last executing test programs: 7.602927598s ago: executing program 1 (id=8): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x2, {{'digest_null\x00'}}}, @algo_crypt={0x48, 0x2, {{'cipher_null\x00'}}}]}, 0x180}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x14, [{{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) socket$inet_udp(0x2, 0x2, 0x11) (async) r1 = socket$inet_udp(0x2, 0x2, 0x11) mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x8c03, &(0x7f0000000180)={[{}]}) (async) mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x8c03, &(0x7f0000000180)={[{}]}) sendto$inet(r1, &(0x7f0000000200)='hello', 0x5, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10) socket$netlink(0x10, 0x3, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) openat$cgroup_ro(r3, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) 7.54256727s ago: executing program 1 (id=9): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x93, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x12, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xeffd, 0xff, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xff, 0x1, 0x88}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000480)={{}, 'syz0\x00', 0x42}) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="8fdf2cbd7000030000000b"], 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) recvmmsg(r2, &(0x7f0000007ec0), 0x20, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001100010000000000000000002000000001"], 0x30}], 0x1}, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000000)) syz_usb_control_io(r0, &(0x7f0000000000)={0x77, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.246625463s ago: executing program 2 (id=16): timer_create(0x0, &(0x7f0000000100)={0x0, 0x34, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000480), 0x208080, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) futex(&(0x7f0000000000), 0x2, 0x8, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(0xffffffffffffffff, 0xc004ae0a, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) 4.566478475s ago: executing program 1 (id=21): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x3, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0xffffffff, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x2, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a6, 0x1004, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x8, 0x5, 0x1000, 0x6, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0x1, 0x51, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x5, 0x9, 0xfffffffb, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x14000, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x73, 0x2, 0xfc, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x6, 0x1, 0xd, 0x4, 0x5, 0x7fff, 0x0, 0x2, 0xfffffffd, 0x6, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x808, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfb1, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x3ff, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x2, 0x6, 0x1c, 0x80000000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x1ff, 0xb, 0x5, 0x1, 0x6, 0x4, 0x5102fac, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x2, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x3, 0x1, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x5, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, 0x0, &(0x7f0000000580)) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000240)=0x6e, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, 0x0) connect$unix(r5, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e) futex(&(0x7f0000000080), 0x5, 0x0, 0x0, 0x0, 0x14fffffd) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x78) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3a100000", @ANYRES16=r0, @ANYBLOB="0100fefffffffcdbdf25020000000800c13d", @ANYRESOCT=r4, @ANYBLOB="0c00990001000000010000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pipe2$watch_queue(&(0x7f0000000140), 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x3, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0xffffffff, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x2, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a6, 0x1004, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x8, 0x5, 0x1000, 0x6, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0x1, 0x51, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x5, 0x9, 0xfffffffb, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x14000, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x73, 0x2, 0xfc, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x6, 0x1, 0xd, 0x4, 0x5, 0x7fff, 0x0, 0x2, 0xfffffffd, 0x6, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x808, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfb1, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x3ff, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x2, 0x6, 0x1c, 0x80000000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x1ff, 0xb, 0x5, 0x1, 0x6, 0x4, 0x5102fac, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x2, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x3, 0x1, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x5, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, 0x0, &(0x7f0000000580)) (async) socket$inet6(0xa, 0x3, 0x8000000003c) (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c) (async) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) accept4$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000240)=0x6e, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, 0x0) (async) connect$unix(r5, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) futex(&(0x7f0000000080), 0x5, 0x0, 0x0, 0x0, 0x14fffffd) (async) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x78) (async) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3a100000", @ANYRES16=r0, @ANYBLOB="0100fefffffffcdbdf25020000000800c13d", @ANYRESOCT=r4, @ANYBLOB="0c00990001000000010000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) pipe2$watch_queue(&(0x7f0000000140), 0x80) (async) 4.434502618s ago: executing program 1 (id=23): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x2401) syncfs(r0) r1 = syz_usb_connect(0x3, 