last executing test programs: 21m33.839653811s ago: executing program 2 (id=3857): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-384-generic\x00'}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r4}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc}]}, 0x40}}, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d42400000000000000290000003b000000", 0xfe60) 21m33.368985368s ago: executing program 2 (id=3860): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e55", 0x85}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb", 0x10}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x3a0}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 21m33.154138948s ago: executing program 2 (id=3863): socket$kcm(0x29, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = syz_open_dev$loop(&(0x7f00000007c0), 0x10000, 0x100) ioctl$BLKIOOPT(r7, 0x1279, &(0x7f00000009c0)) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3d, 0x7ff, 0xf83, 0x3}, 0x1c) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)}, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r8) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc0560", 0x36}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xffffffff, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x2400c080) 21m31.188136028s ago: executing program 2 (id=3873): r0 = socket$packet(0x11, 0x3, 0x300) fsopen(&(0x7f00000000c0)='devpts\x00', 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000480)={@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @broadcast}}, {&(0x7f0000000200)=""/92, 0x5c}, &(0x7f00000000c0), 0x23}, 0xa0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000280)={0xa, 0x2, 0x7, {0x8000, 0x1000, 0x4, 0x8}}) syz_emit_ethernet(0x1fc, &(0x7f0000001600)=ANY=[], 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x2, @vbi={0x4, 0x5, 0xf, 0x47504a4d, [0x200, 0x3], [0x4f, 0x6], 0x13a}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1000}, 0x4) 21m28.355073652s ago: executing program 2 (id=3884): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280), 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7ffffffe}]}) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0xc4) ftruncate(r6, 0x2007ffb) sendfile(r6, r6, 0x0, 0x1000000201005) 21m27.408163403s ago: executing program 2 (id=3886): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100}, &(0x7f0000000180), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000380)={0xdff, 0xffffffffffffffff, 0x22, {0xffffffff, 0x1}, 0x9}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) writev(0xffffffffffffffff, &(0x7f0000001200)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r2, 0x2000, 0x0) 21m26.094462111s ago: executing program 32 (id=3886): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100}, &(0x7f0000000180), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000380)={0xdff, 0xffffffffffffffff, 0x22, {0xffffffff, 0x1}, 0x9}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) writev(0xffffffffffffffff, &(0x7f0000001200)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r2, 0x2000, 0x0) 15m20.709772503s ago: executing program 0 (id=5146): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 15m19.102656839s ago: executing program 0 (id=5156): socket$kcm(0x29, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = syz_open_dev$loop(&(0x7f00000007c0), 0x10000, 0x100) ioctl$BLKIOOPT(r7, 0x1279, &(0x7f00000009c0)) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3d, 0x7ff, 0xf83, 0x3}, 0x1c) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r8) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d300987f70e06d038e7ff7fc6e5539b0d650e8b089b3f313b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc0560", 0x36}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xffffffff, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x2400c080) 15m16.457965385s ago: executing program 0 (id=5168): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336be", 0x95}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb", 0x10}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x108, 0x29, 0x4, {0x4, 0x1d, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x6b, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f5"}, @enc_lim={0x4, 0x1, 0xf8}, @generic={0x80}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1b8, 0x29, 0x36, {0x5e, 0x33, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xc6, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x390}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 15m16.123873796s ago: executing program 0 (id=5170): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x8402, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x100, 0x600}, 0x90) 15m15.962970584s ago: executing program 0 (id=5172): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xec}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a8", 0xc}, {&(0x7f0000000fc0)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e94653cbd9e52fba37c5a31d095500e91d02256f101e82447e34733220cdaaabc947f5b815080b5214c94a06fe96450ea42", 0x123}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000001c0)="ffbcf4", 0x3}], 0x1}}], 0x2, 0x40408e0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000051b7f020510452516aaa0102030209021b0001010010000904ec0201af3af30009050502"], 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 15m15.20403539s ago: executing program 0 (id=5175): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336be", 0x95}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb", 0x10}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x110, 0x29, 0x4, {0x4, 0x1e, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @enc_lim={0x4, 0x1, 0xf8}, @generic={0x80}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1b8, 0x29, 0x36, {0x5e, 0x33, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xc6, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x398}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 15m14.614564602s ago: executing program 33 (id=5175): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336be", 0x95}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb", 0x10}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x110, 0x29, 0x4, {0x4, 0x1e, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @enc_lim={0x4, 0x1, 0xf8}, @generic={0x80}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1b8, 0x29, 0x36, {0x5e, 0x33, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xc6, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x398}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 35.187279778s ago: executing program 4 (id=8205): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r1, 0x0) socket$inet6(0xa, 0x800, 0x9) write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12) (fail_nth: 2) 34.007837651s ago: executing program 4 (id=8207): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r2 = getpid() r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x6a, 0x10, 0x0, 0x0) syz_pidfd_open(r2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x6) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000040)={0xa, 0x1}) landlock_create_ruleset(&(0x7f00000000c0)={0x4, 0x0, 0x2}, 0x18, 0x0) landlock_create_ruleset(&(0x7f0000000100)={0x2040, 0x1}, 0x18, 0x3) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x20, 0x2, 0x3}, 0x18, 0x1) landlock_restrict_self(r4, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) 33.002553296s ago: executing program 4 (id=8209): socket$kcm(0x29, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = syz_open_dev$loop(&(0x7f00000007c0), 0x10000, 0x100) ioctl$BLKIOOPT(r7, 0x1279, &(0x7f00000009c0)) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3d, 0x7ff, 0xf83, 0x3}, 0x1c) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r8) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) socket(0x3, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc0560", 0x36}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xffffffff, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x2400c080) 31.109132948s ago: executing program 4 (id=8219): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x70bd26, 0x25dfdbfc, {0xa, 0x40, 0x22, 0xfe, r3}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="04ac0f000cac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r10 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r10, 0x4010942a, &(0x7f0000000600)={0x1, 0x4}) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r11 = open_tree(r9, &(0x7f0000000bc0)='./file0\x00', 0x800) move_mount(r11, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x220) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x4, 0xe}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_ACT={0x30, 0x3, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8848}, 0x80) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r15 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r15, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000003c0)=""/253, 0xfd}, {&(0x7f00000004c0)=""/142, 0x8e}, {&(0x7f0000000680)=""/219, 0xdb}, {&(0x7f0000000780)=""/204, 0xcc}, {&(0x7f0000000880)=""/197, 0xc5}, {&(0x7f0000000280)=""/2, 0x2}, {&(0x7f0000000980)=""/251, 0xfb}, {&(0x7f00000002c0)=""/37, 0x25}], 0x8, &(0x7f0000000b00)=""/80, 0x50}, 0x2000) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) 30.123054742s ago: executing program 4 (id=8222): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0x68fd, 0x1000, 0x3, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x5c, 0x2000, @fd_index=0x2, 0x80000000, 0x0, 0x0, 0x4}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x5, 0x1, 0x1, "a90037e7f30f000080df4832c305f70000000000004840080000000000008300", 0x37303250}) io_uring_enter(r2, 0x7323, 0x0, 0x5, 0x0, 0x0) 29.922897979s ago: executing program 4 (id=8223): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000080)=0xfff, 0x4) (async) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000080)=0xfff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000d5080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 29.472855315s ago: executing program 34 (id=8223): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000080)=0xfff, 0x4) (async) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000080)=0xfff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000d5080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14.730366103s ago: executing program 5 (id=8256): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getuid() syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000880)={0x0, 0x8408, 0x9, 0x1}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x6b4eddb}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3c8, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) socket$kcm(0x2, 0x3, 0x2) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0xc0044dff, &(0x7f0000004000)) r4 = semget$private(0x0, 0x1, 0x201) semtimedop(r4, &(0x7f0000000040)=[{0x0, 0xfffd}], 0x1, 0x0) semop(r4, &(0x7f0000000000)=[{0x0, 0xfffd}, {0x0, 0xe2a, 0x800}], 0x2) semctl$IPC_RMID(r4, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0xfe, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x2}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x8c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 