411][T18286] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 784.239320][T18286] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 784.288423][T18419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.338717][T18419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.410183][T18286] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 784.467978][T18286] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 784.512435][T17080] usb 1-1: USB disconnect, device number 81 [ 784.704471][ T5725] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 784.741943][T18286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.796726][T18286] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.831342][T14114] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.838527][T14114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.878246][ T5725] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 784.893646][ T5725] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 784.906185][T14114] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.913377][T14114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.927582][ T5725] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 784.954078][ T5725] usb 4-1: config 0 interface 0 has no altsetting 0 [ 784.970915][ T5725] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 784.987291][ T5725] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 785.001154][ T5725] usb 4-1: config 0 interface 0 has no altsetting 0 [ 785.012866][ T5725] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 785.022650][ T5725] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 785.066649][ T5725] usb 4-1: config 0 interface 0 has no altsetting 0 [ 785.082612][ T5725] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 785.100785][ T5725] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 785.127210][ T5725] usb 4-1: config 0 interface 0 has no altsetting 0 [ 785.147524][ T5725] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 785.183371][ T5725] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 785.202148][T18286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.231732][ T5725] usb 4-1: config 0 interface 0 has no altsetting 0 [ 785.287076][ T5725] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 785.307581][ T5725] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 785.342457][T18286] veth0_vlan: entered promiscuous mode [ 785.356575][ T5725] usb 4-1: config 0 interface 0 has no altsetting 0 [ 785.382300][ T5725] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 785.399463][T18286] veth1_vlan: entered promiscuous mode [ 785.414799][ T5725] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 785.453162][ T5725] usb 4-1: config 0 interface 0 has no altsetting 0 [ 785.477409][ T5725] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 785.502875][ T5725] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 785.515008][T18286] veth0_macvtap: entered promiscuous mode [ 785.529156][ T5725] usb 4-1: config 0 interface 0 has no altsetting 0 [ 785.536167][T18286] veth1_macvtap: entered promiscuous mode [ 785.546356][ T5725] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 785.561043][ T5725] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 785.581294][T18286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.589403][ T5725] usb 4-1: Product: syz [ 785.593713][ T5725] usb 4-1: Manufacturer: syz [ 785.607045][ T5725] usb 4-1: SerialNumber: syz [ 785.616158][T18286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.625999][ T5725] usb 4-1: config 0 descriptor?? [ 785.648842][ T5725] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 785.658372][T14115] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.687570][T14115] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.734303][T14115] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.766769][T14115] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.858441][ T5781] qmi_wwan 5-1:2.207: skipping garbage [ 785.882790][ T5781] qmi_wwan 5-1:2.207: skipping garbage [ 785.911812][ T5781] qmi_wwan 5-1:2.207: bogus CDC Union: master=0, slave=0 [ 785.950422][ T5781] qmi_wwan 5-1:2.207: probe with driver qmi_wwan failed with error -22 [ 785.978411][T14115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.990278][ T5781] usb 5-1: USB disconnect, device number 54 [ 786.007157][T14115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.064710][ T809] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 786.097432][T18491] syzkaller1: entered promiscuous mode [ 786.103337][T18491] syzkaller1: entered allmulticast mode [ 786.112810][T14113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.129106][T14113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.219560][T18493] syzkaller0: entered promiscuous mode [ 786.234385][ T809] usb 3-1: Using ep0 maxpacket: 32 [ 786.250551][ T809] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 786.269700][T18493] syzkaller0: entered allmulticast mode [ 786.288187][ T809] usb 3-1: config 0 interface 0 has no altsetting 0 [ 786.310288][ T809] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 786.341609][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.379630][ T809] usb 3-1: config 0 descriptor?? [ 787.054455][ T5367] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 787.224470][ T5367] usb 2-1: Using ep0 maxpacket: 8 [ 787.237051][ T5367] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 787.262093][ T5367] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 787.285117][ T5367] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 787.309800][ T809] corsair-cpro 0003:1B1C:0C10.0041: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 787.312046][ T5367] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 787.360899][ T5367] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 787.376862][ T5367] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 787.420842][ T5367] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.464754][ T809] corsair-cpro 0003:1B1C:0C10.0041: probe with driver corsair-cpro failed with error -5 [ 787.669000][ T5367] usb 2-1: usb_control_msg returned -32 [ 787.671627][ T809] usb 3-1: USB disconnect, device number 112 [ 787.680063][ T5367] usbtmc 2-1:16.0: can't read capabilities [ 788.180302][T18554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.242513][T18554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.299629][T18554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.329228][T18554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.388382][T18554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.421329][T18554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.459660][T18554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.489342][T18554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.543995][T18554] sctp: [Deprecated]: syz.1.3282 (pid 18554) Use of int in max_burst socket option deprecated. [ 788.543995][T18554] Use struct sctp_assoc_value instead [ 788.735643][T12809] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 788.937207][T12809] usb 1-1: not running at top speed; connect to a high speed hub [ 788.970743][T12809] usb 1-1: config 1 has an invalid descriptor of length 36, skipping remainder of the config [ 789.001532][T12809] usb 1-1: New USB device found, idVendor=04b4, idProduct=9320, bcdDevice= 0.40 [ 789.026091][T12809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.045337][T12809] usb 1-1: Product: syz [ 789.053947][T12809] usb 1-1: Manufacturer: syz [ 789.072685][T12809] usb 1-1: SerialNumber: syz [ 789.204363][ T5770] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 789.374352][ T5770] usb 3-1: Using ep0 maxpacket: 8 [ 789.392754][ T5770] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.426223][ T5770] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 789.447477][ T5770] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 789.465697][ T5770] usb 3-1: Product: syz [ 789.481380][ T5770] usb 3-1: Manufacturer: syz [ 789.499801][ T5770] usb 3-1: SerialNumber: syz [ 789.535225][ T5770] usb 3-1: config 0 descriptor?? [ 789.558830][ T5770] imon_raw 3-1:0.0: IR endpoint missing [ 789.798753][T18581] vlan2: entered promiscuous mode [ 789.822060][T18581] bond0: entered promiscuous mode [ 789.835445][T18581] bond_slave_0: entered promiscuous mode [ 789.859969][T18581] bond_slave_1: entered promiscuous mode [ 790.002599][ T5781] usb 3-1: USB disconnect, device number 113 [ 790.087195][ T809] usb 2-1: USB disconnect, device number 117 [ 790.214667][T18594] input: syz0 as /devices/virtual/input/input98 [ 790.474407][T17080] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 790.654083][T17080] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 790.669104][T17080] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.677605][T17080] usb 5-1: Product: syz [ 790.682100][T17080] usb 5-1: Manufacturer: syz [ 790.689788][T17080] usb 5-1: SerialNumber: syz [ 790.705963][T17080] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 790.730283][ T5367] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 790.945134][ C0] usb 5-1: ath9k_htc: invalid pkt_len (fefd) [ 790.984417][ T809] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 791.109839][T12809] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 791.124331][T12809] usb 1-1: MIDIStreaming interface descriptor not found [ 791.134574][T17080] usb 2-1: new low-speed USB device number 118 using dummy_hcd [ 791.159675][ T809] usb 3-1: unable to get BOS descriptor or descriptor too short [ 791.182828][ T809] usb 3-1: config index 0 descriptor too short (expected 2182, got 134) [ 791.217763][ T809] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 791.238559][ T809] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 791.253665][T12809] usb 1-1: USB disconnect, device number 82 [ 791.260686][ T809] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 791.272158][ T809] usb 3-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 791.287349][T17080] usb 2-1: device descriptor read/64, error -71 [ 791.310224][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.340890][ T809] usb 3-1: Product: syz [ 791.352270][ T809] usb 3-1: Manufacturer: syz [ 791.361809][T18607] ip6tnl0: Caught tx_queue_len zero misconfig [ 791.365304][ T5770] usb 5-1: USB disconnect, device number 55 [ 791.381403][ T809] usb 3-1: SerialNumber: syz [ 791.411850][ T809] usb 3-1: config 0 descriptor?? [ 791.452649][T16620] udevd[16620]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 791.463312][ T809] usb 3-1: unit 5 not found! [ 791.517869][T18605] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 791.524080][T18605] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 791.530274][T18605] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 791.537664][T18605] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 791.545054][T18605] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 791.552062][T18605] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 791.554535][T17080] usb 2-1: new low-speed USB device number 119 using dummy_hcd [ 791.567579][T18605] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 791.582200][T18605] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 791.588265][T18605] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 791.598004][T18605] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 791.610947][T18611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.621314][T18611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.646480][ T809] usb 3-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 791.648445][T18611] Invalid argument reading file caps for ./file0 [ 791.677577][ T809] usb 3-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 791.694459][T17080] usb 2-1: device descriptor read/64, error -71 [ 791.742574][ T809] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 791.763661][ T809] usb 3-1: USB disconnect, device number 114 [ 791.799429][ T5641] udevd[5641]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 791.805871][ T5367] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 791.824606][T17080] usb usb2-port1: attempt power cycle [ 791.846703][ T5367] ath9k_htc: Failed to initialize the device [ 791.853247][ T5770] usb 5-1: ath9k_htc: USB layer deinitialized [ 791.940721][T18618] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3307'. [ 792.005727][T18622] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 792.174510][T17080] usb 2-1: new low-speed USB device number 120 using dummy_hcd [ 792.206978][T17080] usb 2-1: device descriptor read/8, error -71 [ 792.464374][T17080] usb 2-1: new low-speed USB device number 121 using dummy_hcd [ 792.495389][T18642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.521419][T18642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.539458][T17080] usb 2-1: device descriptor read/8, error -71 [ 792.618735][T18638] netlink: 'syz.2.3311': attribute type 1 has an invalid length. [ 792.694697][T17080] usb usb2-port1: unable to enumerate USB device [ 793.409003][T18664] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3318'. [ 793.564750][ T5643] Bluetooth: hci0: command 0x0c1a tx timeout [ 793.564766][T15127] Bluetooth: hci5: command 0x0c1a tx timeout [ 793.576874][ T4950] Bluetooth: hci4: command 0x0c1a tx timeout [ 793.608816][T18670] Cannot find add_set index 0 as target [ 793.644685][ T4950] Bluetooth: hci2: command 0x0c1a tx timeout [ 793.836307][T18673] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3319'. [ 793.954435][ T5770] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 794.146059][ T5770] usb 5-1: config index 0 descriptor too short (expected 292, got 36) [ 794.164163][ T5770] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 794.203503][ T5770] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 794.254527][ T5770] usb 5-1: config 0 interface 0 has no altsetting 0 [ 794.283317][ T5770] usb 5-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 794.320704][ T5770] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.346676][ T5770] usb 5-1: config 0 descriptor?? [ 794.532078][T18688] lo: Caught tx_queue_len zero misconfig [ 794.600992][T18688] netlink: 'syz.3.3325': attribute type 8 has an invalid length. [ 794.624379][T12809] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 794.690631][T18688] sch_fq: defrate 0 ignored. [ 794.779652][ T5770] hid (null): nested delimiters [ 794.789058][T12809] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 