0x62, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403060103040505072404050105"], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x23, &(0x7f0000000080), &(0x7f0000000200)=0x14) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmmsg(r4, &(0x7f000000cdc0)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000ac0)="8c", 0x1}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="80498cbd3860fe06f41473b7b68608223a1cdf0b850374766b814ef6f9f049824d5357c464813794ee6db588e3345a2a744682c8854c35bebcf5d743bb923000cd08b54a3fa6897f19e0b6f5f36de856f0e0825268cbcccbc23aa1ead297c8200cc49b8a91eb6cd9e4ac74fdfa6407519361f95ec8c124e5c7365c5aa52f194b3968c513b8c942", 0x87}, {&(0x7f0000001bc0)="d7f75a9e4019864e4754f96cac13325dfb9ae3c392c21cb15608b7b14eaf623887d832761ca5530c1053eb2210be3f23419e1daa582f0f722d592c0c9ad35bcfcbacdae7bbb340d45997a14ff8944a6801eb08225201d6858083a010e74086f7916be03611ae67c02950698375b4b981ca1bacdcb99181feacdcee45a689569aa628ff937aae68edcc5fa26e25fa62b0ebab", 0x92}, {&(0x7f0000001c80)="26d2057a373028f419943f6e9f65e92b2e478550bda46153d471f6194faf23246156d15772bcc99548c73fd55116", 0x2e}], 0x5}}], 0x1, 0x8000) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f00000004c0)=""/249, 0xf9, 0x10022, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r9, 0x4048ae9b, &(0x7f0000000000)={0x10001}) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r11, 0x4008ae9c, &(0x7f0000000040)={0x19, 0x1, 0x1}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000640)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/169, 0xa9, 0x1, &(0x7f0000000540)=""/230, 0xe6}, &(0x7f0000000680)=0x40) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r12, &(0x7f0000006b40)={0x2020}, 0xfffffffffffffc8f) syz_usb_control_io$printer(r1, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x20, 0x7, 0x7c, {0x7c, 0x21, "dfa93062dcd105c0340a1b702432684dbc425519eda53637c355af2f9dceddbb7a1059de7fbbfcd3c4c913e4b7da7d1a25e20dbedca326fa1b78db2ffc39aacdf09ba4e90da28ad707f7268ddde090f45b173ad70cb4789267996d987d6af1e62626427b6141df05cd0f7e03a44512428c3617b4dd75256265d7"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x40, 0xb, 0x79, "061f3bef15e995cdbe87847db7312294ed2d04f8331125f21ce44437c33f185794b95ce74a1a8233c1547c4625845dd3a3bd4d4bccb782aff8af818376840a5692f547659a2576e304380d2b1e9832ec95a4096fdcc07bd632c36c30f8fb27ce1342e3db00a4e0de95b4f78f626748d1c12375a329cb25175a"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xd}, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0x7}}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f00000006c0)) 4.397138869s ago: executing program 0 (id=24): r0 = socket(0xa, 0x801, 0x0) r1 = socket$inet6(0xa, 0x800, 0xfffffffa) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @mcast2, 0x4}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000280)=@req={0x28, &(0x7f0000000240)={'macvlan0\x00', @ifru_map={0x4, 0x100000000, 0x8, 0x65, 0x2, 0x5}}}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x5b5, 0x4) write(r1, 0x0, 0x0) setreuid(0xee00, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/152, 0x98}], 0x1, &(0x7f00000015c0)=[{&(0x7f0000001340)=""/189, 0xbd}], 0x1, 0x0) recvfrom(r1, 0x0, 0x0, 0x2021, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x800, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8810) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r5, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x821e, 0x3a, '\'-*\')!-', 0x3a, '\x00', 0x3a, './file0'}, 0x2f) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x6c, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}, @nested={0x8, 0x5, 0x0, 0x1, [@generic="0bc007e0"]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x804) getsockopt(r0, 0x0, 0x40, 0x0, &(0x7f00000000c0)=0x54) socket(0xa, 0x801, 0x0) (async) socket$inet6(0xa, 0x800, 0xfffffffa) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @mcast2, 0x4}, 0x1c) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000280)=@req={0x28, &(0x7f0000000240)={'macvlan0\x00', @ifru_map={0x4, 0x100000000, 0x8, 0x65, 0x2, 0x5}}}) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x5b5, 0x4) (async) write(r1, 0x0, 0x0) (async) setreuid(0xee00, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) process_vm_writev(r3, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/152, 0x98}], 0x1, &(0x7f00000015c0)=[{&(0x7f0000001340)=""/189, 0xbd}], 0x1, 0x0) (async) recvfrom(r1, 0x0, 0x0, 0x2021, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x800, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8810) (async) openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) write$binfmt_register(r5, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x821e, 0x3a, '\'-*\')!-', 0x3a, '\x00', 0x3a, './file0'}, 0x2f) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x6c, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}, @nested={0x8, 0x5, 0x0, 0x1, [@generic="0bc007e0"]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x804) (async) getsockopt(r0, 0x0, 0x40, 0x0, &(0x7f00000000c0)=0x54) (async) 4.330696621s ago: executing program 0 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1800) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000001040), 0x4, &(0x7f0000001080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) (async) pipe2$9p(&(0x7f0000000080), 0x1800) (async) dup(r1) (async) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000001040), 0x4, &(0x7f0000001080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}]}}) (async) 4.262618193s ago: executing program 0 (id=26): r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000100)) (async, rerun: 64) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1a86, 0x752d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x4, 0x40, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0x8, 0x9, {0x7, 0x25, 0x1, 0xc, 0xd, 0xf488}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0x2, 0xf8, {0x7, 0x25, 0x1, 0x2, 0x6c, 0x3}}}}}}}}]}}, 0x0) (rerun: 64) 3.240341288s ago: executing program 2 (id=31): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_normal', 0x0, 0x10) read$char_usb(r0, &(0x7f0000000100)=""/177, 0x39) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8ab00, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r0, 0xc0207511, &(0x7f0000000640)={0x0, 0xffff, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000000700)={0x100000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000340), {0x36}, &(0x7f0000000400)=""/76, 