11.498926479s ago: executing program 6 (id=8260): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4c080}, 0x20000040) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0x307, @tick=0x40, 0x0, {0x0, 0x20}}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_HYPERV_VP_INDEX(r0, 0x4068aea3, &(0x7f00000000c0)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x1e, 0x21, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r9, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x24, 0x6, {0x6, 0xc, "fbeb4797"}}, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0x8}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}}, 0x20044000) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r11, 0x1}, &(0x7f00000000c0)=0x8) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 11.102849069s ago: executing program 5 (id=8262): r0 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0xd}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sched_getattr(0x0, &(0x7f00000004c0)={0x38}, 0x38, 0x0) sendfile(r3, r3, 0x0, 0x68) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='1', &(0x7f0000000200)='PCI:', 0x0) r4 = syz_usb_connect(0x5, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="120110018e2f6b2037210100e50c010a030109021b001e030bc0020904ab6c013c3a0c03090501"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_usb_control_io(r4, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x40, 0xc, 0x9f, {0x9f, 0x1, "91d49aeba14a5f1aff90525316bc7b75aeee58cd651dbae8011e4e80609be671e09c25d4add428378a75d0d1e4a64161797c7e81595a426123d996613ca0bf4e71c758991a03cf144fd8bebbbdf19cba5a0065231bf82577884ef2cd58d567b1730825163b2b1a92f0197b8cf174a368ada7daeed3fde45a897a003e84dfede0f35501dfd41c02b9595cff791db2f96993c013506247a4bebbcfbfe022"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, &(0x7f0000000340)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x76, 0xf00, 0x78, [0xff00c0, 0xffc03f, 0x0, 0xff0f, 0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x5, 0x3, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0x4, 0xfff8}, @ptm_cap={0x3}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x60, 0xb, 0x2, "1b70730a", "8733873a"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb, 0x0, 0x7, 0x92, 0x4, 0x3ff, 0x1}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000500)={0x40, 0x16, 0xca, "928a0a66fed45b7e433bca68b638651c8306652c7b9343fd0e544135746e89467bc0787742acd83d4bec50bb0d2ab44eb15b43e801bab89104432e6e66dcae5b3c92b503576a0e4e123f0ee185df3d348f456fa6d1af427b25f076dad1d54ea880e19851f04e8fa7f6581268f843ae5a35704a8b4860ae1d57002daaee1b631976fdc12b3d897b06b24aeda03808c96a3cee8ef9b6c4c85ac886918321810f7e953a3a304544d72b5879d1ae19c0b2e8b7a1226f141e951be3a1fa0c88a501681a666bec4f1f39b06575"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000640)={0x20, 0x0, 0x4}, &(0x7f0000000680)={0x20, 0x0, 0x8, {0x20, 0x20, [0xf000]}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0xd}, &(0x7f0000000740)={0x40, 0xb, 0x2, "d154"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, &(0x7f0000000800)={0x40, 0x17, 0x6, @local}, &(0x7f0000000840)={0x40, 0x19, 0x2, "2715"}, &(0x7f0000000880)={0x40, 0x1a, 0x2}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0xf7}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000b40), &(0x7f0000000b80)=0x30) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) syz_usb_disconnect(r5) r6 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1]}, 0x8, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x100) faccessat2(r6, &(0x7f0000001400)='\x00', 0x0, 0x1100) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) 9.894401642s ago: executing program 7 (id=8265): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000140)={0x1}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000c, 0x8031, r0, 0x6a855000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x305000, 0x800, 0x0, 0x3}, 0x20) mremap(&(0x7f0000216000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000875000/0x1000)=nil) (async) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 8.923437114s ago: executing program 7 (id=8266): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000c40fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000000)={0x6, 'lo\x00', {0x6}, 0x9}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) migrate_pages(0x0, 0x5, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r10 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r7, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000300)=0xffc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x8, 0x4) socket$nl_route(0x10, 0x3, 0x0) fcntl$getown(r4, 0x9) 8.134166768s ago: executing program 6 (id=8268): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be", 0x97}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb", 0x10}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x108, 0x29, 0x4, {0x4, 0x1d, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @enc_lim={0x4, 0x1, 0xf8}, @generic={0x80}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x5, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1d0, 0x29, 0x36, {0x5e, 0x36, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x2, "2bdb"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x390}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x48, 0x12, 0xff05, 0x40000, 0x4, {0x0, 0x0, 0x4a00, 0x0, 0x4, 0x20210}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4, 0x28003}}}}}}]}, 0x48}}, 0x40040) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 7.683068718s ago: executing program 7 (id=8271): socket$inet6(0xa, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) move_pages(0x0, 0x6, &(0x7f0000001600)=[&(0x7f0000824000/0x2000)=nil, &(0x7f0000890000/0x4000)=nil, &(0x7f000054d000/0x2000)=nil, &(0x7f0000607000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil], 0x0, 0x0, 0x2) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) 7.611560922s ago: executing program 6 (id=8272): inotify_init1(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8042, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x385342, 0x0) fcntl$setlease(r0, 0x400, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x801) syz_open_dev$ttys(0xc, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_wait(r4, &(0x7f0000000340)=[{}], 0x1, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) unshare(0x42000000) r5 = syz_usb_connect(0x5, 0x3f, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, &(0x7f0000000040)={0x14, &(0x7f0000000100)={0x40, 0xc, 0xb3, {0xb3, 0x8, "9bd6cf07485e201372a32831c598ececf1244859f629ba83ac1ec191be100070f05d56c9d80a0389197808ed473e36a84dfc14fdf7e2b323577e57c83a4ee4d4df56608d2a9c8374d0d5f9da65295189f06b5f884fbde18ea368d138aff187fff848cea1bf6173d38bf36c3f824609bcc08ff420a7a0c0ff9ac7516a2f187863fd2dec5d055b45cad3393ba9baa5c10ae70ba93b3ff73317be67e1dcde4e5558eaff287f9a7bb7a28e37113ca5a9c888ac"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}}, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x0, 0x1, 0x5f, "6ceaf20be652d4c3f3c0adfe0743144c23ff5b6df5d39f81676db2e7cda3c668ff12395cccc10a23194fe992055fce45e0452e6c429958254a8623f426867f52163c1fc0fa28912c15ace5b9068401498e7d7f7c572bb87e791132ad9892ca"}, 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x48}, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\f\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000300)={0x20, 0x82, 0x1, "b9"}, &(0x7f0000000340)={0x20, 0x83, 0x1, "b6"}, &(0x7f0000000380)={0x20, 0x84, 0x2, 'R,'}, &(0x7f00000003c0)={0x20, 0x85, 0x3, '!>A'}}) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x80015b1a, 0x0) socket(0x10, 0x803, 0x0) r7 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r7, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYBLOB="94a184cb077ca677e2c74b1c914b0a4f1ef4252585dd372f8b6db07fb0de40b2670a3419b60016f2adf3f17409438f196911cd466191f5e11853186f8dcc9f24d8aa6bf8dfd738ed2355a6fb0858d5c417720143e560247bf1eca13b4a247410bf744999fe6f8b18b67d9ff97337a10cca30d336a2f2b8cdbd76d86e7fbc1093d62702fcb49806b619edeb1de89981f64279a7862f31a61cfc61e9a962ffe9c03825fd07b9f74a1742b52ef7c0d6c4fdef1b7b613d53aca60115f8ec515656307d6926", @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054) 7.448796365s ago: executing program 5 (id=8273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x32, 0xffffffffffffffff, 0xa2ec000) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x54, &(0x7f0000000040)=0x80, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}}, 0x0) 6.975274906s ago: executing program 5 (id=8274): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/238, 0xee}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f00002ce000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mlock(&(0x7f0000bfc000/0x3000)=nil, 0x3000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r2, 0xae71, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[], 0x1f}) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 6.38735878s ago: executing program 5 (id=8275): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = memfd_create(&(0x7f00000002c0)=',\xea\xfa', 0x6) preadv(r6, 0x0, 0x0, 0x800002, 0x20006) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000001c0)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)={0x3}, 0x0) syz_usb_connect(0x4, 0x4bc, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x84, 0x89, 0x46, 0xff, 0x1d4d, 0xc, 0x1197, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4aa, 0x3, 0x21, 0x0, 0x10, 0x1, [{{0x9, 0x4, 0x14, 0xf, 0x0, 0xb8, 0xf, 0xb7, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x2fb, 0x4, 0x3, 0x2}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x2, 0x5, [0x3, 0x6, 0x4, 0x6, 0x2], 0x5}, @selector_unit={0x8, 0x24, 0x5, 0x5, 0xfc, "489f31"}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x60, "f5d74665a1f7"}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x81}]}]}}, {{0x9, 0x4, 0x7e, 0x8, 0x8, 0xc4, 0xe4, 0x13, 0x1, [], [{{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x19, 0xe, 0x1d}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x6, 0x0, 0x9, [@generic={0x63, 0x23, "fb447ad422c6fb89b413bb7479684ba153f15f8f6f1c4781d0f238e000b0b244da55bd794ce1f85172e00e97050b67fda0e47fb00fe703e1bdc39f1bdae7c61f86eb160ac623d813a7ad1f4202ab454843b2e7ed2caf80fc8652d2bf7581a3f2d6"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x7, 0xd, 0x5}}, {{0x9, 0x5, 0xc, 0x1d, 0x0, 0x1, 0x1f, 0x8, [@generic={0x74, 0xd, "c5c0bdc29492e54dbcf0e81f2202ddd6d466ff4059ccd0133121b7fe039dfac3793b7f523c55299a358991390c23b13fe78fbfcea8d0dba58099408cd289205a628f21010cb00697028a98116f7521b3c42fb596d1376c27ca1ad769d8f694c749314108b48afad637f59ac608bb7b97bc58"}, @uac_iso={0x7, 0x25, 0x1, 0xbeea4e69913121f6, 0xe0, 0x3}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x2, 0xe, 0xd, [@generic={0x32, 0xc, "26f5046af0276a40f990be2b5c39e1a4b6abecbcd88363fc0f8b96224e6ac781fd22ae23eb6bdcf023c58f550c5a0dd2"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8f, 0x6}]}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x8a, 0x7, 0xe, [@generic={0xa8, 