794.805887][T12809] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 794.817469][ T5770] hid (null): bogus close delimiter [ 794.852366][T12809] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 794.898608][T12809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.935828][T12809] usb 2-1: Product: syz [ 794.940432][ T5770] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5012.0042/input/input99 [ 794.956844][T12809] usb 2-1: Manufacturer: syz [ 794.965441][T12809] usb 2-1: SerialNumber: syz [ 795.036878][T12809] usb 2-1: 0:1 : does not exist [ 795.067865][T18691] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3326'. [ 795.095541][T18691] syzkaller0: entered promiscuous mode [ 795.125101][T18691] syzkaller0: entered allmulticast mode [ 795.164868][ T5770] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5012.0042/input/input100 [ 795.201366][T18684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.233241][T18684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.257803][T18684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.269175][T18684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.303249][T18691] tipc: Enabled bearer , priority 0 [ 795.332149][T18684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.344521][ T5770] kye 0003:0458:5012.0042: input,hiddev1,hidraw0: USB HID v7f.fd Device [HID 0458:5012] on usb-dummy_hcd.4-1/input0 [ 795.387395][T18690] tipc: Resetting bearer [ 795.425881][ T5770] usb 5-1: USB disconnect, device number 56 [ 795.440346][T18684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.501063][T18684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.537289][T18692] fido_id[18692]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 795.554659][T18684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.599216][T18684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.626333][T18690] tipc: Disabling bearer [ 795.652313][T18684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.671659][ T4950] Bluetooth: hci4: command 0x0c1a tx timeout [ 795.679752][ T5643] Bluetooth: hci0: command 0x0c1a tx timeout [ 795.724732][ T5643] Bluetooth: hci2: command 0x0c1a tx timeout [ 796.044825][T17080] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 796.109691][T18705] FAULT_INJECTION: forcing a failure. [ 796.109691][T18705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 796.127937][T18705] CPU: 0 UID: 0 PID: 18705 Comm: syz.0.3331 Tainted: G L syzkaller #0 PREEMPT(full) [ 796.127965][T18705] Tainted: [L]=SOFTLOCKUP [ 796.127971][T18705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 796.127979][T18705] Call Trace: [ 796.127985][T18705] [ 796.127993][T18705] dump_stack_lvl+0xe8/0x150 [ 796.128020][T18705] should_fail_ex+0x412/0x560 [ 796.128047][T18705] _copy_from_user+0x2d/0xb0 [ 796.128069][T18705] __sys_bpf+0x229/0x950 [ 796.128095][T18705] ? __pfx___sys_bpf+0x10/0x10 [ 796.128126][T18705] ? ksys_write+0x242/0x270 [ 796.128152][T18705] ? __pfx_ksys_write+0x10/0x10 [ 796.128177][T18705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.128197][T18705] __x64_sys_bpf+0x7c/0x90 [ 796.128217][T18705] do_syscall_64+0x174/0x580 [ 796.128236][T18705] ? trace_irq_disable+0x3b/0x140 [ 796.128258][T18705] ? clear_bhb_loop+0x40/0x90 [ 796.128278][T18705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.128293][T18705] RIP: 0033:0x7f7e3579ce59 [ 796.128304][T18705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.128313][T18705] RSP: 002b:00007f7e365df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 796.128329][T18705] RAX: ffffffffffffffda RBX: 00007f7e35a15fa0 RCX: 00007f7e3579ce59 [ 796.128341][T18705] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 796.128351][T18705] RBP: 00007f7e365df090 R08: 0000000000000000 R09: 0000000000000000 [ 796.128361][T18705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.128370][T18705] R13: 00007f7e35a16038 R14: 00007f7e35a15fa0 R15: 00007f7e35b3fa48 [ 796.128397][T18705] [ 796.365798][ T5770] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 796.423857][T17080] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 796.432995][T17080] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.441071][T17080] usb 3-1: Product: syz [ 796.444977][T12809] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 796.445351][T17080] usb 3-1: Manufacturer: syz [ 796.457085][T17080] usb 3-1: SerialNumber: syz [ 796.462982][T12809] usb 2-1: unit 13 not found! [ 796.471282][T17080] usb 3-1: config 0 descriptor?? [ 796.490925][T17080] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 796.509181][T17080] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 796.519689][T17080] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 796.531777][T17080] usb 3-1: media controller created [ 796.533441][ T5770] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.571871][ T5770] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 796.593903][T12809] usb 2-1: USB disconnect, device number 122 [ 796.594707][T17080] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 796.604343][ T809] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 796.625135][ T5770] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 796.641264][ T5770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.674040][ T5770] usb 5-1: Product: syz [ 796.678496][T18709] sock: sock_set_timeout: `syz.1.3333' (pid 18709) tries to set negative timeout [ 796.683109][ T5645] udevd[5645]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 796.705262][ T5770] usb 5-1: Manufacturer: syz [ 796.710212][ T5770] usb 5-1: SerialNumber: syz [ 796.751613][ T5770] cdc_ncm 5-1:1.0: skipping garbage [ 796.764521][ T5770] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 796.785377][ T809] usb 1-1: Using ep0 maxpacket: 8 [ 796.793463][ T809] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 796.804511][ T5770] cdc_ncm 5-1:1.0: bind() failure [ 796.812670][ T809] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1021 [ 796.829833][ T5770] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 796.836960][T17080] DVB: Unable to find symbol mt352_attach() [ 796.855953][ T809] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 796.866611][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.879767][ T5770] cdc_ncm 5-1:1.1: bind() failure [ 796.890792][ T809] usb 1-1: Product: syz [ 796.902255][ T809] usb 1-1: Manufacturer: syz [ 796.913210][ T809] usb 1-1: SerialNumber: syz [ 796.939922][T17080] DVB: Unable to find symbol nxt6000_attach() [ 796.948544][T17080] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 796.966090][ T5770] usb 5-1: USB disconnect, device number 57 [ 796.972771][T17080] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input101 [ 797.008582][T17080] dvb-usb: schedule remote query interval to 1000 msecs. [ 797.027051][T17080] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 797.055562][T17080] dvb-usb: bulk message failed: -22 (7/0) [ 797.061422][T17080] dvb-usb: bulk message failed: -22 (7/0) [ 797.073440][T17080] usb 3-1: USB disconnect, device number 115 [ 797.152975][T18707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.188092][T18707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.188754][T17080] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 797.207964][ T30] audit: type=1326 audit(1780370907.090:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18716 comm="syz.3.3336" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa7f759ce59 code=0x0 [ 797.237509][T18707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.248302][T18707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.270154][ T809] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 797.284380][ T809] cdc_ncm 1-1:1.0: bind() failure [ 797.298848][ T809] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 797.314102][ T809] cdc_ncm 1-1:1.1: bind() failure [ 797.340235][ T809] usb 1-1: USB disconnect, device number 83 [ 797.435528][T18722] gre0: entered promiscuous mode [ 797.440507][T18722] gre0: entered allmulticast mode [ 797.595735][T18726] FAULT_INJECTION: forcing a failure. [ 797.595735][T18726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.608914][T18726] CPU: 0 UID: 0 PID: 18726 Comm: syz.4.3338 Tainted: G L syzkaller #0 PREEMPT(full) [ 797.608941][T18726] Tainted: [L]=SOFTLOCKUP [ 797.608947][T18726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 797.608957][T18726] Call Trace: [ 797.608964][T18726] [ 797.608972][T18726] dump_stack_lvl+0xe8/0x150 [ 797.609000][T18726] should_fail_ex+0x412/0x560 [ 797.609023][T18726] _copy_from_iter+0x1d3/0x1670 [ 797.609046][T18726] ? rcu_is_watching+0x15/0xb0 [ 797.609070][T18726] ? __pfx__copy_from_iter+0x10/0x10 [ 797.609092][T18726] ? netlink_sendmsg+0x650/0xb40 [ 797.609116][T18726] ? skb_put+0x11b/0x210 [ 797.609139][T18726] netlink_sendmsg+0x6c0/0xb40 [ 797.609167][T18726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 797.609192][T18726] ? aa_sock_msg_perm+0xf1/0x1b0 [ 797.609217][T18726] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 797.609242][T18726] ____sys_sendmsg+0x972/0x9f0 [ 797.609259][T18726] ? __might_fault+0xaf/0x130 [ 797.609284][T18726] ? __pfx_____sys_sendmsg+0x10/0x10 [ 797.609317][T18726] ? import_iovec+0x73/0xa0 [ 797.609339][T18726] ___sys_sendmsg+0x2a5/0x360 [ 797.609354][T18726] ? __lock_acquire+0x6b5/0x2cf0 [ 797.609375][T18726] ? __pfx____sys_sendmsg+0x10/0x10 [ 797.609421][T18726] ? __fget_files+0x2a/0x420 [ 797.609440][T18726] ? __fget_files+0x3a0/0x420 [ 797.609466][T18726] __x64_sys_sendmsg+0x1bd/0x2a0 [ 797.609485][T18726] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 797.609509][T18726] ? __pfx_ksys_write+0x10/0x10 [ 797.609538][T18726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.609556][T18726] do_syscall_64+0x174/0x580 [ 797.609572][T18726] ? trace_irq_disable+0x3b/0x140 [ 797.609593][T18726] ? clear_bhb_loop+0x40/0x90 [ 797.609613][T18726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.609628][T18726] RIP: 0033:0x7f137459ce59 [ 797.609645][T18726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.609658][T18726] RSP: 002b:00007f1375445028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 797.609676][T18726] RAX: ffffffffffffffda RBX: 00007f1374815fa0 RCX: 00007f137459ce59 [ 797.609687][T18726] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 797.609697][T18726] RBP: 00007f1375445090 R08: 0000000000000000 R09: 0000000000000000 [ 797.609707][T18726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.609716][T18726] R13: 00007f1374816038 R14: 00007f1374815fa0 R15: 00007f137493fa48 [ 797.609742][T18726] [ 797.877521][ T5643] Bluetooth: hci4: command 0x0c1a tx timeout [ 797.883629][ T5643] Bluetooth: hci0: command 0x0c1a tx timeout [ 797.889761][ T5643] Bluetooth: hci2: command 0x0c1a tx timeout [ 798.190618][T18730] netlink: 'syz.3.3340': attribute type 1 has an invalid length. [ 798.260492][T18730] bond2: entered promiscuous mode [ 798.265282][T18739] FAULT_INJECTION: forcing a failure. [ 798.265282][T18739] name failslab, interval 1, probability 0, space 0, times 0 [ 798.268497][T18730] 8021q: adding VLAN 0 to HW filter on device bond2 [ 798.304233][T18739] CPU: 0 UID: 0 PID: 18739 Comm: syz.0.3342 Tainted: G L syzkaller #0 PREEMPT(full) [ 798.304257][T18739] Tainted: [L]=SOFTLOCKUP [ 798.304262][T18739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 798.304270][T18739] Call Trace: [ 798.304276][T18739] [ 798.304283][T18739] dump_stack_lvl+0xe8/0x150 [ 798.304304][T18739] should_fail_ex+0x412/0x560 [ 798.304323][T18739] should_failslab+0xa8/0x100 [ 798.304339][T18739] __kmalloc_noprof+0xe8/0x760 [ 798.304357][T18739] ? bpf_test_init+0x9f/0x150 [ 798.304375][T18739] ? __lock_acquire+0x6b5/0x2cf0 [ 798.304391][T18739] bpf_test_init+0x9f/0x150 [ 798.304410][T18739] bpf_prog_test_run_skb+0x392/0x2260 [ 798.304442][T18739] ? __fget_files+0x3a0/0x420 [ 798.304456][T18739] ? __fget_files+0x2a/0x420 [ 798.304474][T18739] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 798.304492][T18739] bpf_prog_test_run+0x2c7/0x340 [ 798.304509][T18739] __sys_bpf+0x643/0x950 [ 798.304529][T18739] ? __pfx___sys_bpf+0x10/0x10 [ 798.304557][T18739] ? ksys_write+0x242/0x270 [ 798.304576][T18739] ? __pfx_ksys_write+0x10/0x10 [ 798.304596][T18739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.304611][T18739] __x64_sys_bpf+0x7c/0x90 [ 798.304628][T18739] do_syscall_64+0x174/0x580 [ 798.304643][T18739] ? trace_irq_disable+0x3b/0x140 [ 798.304660][T18739] ? clear_bhb_loop+0x40/0x90 [ 798.304676][T18739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.304690][T18739] RIP: 0033:0x7f7e3579ce59 [ 798.304705][T18739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.304718][T18739] RSP: 002b:00007f7e365df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 798.304733][T18739] RAX: ffffffffffffffda RBX: 00007f7e35a15fa0 RCX: 00007f7e3579ce59 [ 798.304744][T18739] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 798.304753][T18739] RBP: 00007f7e365df090 R08: 0000000000000000 R09: 0000000000000000 [ 798.304763][T18739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.304772][T18739] R13: 00007f7e35a16038 R14: 00007f7e35a15fa0 R15: 00007f7e35b3fa48 [ 798.304797][T18739] [ 798.861776][T18035] syz_tun (unregistering): left allmulticast mode [ 798.904751][T17080] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 799.021449][T18752] RDS: rds_bind could not find a transport for ::ffff:172.20.20.55, load rds_tcp or rds_rdma? [ 799.085243][T17080] usb 5-1: Using ep0 maxpacket: 16 [ 799.098069][T17080] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 799.118389][T14116] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.119121][T17080] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.158222][T17080] usb 5-1: Product: syz [ 799.171245][T17080] usb 5-1: Manufacturer: syz [ 799.183701][T17080] usb 5-1: SerialNumber: syz [ 799.205674][T17080] r8152-cfgselector 5-1: Unknown version 0x0000 [ 799.216531][T17080] r8152-cfgselector 5-1: config 0 descriptor?? [ 799.492005][T14116] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.557052][ T5643] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 799.581588][ T5643] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 799.593223][ T5643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 799.607402][ T5643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 799.615558][ T5643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 799.669923][ T5367] r8152-cfgselector 5-1: USB disconnect, device number 58 [ 