0x4c, &(0x7f0000000480)=""/45, &(0x7f00000006c0)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, r2], 0x6, {r0}}, 0x58) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') statx(r3, &(0x7f00000004c0)='./cgroup\x00', 0x4000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) poll(&(0x7f0000000280)=[{r4, 0x8041}], 0x1, 0x3) mount$tmpfs(0x0, 0x0, 0x0, 0x84022, 0x0) r5 = socket(0x11, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000000c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x19, &(0x7f0000000040)=0x28, 0x4) connect$inet6(r5, &(0x7f0000000380)={0xa, 0x4e21, 0x21, @loopback, 0x1}, 0x1c) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = open$dir(&(0x7f0000000500)='./cgroup\x00', 0x202000, 0x8) openat(r8, &(0x7f0000000280)='./dev\x00', 0x303080, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) r9 = memfd_create(&(0x7f00000002c0)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\\xe3\x03\xc8\xb6\xa9D\xcc\xf4#\x9e4vmB\xd3\'\a\"\x80_N\t>\xd6\x98\x06\x00\x00\x00\x00\x00\x00\x00l\xcf\xa2\xb8\xdf4\xd8\x1d\x83\xf3\xf4\xedn_\xad\xbdt', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwrite64(r9, 0x0, 0x0, 0x0) 3.16265186s ago: executing program 2 (id=32): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000000)=@ethtool_gfeatures}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0xffffffffffffff84, 0x410080) mmap$usbfs(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x40010, r3, 0xffffffffffffffff) ptrace$pokeuser(0x6, r2, 0x378, 0x8) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) 3.16144419s ago: executing program 2 (id=33): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1, 0x7, 0x6e8}, 0x20) io_setup(0x239f, &(0x7f0000000380)=0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_wakeup_irq', 0x400, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x4000042, 0x82, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) capset(&(0x7f0000000580)={0x19980330}, &(0x7f00000005c0)={0x6, 0x7, 0x1, 0x8001, 0xb, 0x9}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r6, &(0x7f0000019500)=""/102388, 0x18ff4, 0x1000000000) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x43, 0x4}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44001}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r7, 0x1, 0x2f, 0x0, &(0x7f0000000300)=0x700) r8 = syz_io_uring_setup(0x6a6f, &(0x7f0000000000)={0x0, 0x4c1f, 0x8, 0x1, 0x2bc}, &(0x7f0000000080), &(0x7f0000000300), &(0x7f0000000000)) io_cancel(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x4000000}, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000194c0)={0x0, 0x0, &(0x7f0000019440)=[{&(0x7f0000019300)="5d995eaf00a5d71cfc41c94fa4d19d26adbf48679cce6d32ef9cf59a03dafd6f475ed2da9b066f45dd75d95d4704f339cfe66da9db026cb2866acc48aa08df5cf00878539f289a5a79b9f97ef6dd4f606fa793a4e2545fcdf1b3bdbc954c860d0f89ed97c1aed34d5436c67375b3567b75bf0b5d89929055979716b89a3201b0df0f216e7b395ec7b93efa9d87aabcbf7bc102e7ac2b508d19340aec6a7f0bed98dbb467c36ea98f2132e9158fb90ecf0ce43da0dcce15a1aa6b920515f18fc578ebf20dec3cdae9ec3ea23a4179d100ed9617f6a03faaafc2cae1c74e835ad6615146b5cd1f2af0afed60221739", 0xee}, {&(0x7f0000019400)="48071244a7c9358d9c60238f4fb69a8c0047bd4d3b", 0x15}], 0x2, &(0x7f0000019480)="1d5b94c85f63", 0x6, 0x10}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r11 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r11, &(0x7f0000000080)='id_legacy\x00', 0x0) connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) sendmsg$can_bcm(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000019240)=ANY=[@ANYBLOB="0100"/16, @ANYRES32=r8, @ANYRESHEX=r0, @ANYRES64=0x77359400, @ANYRES64=r9, @ANYBLOB="0000000001", @ANYRES8=0x0, @ANYRES32=r4], 0x48}}, 0x0) sendmsg$can_bcm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000110000000000000000000100", @ANYRES64=r12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x38}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r13, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES32=r14], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='gid_map\x00') 3.066163833s ago: executing program 2 (id=34): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x9}) (async, rerun: 64) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x0) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="280000002a0003050000000000000000180000800c0000"], 0x28}], 0x1}, 0x14008010) (async, rerun: 64) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) (async, rerun: 64) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioperm(0x8, 0x1, 0x10001) (async) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = dup(r5) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@initdev, @in6=@ipv4={""/10, ""/2, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000600)=0xe8) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r10, r11, 0x0) (async, rerun: 64) lseek(r3, 0xfffffffffffffffb, 0x0) (async, rerun: 64) syz_ublk_setup_queues(r9, r4, &(0x7f0000000280)={0x0, 0xe03e, 0x4, 0x10040101, 0x2c2}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x2b5a0e7776a0486c, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x7, 0x1, 0x0, 0x0}}, 0x0) (async) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x1037, {0x0, 0xa, 0x4, 0x2, 0x80000001, 0x1}}) 2.982576135s ago: executing program 3 (id=36): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_adj\x00') recvmmsg(r1, 0x0, 0x0, 0x40010040, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "1a88ef816c4b42ed", "fdfdeb69a700000000810810010200000000000000000008000000000000efff", '\x00\t\x00', "066580001e00"}, 0x38) writev(r0, &(0x7f00000007c0)=[{&(0x7f00000003c0)="817d4410fd2068200d2d4706a2702b0c", 0x10}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r2, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e01") r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x22000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100027bd7000ffdbdf250200000008000200020000000800020002000800010002000000"], 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x400) 2.982260515s ago: executing program 3 (id=37): unshare(0x62040200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000580)='cgroup.max.descendants\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x20, 0xfb, 0x6}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x20, 0xfb, 0x6}]}) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) close_range(r0, r2, 