0x23, "58f56c744b9b29edc00cbca93ec2c3a9ccbf8c5b42722932f25ec3bf76abf8349e9a7e08fae1fd7b442fcac625b57eca929f0a53dddb51d036235a78d185e27e44c17d420a78485585946aa3878d2c3f1bfeba232621babdc0513be397d45eee60659ecaa5948a7332333e32803fb1b91842a6f5de870a88d7817176b819e96c203466a75bb6e12fb3c1ed3bbe0b2f95306c517ead5e5dbefb0fd2edc74ebfa9a0a52e3df7a4"}, @generic={0x10, 0x1, "d711f13ed609e160a4fe792461d9"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0xd, 0x2, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x5}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x6, 0x4, 0x8}}]}}, {{0x9, 0x4, 0x6, 0x81, 0xf, 0xfc, 0x5b, 0x82, 0xd7, [@hid_hid={0x9, 0x21, 0xfffa, 0x80, 0x1, {0x22, 0x247}}], [{{0x9, 0x5, 0x9, 0x10, 0x40, 0x40, 0x8, 0xf}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x7, 0x34, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x1000}]}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0x0, 0x4b, 0x4, [@generic={0x14, 0x7, "c3d9b8972f8536b56b1b8ed984d6edf464bd"}, @generic={0x26, 0x9, "d26cb3c2f7baadaa3bd87077a9a8f8612496be2550945fc67626adc5237aed5a823bb25b"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x9, 0xc, 0x4, [@generic={0xbd, 0x30, "adba40ad1ea8dc90ac1abc5ca3dda59c3ebce8a129bf6f032a360f20404e0a030a7d4e48eba9df4a9a953f5cf9bf995c43567488b4f501e2c8587a8c8265c9f6c498ce5050ef1a8c7160ac450c51ac98f80c53ee9bbe3d78eac1d1d1612d762951c300de140984119d0877b92131b45b05d316d00414199dd474583c53bb5470053e00a6531bc4eb7e2969e67993b54ba02c0514d2b10aa380e3a0266562e496a2d0ec36c56dd0355b06b92972b24a9afb3d77edc3afb2497e4305"}, @generic={0x4, 0x4, 'i$'}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x8, 0xd, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x3a}]}}, {{0x9, 0x5, 0xc, 0x0, 0x278, 0x5, 0x1, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x6}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x80, 0x4, 0xab}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x2, 0x38, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7}, @generic={0x2, 0x6}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x81, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x3}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x4c, 0x1, 0xfe, [@generic={0x2b, 0xf, "11d86072c3a4dc06475987707a7f57674d55c7cddeb72f51b8e6df285d3acdfd74fffcd909f0c125a5"}, @generic={0x31, 0x0, "90880f27b7c612e6978ac0aa202e951a72326c81c179db4829e6b2c49e529d92919074d2ac85dcfd21775670929a6b"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0x3, 0x1, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x81, 0xa}]}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x8f, 0x4, 0xc1}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xa9, 0xef, 0x6}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x8, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x1}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x40, 0x3, 0x7, [@generic={0x2, 0x22}, @generic={0xa, 0x31, "4b143e0f2ad03248"}]}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x10, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000340)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x21, 0xf0}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x5, 0x3, 0xd}]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES64=r8, @ANYRES32=0x0, @ANYRESOCT=0x0], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) close_range(r0, 0xffffffffffffffff, 0x1576) 5.472843795s ago: executing program 7 (id=8276): r0 = socket(0x40000000015, 0x5, 0x0) unshare(0x24020400) getsockopt$inet_buf(r0, 0x1401, 0x10, 0x0, 0x0) 5.036585315s ago: executing program 7 (id=8277): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = memfd_create(&(0x7f00000002c0)=',\xea\xfa', 0x6) preadv(r7, 0x0, 0x0, 0x800002, 0x20006) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f00000001c0)) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r11, 0x2, &(0x7f00000000c0)={0x3}, 0x0) syz_usb_connect(0x4, 0x7ba, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x84, 0x89, 0x46, 0xff, 0x1d4d, 0xc, 0x1197, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a8, 0x3, 0x21, 0x0, 0x10, 0x1, [{{0x9, 0x4, 0x14, 0xf, 0x0, 0xb8, 0xf, 0xb7, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x2fb, 0x4, 0x3, 0x2}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x2, 0x5, [0x3, 0x6, 0x4, 0x6, 0x2], 0x5}, @selector_unit={0x8, 0x24, 0x5, 0x5, 0xfc, "489f31"}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x60, "f5d74665a1f7"}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x81}]}]}}, {{0x9, 0x4, 0x7e, 0x8, 0x9, 0xc4, 0xe4, 0x13, 0x1, [], [{{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x19, 0xe, 0x1d}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x6, 0x0, 0x9, [@generic={0x63, 0x23, "fb447ad422c6fb89b413bb7479684ba153f15f8f6f1c4781d0f238e000b0b244da55bd794ce1f85172e00e97050b67fda0e47fb00fe703e1bdc39f1bdae7c61f86eb160ac623d813a7ad1f4202ab454843b2e7ed2caf80fc8652d2bf7581a3f2d6"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x7, 0xd, 0x5}}, {{0x9, 0x5, 0xc, 0x1d, 0x0, 0x1, 0x1f, 0x8, [@generic={0x7b, 0xd, "c5c0bdc29492e54dbcf0e81f2202ddd6d466ff4059ccd0133121b7fe039dfac3793b7f523c55299a358991390c23b13fe78fbfcea8d0dba58099408cd289205a628f21010cb00697028a98116f7521b3c42fb596d1376c27ca1ad769d8f694c749314108b48afad637f59ac608bb7b97bc58ba099e51de8f69"}, @uac_iso={0x7, 0x25, 0x1, 0xbeea4e69913121f6, 0xe0, 0x3}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x2, 0xe, 0xd, [@generic={0x41, 0xc, "26f5046af0276a40f990be2b5c39e1a4b6abecbcd88363fc0f8b96224e6ac781fd22ae23eb6bdcf023c58f550c5a0dd23f04a2bee664295a991210d7458cc7"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8f, 0x6}]}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x8a, 0x7, 0xe, [@generic={0xb8, 0x23, "58f56c744b9b29edc00cbca93ec2c3a9ccbf8c5b42722932f25ec3bf76abf8349e9a7e08fae1fd7b442fcac625b57eca929f0a53dddb51d036235a78d185e27e44c17d420a78485585946aa3878d2c3f1bfeba232621babdc0513be397d45eee60659ecaa5948a7332333e32803fb1b91842a6f5de870a88d7817176b819e96c203466a75bb6e12fb3c1ed3bbe0b2f95306c517ead5e5dbefb0fd2edc74ebfa9a0a52e3df7a444d286d383f8094e121a52bafa611175"}, @generic={0x6b, 0x1, "d711f13ed609e160a4fe792461d93b458b91067321480acf39685cb92b63dbe867a80b1267f4d346e01de58cb15bbe11b1821cb4e8271c586f5fe2f755fbb3d71b4f7ed05d4fa45a1cf4a5e29061efdf0420dbddb1c59ff905e224c1e534e0cc2e27dee22b7754271f"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0xd, 0x2, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x5}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x6, 0x4, 0x8}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x9, 0x2, 0x0, [@generic={0x6f, 0x21, "62577cba293bba305869f08ab851fb587e2eed458fc5bee46fb025d3b967f9be90be8b40ef3017c99ab22f13b5397107174a572a16ea33ad9f9831c43dd24de095a4d57925d4674c489889f2ccdabe0f1557cd9c48a56a1fb0a9197b1d83cd6232ebd79caba58a2a6b22e45ebf"}]}}]}}, {{0x9, 0x4, 0x6, 0x81, 0x10, 0xfc, 0x5b, 0x82, 0xd7, [@hid_hid={0x9, 0x21, 0xfffa, 0x80, 0x1, {0x22, 0x247}}], [{{0x9, 0x5, 0x9, 0x10, 0x40, 0x40, 0x8, 0xf}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x7, 0x34, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x1000}]}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0x0, 0x4b, 0x4, [@generic={0x14, 0x7, "c3d9b8972f8536b56b1b8ed984d6edf464bd"}, @generic={0x4d, 0x9, "d26cb3c2f7baadaa3bd87077a9a8f8612496be2550945fc67626adc5237aed5a823bb25bfdf6efbf4da53ba7e4637e19ca02a543eddd5c78a05eb618636ae8ef03a0cc3025495a9f76ec02"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x9, 0xc, 0x4, [@generic={0xbd, 0x30, "adba40ad1ea8dc90ac1abc5ca3dda59c3ebce8a129bf6f032a360f20404e0a030a7d4e48eba9df4a9a953f5cf9bf995c43567488b4f501e2c8587a8c8265c9f6c498ce5050ef1a8c7160ac450c51ac98f80c53ee9bbe3d78eac1d1d1612d762951c300de140984119d0877b92131b45b05d316d00414199dd474583c53bb5470053e00a6531bc4eb7e2969e67993b54ba02c0514d2b10aa380e3a0266562e496a2d0ec36c56dd0355b06b92972b24a9afb3d77edc3afb2497e4305"}, @generic={0x4, 0x4, 'i$'}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x8, 0xd, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x3a}]}}, {{0x9, 0x5, 0xc, 0x0, 0x278, 0x5, 0x1, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x6}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x80, 0x4, 0xab, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xf7ef}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2a, 0x8}]}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x6f, 0xf6, 0xa3, [@generic={0x69, 0x1a706ddc45c7be6c, "4a85f115ba000403ce77fb79afa920ba41ea90d69bcf0f00d0c069e995c6fc91e8753cc06b8a66e557772ee323ef15e33cc03d488fba1b9458d147029835823da1d29bc5ad06cb1961a9073703a33e9a0aac26689563d7af64d967db9ba5f243f8b14f2ac885e0"}, @generic={0xec, 0xf, "c8141a089e3edece84c8d0e3948e48fde590e4d5669331e884f338771c338a979a058314f00e35992c9d857fd47017ed60860916fe6284f955e25349d82db94dba21733cd8173264b8df4bc38f2b6a78794da97e944c08b55138b67532b3c79fd747bb0e4df3f4f68549ae438c4909acc599060dd6978666647661d9c3c2a5d009464203101ca72a7b678ab34cc10e6cab5f0a389ee827531407b6d324c77c700e8f78fc1b677d01e317d7fb0d16b720d9dc739eecdb6ee5e004e5da07bd0a1f39e4a3caadc5aa8a0c38733c1a624d59fc5ccf7589e9bbc030660adceb837cd6a8a304b731677df302df"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x2, 0x38, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7}, @generic={0x44, 0x6, "bcf5c276eb7e6041ded0936f8e701ff524cc17c62017a427da4e43e4c15d518d62d88b36e4405d67b02f0ee5f956445091bfdf5c3301db9854f0af967d92ecb24444"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x81, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x3}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x4c, 0x1, 0xfe, [@generic={0x2d, 0xf, "11d86072c3a4dc06475987707a7f57674d55c7cddeb72f51b8e6df285d3acdfd74fffcd909f0c125a5f7c2"}, @generic={0x5f, 0x0, "90880f27b7c612e6978ac0aa202e951a72326c81c179db4829e6b2c49e529d92919074d2ac85dcfd21775670929a6bda96a3013924c292af15bc6bc415b50df0ce63478c0b9b26d99e91ac795ec85d3b98852b5a407a9ba691135e902e"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0x3, 0x1, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x81, 0xa}]}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x8f, 0x4, 0xc1}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xa9, 0xef, 0x6}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x8, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x1}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x40, 0x3, 0x7, [@generic={0x2, 0x22}, @generic={0xa, 0x31, "4b143e0f2ad03248"}]}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x10, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000340)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x21, 0xf0}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x5, 0x3, 0xd}]}, 0x4, [{0x0, 0x0}, {0x27, &(0x7f0000000e80)=ANY=[@ANYBLOB="270379204a220ba6a052dca752c7fabea369beb9c7fd1f1caa6883ee8ac40aac4f494b1b2b640755f6d38c166f17e4ebb488352b7ee857df57274829c33b69be20a1bc72b10e6be52982525af228c53658c01b5750c52a0aca985043d08a73cbb8"]}, {0x7f, &(0x7f0000000d80)=@string={0x7f, 0x3, "9811916e11b45c33212fbd5e5df6395154736cb0a1dd20331bf488eec9cdbbb55ffd429bd18a295b26cfcfa1293f80607100384d032c4ff2ed22d8f15f8a212adc33223813ae40d67a9e6712566e390dd57c654bbf57fd2b040caddfe0cc4e0246af824b72fb0ddf48d83daa2299ecfe21af62ffe1f55f30d21cfdb600"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}]}) openat$full(0xffffffffffffff9c, 