799.840499][T14116] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.020944][T14116] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.064520][ T809] usb 2-1: new low-speed USB device number 123 using dummy_hcd [ 800.228298][ T809] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 800.245979][ T809] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 800.289294][ T809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.307458][ T809] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 800.329520][ T809] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 800.358801][ T809] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 800.399316][ T809] usb 2-1: string descriptor 0 read error: -22 [ 800.411106][ T809] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 800.438609][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.483708][ T809] usb 2-1: config 0 descriptor?? [ 800.509635][ T809] hub 2-1:0.0: bad descriptor, ignoring hub [ 800.528414][T17080] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 800.555621][ T809] hub 2-1:0.0: probe with driver hub failed with error -5 [ 800.756388][T17080] usb 3-1: config index 0 descriptor too short (expected 39074, got 36) [ 800.791194][T17080] usb 3-1: config 143 has an invalid descriptor of length 105, skipping remainder of the config [ 800.792651][T18787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3352'. [ 800.833268][T17080] usb 3-1: config 143 has 0 interfaces, different from the descriptor's value: 28 [ 800.859979][T17080] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 800.877707][T14116] bridge_slave_1: left allmulticast mode [ 800.886585][T17080] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.895837][T14116] bridge_slave_1: left promiscuous mode [ 800.906551][T14116] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.936960][T14116] bridge_slave_0: left allmulticast mode [ 800.950318][T14116] bridge_slave_0: left promiscuous mode [ 800.970757][T14116] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.413463][T14116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 801.445777][T14116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 801.459918][T14116] bond0 (unregistering): Released all slaves [ 801.639279][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1 [ 801.646035][ T5643] Bluetooth: hci1: command tx timeout [ 801.733278][T18763] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.749194][T18763] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.766404][T18763] bridge_slave_0: entered allmulticast mode [ 801.781926][T18763] bridge_slave_0: entered promiscuous mode [ 801.819266][T18763] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.845636][T18763] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.860303][T18763] bridge_slave_1: entered allmulticast mode [ 801.876760][T18763] bridge_slave_1: entered promiscuous mode [ 802.008710][T18763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.036855][T18763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.193938][T14116] hsr_slave_0: left promiscuous mode [ 802.208185][T14116] hsr_slave_1: left promiscuous mode [ 802.222422][T14116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 802.239614][T14116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 802.258894][T14116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 802.269237][T14116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 802.316543][T14116] veth1_macvtap: left promiscuous mode [ 802.329444][T14116] veth0_macvtap: left promiscuous mode [ 802.343268][T14116] veth1_vlan: left promiscuous mode [ 802.362489][T14116] veth0_vlan: left promiscuous mode [ 802.917828][T14116] team0 (unregistering): Port device team_slave_1 removed [ 802.934639][ T5770] usb 2-1: USB disconnect, device number 123 [ 802.955760][T14116] team0 (unregistering): Port device team_slave_0 removed [ 803.138206][T17080] usb 3-1: string descriptor 0 read error: -71 [ 803.165980][T17080] usb 3-1: USB disconnect, device number 116 [ 803.243558][ T9] usb 2-1: new low-speed USB device number 124 using dummy_hcd [ 803.384981][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2 [ 803.407399][ T9] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 803.426108][T18763] team0: Port device team_slave_0 added [ 803.438618][ T9] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 803.466430][T18763] team0: Port device team_slave_1 added [ 803.489437][ T9] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 803.515739][ T9] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 803.537118][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.577038][T18831] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 803.643747][T18763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.654123][T18837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.667853][T18763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.736429][T18763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 803.747656][ T5643] Bluetooth: hci1: command tx timeout [ 803.778290][T18763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 803.797215][ T9] usb 2-1: string descriptor 0 read error: -71 [ 803.803163][T18763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.910134][T18763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.999150][ T5770] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 804.115977][ T9] usb 2-1: USB disconnect, device number 124 [ 804.169663][ T5770] usb 3-1: Using ep0 maxpacket: 32 [ 804.186228][T18763] hsr_slave_0: entered promiscuous mode [ 804.209464][ T5770] usb 3-1: unable to get BOS descriptor or descriptor too short [ 804.226891][T18763] hsr_slave_1: entered promiscuous mode [ 804.244431][ T5770] usb 3-1: config 7 has an invalid interface number: 187 but max is 0 [ 804.260568][T18763] debugfs: 'hsr0' already exists in 'hsr' [ 804.280544][ T5770] usb 3-1: config 7 has no interface number 0 [ 804.287071][T18763] Cannot create hsr debugfs directory [ 804.307594][ T5770] usb 3-1: config 7 interface 187 altsetting 6 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 804.345901][ T5770] usb 3-1: config 7 interface 187 altsetting 6 bulk endpoint 0x8F has invalid maxpacket 32 [ 804.379864][ T5770] usb 3-1: config 7 interface 187 has no altsetting 0 [ 804.420050][ T5770] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 804.456041][ T5770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.497864][ T5770] usb 3-1: Product: syz [ 804.507192][ T5770] usb 3-1: Manufacturer: syz [ 804.512660][T18853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.517000][ T5770] usb 3-1: SerialNumber: syz [ 804.541518][T18837] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 804.550915][T18853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.596022][T18853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.620733][T18853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.662959][T18853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.696067][T18853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.823577][ T5770] usb 3-1: Unknown endpoint type found, address 0x07 [ 804.840962][ T5770] usb 3-1: Not enough endpoints found in device, aborting! [ 804.983332][T18837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3361'. [ 805.016077][T18837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3361'. [ 805.082675][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3 [ 805.106186][T18839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 805.150439][T18837] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 805.150439][T18837] Please contact the netfilter-devel mailing list or update your nftables rules. [ 805.209045][ T9] usb 3-1: USB disconnect, device number 117 [ 805.307673][T18763] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 805.351042][T18763] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 805.386865][T18763] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 805.423306][T18763] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 805.452312][T18763] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 805.501780][T18763] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 805.538868][T18763] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 805.603715][T18763] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 805.805138][ T5643] Bluetooth: hci1: command tx timeout [ 805.905481][T18763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.957711][T18763] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.011668][T14115] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.018882][T14115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.078859][T14113] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.086035][T14113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.299691][T18902] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 806.306251][T18902] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 806.431194][T18898] netlink: 'syz.3.3370': attribute type 4 has an invalid length. [ 806.458380][T18763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.468266][T18898] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3370'. [ 806.507271][T18910] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3367'. [ 806.540759][T18902] vhci_hcd vhci_hcd.0: Device attached [ 806.584534][ T809] usb 3-1: new low-speed USB device number 118 using dummy_hcd [ 806.608464][T18763] veth0_vlan: entered promiscuous mode [ 806.669850][T18763] veth1_vlan: entered promiscuous mode [ 806.756643][ T809] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 806.776792][T12809] usb 36-1: SetAddress Request (2) to port 0 [ 806.816646][ T809] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 806.832668][T12809] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 806.850318][T18763] veth0_macvtap: entered promiscuous mode [ 806.880366][ T809] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 806.915243][T18763] veth1_macvtap: entered promiscuous mode [ 806.920572][ T809] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 806.966710][T18918] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3374'. [ 807.046088][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.049667][T18763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.114657][T18763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.147144][T18908] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 807.177539][T14113] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.228391][T14113] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.253030][ T30] audit: type=1400 audit(1780370917.140:1398): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=18921 comm="syz.4.3375" [ 807.290216][T14113] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.327031][T18906] vhci_hcd: connection reset by peer [ 807.339633][T14113] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.349054][T14115] vhci_hcd vhci_hcd.1: stop threads [ 807.367000][ T5295] 8021q: adding VLAN 0 to HW filter on device eth4 [ 807.376532][T18926] fuse: Bad value for 'rootmode' [ 807.391703][ T809] usb 3-1: string descriptor 0 read error: -71 [ 807.402505][T14115] vhci_hcd vhci_hcd.1: release socket [ 807.417685][T14115] vhci_hcd vhci_hcd.1: disconnect device [ 807.581025][T18927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.733601][T18927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.747186][ T809] usb 3-1: USB disconnect, device number 118 [ 807.861318][T18930] input: syz0 as /devices/virtual/input/input103 [ 807.886357][ T5643] Bluetooth: hci1: command tx timeout [ 807.899141][T18927] netlink: 'syz.3.3376': attribute type 1 has an invalid length. [ 808.157404][T18927] 8021q: adding VLAN 0 to HW filter on device bond3 [ 808.259294][T18937] bond3: (slave geneve2): making interface the new active one [ 808.295802][T18937] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 808.372436][T14116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.405065][T14116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.527894][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.535910][T14116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.536342][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.583801][T14116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.852775][T18937] syz.3.3376 (18937) used greatest stack depth: 18680 bytes left [ 809.219004][T18973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3385'. [ 809.766970][ T9] usb 3-1: new low-speed USB device number 119 using dummy_hcd [ 809.888716][T18996] fuse: Bad value for 'fd' [ 809.939263][ T9] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 809.958238][ T9] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 809.971968][ T9] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 809.994506][ T9] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 810.014412][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.029849][T18983] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 810.178399][T19005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.189893][T19005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.225042][ T5770] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 810.280135][ T9] usb 3-1: string descriptor 0 read error: -71 [ 810.396099][ T5770] usb 5-1: Using ep0 maxpacket: 8 [ 810.423047][ T5770] usb 5-1: config 1 has an invalid interface number: 216 but max is 0 [ 810.442222][ T5770] usb 5-1: config 1 has no interface number 0 [ 810.448336][ T9] usb 3-1: USB disconnect, device number 119 [ 810.494390][ T5770] usb 5-1: config 1 interface 216 has no altsetting 0 [ 810.517521][ T5770] usb 5-1: New USB device found, idVendor=03f0, idProduct=1efa, bcdDevice=d9.f7 [ 810.532386][ T5770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.541396][ T5770] usb 5-1: Product: syz [ 810.545887][ T5770] usb 5-1: Manufacturer: syz [ 810.550562][ T5770] usb 5-1: SerialNumber: syz [ 810.773273][T18998] xt_CT: You must specify a L4 protocol and not use inversions on it [ 810.782017][ T5725] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 810.822200][ T5770] usb 5-1: USB disconnect, device number 59 [ 810.957511][ T5725] usb 2-1: unable to get BOS descriptor or descriptor too short [ 810.974905][ T5725] usb 2-1: not running at top speed; connect to a high speed hub [ 810.999142][ T5725] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 811.024499][ T5725] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 811.038596][ T5725] usb 2-1: string descriptor 0 read error: -22 [ 811.047407][ T5725] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 811.079270][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.112124][ T5725] usb 2-1: 0:2 : does not exist [ 811.666161][T19028] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3399'. [ 811.697802][T19028] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3399'. [ 811.751652][T19027] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 811.850498][T19032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 811.965224][T12809] usb 36-1: device descriptor read/8, error -110 [ 812.171923][T19046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.209963][T19030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.211107][T19050] FAULT_INJECTION: forcing a failure. [ 812.211107][T19050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.221948][T19046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.238723][T19050] CPU: 0 UID: 0 PID: 19050 Comm: syz.4.3406 Tainted: G L syzkaller #0 PREEMPT(full) [ 812.238754][T19050] Tainted: [L]=SOFTLOCKUP [ 812.238759][T19050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 812.238769][T19050] Call Trace: [ 812.238776][T19050] [ 812.238784][T19050] dump_stack_lvl+0xe8/0x150 [ 812.238807][T19050] should_fail_ex+0x412/0x560 [ 812.238831][T19050] _copy_to_user+0x31/0xb0 [ 812.238852][T19050] bpf_test_finish+0x53c/0x6b0 [ 812.238883][T19050] ? __pfx_bpf_test_finish+0x10/0x10 [ 812.238904][T19050] ? eth_type_trans+0x484/0x7e0 [ 812.238965][T19050] bpf_prog_test_run_skb+0x1250/0x2260 [ 812.239003][T19050] ? __fget_files+0x3a0/0x420 [ 812.239022][T19050] ? __fget_files+0x2a/0x420 [ 812.239044][T19050] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 812.239066][T19050] bpf_prog_test_run+0x2c7/0x340 [ 812.239086][T19050] __sys_bpf+0x643/0x950 [ 812.239109][T19050] ? __pfx___sys_bpf+0x10/0x10 [ 812.239144][T19050] ? ksys_write+0x242/0x270 [ 812.239166][T19050] ? __pfx_ksys_write+0x10/0x10 [ 812.239190][T19050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.239207][T19050] __x64_sys_bpf+0x7c/0x90 [ 812.239228][T19050] do_syscall_64+0x174/0x580 [ 812.239249][T19050] ? trace_irq_disable+0x3b/0x140 [ 812.239270][T19050] ? clear_bhb_loop+0x40/0x90 [ 812.239289][T19050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.239305][T19050] RIP: 0033:0x7f137459ce59 [ 812.239321][T19050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.239335][T19050] RSP: 002b:00007f1375445028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 812.239351][T19050] RAX: ffffffffffffffda RBX: 00007f1374815fa0 RCX: 00007f137459ce59 [ 812.239363][T19050] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 812.239373][T19050] RBP: 00007f1375445090 R08: 0000000000000000 R09: 0000000000000000 [ 812.239382][T19050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 812.239392][T19050] R13: 00007f1374816038 R14: 00007f1374815fa0 R15: 00007f137493fa48 [ 812.239417][T19050] [ 812.451451][T19030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.493656][T19049] pim6reg1: entered promiscuous mode [ 812.502868][T12809] usb usb36-port1: attempt power cycle [ 812.515031][T19049] pim6reg1: entered allmulticast mode [ 813.086092][T12809] usb usb36-port1: unable to enumerate USB device [ 813.354340][T12809] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 813.355741][ T30] audit: type=1326 audit(1780370923.250:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19076 comm="syz.3.3416" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7f759ce59 code=0x0 [ 813.454339][ T809] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 813.521051][T12809] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.549170][T12809] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 813.578806][T12809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.598305][T12809] usb 6-1: config 0 descriptor?? [ 813.632562][T12809] pwc: Askey VC010 type 2 USB webcam detected. [ 813.633189][ T5725] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 813.646443][ T809] usb 3-1: Using ep0 maxpacket: 32 [ 813.653650][ T809] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 813.697204][ T5725] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 813.704288][ T809] usb 3-1: config 0 interface 0 has no altsetting 0 [ 813.720183][ T809] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 813.736370][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.759346][ T809] usb 3-1: config 0 descriptor?? [ 813.776681][ T5725] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 813.789131][T19085] FAULT_INJECTION: forcing a failure. [ 813.789131][T19085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 813.819447][T12809] pwc: recv_control_msg error -32 req 02 val 2b00 [ 813.834964][T19086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.860081][T19085] CPU: 0 UID: 0 PID: 19085 Comm: syz.1.3417 Tainted: G L syzkaller #0 PREEMPT(full) [ 813.860108][T19085] Tainted: [L]=SOFTLOCKUP [ 813.860115][T19085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 813.860125][T19085] Call Trace: [ 813.860133][T19085] [ 813.860141][T19085] dump_stack_lvl+0xe8/0x150 [ 813.860167][T19085] should_fail_ex+0x412/0x560 [ 813.860193][T19085] _copy_to_user+0x31/0xb0 [ 813.860216][T19085] simple_read_from_buffer+0xe1/0x170 [ 813.860241][T19085] proc_fail_nth_read+0x1bb/0x230 [ 813.860265][T19085] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 813.860288][T19085] ? rw_verify_area+0x2a6/0x4d0 [ 813.860308][T19085] ? __fget_files+0x2a/0x420 [ 813.860324][T19085] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 813.860345][T19085] vfs_read+0x20c/0xa70 [ 813.860370][T19085] ? __pfx___mutex_lock+0x10/0x10 [ 813.860389][T19085] ? __pfx_vfs_read+0x10/0x10 [ 813.860410][T19085] ? __fget_files+0x2a/0x420 [ 813.860432][T19085] ? __fget_files+0x3a0/0x420 [ 813.860449][T19085] ? __fget_files+0x2a/0x420 [ 813.860475][T19085] ksys_read+0x150/0x270 [ 813.860498][T19085] ? __pfx_ksys_read+0x10/0x10 [ 813.860527][T19085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.860545][T19085] do_syscall_64+0x174/0x580 [ 813.860561][T19085] ? trace_irq_disable+0x3b/0x140 [ 813.860590][T19085] ? clear_bhb_loop+0x40/0x90 [ 813.860610][T19085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.860625][T19085] RIP: 0033:0x7fc28ad5d68e [ 813.860640][T19085] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 813.860654][T19085] RSP: 002b:00007fc28bc84fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 813.860670][T19085] RAX: ffffffffffffffda RBX: 00007fc28bc856c0 RCX: 00007fc28ad5d68e [ 813.860681][T19085] RDX: 000000000000000f RSI: 00007fc28bc850a0 RDI: 0000000000000005 [ 813.860691][T19085] RBP: 00007fc28bc85090 R08: 0000000000000000 R09: 0000000000000000 [ 813.860702][T19085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 813.860711][T19085] R13: 00007fc28b016038 R14: 00007fc28b015fa0 R15: 00007fc28b13fa48 [ 813.860739][T19085] [ 813.923563][T19086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.192147][ T5725] usb 2-1: USB disconnect, device number 125 [ 814.193152][T12809] pwc: recv_control_msg error -71 req 02 val 2700 [ 814.297034][T12809] pwc: recv_control_msg error -71 req 02 val 2c00 [ 814.349248][T12809] pwc: recv_control_msg error -71 req 04 val 1000 [ 814.372452][T12809] pwc: recv_control_msg error -71 req 04 val 1300 [ 814.407950][T12809] pwc: recv_control_msg error -71 req 04 val 1400 [ 814.434439][T12809] pwc: recv_control_msg error -71 req 02 val 2000 [ 814.480295][T12809] pwc: recv_control_msg error -71 req 02 val 2100 [ 814.504975][T12809] pwc: recv_control_msg error -71 req 04 val 1500 [ 814.570476][T12809] pwc: recv_control_msg error -71 req 02 val 2500 [ 814.581424][T19098] pim6reg: entered allmulticast mode [ 814.593766][T12809] pwc: recv_control_msg error -71 req 02 val 2400 [ 814.604387][T19099] pim6reg: left allmulticast mode [ 814.633446][T12809] pwc: recv_control_msg error -71 req 02 val 2600 [ 814.672483][ T809] corsair-cpro 0003:1B1C:0C10.0043: unknown main item tag 0x0 [ 814.687978][T12809] pwc: recv_control_msg error -71 req 02 val 2900 [ 814.701380][ T809] corsair-cpro 0003:1B1C:0C10.0043: unknown main item tag 0x0 [ 814.712978][T12809] pwc: recv_control_msg error -71 req 02 val 2800 [ 814.739735][ T809] corsair-cpro 0003:1B1C:0C10.0043: unknown main item tag 0x0 [ 814.757597][T12809] pwc: recv_control_msg error -71 req 04 val 1100 [ 814.768972][ T809] corsair-cpro 0003:1B1C:0C10.0043: unknown main item tag 0x0 [ 814.787402][T12809] pwc: recv_control_msg error -71 req 04 val 1200 [ 814.796850][ T809] corsair-cpro 0003:1B1C:0C10.0043: unknown main item tag 0x0 [ 814.828107][T12809] pwc: Registered as video103. [ 814.839669][T19109] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 814.877081][ T809] corsair-cpro 0003:1B1C:0C10.0043: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 814.894865][T12809] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input104 [ 815.039497][T12809] usb 6-1: USB disconnect, device number 2 [ 815.315616][ T809] corsair-cpro 0003:1B1C:0C10.0043: probe with driver corsair-cpro failed with error -110 [ 815.427578][ T809] usb 3-1: USB disconnect, device number 120 [ 815.465438][ T30] audit: type=1326 audit(1780370925.350:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19101 comm="syz.3.3421" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7f759ce59 code=0x0 [ 815.791483][T19123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3424'. [ 815.834412][T12809] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 816.004937][T12809] usb 6-1: Using ep0 maxpacket: 8 [ 816.028621][T12809] usb 6-1: unable to get BOS descriptor or descriptor too short [ 816.050801][T12809] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 816.082006][T12809] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 816.098009][T19130] netlink: 'syz.4.3427': attribute type 1 has an invalid length. [ 816.109052][T12809] usb 6-1: too many endpoints for config 1 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 816.123119][T12809] usb 6-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 816.138908][T12809] usb 6-1: config 1 interface 1 has no altsetting 0 [ 816.160003][T12809] usb 6-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 816.177398][T12809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.194117][T12809] usb 6-1: Product: syz [ 816.201084][T12809] usb 6-1: Manufacturer: syz [ 816.207847][T12809] usb 6-1: SerialNumber: syz [ 816.216159][T19130] 8021q: adding VLAN 0 to HW filter on device bond2 [ 816.291617][T19137] netlink: 'syz.1.3428': attribute type 1 has an invalid length. [ 816.330973][T19133] bond2: (slave geneve3): making interface the new active one [ 816.368958][T19133] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 816.416337][T14109] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.433913][T19140] sock: sock_set_timeout: `syz.2.3429' (pid 19140) tries to set negative timeout [ 816.443398][T14109] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.487540][T12809] usb 6-1: selecting invalid altsetting 0 [ 816.506709][T12809] usb 6-1: 0:2 : does not exist [ 816.511745][T14109] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.529137][T14109] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.691523][ T809] usb 6-1: USB disconnect, device number 3 [ 816.812852][T19147] libceph: resolve '400' (ret=-3): failed [ 816.877590][T19150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.889310][T19150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.964646][ T9] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 817.072226][T19159] fuse: Bad value for 'user_id' [ 817.077519][T19159] fuse: Bad value for 'user_id' [ 817.103581][T19159] PID 19159 killed due to inadequate hugepage pool [ 817.114433][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 817.121711][ T9] usb 5-1: config 218 has an invalid interface number: 61 but max is 2 [ 817.130152][ T9] usb 5-1: config 218 has an invalid interface number: 80 but max is 2 [ 817.138752][ T9] usb 5-1: config 218 has an invalid interface number: 19 but max is 2 [ 817.147522][ T9] usb 5-1: config 218 has no interface number 0 [ 817.153790][ T9] usb 5-1: config 218 has no interface number 1 [ 817.160395][ T9] usb 5-1: config 218 has no interface number 2 [ 817.169353][ T9] usb 5-1: config 218 interface 61 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 1023 [ 817.179876][ T9] usb 5-1: config 218 interface 61 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 817.189858][ T9] usb 5-1: config 218 interface 61 altsetting 1 endpoint 0xB has invalid maxpacket 1999, setting to 64 [ 817.200997][ T9] usb 5-1: config 218 interface 80 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 817.212884][ T9] usb 5-1: config 218 interface 80 altsetting 5 has a duplicate endpoint with address 0x87, skipping [ 817.224128][ T9] usb 5-1: config 218 interface 80 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 817.244483][ T9] usb 5-1: config 218 interface 80 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 817.270305][ T9] usb 5-1: config 218 interface 80 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 817.283361][ T9] usb 5-1: config 218 interface 80 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 817.296298][ T9] usb 5-1: config 218 interface 80 altsetting 5 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 817.308656][ T9] usb 5-1: config 218 interface 80 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 817.321899][ T9] usb 5-1: config 218 interface 80 altsetting 5 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 817.336415][ T9] usb 5-1: config 218 interface 80 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 817.347771][ T9] usb 5-1: config 218 interface 19 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 817.358647][ T9] usb 5-1: config 218 interface 19 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 817.368745][ T9] usb 5-1: config 218 interface 19 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 817.379645][ T9] usb 5-1: config 218 interface 19 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 817.390531][ T9] usb 5-1: config 218 interface 61 has no altsetting 0 [ 817.397438][ T9] usb 5-1: config 218 interface 80 has no altsetting 0 [ 817.405058][ T9] usb 5-1: config 218 interface 19 has no altsetting 0 [ 817.415967][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=f9e9, bcdDevice=f5.a6 [ 817.425163][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.433190][ T9] usb 5-1: Product: æ¶î›œáµ–竕ⲧ풳笶ʦé‹ÏŽä¹–ᬷ [ 817.440502][ T9] usb 5-1: Manufacturer: 贬쩄ê½æ–¤ê”ƒá´Šå£‹à£–૶旞潮䢼馑àµè¼©äœ…⊮淛∂鋰啡娼國䧳⊶閦糶í–躑휚꬞㞫å›å…®á¥ˆè¯ƒäº‹á¯œï½¾ë¾æ¸€ç¿ê’¢ì’•ê—›è½¾ç‰¼á²©á¹¹å›´íƒ¥è‰´â½Ÿêšµê±Œàªšîœì²ãŸ„徲㴢㋥껈Ç䣿槰㒊⽴闆᡹섉㥿鬕ä¶î£šå° ï¡‚ꈚ砥᯳ꦿ䡃ง繪唺붭Ů⒠[ 817.470958][ T9] usb 5-1: SerialNumber: 丩⺓ᒙ鞅뜙謿㶊桦뀵巖ﻹ䌇ꇥ肸ç‡ï˜‰é„ë›ç‘–䞂鈳췌ä¶ë¶»îï­ã±Šè½žï­«î¨Ò®â‚©ë’¯è”ºéˆïµ§ï½¥æ†ˆè¢¬ìˆ¡è¬é œæ€˜ê½¢ïŽ˜å¥”ážï¾—ãºäœ­î¶˜ä•¤ì¿»à½¾é³…脄﯇餿왥艟ૣ軃἞ଶ墛鈺䥙⇠귪ົ艾㤒쭋嚶 [ 817.507782][T19143] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 817.564455][T18932] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 817.651533][T19166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3438'. [ 817.661274][T19166] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 817.714333][T18932] usb 6-1: Using ep0 maxpacket: 32 [ 817.723025][T18932] usb 6-1: unable to get BOS descriptor or descriptor too short [ 817.738307][T18932] usb 6-1: config 86 has an invalid interface number: 175 but max is 0 [ 817.749237][T18932] usb 6-1: config 86 has no interface number 0 [ 817.755896][T18932] usb 6-1: config 86 interface 175 has no altsetting 0 [ 817.765550][T18932] usb 6-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice=a4.be [ 817.778284][T18932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.787148][T18932] usb 6-1: Product: syz [ 817.791405][T18932] usb 6-1: Manufacturer: syz [ 817.799692][ T9] usb 5-1: USB disconnect, device number 61 [ 817.807354][T18932] usb 6-1: SerialNumber: syz [ 818.007539][T19176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.018458][T19176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.050106][T18932] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:86.175/input/input106 [ 818.062119][ T4985] bcm5974 6-1:86.175: could not read from device [ 818.081631][ T4985] bcm5974 6-1:86.175: could not read from device [ 818.089906][T18932] usb 6-1: USB disconnect, device number 4 [ 819.120219][T19216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.130587][T19216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.212209][T19217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.214369][ T9] usb 5-1: new low-speed USB device number 62 using dummy_hcd [ 819.236792][T19217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.396313][ T9] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 819.425616][ T9] usb 5-1: config 0 has no interface number 0 [ 819.437708][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 819.484390][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 819.529236][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 819.568054][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 819.603940][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 819.645466][ T9] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 819.687787][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 819.699816][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.701390][T19224] fuse: Bad value for 'fd' [ 819.748374][ T9] usb 5-1: config 0 descriptor?? [ 819.760884][T19211] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 819.777606][T19211] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 819.812963][ T9] ldusb 5-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 819.836614][T19231] ip6gre1: entered allmulticast mode [ 820.111295][T19238] ip6gretap0: refused to change device tx_queue_len [ 820.118119][T19238] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 820.151439][T19243] usb usb8: usbfs: process 19243 (syz.1.3453) did not claim interface 0 before use [ 820.224365][T18932] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 820.374801][T18932] usb 3-1: Using ep0 maxpacket: 32 [ 820.395435][T18932] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 820.414307][T18932] usb 3-1: config 0 has no interface number 0 [ 820.417454][T19248] netlink: 'syz.5.3454': attribute type 13 has an invalid length. [ 820.426300][T18932] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 820.441279][T18932] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 820.452501][T18932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.460790][T18932] usb 3-1: Product: syz [ 820.466294][T18932] usb 3-1: Manufacturer: syz [ 820.470937][T18932] usb 3-1: SerialNumber: syz [ 820.481841][T18932] usb 3-1: config 0 descriptor?? [ 820.497408][T18932] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 820.505150][T18932] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 820.700322][T18932] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 820.721228][T18932] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 820.753072][T18932] usb 3-1: USB disconnect, device number 121 [ 820.893962][ T5770] usb 5-1: USB disconnect, device number 62 [ 820.944813][ T5770] ldusb 5-1:0.55: LD USB Device #1 now disconnected [ 821.254356][T18932] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 821.324040][T19277] bond3 (unregistering): Released all slaves [ 821.414429][T18932] usb 3-1: Using ep0 maxpacket: 32 [ 821.426457][T18932] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 821.444533][T18932] usb 3-1: config 0 has no interface number 0 [ 821.457207][T18932] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 821.488265][T18932] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 821.517942][T18932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.572805][T18932] usb 3-1: Product: syz [ 821.587064][T18932] usb 3-1: Manufacturer: syz [ 821.593402][T19291] bond1: entered promiscuous mode [ 821.619663][T18932] usb 3-1: SerialNumber: syz [ 821.637251][T19291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 821.661009][T18932] usb 3-1: config 0 descriptor?? [ 821.698680][T18932] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 821.731894][T18932] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 821.897879][T18932] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 821.926328][T18932] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 822.125611][T19236] xt_hashlimit: size too large, truncated to 1048576 [ 822.153191][T19236] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 822.504296][ T5643] Bluetooth: hci2: SCO packet too small [ 822.538652][T19319] bridge_slave_0: left allmulticast mode [ 822.552312][T19319] bridge_slave_0: left promiscuous mode [ 822.600675][T19319] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.624383][T18932] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 822.705370][T19319] bridge_slave_1: left allmulticast mode [ 822.711157][T19319] bridge_slave_1: left promiscuous mode [ 822.780497][T18932] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 822.794074][T19319] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.820279][T18932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.828874][ T5770] usb 3-1: USB disconnect, device number 122 [ 822.909413][T18932] usb 5-1: Product: syz [ 822.921672][T18932] usb 5-1: Manufacturer: syz [ 822.938589][T19324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3467'. [ 822.976614][T18932] usb 5-1: SerialNumber: syz [ 822.996313][T18932] usb 5-1: config 0 descriptor?? [ 823.016504][T18932] ch341 5-1:0.0: ch341-uart converter detected [ 823.051984][T19319] bond0: (slave bond_slave_0): Releasing backup interface [ 823.118581][T19319] bond0: (slave bond_slave_1): Releasing backup interface [ 823.215727][T18932] usb 5-1: failed to receive control message: -121 [ 823.225050][T19319] team0: Port device team_slave_0 removed [ 823.232669][T18932] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 823.283203][T19319] team0: Port device team_slave_1 removed [ 823.347669][T19319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 823.389230][T19319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.422848][ T9] usb 5-1: USB disconnect, device number 63 [ 823.436734][ T9] ch341 5-1:0.0: device disconnected [ 823.461719][T19319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 823.476364][T19319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.523796][T19319] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 823.575717][T19324] geneve2: entered promiscuous mode [ 823.590010][T19324] geneve2: entered allmulticast mode [ 823.682126][T19338] Invalid logical block size (-2147483648) [ 824.041702][T19355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.051956][ T809] usb 3-1: new low-speed USB device number 123 using dummy_hcd [ 824.065603][T19355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.077920][T19357] kvm: kvm [19356]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 824.093447][T19355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.102617][T19355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.115186][T18932] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 824.214454][ T809] usb 3-1: Invalid ep0 maxpacket: 64 [ 824.304549][T18932] usb 6-1: Using ep0 maxpacket: 32 [ 824.311787][T18932] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 824.320843][T18932] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 824.331582][T18932] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 824.341705][T18932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 824.351837][ T809] usb 3-1: new low-speed USB device number 124 using dummy_hcd [ 824.359839][T18932] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 824.372330][T18932] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 824.387422][T18932] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 824.397504][T18932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.414975][T18932] usb 6-1: config 0 descriptor?? [ 824.533073][ T809] usb 3-1: Invalid ep0 maxpacket: 64 [ 824.546181][ T809] usb usb3-port1: attempt power cycle [ 824.638783][T18932] usblp 6-1:0.0: usblp1: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 824.664200][T18932] usb 6-1: USB disconnect, device number 5 [ 824.680605][T18932] usblp1: removed [ 824.824370][ T5770] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 824.884627][ T809] usb 3-1: new low-speed USB device number 125 using dummy_hcd [ 824.926559][ T809] usb 3-1: Invalid ep0 maxpacket: 64 [ 825.074487][ T809] usb 3-1: new low-speed USB device number 126 using dummy_hcd [ 825.114985][ T809] usb 3-1: Invalid ep0 maxpacket: 64 [ 825.126459][ T809] usb usb3-port1: unable to enumerate USB device [ 825.156176][T18932] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 825.344966][T18932] usb 6-1: Using ep0 maxpacket: 32 [ 825.364139][T18932] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 825.384325][T18932] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 825.404436][T18932] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 825.424429][T18932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 825.444334][T18932] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 825.464379][T18932] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 825.464430][T18932] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 825.464451][T18932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.467402][T18932] usb 6-1: config 0 descriptor?? [ 825.741673][T18932] usblp 6-1:0.0: usblp1: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 826.435806][ T9] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 826.584530][ T9] usb 2-1: device descriptor read/64, error -71 [ 826.700311][T19413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 826.835145][ T9] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 826.984443][ T9] usb 2-1: device descriptor read/64, error -71 [ 827.010152][T19420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3492'. [ 827.097054][ T9] usb usb2-port1: attempt power cycle [ 827.384360][ T5770] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 827.455285][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 827.485564][ T9] usb 2-1: device descriptor read/8, error -71 [ 827.557008][ T5770] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 827.566215][ T5770] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.577759][ T5770] usb 5-1: config 0 descriptor?? [ 827.722025][T18932] usb 6-1: USB disconnect, device number 6 [ 827.724922][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 827.753137][T18932] usblp1: removed [ 827.762342][ T9] usb 2-1: device descriptor read/8, error -71 [ 827.877044][ T9] usb usb2-port1: unable to enumerate USB device [ 828.252428][ T5770] usb 5-1: Cannot set autoneg [ 828.276444][ T5770] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 828.329544][ T5770] usb 5-1: USB disconnect, device number 65 [ 828.520716][T19471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.544907][T19471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.904789][T19481] fuse: Bad value for 'fd' [ 829.032718][T19493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.055770][T19493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.211911][T19497] tap0: tun_chr_ioctl cmd 1074025677 [ 829.224898][T19497] tap0: linktype set to 769 [ 829.276329][ T5770] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 829.293225][T19501] 8021q: adding VLAN 0 to HW filter on device bond2 [ 829.338544][T19506] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3518'. [ 829.450519][ T5770] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 829.458921][ T5770] usb 6-1: config 0 has no interface number 0 [ 829.466005][ T5770] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 829.479619][ T5770] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 829.491353][ T5781] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 829.502170][ T5770] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 829.515191][ T5770] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 829.524752][ T5770] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 829.533191][ T5770] usb 6-1: Product: syz [ 829.538022][ T5770] usb 6-1: SerialNumber: syz [ 829.547576][ T5770] usb 6-1: config 0 descriptor?? [ 829.560169][ T5770] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 829.578859][ T5770] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input107 [ 829.657181][ T5781] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 829.666228][ T5781] usb 3-1: config 0 has no interface number 0 [ 829.674390][ T9] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 829.682127][ T5781] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 829.711660][ T5781] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 829.715212][ T5725] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 829.742670][ T5781] usb 3-1: config 0 interface 255 has no altsetting 0 [ 829.749763][ T5781] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 829.759544][ T5781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.763621][T12654] usb 6-1: USB disconnect, device number 7 [ 829.767748][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 829.780405][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 829.806036][T12654] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 829.817160][ T5781] usb 3-1: config 0 descriptor?? [ 829.832022][ T5781] ums-realtek 3-1:0.255: USB Mass Storage device detected [ 829.854335][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 829.862143][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 829.875912][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 829.886911][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 829.896127][ T9] usb 5-1: too many endpoints for config 1 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 829.909340][ T9] usb 5-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 829.928953][ T5725] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 829.946954][T19527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.950231][ T9] usb 5-1: config 1 interface 1 has no altsetting 0 [ 829.957019][T19527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.967926][ T5725] usb 2-1: config 0 interface 0 has no altsetting 0 [ 829.980217][ T5725] usb 2-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 829.990263][ T5725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.000546][ T9] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 830.011580][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.020804][ T5725] usb 2-1: config 0 descriptor?? [ 830.026206][ T9] usb 5-1: Product: syz [ 830.030833][T19516] raw-gadget.6 gadget.1: fail, usb_ep_enable returned -22 [ 830.032972][ T5781] usb 3-1: USB disconnect, device number 127 [ 830.038398][ T9] usb 5-1: Manufacturer: syz [ 830.052702][ T9] usb 5-1: SerialNumber: syz [ 830.282354][ T9] usb 5-1: failed waiting for Axe-Fx III to boot: -71 [ 830.301889][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 830.326907][ T9] usb 5-1: USB disconnect, device number 66 [ 830.383546][T19531] binder: 19530:19531 ioctl c0306201 200000000640 returned -22 [ 830.460167][T19516] syzkaller0: entered promiscuous mode [ 830.466639][T19516] syzkaller0: entered allmulticast mode [ 830.477266][T19516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.486569][T19516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.539016][T19533] netlink: 'syz.3.3527': attribute type 12 has an invalid length. [ 830.548474][T19533] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3527'. [ 830.555283][ T5725] hid-steam 0003:28DE:1205.0044: unknown main item tag 0x3 [ 830.574992][ T5725] hid-steam 0003:28DE:1205.0044: unknown main item tag 0x0 [ 830.582289][ T5725] hid-steam 0003:28DE:1205.0044: unknown main item tag 0x0 [ 830.590158][ T5725] hid-steam 0003:28DE:1205.0044: unknown main item tag 0x0 [ 830.598445][ T5725] hid-steam 0003:28DE:1205.0044: unknown main item tag 0x0 [ 830.605867][ T5725] hid-steam 0003:28DE:1205.0044: unknown main item tag 0x0 [ 830.613144][ T5725] hid-steam 0003:28DE:1205.0044: unknown main item tag 0x0 [ 830.623588][ T5725] hid-steam 0003:28DE:1205.0044: unknown main item tag 0x0 [ 830.633044][ T5725] hid-steam 0003:28DE:1205.0044: : USB HID v0.04 Device [HID 28de:1205] on usb-dummy_hcd.1-1/input0 [ 830.644134][T12654] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 830.714953][ T5725] hid-steam 0003:28DE:1205.0044: Steam Controller 'XXXXXXXXXX' connected [ 830.727779][ T5725] input: Steam Deck as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1205.0044/input/input108 [ 830.748929][ T5725] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1205.0044/input/input109 [ 830.806666][T12654] usb 6-1: Using ep0 maxpacket: 8 [ 830.829439][T12654] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 830.864943][ T5725] hid-steam 0003:28DE:1205.0045: unknown main item tag 0x3 [ 830.872594][T12654] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 830.882272][ T5725] hid-steam 0003:28DE:1205.0045: unknown main item tag 0x0 [ 830.892550][T12654] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 830.927917][T12654] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 830.938529][ T5725] hid-steam 0003:28DE:1205.0045: hidraw0: USB HID v0.04 Device [HID 28de:1205] on usb-dummy_hcd.1-1/input0 [ 830.950063][T12654] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.967538][T12654] usb 6-1: Product: syz [ 830.972032][T12654] usb 6-1: Manufacturer: syz [ 830.977563][T12654] usb 6-1: SerialNumber: syz [ 831.227150][T12654] usb 6-1: USB disconnect, device number 8 [ 831.270759][ T5963] udevd[5963]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 831.894327][T12654] usb 2-1: reset full-speed USB device number 4 using dummy_hcd [ 833.306779][ T5725] usb 2-1: USB disconnect, device number 4 [ 833.347533][ T5725] hid-steam 0003:28DE:1205.0044: Steam Controller 'XXXXXXXXXX' disconnected [ 869.967284][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.973772][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 900.515020][T19545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.527749][T19551] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3528'. [ 900.539498][T19545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.610228][T19560] netlink: 172 bytes leftover after parsing attributes in process `syz.5.3528'. [ 900.764583][T12654] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 900.864438][ T5770] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 900.945188][T12654] usb 3-1: Using ep0 maxpacket: 8 [ 900.961125][T12654] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.975817][T12654] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 901.006601][ T5770] usb 6-1: device descriptor read/64, error -71 [ 901.019996][T12654] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 901.049246][T12654] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.064678][T12654] usb 3-1: config 0 descriptor?? [ 901.084865][T19574] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3536'. [ 901.266440][ T5770] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 901.404303][ T5770] usb 6-1: device descriptor read/64, error -71 [ 901.462169][T19576] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 901.478781][T12654] hid (null): unknown global tag 0xe [ 901.492427][T12654] hid-u2fzero 0003:10C4:8ACF.0046: unexpected long global item [ 901.507251][T12654] hid-u2fzero 0003:10C4:8ACF.0046: probe with driver hid-u2fzero failed with error -22 [ 901.525072][ T5770] usb usb6-port1: attempt power cycle [ 901.654348][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 901.680258][T12654] usb 3-1: USB disconnect, device number 2 [ 901.814496][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 901.824149][ T9] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 901.833997][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.851312][ T9] usb 2-1: config 0 has no interface number 0 [ 901.864554][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 901.873711][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.887773][ T9] usb 2-1: Product: syz [ 901.893954][ T9] usb 2-1: Manufacturer: syz [ 901.900756][ T9] usb 2-1: SerialNumber: syz [ 901.908188][ T9] usb 2-1: config 0 descriptor?? [ 901.914348][ T5770] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 901.917687][ T9] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 901.930357][ T9] uvcvideo 2-1:0.105: No valid video chain found. [ 901.975552][ T5770] usb 6-1: device descriptor read/8, error -71 [ 902.142839][T18932] usb 2-1: USB disconnect, device number 5 [ 902.224427][ T5770] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 902.254913][ T5770] usb 6-1: device descriptor read/8, error -71 [ 902.322036][T19596] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3542'. [ 902.376373][ T5770] usb usb6-port1: unable to enumerate USB device [ 902.914318][ T5770] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 903.064360][ T5770] usb 2-1: Using ep0 maxpacket: 16 [ 903.071849][ T5770] usb 2-1: config 0 has no interfaces? [ 903.080839][ T5770] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 903.094613][ T5770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.102984][ T5770] usb 2-1: Product: syz [ 903.107638][ T5770] usb 2-1: Manufacturer: syz [ 903.112967][ T5770] usb 2-1: SerialNumber: syz [ 903.121801][ T5770] usb 2-1: config 0 descriptor?? [ 903.241725][ T30] audit: type=1326 audit(1780371013.130:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19607 comm="syz.4.3547" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137459ce59 code=0x7ffc0000 [ 903.272365][ T30] audit: type=1326 audit(1780371013.130:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19607 comm="syz.4.3547" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137459ce59 code=0x7ffc0000 [ 903.298812][ T30] audit: type=1326 audit(1780371013.150:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19607 comm="syz.4.3547" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137459ce59 code=0x7ffc0000 [ 903.324335][ T30] audit: type=1326 audit(1780371013.150:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19607 comm="syz.4.3547" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137459ce59 code=0x7ffc0000 [ 903.352609][ T30] audit: type=1326 audit(1780371013.150:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19607 comm="syz.4.3547" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f137459ce59 code=0x7ffc0000 [ 903.379437][ T30] audit: type=1326 audit(1780371013.150:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19607 comm="syz.4.3547" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137459ce59 code=0x7ffc0000 [ 903.412768][ T30] audit: type=1326 audit(1780371013.150:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19607 comm="syz.4.3547" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137459ce59 code=0x7ffc0000 [ 903.418482][T18932] usb 2-1: USB disconnect, device number 6 [ 903.441740][ T30] audit: type=1326 audit(1780371013.150:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19607 comm="syz.4.3547" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137459ce59 code=0x7ffc0000 [ 903.447505][ T5770] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 903.475927][T19613] netlink: 'syz.4.3549': attribute type 13 has an invalid length. [ 903.478597][ T30] audit: type=1326 audit(1780371013.150:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19607 comm="syz.4.3547" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f137459ce59 code=0x7ffc0000 [ 903.563222][ T30] audit: type=1326 audit(1780371013.150:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19607 comm="syz.4.3547" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137459ce59 code=0x7ffc0000 [ 903.656770][T19620] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3550'. [ 903.665913][ T5770] usb 3-1: Using ep0 maxpacket: 8 [ 903.676051][ T5770] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 903.684612][ T5770] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 903.686608][T19620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3550'. [ 903.704112][ T5770] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 903.736264][ T5770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.789510][T19621] loop9: detected capacity change from 0 to 2640 [ 903.799584][T19621] buffer_io_error: 336 callbacks suppressed [ 903.799599][T19621] Buffer I/O error on dev loop9, logical block 0, async page read [ 903.835521][T19621] Buffer I/O error on dev loop9, logical block 0, async page read [ 903.847604][T19621] Buffer I/O error on dev loop9, logical block 0, async page read [ 903.861936][T19621] Buffer I/O error on dev loop9, logical block 0, async page read [ 903.872386][T19621] Buffer I/O error on dev loop9, logical block 0, async page read [ 903.881968][T19621] Buffer I/O error on dev loop9, logical block 0, async page read [ 903.890575][T19621] Buffer I/O error on dev loop9, logical block 0, async page read [ 903.898958][T19621] Buffer I/O error on dev loop9, logical block 0, async page read [ 903.914401][T19621] ldm_validate_partition_table(): Disk read failed. [ 903.921244][T19621] Buffer I/O error on dev loop9, logical block 0, async page read [ 903.929946][T19621] Buffer I/O error on dev loop9, logical block 0, async page read [ 903.938477][T19621] Dev loop9: unable to read RDB block 0 [ 903.945235][T19621] loop9: unable to read partition table [ 903.960270][T19621] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 904.007497][ T5770] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 904.061127][ T5000] ldm_validate_partition_table(): Disk read failed. [ 904.068681][ T5000] Dev loop9: unable to read RDB block 0 [ 904.075289][ T5000] loop9: unable to read partition table [ 904.183846][ T5770] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 904.195666][ T5770] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 904.224326][T18932] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 904.238613][ T5770] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 904.253747][ T5770] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.263735][ T5770] usb 6-1: Product: syz [ 904.270246][ T5770] usb 6-1: Manufacturer: syz [ 904.291203][ T5770] usb 6-1: SerialNumber: syz [ 904.303450][ T5770] usb 6-1: config 0 descriptor?? [ 904.320187][ T5770] usb 6-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 904.397341][T18932] usb 5-1: config 220 has an invalid interface number: 142 but max is 0 [ 904.406185][T18932] usb 5-1: config 220 has no interface number 0 [ 904.412552][T18932] usb 5-1: config 220 interface 142 has no altsetting 0 [ 904.423383][T18932] usb 5-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=ab.0e [ 904.433252][T18932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.441689][T18932] usb 5-1: Product: syz [ 904.446415][ T5781] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 904.454034][T18932] usb 5-1: Manufacturer: syz [ 904.459521][T18932] usb 5-1: SerialNumber: syz [ 904.592818][ T5770] usb 6-1: USB disconnect, device number 13 [ 904.615579][ T5781] usb 2-1: Using ep0 maxpacket: 32 [ 904.636112][ T5781] usb 2-1: too many configurations: 98, using maximum allowed: 8 [ 904.663620][ T5781] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 904.685330][ T5781] usb 2-1: can't read configurations, error -61 [ 904.715614][T18932] ttusb_dec_send_command: command