0x0) (async) close_range(r0, r2, 0x0) 2.963175735s ago: executing program 0 (id=38): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000004200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8001) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$sock(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x8004) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES64=r1], 0x20}}, 0x40816) 2.902599247s ago: executing program 0 (id=39): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, r3, 0x8, 0x10, r1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) splice(r4, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) writev(r5, &(0x7f0000001580)=[{&(0x7f0000000000)="24a362f1c2551779bfc3eb3a3a4a0eef3994d0302d717cb72050490cdf03851ec4ef3253dd1ebd0e657a5f542cb38d", 0x2f}, {&(0x7f0000000580)="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", 0x1000}], 0x2) write$P9_RLERRORu(r2, &(0x7f0000000100)=ANY=[], 0xe) 2.850611088s ago: executing program 0 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)={0x2c, 0x21, 0x1, 0x0, 0x8000, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x01\x01b'}, @typed={0xd, 0xc, 0x0, 0x0, @str='$]:\x1e\\-(!\x00'}]}, 0x2c}], 0x1}, 0x80) (async) syz_usb_connect$uac2(0x3, 0x8c, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x0, 0xf0, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x9, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x6, 0x1a, 0x3}, [@processing_unit={0x11, 0x24, 0x8, 0x3, 0x6, [0x0, 0x0, 0x0, 0x2, 0x3, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x5, 0x0, {0x8, 0x25, 0x1, 0x1, 0x6, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0xe6, 0x40, {0x8, 0x25, 0x1, 0x3, 0x3, 0xfe, 0x5}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006f7ffffffffffffff24ac14142600e5ffffffffffff0100"], 0x70}, 0x1, 0x7}, 0x0) r2 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) (async) getsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00000016c0)={@local, @dev}, &(0x7f0000001700)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3a}, 0x40, r3}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001780)={0x2, 0x3, 0x4, 0x7, 0x3a, 0x0, 0x70bd26, 0x25dfdbfc, [@sadb_spirange={0x2, 0x10, 0x4d5, 0xfffff377}, @sadb_x_policy={0x8, 0x12, 0x4, 0x3, 0x0, 0x0, 0x9, {0x6, 0x33, 0xf1, 0xf, 0x0, 0x8001, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @in=@multicast2}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in=@local, 0x29, 0xc, 0x10}, @sadb_key={0xc, 0x9, 0x2a0, 0x0, "d4e8557c0e437c7631990eb60965ab11ba28305802b50cde5e1e67418609da5e9be645cda6a97ecd3aa3bdff9f9a8c23a5c0a11c18b05138bcad52cd61af1486132a849330f5706cda99ebea021f5dc2d76f7444"}, @sadb_sa={0x2, 0x1, 0x4d5, 0x9, 0x9, 0xb0, 0x4, 0x1}, @sadb_key={0x11, 0x8, 0x3d0, 0x0, "12df95ec26f73d0c2ea88d899b6e2670c6fe930e24a1b28ac8af6124cfd888c6cb881044e0b785ecf82b21e1b1ef3ae6a8690345d76a847093f4ebe64240ec70e100fdbf2ed3e630d420979cc19a7109a6dd106b0276f5080df26cf04027982147b42d9734c4a7a7ac5607a71907447716ecc3769020442afbe0"}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4f23, @multicast2}, @in6={0xa, 0x4e20, 0x6, @private2, 0x7}}, @sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x0, 0x6d, 0x4, 0x80000000}]}, 0x1d0}}, 0x800) (async) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$selinux_validatetrans(r5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000000380)={r6, &(0x7f0000000240)='@\xf1\x00', 0x80000, &(0x7f0000000280)={@align=0x3, {0x100, 0xce, 0x93c, 0x53}}, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=0x4}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000003c0)={{0x0, 0x5, 0x0, 0x9, 0x5, 0x3, 0x10, 0x9, 0x7fffffff, 0xfffffc09, 0x0, 0x775, 0xfe8c, 0x1, 0x921}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f00000013c0)={{r8, 0x0, 0x4, 0x4, 0x2e6, 0x1, 0xffff, 0x800000, 0x8, 0x5, 0x6, 0x9, 0x7, 0x3, 0x7fff}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write(r6, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) 2.798162199s ago: executing program 1 (id=41): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x40840) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000080)=0x7, 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0xa0402) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000140)={0x20, 0x3, 0x2, 0x6, 0x0, 0x3ffffffe, 0x0}) recvmmsg(r3, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10102, 0x0) shutdown(r3, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000040)=0x3, 0x4) 2.729831691s ago: executing program 1 (id=42): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = epoll_create1(0x80000) epoll_pwait2(r1, &(0x7f0000000a00)=[{}], 0x1, &(0x7f0000000a80), 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a94ea0609eebd0083"], 0x0}, 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000003840)={[0x100]}, 0x8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r5, 0x48}], 0x1, 0x0, 0x0, 0x0) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.opaque\x00', &(0x7f0000000140)=':[.\x00', 0x4, 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x9) syz_usb_disconnect(r2) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) 2.114626507s ago: executing program 3 (id=43): r0 = socket$netlink(0x10, 0x3, 0x6) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x101a82, 0x30) copy_file_range(r2, &(0x7f0000000000)=0x4, r2, 0x0, 0x4, 0x0) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000a4f000/0x2000)=nil, 0x2000}}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0) 1.315764427s ago: executing program 3 (id=44): inotify_rm_watch(0xffffffffffffffff, 0x0) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) syz_usb_connect$midi(0x4, 0x50, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0) 805.549769ms ago: executing program 3 (id=45): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@multicast, @empty, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x88a8}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x4, 0x58, 0x66, 0x0, 0x1, 0x2f, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x3}, {0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x9, 0x1, 0x0, 0x1, 0x1, 0x2, 0x7, 0x3}, 0x1, {0x8000}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x39, 0x1, 0x0, 0x1, 0x0, 0x6}, 0x2, {0x60b4, 0x8, 0x3, 0x1, 0x0, 0x1, 0x2}}}}}}}}}, 0x72) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r3, 0x5319, 