0x0, 0x2fb71da98128d4bd, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES64=r9, @ANYRES32=0x0, @ANYRESOCT=0x0], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 4.228553196s ago: executing program 1 (id=8279): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x0, 0x0) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) (async, rerun: 32) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) (rerun: 32) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @mcast2, 0x9}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) (async) syz_open_dev$video4linux(&(0x7f00000000c0), 0x8e, 0x64000) (async, rerun: 64) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) sendmsg(0xffffffffffffffff, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_io_uring_setup(0x88e, &(0x7f0000000440)={0x0, 0xaee2, 0x0, 0x2, 0x1b4}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x18, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x220000, 0x20, 0x30}, 0x0, 0x18, 0x0, 0x12345}) (async) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_io_uring_setup(0x6af, &(0x7f00000001c0)={0x0, 0x400bcf6, 0x60, 0x1, 0x1fd}, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = semget$private(0x0, 0x6, 0x0) semtimedop(r5, &(0x7f0000000340)=[{0x4, 0x8fff}, {0x1, 0x443, 0x1800}], 0x2, 0x0) (async) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000240)={{0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x120, 0x6}, 0x2, 0x384}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) 4.134435176s ago: executing program 3 (id=8280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x1000100, 0x7, 0x6361, 0x805, 0x9, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xb0, 0x5, 0x8}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.842984761s ago: executing program 1 (id=8281): socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x55a97588810c4848, 0x2, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendto$inet6(r4, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8af", 0x2c, 0x10, 0x0, 0x0) (async, rerun: 64) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) (rerun: 64) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000010c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000001600)={0x5, 0x10, 0xfffffffb}) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x25, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0xffe2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x328}}, 0x84) (async, rerun: 64) socket(0x10, 0x803, 0x0) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 3.723191424s ago: executing program 6 (id=8282): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r2 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000157000/0x2000)=nil) r3 = shmat(r2, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) mremap(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) shmdt(r3) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r5, &(0x7f0000000900)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000440)=[{&(0x7f0000007b40)="fb", 0x1}, {0x0}], 0x2}}], 0x1, 0x40000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x3c78ac55c20006f6, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) capget(0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 3.4893385s ago: executing program 3 (id=8283): r0 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000000)={0x3, [0x9, 0xffff1337], [{0x0, 0xa, 0x0, 0x1}, {0x35, 0x35}, {0xa, 0x131}, {0x81, 0x3}, {0x0, 0x40000a5}, {}, {0x80000000, 0xfffffffd}, {0x0, 0x200}, {0x8000f}, {0xfffffffd, 0x2}, {0x0, 0x2}, {0x0, 0xfffffffd}], 0xc}) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0xfffffffffffffffb, 0x40000) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}, 0x3}}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) listen(r3, 0x0) sendmsg$tipc(r2, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r4, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$SIOCGETSGCNT_IN6(r5, 0x89e1, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}) sendto$inet(r6, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) splice(r6, 0x0, r5, 0x0, 0x7ffff000, 0xa) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0xc0b45545, &(0x7f0000000040)=0x1000) 3.291278217s ago: executing program 3 (id=8284): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.767388002s ago: executing program 5 (id=8285): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4e001, 0x40) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000140)={@desc={0x1, 0x0, @desc4}}) (async) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) (async) close(0x3) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = dup(r3) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000580)="4c222614b7908631ec695de8739c42c9fbefc168d215d60d44611ca18e504e8c4ecc0a4a56d3bef276a32159e98505493ddcc10ada2786c6f7e7a4337976fc5ae3a9266553bb0bffaca65f29c9afad93840e5a46de7aac1130b10ae9c68921066bfd1209c04a710f78ca022d354956be57a2ed74b4b2d11cafd475aed4f440fa3800cf40aa9032bfb2f3aebe2b15f56a651d08553125dd4dd1f25ae5d8079f507d77623c3c7d4fe686f97abb39704d2ccfaf2cc25e5afef09aacae", 0xbb}], 0x1) (async) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, 0x0) (async) r5 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x0, 0x5, 0x2, 0x802, 0x80000000, "f759e100edc710000000d9fc6300", '\x00', "0300", "e8cc1304", ["00e8ffffffffffffff00", "c2fe00408000", "000000ff0000000000000020", "0000000000000000001000"]}) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8973420018030109021b00b58f5f21e70804080001030000000905ca43186b4498a4297f7ee76bafcafe2a26f8ab19bbcab6e744e027b83eb1d943013d38f54848a59922e332ed26d1f8ebfc6f70bc788a15719764eb32c60ca4b30543bdca166a5f30094d2360cffc513488615547987a23cd9394c551071bddf610d27110aa08f9a5bc63e5d39691da6c3f87c45904be60b8ee82ac95f9ca9c9b1fdfd6ac30671d7304fa54eea6c6a3e6858ab647eb4d488e0284f99727beee00"/213], 0x0) 2.695487111s ago: executing program 3 (id=8286): socket$inet6(0xa, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) move_pages(0x0, 0x6, &(0x7f0000001600)=[&(0x7f0000824000/0x2000)=nil, &(0x7f0000890000/0x4000)=nil, &(0x7f000054d000/0x2000)=nil, &(0x7f0000607000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil], 0x0, 0x0, 0x2) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) 2.299172027s ago: executing program 1 (id=8287): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xa00, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fdb75f0505000200140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x2054) 2.151893949s ago: executing program 6 (id=8288): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x100) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x96, 0x2, @scatter={0x3, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/33, 0x21}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/200, 0xc8}]}, &(0x7f0000000500)="0300536b051336cfa565e991fa7e4e93554f1237b2b91746838cd2f3977af7a9b2672145aab43d7e3c84ece4536c65b47065acf51e749e16ec7e85fd640835a598acbaefb550d3ddb513d573c72dc6975fd8519455d6d86c02ffe4507d498e8ee067e5b043a74269af1994e0319aa63c31a72441df05f3354476fa347308b7b7903435546bb9a836912957ca14e9f6d09b5eed0dcf36", 0x0, 0x80000000, 0x0, 0x0, 0x0}) 1.879215181s ago: executing program 6 (id=8289): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x40, 0x5, 0x5, {0x5, 0x0, "3d7da3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "5f68dd"}, 0x0}) 1.651517557s ago: executing program 7 (id=8290): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x418040, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000180)=0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r3 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000140)=0x12) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8001}) r4 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\n']) sched_setscheduler(0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000280)=0x2) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2e}, 0x40}) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) eventfd(0x9) 1.533142928s ago: executing program 1 (id=8291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x200007, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285629, &(0x7f0000000080)={0x6, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x3}}, 0x0, 0x0}}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003340)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_FD={0x8}]}}]}, 0x48}}, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x16) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x200007, 0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285629, &(0x7f0000000080)={0x6, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x3}}, 0x0, 0x0}}) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003340)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_FD={0x8}]}}]}, 0x48}}, 0x0) (async) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x16) (async) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) (async) 1.158978674s ago: executing program 1 (id=8292): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b000000000040", 0x10, 0x8044, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xf) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x64c842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0) r4 = io_uring_setup(0x664d, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x28000005}) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="b295a65b78b6f0477417371c355b723c7345c6850a12321cca88856e6fca4778690664e7c853b958a6a8a9892d0d4e5330f9930d65159b11b0326f8d0459b30eeef1681968cc"], 0x0}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x10, 0x0}, 0x20000811) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000001280)=0x2, 0x4) unshare(0x28000600) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64(r9, &(0x7f0000000080)=""/79, 0x4f, 0xc4) 1.091348948s ago: executing program 3 (id=8293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0x31d, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 85.129359ms ago: executing program 1 (id=8294): inotify_init1(0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8042, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x385342, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x801) syz_open_dev$ttys(0xc, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_wait(r2, 0x0, 0x0, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r2, 0x1}], 0x1, 0x0, 0x0, 0x3) unshare(0x42000000) r3 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000040)={0x14, &(0x7f0000000100)={0x40, 0xc, 0xb3, {0xb3, 0x8, "9bd6cf07485e201372a32831c598ececf1244859f629ba83ac1ec191be100070f05d56c9d80a0389197808ed473e36a84dfc14fdf7e2b323577e57c83a4ee4d4df56608d2a9c8374d0d5f9da65295189f06b5f884fbde18ea368d138aff187fff848cea1bf6173d38bf36c3f824609bcc08ff420a7a0c0ff9ac7516a2f187863fd2dec5d055b45cad3393ba9baa5c10ae70ba93b3ff73317be67e1dcde4e5558eaff287f9a7bb7a28e37113ca5a9c888ac"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}}, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x0, 0x1, 0x5f, "6ceaf20be652d4c3f3c0adfe0743144c23ff5b6df5d39f81676db2e7cda3c668ff12395cccc10a23194fe992055fce45e0452e6c429958254a8623f426867f52163c1fc0fa28912c15ace5b9068401498e7d7f7c572bb87e791132ad9892ca"}, 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x48}, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\f\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000300)={0x20, 0x82, 0x1, "b9"}, &(0x7f0000000340)={0x20, 0x83, 0x1, "b6"}, &(0x7f0000000380)={0x20, 0x84, 0x2, 'R,'}, &(0x7f00000003c0)={0x20, 0x85, 0x3, '!