bulk message failed: error -22 [ 904.741952][T18932] ttusb-dec 5-1:220.142: probe with driver ttusb-dec failed with error -22 [ 904.762321][T18932] usb 5-1: USB disconnect, device number 67 [ 904.834384][ T5781] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 904.986315][ T5781] usb 2-1: Using ep0 maxpacket: 32 [ 904.986940][T12654] IPVS: starting estimator thread 0... [ 904.998711][ T5781] usb 2-1: too many configurations: 98, using maximum allowed: 8 [ 905.009659][ T5781] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 905.027556][ T5781] usb 2-1: can't read configurations, error -61 [ 905.034821][ T5781] usb usb2-port1: attempt power cycle [ 905.094611][T19658] IPVS: using max 34 ests per chain, 81600 per kthread [ 905.205217][T19667] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 905.213021][T19667] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 905.374405][ T5781] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 905.415010][ T5781] usb 2-1: Using ep0 maxpacket: 32 [ 905.433148][ T5781] usb 2-1: too many configurations: 98, using maximum allowed: 8 [ 905.459679][ T5781] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 905.478856][T19672] netlink: 'syz.4.3565': attribute type 4 has an invalid length. [ 905.486725][ T5781] usb 2-1: can't read configurations, error -61 [ 905.634758][ T5781] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 905.675545][ T5781] usb 2-1: Using ep0 maxpacket: 32 [ 905.683817][T19679] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3568'. [ 905.695107][ T5781] usb 2-1: too many configurations: 98, using maximum allowed: 8 [ 905.712369][ T5781] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 905.729646][ T5781] usb 2-1: can't read configurations, error -61 [ 905.750625][ T5781] usb usb2-port1: unable to enumerate USB device [ 905.856302][T19683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.866970][T19683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.034533][T12656] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 906.204535][T12656] usb 6-1: Using ep0 maxpacket: 32 [ 906.215086][ T5781] usb 3-1: USB disconnect, device number 3 [ 906.241939][T12656] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 906.252177][T12656] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.281632][T12656] usb 6-1: config 0 descriptor?? [ 906.308208][T12656] gspca_main: sunplus-2.14.0 probing 041e:400b [ 906.317965][T19690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.331607][T19690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.495262][T19695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.511373][T19695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.574895][T19687] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3571'. [ 906.586839][T19687] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3571'. [ 906.596145][T19687] netlink: 'syz.4.3571': attribute type 5 has an invalid length. [ 906.600482][T19696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3573'. [ 906.604018][T19687] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3571'. [ 906.904353][ T5781] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 907.055886][ T5781] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 907.064762][ T5781] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 907.075160][ T5781] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 907.085775][ T5781] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 907.097060][ T5781] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 907.110041][ T5781] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 907.119349][ T5781] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 907.127458][ T5781] usb 3-1: Product: syz [ 907.131701][ T5781] usb 3-1: Manufacturer: syz [ 907.144465][ T5781] cdc_wdm 3-1:1.0: skipping garbage [ 907.149698][ T5781] cdc_wdm 3-1:1.0: skipping garbage [ 907.158376][ T5781] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 907.164635][ T5781] cdc_wdm 3-1:1.0: Unknown control protocol [ 907.353611][T19700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.362935][T19700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.446119][T19700] fuse: Bad value for 'group_id' [ 907.451376][T19700] fuse: Bad value for 'group_id' [ 907.462765][ T5781] usb 3-1: USB disconnect, device number 4 [ 907.495097][T19713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.835152][T12656] gspca_sunplus: reg_w_riv err -110 [ 907.844941][T12656] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 907.866043][T12656] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 907.905850][T19720] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3580'. [ 907.927687][T19720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3580'. [ 907.937172][T19720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3580'. [ 908.202802][T19726] netlink: 'syz.2.3583': attribute type 2 has an invalid length. [ 908.394344][T12656] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 908.474659][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 908.564537][T12656] usb 5-1: Using ep0 maxpacket: 8 [ 908.571319][T12656] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 908.580084][T12656] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 908.583280][ T5770] usb 6-1: USB disconnect, device number 14 [ 908.590659][T12656] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 908.623190][T12656] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.638626][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.679225][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 908.688885][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.693596][T19728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3584'. [ 908.697717][ T9] usb 3-1: Product: syz [ 908.710179][ T9] usb 3-1: Manufacturer: syz [ 908.721245][ T9] usb 3-1: SerialNumber: syz [ 908.937773][T19734] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 909.260835][T12656] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 909.424313][T12656] usb 6-1: Using ep0 maxpacket: 16 [ 909.436599][T12656] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 909.457011][T12656] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 909.477456][T12656] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 909.488952][T12656] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.506546][T12656] usb 6-1: Product: syz [ 909.519260][T12656] usb 6-1: Manufacturer: syz [ 909.533541][T12656] usb 6-1: SerialNumber: syz [ 909.574858][T12656] usb 6-1: 0:2 : does not exist [ 909.608108][T19752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.628325][T19752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.651881][T19752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.673162][T19752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.746150][ T9] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 909.752879][ T9] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 909.770283][ T9] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 909.781872][T12656] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 909.802284][T12656] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 909.813277][T12656] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 909.824477][T12656] usb 6-1: [5] FU [Feature 5 Playback Volume] ch = 1, val = 0/1/1 [ 909.850135][T12656] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 909.869215][T12656] usb 6-1: 5:0: cannot get min/max values for control 4 (id 5) [ 909.883108][T12656] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 909.901299][T12656] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 909.923407][T12656] usb 6-1: 5:0: cannot get min/max values for control 8 (id 5) [ 909.946666][ T9] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 909.959493][T12656] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 909.977470][ T9] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 909.995400][T12656] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 910.127185][T12656] usb 6-1: USB disconnect, device number 15 [ 910.176414][ T5781] usb 3-1: USB disconnect, device number 5 [ 910.211529][ T5781] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 910.657611][T19768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3594'. [ 911.183611][ T5781] usb 5-1: USB disconnect, device number 68 [ 911.294374][T12656] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 911.327691][T19789] netlink: 'syz.4.3600': attribute type 12 has an invalid length. [ 911.374350][T19789] netlink: 'syz.4.3600': attribute type 29 has an invalid length. [ 911.396365][T19789] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3600'. [ 911.474351][T12656] usb 2-1: device descriptor read/64, error -71 [ 911.728406][T12656] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 911.864307][T12656] usb 2-1: device descriptor read/64, error -71 [ 911.989887][T12656] usb usb2-port1: attempt power cycle [ 912.116476][ T5770] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 912.254675][ T5770] usb 6-1: device descriptor read/64, error -71 [ 912.286943][T19833] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3609'. [ 912.354376][T12656] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 912.404957][T12656] usb 2-1: device descriptor read/8, error -71 [ 912.504379][ T5770] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 912.604596][ T5781] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 912.634324][ T5770] usb 6-1: device descriptor read/64, error -71 [ 912.654489][T12656] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 912.675061][T12656] usb 2-1: device descriptor read/8, error -71 [ 912.744747][ T5770] usb usb6-port1: attempt power cycle [ 912.756346][ T5781] usb 5-1: config 2 has an invalid interface number: 97 but max is 0 [ 912.766319][ T5781] usb 5-1: config 2 has no interface number 0 [ 912.772497][ T5781] usb 5-1: config 2 interface 97 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 912.783949][ T5781] usb 5-1: config 2 interface 97 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 64 [ 912.794514][ T5781] usb 5-1: config 2 interface 97 has no altsetting 0 [ 912.803921][ T5781] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 912.813541][ T5781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.814591][T12656] usb usb2-port1: unable to enumerate USB device [ 912.824040][ T5781] usb 5-1: Product: syz [ 912.832294][ T5781] usb 5-1: Manufacturer: syz [ 912.838147][ T5781] usb 5-1: SerialNumber: syz [ 912.849270][T19833] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 912.862353][T19833] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 913.078629][ T5781] usb-storage 5-1:2.97: USB Mass Storage device detected [ 913.086098][ T5770] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 913.097203][ T5781] usb-storage 5-1:2.97: Quirks match for vid 04e6 pid 000b: 4 [ 913.106548][ T5781] scsi host1: usb-storage 5-1:2.97 [ 913.116540][ T5770] usb 6-1: device descriptor read/8, error -71 [ 913.125391][ T5781] usb 5-1: USB disconnect, device number 70 [ 913.286529][T12809] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 913.364391][ T5770] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 913.384936][ T5770] usb 6-1: device descriptor read/8, error -71 [ 913.444311][T12809] usb 3-1: Using ep0 maxpacket: 8 [ 913.451112][T12809] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 913.459385][T12809] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 913.469674][T12809] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 913.482711][T12809] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 913.492087][T12809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.501653][ T5770] usb usb6-port1: unable to enumerate USB device [ 913.511081][T12809] usbtmc 3-1:16.0: bulk endpoints not found [ 913.615820][T19842] fuse: Unknown parameter 'appraise' [ 913.616687][T19843] fuse: Unknown parameter 'appraise' [ 913.800065][T19852] deleting an unspecified loop device is not supported. [ 914.988729][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 914.988746][ T30] audit: type=1326 audit(1780371024.880:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19873 comm="syz.3.3621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f759ce59 code=0x7ffc0000 [ 915.004162][T19874] netlink: 'syz.3.3621': attribute type 10 has an invalid length. [ 915.019937][ T30] audit: type=1326 audit(1780371024.880:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19873 comm="syz.3.3621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f759ce59 code=0x7ffc0000 [ 915.052570][T12809] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 915.060424][ T30] audit: type=1326 audit(1780371024.880:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19873 comm="syz.3.3621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa7f755d68e code=0x7ffc0000 [ 915.088673][ T30] audit: type=1326 audit(1780371024.880:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19873 comm="syz.3.3621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f759ce59 code=0x7ffc0000 [ 915.119440][ T30] audit: type=1326 audit(1780371024.880:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19873 comm="syz.3.3621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fa7f759ce59 code=0x7ffc0000 [ 915.144284][ T30] audit: type=1326 audit(1780371024.880:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19873 comm="syz.3.3621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f759ce59 code=0x7ffc0000 [ 915.191643][ T30] audit: type=1326 audit(1780371024.880:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19873 comm="syz.3.3621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa7f755d68e code=0x7ffc0000 [ 915.217973][ T30] audit: type=1326 audit(1780371024.880:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19873 comm="syz.3.3621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f759ce59 code=0x7ffc0000 [ 915.242589][T12809] usb 5-1: device descriptor read/64, error -71 [ 915.252442][ T30] audit: type=1326 audit(1780371024.880:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19873 comm="syz.3.3621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f759ce59 code=0x7ffc0000 [ 915.285130][T19876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3622'. [ 915.286276][ T30] audit: type=1326 audit(1780371024.880:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19873 comm="syz.3.3621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa7f759ce59 code=0x7ffc0000 [ 915.318958][T12656] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 915.352176][T19878] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3623'. [ 915.476001][T12656] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.493012][T12656] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 915.502931][T12656] usb 6-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 915.512007][T12809] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 915.512070][T12656] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.531353][T12656] usb 6-1: config 0 descriptor?? [ 915.602257][T19882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.624181][T19882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.665273][T12809] usb 5-1: device descriptor read/64, error -71 [ 915.775629][T12809] usb usb5-port1: attempt power cycle [ 915.967706][T12654] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 916.079490][T18932] usb 3-1: USB disconnect, device number 6 [ 916.118179][T12809] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 916.144968][T12809] usb 5-1: device descriptor read/8, error -71 [ 916.166986][T19888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 916.356506][T19888] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[19890] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[19888] [ 916.358817][T19892] sg_write: data in/out 438661/136 bytes for SCSI command 0x0-- guessing data in; [ 916.358817][T19892] program syz.3.3628 not setting count and/or reply_len properly [ 916.394391][T12809] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 916.435495][T12809] usb 5-1: device descriptor read/8, error -71 [ 916.555454][T12809] usb usb5-port1: unable to enumerate USB device [ 916.892513][T12656] hid-led 0003:1D34:000A.0047: probe with driver hid-led failed with error -71 [ 916.927974][T12656] usb 6-1: USB disconnect, device number 21 [ 917.594668][T19915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.628016][T19915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.283232][T19923] netlink: 'syz.4.3638': attribute type 1 has an invalid length. [ 918.311945][T19923] netlink: 'syz.4.3638': attribute type 2 has an invalid length. [ 918.325171][T12809] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 918.337834][T19923] netlink: 'syz.4.3638': attribute type 1 has an invalid length. [ 918.354454][T19923] netlink: 'syz.4.3638': attribute type 2 has an invalid length. [ 918.494325][T12809] usb 6-1: Using ep0 maxpacket: 32 [ 918.505623][T12809] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 918.526144][T19928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3640'. [ 918.545508][T12809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 918.568022][T12809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 918.585363][T12809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 918.597954][T12809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 918.622266][T12809] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 918.631564][T18932] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 918.639600][T12809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.651761][T12809] usb 6-1: Product: syz [ 918.659760][T12809] usb 6-1: Manufacturer: syz [ 918.669195][T12809] usb 6-1: SerialNumber: syz [ 918.693936][T12809] usb 6-1: config 0 descriptor?? [ 918.710870][T19931] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 918.749185][T19931] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 918.797110][T18932] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 918.812220][T18932] usb 5-1: config 0 has no interface number 0 [ 918.819480][T18932] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 918.831761][T18932] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 918.847052][T18932] usb 5-1: config 0 interface 255 has no altsetting 0 [ 918.855612][T18932] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 918.868445][T18932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.881390][T18932] usb 5-1: config 0 descriptor?? [ 918.893018][T18932] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 918.915719][T17080] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 918.985016][T19933] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3641'. [ 919.064400][T17080] usb 3-1: device descriptor read/64, error -71 [ 919.095971][T18932] usb 5-1: USB disconnect, device number 75 [ 919.209777][T19940] x_tables: duplicate underflow at hook 1 [ 919.262030][T12809] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 919.295524][T12809] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 919.316833][T17080] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 919.323471][T12809] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 919.354774][T12809] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 919.375801][T12809] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 919.389605][T12809] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 919.405235][T12809] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 919.422589][T12809] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 919.437526][T12809] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 919.451766][T12809] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 919.468625][T12809] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 919.487607][T12809] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 919.500053][T12809] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 919.514103][T12809] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 919.523914][T17080] usb 3-1: device descriptor read/64, error -71 [ 919.536163][T19942] fuse: Unknown parameter '0x000000000000000a' [ 919.547243][T12809] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 919.561285][T12809] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 919.580357][T12809] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 919.593300][T12809] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 919.607462][T12809] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 919.623973][T12809] input input110: Timeout waiting for response from device. [ 919.668792][T12809] usb 6-1: USB disconnect, device number 22 [ 919.691287][T17080] usb usb3-port1: attempt power cycle [ 919.833027][T19946] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 920.041527][T19939] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3642'. [ 920.068127][T17080] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 920.106573][T17080] usb 3-1: device descriptor read/8, error -71 [ 920.365288][T17080] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 920.406445][T17080] usb 3-1: device descriptor read/8, error -71 [ 920.527974][T17080] usb usb3-port1: unable to enumerate USB device [ 920.622111][T19965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.652769][T19965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.014332][T12809] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 921.190083][T12809] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 921.201552][T12809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.219383][T12809] usb 5-1: Product: syz [ 921.243039][T12809] usb 5-1: Manufacturer: syz [ 921.269563][T12809] usb 5-1: SerialNumber: syz [ 921.294642][T19976] netlink: 'syz.5.3652': attribute type 4 has an invalid length. [ 921.315891][T12809] usb 5-1: config 0 descriptor?? [ 921.367434][T19978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.383254][T19978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.392543][T19979] netlink: 'syz.5.3652': attribute type 4 has an invalid length. [ 921.550273][T19970] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3651'. [ 921.594058][T19980] [ 921.596413][T19980] ============================================ [ 921.602607][T19980] WARNING: possible recursive locking detected [ 921.608819][T19980] syzkaller #0 Tainted: G L [ 921.614779][T19980] -------------------------------------------- [ 921.620958][T19980] syz.3.3653/19980 is trying to acquire lock: [ 921.627004][T19980] ffffffff8f3d6230 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 921.637365][T19980] [ 921.637365][T19980] but task is already holding lock: [ 921.644718][T19980] ffffffff8f3d6230 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 921.654915][T19980] [ 921.654915][T19980] other info that might help us debug this: [ 921.662955][T19980] Possible unsafe locking scenario: [ 921.662955][T19980] [ 921.670464][T19980] CPU0 [ 921.673760][T19980] ---- [ 921.677152][T19980] lock(qp_broker_list.mutex); [ 921.682018][T19980] lock(qp_broker_list.mutex); [ 921.686852][T19980] [ 921.686852][T19980] *** DEADLOCK *** [ 921.686852][T19980] [ 921.695056][T19980] May be due to missing lock nesting notation [ 921.695056][T19980] [ 921.703426][T19980] 1 lock held by syz.3.3653/19980: [ 921.708523][T19980] #0: ffffffff8f3d6230 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 921.719139][T19980] [ 921.719139][T19980] stack backtrace: [ 921.725016][T19980] CPU: 1 UID: 0 PID: 19980 Comm: syz.3.3653 Tainted: G L syzkaller #0 PREEMPT(full) [ 921.725035][T19980] Tainted: [L]=SOFTLOCKUP [ 921.725040][T19980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 921.725051][T19980] Call Trace: [ 921.725059][T19980] [ 921.725068][T19980] dump_stack_lvl+0xe8/0x150 [ 921.725088][T19980] print_deadlock_bug+0x279/0x290 [ 921.725106][T19980] __lock_acquire+0x253f/0x2cf0 [ 921.725122][T19980] ? is_bpf_text_address+0x292/0x2b0 [ 921.725136][T19980] ? is_bpf_text_address+0x26/0x2b0 [ 921.725149][T19980] ? kernel_text_address+0xa5/0xe0 [ 921.725166][T19980] ? __kernel_text_address+0xd/0x30 [ 921.725183][T19980] ? vmci_qp_broker_detach+0x117/0xf20 [ 921.725203][T19980] lock_acquire+0x106/0x350 [ 921.725214][T19980] ? vmci_qp_broker_detach+0x117/0xf20 [ 921.725232][T19980] __mutex_lock+0x1a3/0x1550 [ 921.725247][T19980] ? vmci_qp_broker_detach+0x117/0xf20 [ 921.725263][T19980] ? kasan_save_track+0x4f/0x80 [ 921.725279][T19980] ? kasan_save_track+0x3e/0x80 [ 921.725294][T19980] ? kasan_save_free_info+0x46/0x50 [ 921.725308][T19980] ? __kasan_slab_free+0x5c/0x80 [ 921.725325][T19980] ? kfree+0x1c5/0x640 [ 921.725340][T19980] ? vmci_ctx_put+0x5ef/0xc40 [ 921.725350][T19980] ? vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 921.725362][T19980] ? vmci_datagram_dispatch+0x450/0xc60 [ 921.725374][T19980] ? vmci_qp_broker_detach+0x8dd/0xf20 [ 921.725388][T19980] ? vmci_host_close+0x98/0x160 [ 921.725402][T19980] ? vmci_qp_broker_detach+0x117/0xf20 [ 921.725416][T19980] ? exit_to_user_mode_loop+0x193/0x680 [ 921.725428][T19980] ? __pfx___mutex_lock+0x10/0x10 [ 921.725445][T19980] vmci_qp_broker_detach+0x117/0xf20 [ 921.725467][T19980] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 921.725481][T19980] ? kasan_quarantine_put+0xbb/0x1f0 [ 921.725496][T19980] ? lockdep_hardirqs_on+0x7a/0x110 [ 921.725508][T19980] ? kfree+0x1c5/0x640 [ 921.725521][T19980] ? vmci_ctx_put+0x5ef/0xc40 [ 921.725531][T19980] ? vmci_ctx_put+0x141/0xc40 [ 921.725542][T19980] vmci_ctx_put+0x64e/0xc40 [ 921.725554][T19980] ? __pfx___schedule+0x10/0x10 [ 921.725569][T19980] ? vmci_ctx_put+0x141/0xc40 [ 921.725580][T19980] ? __pfx_vmci_ctx_put+0x10/0x10 [ 921.725594][T19980] ? preempt_schedule_thunk+0x16/0x30 [ 921.725612][T19980] ? preempt_schedule_common+0x82/0xd0 [ 921.725631][T19980] vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 921.725645][T19980] vmci_datagram_dispatch+0x450/0xc60 [ 921.725659][T19980] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 921.725674][T19980] vmci_qp_broker_detach+0x8dd/0xf20 [ 921.725692][T19980] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 921.725706][T19980] ? kasan_quarantine_put+0xbb/0x1f0 [ 921.725721][T19980] ? kfree+0x1c5/0x640 [ 921.725739][T19980] ? vmci_ctx_put+0x5ef/0xc40 [ 921.725749][T19980] ? vmci_ctx_put+0x141/0xc40 [ 921.725761][T19980] vmci_ctx_put+0x64e/0xc40 [ 921.725772][T19980] ? vmci_ctx_put+0x141/0xc40 [ 921.725783][T19980] ? __pfx_vmci_ctx_put+0x10/0x10 [ 921.725799][T19980] vmci_host_close+0x98/0x160 [ 921.725813][T19980] ? __pfx_vmci_host_close+0x10/0x10 [ 921.725827][T19980] __fput+0x44f/0xa60 [ 921.725844][T19980] task_work_run+0x1d9/0x270 [ 921.725861][T19980] ? __pfx_task_work_run+0x10/0x10 [ 921.725888][T19980] exit_to_user_mode_loop+0x193/0x680 [ 921.725900][T19980] ? rcu_is_watching+0x15/0xb0 [ 921.725914][T19980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.725928][T19980] do_syscall_64+0x353/0x580 [ 921.725940][T19980] ? trace_irq_disable+0x3b/0x140 [ 921.725956][T19980] ? clear_bhb_loop+0x40/0x90 [ 921.725969][T19980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.725981][T19980] RIP: 0033:0x7fa7f759ce59 [ 921.725995][T19980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.726010][T19980] RSP: 002b:00007fa7f8391028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 921.726024][T19980] RAX: 0000000000000000 RBX: 00007fa7f7816090 RCX: 00007fa7f759ce59 [ 921.726034][T19980] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000008 [ 921.726042][T19980] RBP: 00007fa7f7632d6f R08: 0000000000000000 R09: 0000000000000000 [ 921.726050][T19980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.726059][T19980] R13: 00007fa7f7816128 R14: 00007fa7f7816090 R15: 00007fa7f793fa48 [ 921.726073][T19980] [ 922.213380][T17080] usb 5-1: USB disconnect, device number 76 [ 922.278217][ T5770] hid_parser_main: 6 callbacks suppressed [ 922.278236][ T5770] hid-generic 0000:0004:261D.0048: unknown main item tag 0x0 [ 922.291828][ T5770] hid-generic 0000:0004:261D.0048: unknown main item tag 0x0 [ 922.299258][ T5770] hid-generic 0000:0004:261D.0048: unknown main item tag 0x0 [ 922.306698][ T5770] hid-generic 0000:0004:261D.0048: unknown main item tag 0x0 [ 922.314074][ T5770] hid-generic 0000:0004:261D.0048: unknown main item tag 0x0 [ 922.321486][ T5770] hid-generic 0000:0004:261D.0048: unknown main item tag 0x0 [ 922.328896][ T5770] hid-generic 0000:0004:261D.0048: unknown main item tag 0x0 [ 922.336304][ T5770] hid-generic 0000:0004:261D.0048: unknown main item tag 0x0 [ 922.343693][ T5770] hid-generic 0000:0004:261D.0048: unknown main item tag 0x0 [ 922.351116][ T5770] hid-generic 0000:0004:261D.0048: unknown main item tag 0x0 [ 922.363776][ T5770] hid-generic 0000:0004:261D.0048: hidraw0: HID v0.03 Device [syz1] on syz0 [ 923.244467][ T5643] Bluetooth: hci1: command 0x0406 tx timeout [ 931.405877][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.412495][ T1319] ieee802154 phy1 wpan1: encryption failed: -22