0x0) 706.642082ms ago: executing program 3 (id=46): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x1cb142, 0x84) io_setup(0x10000, &(0x7f0000001080)=0x0) io_submit(r1, 0x1, &(0x7f00000010c0)=[&(0x7f0000000240)={0x0, 0x0, 0xe4, 0x1, 0xfffc, r0, 0x0, 0x0, 0x600}]) syz_usb_connect(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r1, @ANYBLOB="c5337d55f544631f4a5cc623b2b420a257e882d19d242d3f46e20f56983fb17742a817dc43c9cbb6cc1184a85c2c13fbd2e90761255d165d50", @ANYBLOB="77b8d788d0885c7b58e53891a18892ae7a118f99e6db062dc34e2f6291baa07b539a70f4689b7f5842e33120b40b52b3ceb5e1e3cf8766fec2c69b8c5b47e0b8119885cb9e22aa0264806a1132f479f3230682d494c51dfedfee9689cf9bfc4f1fc269fb4046d88622efb0d788f55765beb6d2a4ff85a86632b4d6b42dbdf5b2da7d50a15ed40b17b0876b3ed32fae", @ANYBLOB="68a25f972ba508e335a3aa8b8380d972427a4bb2041eae1f524e190122554c3415675d1920db7487d1236f7f02bd33df7f7a70b02c7c73a8d5f0e40badb02aeb12b5dc905cee5272f7b98d1152183d38dbc2c33c555c019844b480eeb750d91fab0bd9dcbcb9c0d1f434cbb7e2c8e7570019aea6e6d7e02aeb1364c97673f398b54081a364bd1b32303f4de505"], 0x0) 0s ago: executing program 2 (id=47): prctl$PR_MCE_KILL(0x41555856, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x29) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.87' (ED25519) to the list of known hosts. [ 29.210872][ T36] audit: type=1400 audit(1786127183.669:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.212036][ T286] cgroup: Unknown subsys name 'net' [ 29.233525][ T36] audit: type=1400 audit(1786127183.669:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.260815][ T36] audit: type=1400 audit(1786127183.699:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.260981][ T286] cgroup: Unknown subsys name 'devices' [ 29.383076][ T286] cgroup: Unknown subsys name 'hugetlb' [ 29.388702][ T286] cgroup: Unknown subsys name 'rlimit' [ 29.500861][ T36] audit: type=1400 audit(1786127183.959:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.524228][ T36] audit: type=1400 audit(1786127183.959:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.549022][ T36] audit: type=1400 audit(1786127183.959:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.558468][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.581036][ T36] audit: type=1400 audit(1786127184.039:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.606575][ T36] audit: type=1400 audit(1786127184.039:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.620249][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.632401][ T36] audit: type=1400 audit(1786127184.079:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.666309][ T36] audit: type=1400 audit(1786127184.079:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.824486][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.831912][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.838982][ T295] bridge_slave_0: entered allmulticast mode [ 30.845491][ T295] bridge_slave_0: entered promiscuous mode [ 30.851988][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.859018][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.866252][ T295] bridge_slave_1: entered allmulticast mode [ 30.872482][ T295] bridge_slave_1: entered promiscuous mode [ 30.907637][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.914721][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.921936][ T293] bridge_slave_0: entered allmulticast mode [ 30.928226][ T293] bridge_slave_0: entered promiscuous mode [ 30.934843][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.941935][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.949007][ T293] bridge_slave_1: entered allmulticast mode [ 30.955386][ T293] bridge_slave_1: entered promiscuous mode [ 30.990215][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.997297][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.004446][ T296] bridge_slave_0: entered allmulticast mode [ 31.010643][ T296] bridge_slave_0: entered promiscuous mode [ 31.019186][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.026341][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.033657][ T296] bridge_slave_1: entered allmulticast mode [ 31.039846][ T296] bridge_slave_1: entered promiscuous mode [ 31.107388][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.114599][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.121732][ T294] bridge_slave_0: entered allmulticast mode [ 31.127910][ T294] bridge_slave_0: entered promiscuous mode [ 31.134437][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.141630][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.148717][ T294] bridge_slave_1: entered allmulticast mode [ 31.155153][ T294] bridge_slave_1: entered promiscuous mode [ 31.266798][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.273888][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.281231][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.288251][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.298368][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.305448][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.312786][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.319806][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.331349][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.338406][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.345716][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.352777][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.369238][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.376319][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.383606][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.390621][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.432468][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.439814][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.447346][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.455323][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.462654][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.469805][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.477486][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.484786][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.499015][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.506101][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.514458][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.521509][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.531974][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.539056][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.552657][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.559737][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.583125][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.590212][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.599169][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.606245][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.624859][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.631935][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.643515][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.650564][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.669940][ T293] veth0_vlan: entered promiscuous mode [ 31.689144][ T295] veth0_vlan: entered promiscuous mode [ 31.705706][ T296] veth0_vlan: entered promiscuous mode [ 31.723106][ T293] veth1_macvtap: entered promiscuous mode [ 31.732758][ T294] veth0_vlan: entered promiscuous mode [ 31.739032][ T295] veth1_macvtap: entered promiscuous mode [ 31.765845][ T294] veth1_macvtap: entered promiscuous mode [ 31.787248][ T296] veth1_macvtap: entered promiscuous mode [ 31.797671][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.839160][ T316] ======================================================= [ 31.839160][ T316] WARNING: The mand mount option has been deprecated and [ 31.839160][ T316] and is ignored by this kernel. Remove the mand [ 31.839160][ T316] option from the mount to silence this warning. [ 31.839160][ T316] ======================================================= [ 31.877698][ T316] rust_binder: 315:316 got transaction to invalid handle 1 [ 31.886117][ T316] rust_binder: 315:316 transaction call to 0:0 failed ENOENT, code 0 size 72-0 [ 31.896609][ T45] rust_binder: 315: undelivered TRANSACTION_ERROR: 29201 [ 31.943844][ T326] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.998585][ T331] sit0: entered promiscuous mode [ 32.004179][ T331] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 32.011828][ T331] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4'. [ 32.188541][ T346] tipc: Started in network mode [ 32.193799][ T346] tipc: Node identity ac14140f, cluster identity 4711 [ 32.200683][ T346] tipc: New replicast peer: 255.255.255.255 [ 32.206898][ T346] tipc: Enabled bearer , priority 10 [ 32.211276][ T319] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.233413][ T351] Zero length message leads to an empty skb [ 32.351318][ T31] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 32.358930][ T319] usb 1-1: device descriptor read/64, error -71 [ 32.381344][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.512227][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 32.523202][ T31] usb 2-1: New USB device found, idVendor=056a, idProduct=0093, bcdDevice= 0.00 [ 32.532512][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.542539][ T31] usb 2-1: config 0 descriptor?? [ 32.547779][ T339] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 32.561250][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 32.567492][ T45] usb 3-1: config 0 has an invalid interface number: 84 but max is 0 [ 32.575714][ T45] usb 3-1: config 0 has no interface number 0 [ 32.581919][ T45] usb 3-1: config 0 interface 84 has no altsetting 0 [ 32.590077][ T45] usb 3-1: New USB device found, idVendor=18ec, idProduct=3188, bcdDevice=91.33 [ 32.599256][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.607338][ T319] usb 1-1: device descriptor read/64, error -71 [ 32.613606][ T45] usb 3-1: Product: syz [ 32.617763][ T45] usb 3-1: Manufacturer: syz [ 32.623020][ T45] usb 3-1: SerialNumber: syz [ 32.629707][ T45] usb 3-1: config 0 descriptor?? [ 32.838758][ T45] usb 3-1: Found UVC 0.00 device syz (18ec:3188) [ 32.845261][ T45] usb 3-1: No valid video chain found. [ 32.852006][ T45] usb 3-1: USB disconnect, device number 2 [ 32.871495][ T319] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.957636][ T339] input: syz0 as /devices/virtual/input/input4 [ 33.011308][ T319] usb 1-1: device descriptor read/64, error -71 [ 33.016848][ T358] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9'. [ 33.261261][ T319] usb 1-1: device descriptor read/64, error -71 [ 33.321291][ T356] tipc: Node number set to 2886997007 [ 33.341514][ T10] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 33.381427][ T319] usb usb1-port1: attempt power cycle [ 33.681395][ T356] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 33.741409][ T319] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 33.762410][ T319] usb 1-1: device descriptor read/8, error -71 [ 33.852429][ T356] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.881326][ T356] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 33.890254][ T356] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25966, setting to 8 [ 33.902551][ T319] usb 1-1: device descriptor read/8, error -71 [ 33.921286][ T356] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 33.930419][ T356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.955641][ T367] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 33.963943][ T356] hub 3-1:1.0: bad descriptor, ignoring hub [ 33.969887][ T356] hub 3-1:1.0: probe with driver hub failed with error -5 [ 33.977709][ T356] cdc_wdm 3-1:1.0: skipping garbage [ 33.983294][ T356] cdc_wdm 3-1:1.0: skipping garbage [ 33.989299][ T356] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 33.995621][ T356] cdc_wdm 3-1:1.0: Unknown control protocol [ 34.151590][ T319] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 34.172382][ T319] usb 1-1: device descriptor read/8, error -71 [ 34.302395][ T319] usb 1-1: device descriptor read/8, error -71 [ 34.421440][ T319] usb usb1-port1: unable to enumerate USB device [ 34.941317][ T36] kauditd_printk_skb: 69 callbacks suppressed [ 34.941338][ T36] audit: type=1400 audit(1786127189.399:143): avc: denied { ioctl } for pid=370 comm="syz.0.17" path="socket:[3971]" dev="sockfs" ino=3971 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.001258][ T36] audit: type=1400 audit(1786127189.399:144): avc: denied { getopt } for pid=370 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.041311][ T36] audit: type=1400 