>A'}}) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x80015b1a, 0x0) socket(0x10, 0x803, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYBLOB="94a184cb077ca677e2c74b1c914b0a4f1ef4252585dd372f8b6db07fb0de40b2670a3419b60016f2adf3f17409438f196911cd466191f5e11853186f8dcc9f24d8aa6bf8dfd738ed2355a6fb0858d5c417720143e560247bf1eca13b4a247410bf744999fe6f8b18b67d9ff97337a10cca30d336a2f2b8cdbd76d86e7fbc1093d62702fcb49806b619edeb1de89981f64279a7862f31a61cfc61e9a962ffe9c03825fd07b9f74a1742b52ef7c0d6c4fdef1b7b613d53aca60115f8ec515656307d6926", @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054) 0s ago: executing program 3 (id=8295): r0 = socket(0x40000000015, 0x5, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000480)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0xd}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sched_getattr(0x0, &(0x7f00000004c0)={0x38}, 0x38, 0x0) sendfile(r3, r3, 0x0, 0x68) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='1', &(0x7f0000000200)='PCI:', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="159c4ca6d5f2db29c58d190c7d"], 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x295) syz_usb_disconnect(r4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)=ANY=[@ANYBLOB="20000000000c001a8008000a80050071c3"], 0x20}}, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1]}, 0x8, 0x0) r6 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x100) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="0300536b0513", 0x0, 0x80000000, 0x0, 0x0, 0x0}) faccessat2(r5, &(0x7f0000001400)='\x00', 0x0, 0x1100) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x4000) kernel console output (not intermixed with test programs): T5911] usb 2-1: USB disconnect, device number 108 [ 2554.398261][ T2982] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7822'. [ 2554.604683][ T2984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2554.614620][ T2984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2555.135334][ T2991] fuse: Unknown parameter 'grou00000000000000000000' [ 2555.557920][ T2999] tipc: Enabled bearer , priority 0 [ 2555.573095][ T2999] tipc: Resetting bearer [ 2555.604230][ T2998] tipc: Disabling bearer [ 2555.920111][T29834] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 2556.095800][ T3010] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 2556.104188][ T3010] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 2556.113062][ T3010] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 2556.141901][T29834] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2556.162428][T29834] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2556.181416][T29834] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2556.192986][T29834] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2556.313196][T29834] usb 6-1: Product: syz [ 2556.320541][T29834] usb 6-1: Manufacturer: syz [ 2556.329435][T29834] usb 6-1: SerialNumber: syz [ 2556.341189][T29834] usb 6-1: config 0 descriptor?? [ 2556.358438][T29834] usb 6-1: selecting invalid altsetting 0 [ 2556.880566][T29834] usb 6-1: USB disconnect, device number 81 [ 2557.054557][ T2271] udevd[2271]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2557.867636][ T3015] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 2557.876169][ T3015] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 2557.885274][ T3015] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 2558.401932][ T9673] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 2558.666266][ T3031] syzkaller0: entered promiscuous mode [ 2558.675001][ T3031] syzkaller0: entered allmulticast mode [ 2558.675039][ T9673] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2558.764488][ T3033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2558.786867][ T9673] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2558.791790][ T3033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2558.806530][ T9673] usb 6-1: Product: syz [ 2558.815273][ T9673] usb 6-1: Manufacturer: syz [ 2559.066657][ T9673] usb 6-1: SerialNumber: syz [ 2559.103708][ T9673] usb 6-1: config 0 descriptor?? [ 2559.114473][ T9673] ch341 6-1:0.0: ch341-uart converter detected [ 2559.468847][ T3043] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2560.470344][ T9673] ch341-uart ttyUSB0: break control not supported, using simulated break [ 2560.494121][ T9673] usb 6-1: ch341-uart converter now attached to ttyUSB0 [ 2560.540287][ T9673] usb 6-1: USB disconnect, device number 82 [ 2560.563986][ T3050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2560.571170][ T9673] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 2560.652055][ T3050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2560.676984][ T9673] ch341 6-1:0.0: device disconnected [ 2560.928545][ T3061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2560.942079][ T3061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2561.100044][ T5911] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2561.168474][ T3064] syzkaller0: entered promiscuous mode [ 2561.174310][ T3064] syzkaller0: entered allmulticast mode [ 2561.305139][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2561.318249][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2561.338487][ T5911] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2561.353750][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2561.589773][ T3074] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 2561.599002][ T3074] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 2561.608028][ T3074] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 2561.619773][ T5911] usb 2-1: config 0 descriptor?? [ 2562.460399][ T5911] pyra 0003:1E7D:2CF6.0037: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 2562.651275][ T5911] pyra 0003:1E7D:2CF6.0037: couldn't init struct pyra_device [ 2562.758909][ T3087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2562.771208][ T3087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2562.780400][ T5911] pyra 0003:1E7D:2CF6.0037: couldn't install mouse [ 2562.800266][ T3087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2562.809512][ T3087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2562.865084][ T5911] pyra 0003:1E7D:2CF6.0037: probe with driver pyra failed with error -32 [ 2563.030766][ T5911] usb 2-1: USB disconnect, device number 109 [ 2563.114002][ T3084] fido_id[3084]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 2563.859958][ T5911] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 2564.030530][ T5911] usb 6-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 2564.046831][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2564.088595][ T5911] usb 6-1: config 0 descriptor?? [ 2564.124553][ T5911] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 2564.145373][ T5911] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 2564.243405][ T3104] fuse: Unknown parameter 'group_i00000000000000000000' [ 2564.350132][T29834] usb 6-1: USB disconnect, device number 83 [ 2564.589976][ T5911] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2564.605678][ T3113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2564.616017][ T3113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2564.625538][ T3113] netpci0: tun_chr_ioctl cmd 21731 [ 2564.839968][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 2564.847084][ T5911] usb 2-1: config 3 has an invalid interface number: 171 but max is 29 [ 2564.855669][ T5911] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 30 [ 2564.865121][ T5911] usb 2-1: config 3 has no interface number 0 [ 2564.874772][ T5911] usb 2-1: config 3 interface 171 altsetting 108 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2564.906768][ T5911] usb 2-1: config 3 interface 171 has no altsetting 0 [ 2564.932034][ T5911] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5 [ 2564.941947][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 2564.971966][ T5911] usb 2-1: Product: syz [ 2565.103730][ T5911] usb 2-1: Manufacturer: syz [ 2565.108563][ T5911] usb 2-1: SerialNumber: syz [ 2565.335797][ T3106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2565.374811][ T3119] binder: 3118:3119 ioctl 1277 200000000180 returned -22 [ 2565.382854][ T3106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2565.700078][T29818] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 2565.850104][T29818] usb 6-1: Using ep0 maxpacket: 8 [ 2565.893222][T29818] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2565.944030][T29818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2566.044193][T29818] usb 6-1: config 0 descriptor?? [ 2566.372493][T29818] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2566.411377][ T3131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2566.510534][ T3131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2566.662810][ T3133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2566.677381][ T3133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2566.685532][ T3106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2566.714955][ T3106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2566.949601][ T5911] as10x_usb: device has been detected [ 2566.961885][ T5911] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 2567.026587][ T5911] usb 2-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 2567.167478][ T5911] as10x_usb: error during firmware upload part1 [ 2567.189435][ T3136] FAULT_INJECTION: forcing a failure. [ 2567.189435][ T3136] name failslab, interval 1, probability 0, space 0, times 0 [ 2567.210505][ T5911] Registered device Sky IT Digital Key (green led) [ 2567.226548][ T5911] usb 2-1: USB disconnect, device number 110 [ 2567.242613][ T3136] CPU: 1 UID: 0 PID: 3136 Comm: syz.3.7872 Not tainted syzkaller #0 PREEMPT(full) [ 2567.242641][ T3136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2567.242654][ T3136] Call Trace: [ 2567.242661][ T3136] [ 2567.242670][ T3136] dump_stack_lvl+0x189/0x250 [ 2567.242712][ T3136] ? __pfx____ratelimit+0x10/0x10 [ 2567.242737][ T3136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2567.242765][ T3136] ? __pfx__printk+0x10/0x10 [ 2567.242795][ T3136] ? __pfx___might_resched+0x10/0x10 [ 2567.242823][ T3136] should_fail_ex+0x414/0x560 [ 2567.242859][ T3136] should_failslab+0xa8/0x100 [ 2567.242883][ T3136] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 2567.242911][ T3136] ? __d_alloc+0x36/0x7a0 [ 2567.242940][ T3136] __d_alloc+0x36/0x7a0 [ 2567.242967][ T3136] d_alloc_parallel+0xe1/0x1610 [ 2567.242993][ T3136] ? __lock_acquire+0xab9/0xd20 [ 2567.243025][ T3136] ? __lock_acquire+0xab9/0xd20 [ 2567.243053][ T3136] ? __pfx_d_alloc_parallel+0x10/0x10 [ 2567.243083][ T3136] ? __raw_spin_lock_init+0x45/0x100 [ 2567.243112][ T3136] ? __init_waitqueue_head+0xa9/0x150 [ 2567.243145][ T3136] __lookup_slow+0x116/0x3d0 [ 2567.243173][ T3136] ? __pfx___lookup_slow+0x10/0x10 [ 2567.243208][ T3136] ? d_lookup+0x8a/0xa0 [ 2567.243231][ T3136] ? lookup_noperm+0x112/0x220 [ 2567.243258][ T3136] simple_start_creating+0xfd/0x1e0 [ 2567.243280][ T3136] ? __pfx_simple_start_creating+0x10/0x10 [ 2567.243322][ T3136] debugfs_start_creating+0x10f/0x180 [ 2567.243354][ T3136] __debugfs_create_file+0x79/0x4f0 [ 2567.243389][ T3136] debugfs_create_file_full+0x3f/0x60 [ 2567.243421][ T3136] ref_tracker_dir_debugfs+0x14e/0x270 [ 2567.243443][ T3136] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 2567.243497][ T3136] ? trace_kmalloc+0x1f/0xd0 [ 2567.243521][ T3136] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 2567.243554][ T3136] ? __raw_spin_lock_init+0x45/0x100 [ 2567.243584][ T3136] alloc_netdev_mqs+0x272/0x11b0 [ 2567.243610][ T3136] ? __pfx_veth_setup+0x10/0x10 [ 2567.243643][ T3136] rtnl_create_link+0x31f/0xd10 [ 2567.243675][ T3136] rtnl_newlink_create+0x25c/0xb00 [ 2567.243711][ T3136] ? __lock_acquire+0xab9/0xd20 [ 2567.243738][ T3136] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 2567.243763][ T3136] ? __pfx___mutex_lock+0x10/0x10 [ 2567.243803][ T3136] ? ns_capable+0x8a/0xf0 [ 2567.243830][ T3136] rtnl_newlink+0x16e4/0x1c80 [ 2567.243878][ T3136] ? __pfx_rtnl_newlink+0x10/0x10 [ 2567.243912][ T3136] ? is_bpf_text_address+0x26/0x2b0 [ 2567.243941][ T3136] ? is_bpf_text_address+0x292/0x2b0 [ 2567.243961][ T3136] ? is_bpf_text_address+0x26/0x2b0 [ 2567.244059][ T3136] ? __lock_acquire+0xab9/0xd20 [ 2567.244108][ T3136] ? __pfx_rtnl_newlink+0x10/0x10 [ 2567.244137][ T3136] rtnetlink_rcv_msg+0x7cf/0xb70 [ 2567.244165][ T3136] ? __lock_acquire+0xab9/0xd20 [ 2567.244187][ T3136] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2567.244215][ T3136] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2567.244263][ T3136] netlink_rcv_skb+0x208/0x470 [ 2567.244290][ T3136] ? __lock_acquire+0xab9/0xd20 [ 2567.244311][ T3136] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2567.244342][ T3136] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2567.244388][ T3136] ? netlink_deliver_tap+0x2e/0x1b0 [ 2567.244426][ T3136] netlink_unicast+0x82f/0x9e0 [ 2567.244466][ T3136] ? __pfx_netlink_unicast+0x10/0x10 [ 2567.244496][ T3136] ? netlink_sendmsg+0x642/0xb30 [ 2567.244512][ T3136] ? skb_put+0x11b/0x210 [ 2567.244536][ T3136] netlink_sendmsg+0x805/0xb30 [ 2567.244566][ T3136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2567.244591][ T3136] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2567.244622][ T3136] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2567.244642][ T3136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2567.244662][ T3136] __sock_sendmsg+0x21c/0x270 [ 2567.244691][ T3136] ____sys_sendmsg+0x505/0x830 [ 2567.244727][ T3136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2567.244758][ T3136] ? import_iovec+0x74/0xa0 [ 2567.244787][ T3136] ___sys_sendmsg+0x21f/0x2a0 [ 2567.244811][ T3136] ? __pfx____sys_sendmsg+0x10/0x10 [ 2567.244875][ T3136] ? __fget_files+0x2a/0x420 [ 2567.244894][ T3136] ? __fget_files+0x3a0/0x420 [ 2567.244926][ T3136] __x64_sys_sendmsg+0x19b/0x260 [ 2567.244951][ T3136] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2567.244982][ T3136] ? __pfx_ksys_write+0x10/0x10 [ 2567.245015][ T3136] ? do_syscall_64+0xbe/0xfa0 [ 2567.245048][ T3136] do_syscall_64+0xfa/0xfa0 [ 2567.245072][ T3136] ? lockdep_hardirqs_on+0x9c/0x150 [ 2567.245098][ T3136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2567.245118][ T3136] ? clear_bhb_loop+0x60/0xb0 [ 2567.245143][ T3136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2567.245163][ T3136] RIP: 0033:0x7f346e38efc9 [ 2567.245183][ T3136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2567.245202][ T3136] RSP: 002b:00007f346f29d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2567.245226][ T3136] RAX: ffffffffffffffda RBX: 00007f346e5e5fa0 RCX: 00007f346e38efc9 [ 2567.245241][ T3136] RDX: 000000002400c080 RSI: 0000200000000080 RDI: 0000000000000003 [ 2567.245256][ T3136] RBP: 00007f346f29d090 R08: 0000000000000000 R09: 0000000000000000 [ 2567.245267][ T3136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2567.245280][ T3136] R13: 00007f346e5e6038 R14: 00007f346e5e5fa0 R15: 00007f346e70fa28 [ 2567.245318][ T3136] [ 2567.770924][ T3136] veth2: entered promiscuous mode [ 2567.796407][T29818] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2567.806749][ T5911] Unregistered device Sky IT Digital Key (green led) [ 2567.813234][T29818] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 2567.833378][ T5911] as10x_usb: device has been disconnected [ 2567.836200][T29818] asix 6-1:0.0: probe with driver asix failed with error -71 [ 2567.861186][ T3138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2567.882246][ T3138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2567.918676][T29818] usb 6-1: USB disconnect, device number 84 [ 2569.298136][ T3170] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7880'. [ 2569.378925][ T3170] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7880'. [ 2570.820054][ T5911] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 2570.982714][ T5911] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 2570.991735][ T5911] usb 6-1: config 179 has no interface number 0 [ 2570.998537][ T5911] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 2571.045410][ T5911] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 2571.107388][ T5911] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 2571.173237][ T5911] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2571.296630][ T5911] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2571.357799][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 2571.379931][ T5911] usb 6-1: Product: syz [ 2571.434137][ T3177] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 2571.667763][ T5911] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 2571.784252][ T5911] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2571.797216][ T9673] usb 6-1: USB disconnect, device number 85 [ 2571.803395][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2571.803430][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2572.188335][ T3185] fido_id[3185]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2573.059955][ T9673] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 2573.246651][ T9673] usb 6-1: device descriptor read/64, error -71 [ 2573.489991][ T9673] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 2574.034909][ T9673] usb 6-1: device descriptor read/64, error -71 [ 2574.220304][ T9673] usb usb6-port1: attempt power cycle [ 2574.666351][ T9673] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 2574.700418][ T9673] usb 6-1: device descriptor read/8, error -71 [ 2574.940034][ T9673] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 2574.970969][ T9673] usb 6-1: device descriptor read/8, error -71 [ 2575.118760][ T9673] usb usb6-port1: unable to enumerate USB device [ 2576.599262][ T5911] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 2576.829949][ T5911] usb 6-1: Using ep0 maxpacket: 8 [ 2576.885066][ T5911] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2576.898175][ T5911] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2576.917561][ T5911] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2576.967940][ T5911] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2577.010450][ T5911] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2577.079967][ T5911] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2577.090349][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2577.501948][ T5911] usb 6-1: usb_control_msg returned -32 [ 2577.508073][ T5911] usbtmc 6-1:16.0: can't read capabilities [ 2578.230045][ T3296] usbtmc 6-1:16.0: control status returned 6c [ 2578.584543][ T30] audit: type=1326 audit(1761869420.398:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3299 comm="syz.3.7913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e38efc9 code=0x7ffc0000 [ 2578.686456][ T30] audit: type=1326 audit(1761869420.398:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3299 comm="syz.3.7913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f346e38efc9 code=0x7ffc0000 [ 2578.834522][ T30] audit: type=1326 audit(1761869420.398:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3299 comm="syz.3.7913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e38efc9 code=0x7ffc0000 [ 2578.914276][ T30] audit: type=1326 audit(1761869420.398:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3299 comm="syz.3.7913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f346e38efc9 code=0x7ffc0000 [ 2579.118194][ T3307] tipc: Enabling of bearer rejected, failed to enable media [ 2579.343229][ T30] audit: type=1326 audit(1761869420.398:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3299 comm="syz.3.7913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e38efc9 code=0x7ffc0000 [ 2579.366289][ T30] audit: type=1326 audit(1761869420.398:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3299 comm="syz.3.7913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f346e38d810 code=0x7ffc0000 [ 2579.370906][ T3312] fuse: Unknown parameter 'group_id00000000000000000000' [ 2579.389008][ T30] audit: type=1326 audit(1761869420.398:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3299 comm="syz.3.7913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e38efc9 code=0x7ffc0000 [ 2579.418632][ T30] audit: type=1326 audit(1761869420.398:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3299 comm="syz.3.7913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f346e38efc9 code=0x7ffc0000 [ 2579.522167][ T5911] usb 6-1: USB disconnect, device number 90 [ 2579.574095][ T30] audit: type=1326 audit(1761869420.398:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3299 comm="syz.3.7913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e38efc9 code=0x7ffc0000 [ 2579.739957][ T30] audit: type=1326 audit(1761869420.398:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3299 comm="syz.3.7913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f346e38efc9 code=0x7ffc0000 [ 2580.010016][ T5911] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 2580.315574][ T5911] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2580.325890][ T5911] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2580.338156][ T5911] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2580.347735][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2580.358025][ T5911] usb 6-1: Product: syz [ 2580.363470][ T5911] usb 6-1: Manufacturer: syz [ 2580.368454][ T5911] usb 6-1: SerialNumber: syz [ 2580.378415][ T5911] usb 6-1: config 0 descriptor?? [ 2580.402545][ T3332] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7921'. [ 2580.467853][ T3334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2580.486003][ T3334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2580.513502][T29224] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 