audit(1786127189.409:145): avc: denied { write } for pid=372 comm="syz.0.18" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.097377][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 35.110605][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 35.127191][ T31] usb 2-1: USB disconnect, device number 2 [ 35.139327][ T36] audit: type=1400 audit(1786127189.599:146): avc: denied { connect } for pid=384 comm="syz.1.21" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.161605][ T36] audit: type=1400 audit(1786127189.599:147): avc: denied { write } for pid=384 comm="syz.1.21" laddr=fe80::16 lport=60 faddr=fe80::a fport=65535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.186145][ T36] audit: type=1400 audit(1786127189.599:148): avc: denied { ioctl } for pid=384 comm="syz.1.21" path="socket:[5162]" dev="sockfs" ino=5162 ioctlcmd=0x556b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.214677][ T36] audit: type=1400 audit(1786127189.679:149): avc: denied { mount } for pid=386 comm="syz.0.22" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 35.238208][ T36] audit: type=1400 audit(1786127189.679:150): avc: denied { read write } for pid=386 comm="syz.0.22" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 35.272572][ T36] audit: type=1400 audit(1786127189.679:151): avc: denied { open } for pid=386 comm="syz.0.22" path="/6/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 35.297144][ T36] audit: type=1400 audit(1786127189.679:152): avc: denied { ioctl } for pid=386 comm="syz.0.22" path="/6/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0xfd00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 35.340465][ T401] 9pnet_fd: Insufficient options for proto=fd [ 35.347892][ T402] 9pnet_fd: Insufficient options for proto=fd [ 35.581458][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 35.601309][ T341] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 35.741429][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 35.747818][ T31] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 35.756348][ T31] usb 2-1: config 0 has no interface number 0 [ 35.764204][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 35.773932][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.782871][ T31] usb 2-1: Product: syz [ 35.787209][ T341] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 35.796508][ T31] usb 2-1: Manufacturer: syz [ 35.801163][ T341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.809434][ T341] usb 1-1: Product: syz [ 35.813800][ T341] usb 1-1: Manufacturer: syz [ 35.818404][ T341] usb 1-1: SerialNumber: syz [ 35.823320][ T31] usb 2-1: SerialNumber: syz [ 35.829075][ T31] usb 2-1: config 0 descriptor?? [ 36.049984][ T406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.064408][ T406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.076106][ T31] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 36.083097][ T406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.091665][ T31] usb 2-1: No valid video chain found. [ 36.097946][ T406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.108366][ T406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.118078][ T406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.127796][ T406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.136361][ T406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.146411][ T406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.155532][ T406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.163920][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 36.175086][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 36.178100][ T341] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 36.185731][ T10] usb 4-1: can't read configurations, error -71 [ 36.206328][ T341] usb 1-1: USB disconnect, device number 6 [ 36.352291][ T31] usb 2-1: USB disconnect, device number 3 [ 36.491335][ T9] usb 3-1: USB disconnect, device number 3 [ 36.505541][ T430] capability: warning: `syz.2.33' uses 32-bit capabilities (legacy support in use) [ 36.521933][ T430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.33'. [ 36.647706][ T449] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 36.780922][ T460] dummy_hcd dummy_hcd.0: remove, state 1 [ 36.841305][ T31] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 36.881321][ T341] hub 1-0:1.0: activate --> -108 [ 36.886454][ T341] hub 1-0:1.0: hub_ext_port_status failed (err = -108) [ 36.886461][ T460] usb usb1: USB disconnect, device number 1 [ 36.901815][ T460] dummy_hcd dummy_hcd.0: stopped [ 36.906936][ T460] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 36.971257][ T31] usb 3-1: device descriptor read/64, error -71 [ 37.171277][ T341] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 37.211306][ T31] usb 3-1: device descriptor read/64, error -71 [ 37.321320][ T341] usb 2-1: Using ep0 maxpacket: 32 [ 37.327765][ T341] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 37.336315][ T341] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 37.345393][ T341] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 37.354395][ T341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 37.364090][ T341] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 37.373801][ T341] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 37.386811][ T341] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 37.396046][ T341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.404589][ T341] usb 2-1: config 0 descriptor?? [ 37.451275][ T31] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 37.591291][ T31] usb 3-1: device descriptor read/64, error -71 [ 37.612723][ T341] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 37.624811][ T341] usb 2-1: USB disconnect, device number 4 [ 37.631517][ T341] usblp0: removed [ 37.831268][ T31] usb 3-1: device descriptor read/64, error -71 [ 37.941385][ T31] usb usb3-port1: attempt power cycle [ 38.061969][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 38.191284][ T10] usb 2-1: device descriptor read/64, error -71 [ 38.281274][ T31] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 38.302355][ T31] usb 3-1: device descriptor read/8, error -71 [ 38.431282][ T10] usb 2-1: device descriptor read/64, error -71 [ 38.432336][ T31] usb 3-1: device descriptor read/8, error -71 [ 