2580.543059][T29224] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2580.602714][ T3340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2580.651219][ T3340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2580.836238][ T3317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2580.866499][ T3317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2581.117274][T29224] usb 6-1: USB disconnect, device number 91 [ 2581.227095][ T5911] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2581.299005][ T3335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2581.310389][ T3335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2581.723617][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2581.733950][ T5911] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2581.749309][ T5911] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 2581.794740][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2581.848023][ T5911] usb 2-1: config 0 descriptor?? [ 2582.282730][ T3344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2582.370319][ T3344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2582.405781][ T5911] usb 2-1: string descriptor 0 read error: -71 [ 2582.428651][ T5911] usb 2-1: USB disconnect, device number 111 [ 2583.223427][ T3363] fuse: Bad value for 'user_id' [ 2583.228444][ T3363] fuse: Bad value for 'user_id' [ 2583.630003][T29818] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 2583.836177][T29818] usb 6-1: Using ep0 maxpacket: 32 [ 2584.005694][T29818] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 2584.146644][T29818] usb 6-1: config 0 has no interface number 0 [ 2584.159943][T29818] usb 6-1: config 0 interface 12 has no altsetting 0 [ 2584.288177][T29818] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2584.304082][T29818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2584.331693][T29818] usb 6-1: Product: syz [ 2584.369577][T29818] usb 6-1: Manufacturer: syz [ 2584.406314][T29818] usb 6-1: SerialNumber: syz [ 2584.453948][T29818] usb 6-1: config 0 descriptor?? [ 2585.148868][ T3393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2585.161937][ T3393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2585.182141][T29224] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 2585.193932][T29224] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2585.420032][ T5911] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 2585.739960][ T5911] usb 2-1: device descriptor read/64, error -71 [ 2585.999986][ T5911] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 2586.140069][ T5911] usb 2-1: device descriptor read/64, error -71 [ 2586.284103][ T5911] usb usb2-port1: attempt power cycle [ 2586.346423][ T3367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2586.362157][ T3367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2586.432103][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 2586.432123][ T30] audit: type=1326 audit(1761869428.258:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3366 comm="syz.5.7932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a938efc9 code=0x7ffc0000 [ 2586.461907][ T30] audit: type=1326 audit(1761869428.258:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3366 comm="syz.5.7932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a938efc9 code=0x7ffc0000 [ 2586.537445][ T30] audit: type=1326 audit(1761869428.288:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3366 comm="syz.5.7932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f77a938efc9 code=0x7ffc0000 [ 2586.537624][T29818] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2586.568474][ T30] audit: type=1326 audit(1761869428.288:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3366 comm="syz.5.7932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a938efc9 code=0x7ffc0000 [ 2586.600320][T29818] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 2586.607880][ T30] audit: type=1326 audit(1761869428.288:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3366 comm="syz.5.7932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a938efc9 code=0x7ffc0000 [ 2586.630464][ C0] vkms_vblank_simulate: vblank timer overrun [ 2586.644600][T29818] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2586.656006][T29818] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 2586.669412][ T30] audit: type=1326 audit(1761869428.318:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3366 comm="syz.5.7932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f77a938efc9 code=0x7ffc0000 [ 2586.669982][ T5911] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 2586.731212][T29818] usb 6-1: USB disconnect, device number 92 [ 2586.778519][ T30] audit: type=1326 audit(1761869428.328:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3366 comm="syz.5.7932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a938efc9 code=0x7ffc0000 [ 2586.803555][ T30] audit: type=1326 audit(1761869428.328:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3366 comm="syz.5.7932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a938efc9 code=0x7ffc0000 [ 2586.810910][ T5911] usb 2-1: device descriptor read/8, error -71 [ 2586.844399][ T30] audit: type=1326 audit(1761869428.338:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3366 comm="syz.5.7932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f77a938efc9 code=0x7ffc0000 [ 2586.855785][ T3416] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7941'. [ 2586.882577][ T30] audit: type=1326 audit(1761869428.338:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3366 comm="syz.5.7932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a938efc9 code=0x7ffc0000 [ 2587.009382][ T3421] xt_bpf: check failed: parse error [ 2587.122426][ T5911] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 2587.151565][ T5911] usb 2-1: device descriptor read/8, error -71 [ 2587.271051][ T5911] usb usb2-port1: unable to enumerate USB device [ 2587.298885][ T3431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2587.314569][ T3431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2588.343639][ T3446] team_slave_1: Caught tx_queue_len zero misconfig [ 2588.470201][ T9673] usb 6-1: new full-speed USB device number 93 using dummy_hcd [ 2588.596803][ T3456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2588.609189][ T3456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2588.625054][ T9673] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 2588.635044][ T3456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2588.643973][ T9673] usb 6-1: config 179 has no interface number 0 [ 2588.651503][ T3456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2588.659378][ T9673] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 2588.671417][ T9673] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 2588.683344][ T9673] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 2588.696861][ T3456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2588.708694][ T3456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2588.721793][ T9673] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2588.741995][ T9673] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2588.751317][ T9673] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 2588.759526][ T9673] usb 6-1: Product: syz [ 2588.777128][ T3442] raw-gadget.6 gadget.5: fail, usb_ep_enable returned -22 [ 2589.004004][T29827] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 2589.032848][T29827] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2589.206586][T29818] usb 6-1: USB disconnect, device number 93 [ 2589.206688][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2589.221406][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 2589.420214][T29827] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2589.572334][T29827] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 2589.581077][T29827] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2589.591410][T29827] usb 2-1: config 0 has no interface number 0 [ 2589.597627][T29827] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2589.608061][T29827] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2589.624306][T29827] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2589.633955][T29827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2589.642350][T29827] usb 2-1: Product: syz [ 2589.646778][T29827] usb 2-1: Manufacturer: syz [ 2589.651550][T29827] usb 2-1: SerialNumber: syz [ 2589.658434][T29827] usb 2-1: config 0 descriptor?? [ 2589.805689][ T3468] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7956'. [ 2590.633390][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.640384][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.687994][ T3480] netlink: 'syz.3.7959': attribute type 1 has an invalid length. [ 2591.168508][ T3480] input: syz1 as /devices/virtual/input/input168 [ 2591.420273][T29827] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 2591.586523][T29827] usb 6-1: Using ep0 maxpacket: 32 [ 2591.628765][T29827] usb 6-1: config 3 has an invalid interface number: 171 but max is 29 [ 2591.638541][T29827] usb 6-1: config 3 has 1 interface, different from the descriptor's value: 30 [ 2591.659628][T29827] usb 6-1: config 3 has no interface number 0 [ 2591.678377][T29827] usb 6-1: config 3 interface 171 altsetting 108 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2591.740224][T29827] usb 6-1: config 3 interface 171 has no altsetting 0 [ 2591.756563][T29827] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5 [ 2591.766546][T29827] usb 6-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 2591.774891][T29827] usb 6-1: Product: syz [ 2591.783412][T29827] usb 6-1: Manufacturer: syz [ 2591.792630][T29827] usb 6-1: SerialNumber: syz [ 2592.016874][ T3487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2592.060785][ T3487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2592.223369][T29818] usb 2-1: USB disconnect, device number 116 [ 2592.880260][ T9673] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2592.940602][ T3487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2592.989044][ T3487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2593.081950][ T9673] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2593.100060][ T9673] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2593.120089][ T9673] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2593.137367][ T9673] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2593.210470][T29827] as10x_usb: device has been detected [ 2593.216434][T29827] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 2593.244631][ T3509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2593.279246][ T3509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2593.279667][T29827] usb 6-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 2593.314184][T29827] as10x_usb: error during firmware upload part1 [ 2593.319723][ T9673] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 2593.343477][T29827] Registered device Sky IT Digital Key (green led) [ 2593.352091][T29827] usb 6-1: USB