38.671287][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 38.681273][ T31] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 38.702367][ T31] usb 3-1: device descriptor read/8, error -71 [ 38.801327][ T10] usb 2-1: device descriptor read/64, error -71 [ 38.842249][ T31] usb 3-1: device descriptor read/8, error -71 [ 38.867012][ T476] syzkaller1: entered promiscuous mode [ 38.872550][ T476] syzkaller1: entered allmulticast mode [ 38.951377][ T31] usb usb3-port1: unable to enumerate USB device [ 39.041332][ T10] usb 2-1: device descriptor read/64, error -71 [ 39.151349][ T10] usb usb2-port1: attempt power cycle [ 39.161309][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 39.291296][ T9] usb 4-1: device descriptor read/64, error -71 [ 39.501519][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 39.522916][ T10] usb 2-1: device descriptor read/8, error -71 [ 39.531303][ T9] usb 4-1: device descriptor read/64, error -71 [ 39.652372][ T10] usb 2-1: device descriptor read/8, error -71 [ 39.771269][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 39.782885][ T461] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 39.795656][ T461] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 39.804076][ T461] CPU: 1 UID: 0 PID: 461 Comm: syz.0.40 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 39.815345][ T461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.825565][ T461] RIP: 0010:set_link_state+0x2a/0x1240 [ 39.831043][ T461] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 5d fe cd fd 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 b8 c2 26 fe 4d 8b 75 00 49 8d 95 93 [ 39.850679][ T461] RSP: 0018:ffffc9000db97718 EFLAGS: 00010046 [ 39.856769][ T461] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff8881167b0000 [ 39.864728][ T461] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 39.872711][ T461] RBP: ffffc9000db977a0 R08: 0000000000000003 R09: 0000000000000004 [ 39.880675][ T461] R10: dffffc0000000000 R11: fffff52001b72ee0 R12: 0000000000000000 [ 39.888692][ T461] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8881062e8000 [ 39.891261][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 39.896658][ T461] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 39.896683][ T461] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.896695][ T461] CR2: 00007f3da9df6ff8 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 39.896712][ T461] Call Trace: [ 39.896719][ T461] [ 39.904332][ T9] usb 4-1: device descriptor read/64, error -71 [ 39.913071][ T461] ? __kasan_check_write+0x18/0x20 [ 39.913105][ T461] dummy_pullup+0xd1/0x130 [ 39.913128][ T461] ? __cfi_dummy_pullup+0x10/0x10 [ 39.932332][ T10] usb 2-1: device descriptor read/8, error -71 [ 39.934181][ T461] usb_gadget_disconnect_locked+0x151/0x400 [ 39.967417][ T461] gadget_unbind_driver+0xaf/0x3f0 [ 39.972530][ T461] ? __cfi_gadget_unbind_driver+0x10/0x10 [ 39.978258][ T461] device_release_driver_internal+0x4ad/0x830 [ 39.984332][ T461] driver_detach+0x1f5/0x2d0 [ 39.988918][ T461] bus_remove_driver+0x254/0x2b0 [ 39.993844][ T461] driver_unregister+0x79/0xb0 [ 39.998602][ T461] usb_gadget_unregister_driver+0x52/0x80 [ 40.004324][ T461] raw_release+0xdb/0x280 [ 40.008658][ T461] ? __cfi_raw_release+0x10/0x10 [ 40.013600][ T461] __fput+0x208/0xa30 [ 40.017610][ T461] ____fput+0x20/0x30 [ 40.021633][ T461] task_work_run+0x1e8/0x260 [ 40.026245][ T461] ? __cfi_task_work_run+0x10/0x10 [ 40.031478][ T461] ? __kasan_check_write+0x18/0x20 [ 40.036635][ T461] do_exit+0xa46/0x2850 [ 40.040789][ T461] ? __cfi_do_exit+0x10/0x10 [ 40.045388][ T461] ? __kasan_check_write+0x18/0x20 [ 40.050492][ T461] ? _raw_spin_lock_irq+0x93/0x120 [ 40.055599][ T461] do_group_exit+0x21f/0x2f0 [ 40.060226][ T461] ? __kasan_check_write+0x18/0x20 [ 40.065344][ T461] ? recalc_sigpending+0x184/0x1d0 [ 40.070452][ T461] get_signal+0x134c/0x1490 [ 40.071797][ T10] usb 2-1: device descriptor read/8, error -71 [ 40.074955][ T461] arch_do_signal_or_restart+0xbc/0x700 [ 40.074984][ T461] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 40.092799][ T461] ? __se_sys_ioctl+0x198/0x1b0 [ 40.097674][ T461] syscall_exit_to_user_mode+0x57/0xb0 [ 40.103162][ T461] do_syscall_64+0x63/0xf0 [ 40.107585][ T461] ? clear_bhb_loop+0x50/0xa0 [ 40.112254][ T461] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.118171][ T461] RIP: 0033:0x7f601459dd6b [ 40.122689][ T461] Code: Unable to access opcode bytes at 0x7f601459dd41. [ 40.129771][ T461] RSP: 002b:00007f60154ecf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 40.138191][ T461] RAX: fffffffffffffffc RBX: 0000000000000004 RCX: 00007f601459dd6b [ 40.146339][ T461] RDX: 00007f60154edfd0 RSI: 0000000080085502 RDI: 0000000000000004 [ 40.151267][ T9] usb 4-1: device descriptor read/64, error -71 [ 40.154302][ T461] RBP: 00007f60154edfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 40.154321][ T461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 40.154333][ T461] R13: 0000000800000000 R14: 0000000000000003 R15: 00007f6014653882 [ 40.154350][ T461] [ 40.181364][ T10] usb usb2-port1: unable to enumerate USB device [ 40.184626][ T461] Modules linked in: [ 40.184661][ T461] ---[ end trace 0000000000000000 ]--- [ 40.203311][ T461] RIP: 0010:set_link_state+0x2a/0x1240 [ 40.208778][ T461] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 5d fe cd fd 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 b8 c2 26 fe 4d 8b 75 00 49 8d 95 93 [ 40.228491][ T461] RSP: 0018:ffffc9000db97718 EFLAGS: 00010046 [ 40.234587][ T461] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff8881167b0000 [ 40.242573][ T461] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.250539][ T461] RBP: ffffc9000db977a0 R08: 0000000000000003 R09: 0000000000000004 [ 40.258506][ T461] R10: dffffc0000000000 R11: fffff52001b72ee0 R12: 0000000000000000 [ 40.261373][ T9] usb usb4-port1: attempt power cycle [ 40.266477][ T461] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8881062e8000 [ 40.266500][ T461] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 40.266515][ T461] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.266528][ T461] CR2: 00007f3da9df6ff8 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 40.303283][ T461] Kernel panic - not syncing: Fatal exception [ 40.309637][ T461] Kernel Offset: disabled [ 40.313952][ T461] Rebooting in 86400 seconds..