disconnect, device number 94 [ 2593.396046][ T9673] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2593.475049][T29827] Unregistered device Sky IT Digital Key (green led) [ 2593.478525][T29827] as10x_usb: device has been disconnected [ 2593.539070][ T9673] usb 2-1: USB disconnect, device number 117 [ 2593.586803][ T3511] fido_id[3511]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2594.097692][ T3515] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7970'. [ 2594.401154][ T9673] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 2594.561331][ T9673] usb 6-1: too many configurations: 151, using maximum allowed: 8 [ 2594.734193][ T9673] usb 6-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 2594.743708][ T9673] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 2594.758103][ T9673] usb 6-1: Product: syz [ 2594.764039][ T9673] usb 6-1: Manufacturer: syz [ 2594.772087][ T9673] usb 6-1: SerialNumber: syz [ 2594.786359][ T9673] usb 6-1: config 0 descriptor?? [ 2594.805777][ T9673] ims_pcu 6-1:0.0: Zero length descriptor [ 2594.817594][ T9673] ims_pcu 6-1:0.0: probe with driver ims_pcu failed with error -22 [ 2595.329779][ T9673] usb 6-1: USB disconnect, device number 95 [ 2595.610131][ T3547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2595.637611][ T3547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2595.835441][ T3550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2595.848241][ T3550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2595.876993][ T9673] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 2595.900313][ T9673] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2596.047759][ T3553] fido_id[3553]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2596.744483][ T3564] syzkaller0: entered promiscuous mode [ 2596.769079][ T3564] syzkaller0: entered allmulticast mode [ 2597.085044][ T3568] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7985'. [ 2597.225215][ T3573] FAULT_INJECTION: forcing a failure. [ 2597.225215][ T3573] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2597.242193][ T3573] CPU: 0 UID: 0 PID: 3573 Comm: syz.1.7988 Not tainted syzkaller #0 PREEMPT(full) [ 2597.242213][ T3573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2597.242221][ T3573] Call Trace: [ 2597.242227][ T3573] [ 2597.242233][ T3573] dump_stack_lvl+0x189/0x250 [ 2597.242255][ T3573] ? __pfx____ratelimit+0x10/0x10 [ 2597.242271][ T3573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2597.242296][ T3573] ? __pfx__printk+0x10/0x10 [ 2597.242310][ T3573] ? fs_reclaim_acquire+0x7d/0x100 [ 2597.242334][ T3573] should_fail_ex+0x414/0x560 [ 2597.242356][ T3573] prepare_alloc_pages+0x213/0x610 [ 2597.242374][ T3573] __alloc_frozen_pages_noprof+0x123/0x370 [ 2597.242389][ T3573] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2597.242408][ T3573] ? policy_nodemask+0x27c/0x720 [ 2597.242423][ T3573] alloc_pages_bulk_noprof+0x560/0x710 [ 2597.242440][ T3573] ? alloc_pages_noprof+0xbe/0x190 [ 2597.242454][ T3573] kasan_populate_vmalloc+0xd1/0x270 [ 2597.242472][ T3573] ? do_raw_spin_unlock+0x122/0x240 [ 2597.242492][ T3573] alloc_vmap_area+0xd7a/0x14c0 [ 2597.242519][ T3573] ? __pfx_alloc_vmap_area+0x10/0x10 [ 2597.242534][ T3573] ? __kasan_kmalloc+0x93/0xb0 [ 2597.242554][ T3573] ? __get_vm_area_node+0x13f/0x300 [ 2597.242571][ T3573] ? copy_process+0x54b/0x3c00 [ 2597.242585][ T3573] __get_vm_area_node+0x1f8/0x300 [ 2597.242606][ T3573] __vmalloc_node_range_noprof+0x30c/0x12d0 [ 2597.242623][ T3573] ? copy_process+0x54b/0x3c00 [ 2597.242642][ T3573] ? percpu_ref_get_many+0x19/0x140 [ 2597.242665][ T3573] ? __memcg_slab_post_alloc_hook+0x517/0x7d0 [ 2597.242686][ T3573] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2597.242706][ T3573] ? memcpy_and_pad+0x48/0x80 [ 2597.242726][ T3573] __vmalloc_node_noprof+0xc2/0x110 [ 2597.242744][ T3573] ? copy_process+0x54b/0x3c00 [ 2597.242755][ T3573] ? copy_process+0x54b/0x3c00 [ 2597.242770][ T3573] dup_task_struct+0x3d4/0x830 [ 2597.242784][ T3573] ? lockdep_hardirqs_on+0x9c/0x150 [ 2597.242801][ T3573] copy_process+0x54b/0x3c00 [ 2597.242832][ T3573] ? __pfx_copy_process+0x10/0x10 [ 2597.242854][ T3573] vhost_task_create+0x1ce/0x320 [ 2597.242871][ T3573] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 2597.242887][ T3573] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 2597.242904][ T3573] ? __pfx_vhost_task_create+0x10/0x10 [ 2597.242925][ T3573] ? __pfx_vhost_task_fn+0x10/0x10 [ 2597.242952][ T3573] kvm_mmu_post_init_vm+0x14c/0x300 [ 2597.242972][ T3573] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 2597.242994][ T3573] ? __mutex_trylock_common+0x153/0x260 [ 2597.243011][ T3573] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2597.243026][ T3573] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 2597.243046][ T3573] ? rcu_is_watching+0x15/0xb0 [ 2597.243060][ T3573] ? trace_contention_end+0x39/0x120 [ 2597.243075][ T3573] ? look_up_lock_class+0x74/0x170 [ 2597.243092][ T3573] ? register_lock_class+0x51/0x320 [ 2597.243107][ T3573] ? __lock_acquire+0xab9/0xd20 [ 2597.243137][ T3573] kvm_vcpu_ioctl+0x95c/0xe90 [ 2597.243159][ T3573] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2597.243190][ T3573] ? __fget_files+0x2a/0x420 [ 2597.243204][ T3573] ? __fget_files+0x3a0/0x420 [ 2597.243215][ T3573] ? __fget_files+0x2a/0x420 [ 2597.243228][ T3573] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2597.243242][ T3573] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2597.243259][ T3573] __se_sys_ioctl+0xfc/0x170 [ 2597.243277][ T3573] do_syscall_64+0xfa/0xfa0 [ 2597.243291][ T3573] ? lockdep_hardirqs_on+0x9c/0x150 [ 2597.243311][ T3573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2597.243323][ T3573] ? clear_bhb_loop+0x60/0xb0 [ 2597.243338][ T3573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2597.243350][ T3573] RIP: 0033:0x7f8beb18efc9 [ 2597.243363][ T3573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2597.243374][ T3573] RSP: 002b:00007f8bebf96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2597.243389][ T3573] RAX: ffffffffffffffda RBX: 00007f8beb3e5fa0 RCX: 00007f8beb18efc9 [ 2597.243399][ T3573] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 2597.243406][ T3573] RBP: 00007f8bebf96090 R08: 0000000000000000 R09: 0000000000000000 [ 2597.243414][ T3573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2597.243422][ T3573] R13: 00007f8beb3e6038 R14: 00007f8beb3e5fa0 R15: 00007f8beb50fa28 [ 2597.243442][ T3573] [ 2597.243633][ T3573] syz.1.7988: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2597.491929][ T3571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2597.693375][ T3573] ,cpuset=/,mems_allowed=0-1 [ 2597.698058][ T3573] CPU: 1 UID: 0 PID: 3573 Comm: syz.1.7988 Not tainted syzkaller #0 PREEMPT(full) [ 2597.698087][ T3573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2597.698098][ T3573] Call Trace: [ 2597.698105][ T3573] [ 2597.698112][ T3573] dump_stack_lvl+0x189/0x250 [ 2597.698143][ T3573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2597.698165][ T3573] ? __pfx__printk+0x10/0x10 [ 2597.698183][ T3573] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2597.698206][ T3573] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2597.698229][ T3573] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 2597.698254][ T3573] warn_alloc+0x214/0x310 [ 2597.698279][ T3573] ? lockdep_hardirqs_on+0x9c/0x150 [ 2597.698303][ T3573] ? __pfx_warn_alloc+0x10/0x10 [ 2597.698333][ T3573] ? copy_process+0x54b/0x3c00 [ 2597.698353][ T3573] ? __get_vm_area_node+0x211/0x300 [ 2597.698382][ T3573] __vmalloc_node_range_noprof+0x331/0x12d0 [ 2597.698414][ T3573] ? percpu_ref_get_many+0x19/0x140 [ 2597.698439][ T3573] ? __memcg_slab_post_alloc_hook+0x517/0x7d0 [ 2597.698467][ T3573] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2597.698493][ T3573] ? memcpy_and_pad+0x48/0x80 [ 2597.698521][ T3573] __vmalloc_node_noprof+0xc2/0x110 [ 2597.698544][ T3573] ? copy_process+0x54b/0x3c00 [ 2597.698560][ T3573] ? copy_process+0x54b/0x3c00 [ 2597.698580][ T3573] dup_task_struct+0x3d4/0x830 [ 2597.698598][ T3573] ? lockdep_hardirqs_on+0x9c/0x150 [ 2597.698621][ T3573] copy_process+0x54b/0x3c00 [ 2597.698665][ T3573] ? __pfx_copy_process+0x10/0x10 [ 2597.698703][ T3573] vhost_task_create+0x1ce/0x320 [ 2597.698725][ T3573] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 2597.698748][ T3573] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 2597.698770][ T3573] ? __pfx_vhost_task_create+0x10/0x10 [ 2597.698801][ T3573] ? __pfx_vhost_task_fn+0x10/0x10 [ 2597.698842][ T3573] kvm_mmu_post_init_vm+0x14c/0x300 [ 2597.698871][ T3573] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 2597.698901][ T3573] ? __mutex_trylock_common+0x153/0x260 [ 2597.698924][ T3573] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2597.698945][ T3573] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 2597.698971][ T3573] ? rcu_is_watching+0x15/0xb0 [ 2597.698990][ T3573] ? trace_contention_end+0x39/0x120 [ 2597.699009][ T3573] ? look_up_lock_class+0x74/0x170 [ 2597.699032][ T3573] ? register_lock_class+0x51/0x320 [ 2597.699053][ T3573] ? __lock_acquire+0xab9/0xd20 [ 2597.699095][ T3573] kvm_vcpu_ioctl+0x95c/0xe90 [ 2597.699124][ T3573] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2597.699167][ T3573] ? __fget_files+0x2a/0x420 [ 2597.699186][ T3573] ? __fget_files+0x3a0/0x420 [ 2597.699200][ T3573] ? __fget_files+0x2a/0x420 [ 2597.699218][ T3573] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2597.699236][ T3573] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2597.699259][ T3573] __se_sys_ioctl+0xfc/0x170 [ 2597.699282][ T3573] do_syscall_64+0xfa/0xfa0 [ 2597.699302][ T3573] ? lockdep_hardirqs_on+0x9c/0x150 [ 2597.699322][ T3573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2597.699338][ T3573] ? clear_bhb_loop+0x60/0xb0 [ 2597.699358][ T3573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2597.699373][ T3573] RIP: 0033:0x7f8beb18efc9 [ 2597.699389][ T3573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2597.699404][ T3573] RSP: 002b:00007f8bebf96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2597.699422][ T3573] RAX: ffffffffffffffda RBX: 00007f8beb3e5fa0 RCX: 00007f8beb18efc9 [ 2597.699434][ T3573] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 2597.699445][ T3573] RBP: 00007f8bebf96090 R08: 0000000000000000 R09: 0000000000000000 [ 2597.699455][ T3573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2597.699465][ T3573] R13: 00007f8beb3e6038 R14: 00007f8beb3e5fa0 R15: 00007f8beb50fa28 [ 2597.699515][ T3573] [ 2597.699525][ T3573] Mem-Info: [ 2597.718708][ T3571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2597.923035][ T3573] active_anon:9939 inactive_anon:0 isolated_anon:0 [ 2597.923035][ T3573] active_file:19908 inactive_file:40911 isolated_file:0 [ 2597.923035][ T3573] unevictable:2816 dirty:335 writeback:0 [ 2597.923035][ T3573] slab_reclaimable:7089 slab_unreclaimable:146128 [ 2597.923035][ T3573] mapped:32324 shmem:3423 pagetables:1820 [ 2597.923035][ T3573] sec_pagetables:0 bounce:0 [ 2597.923035][ T3573] kernel_misc_reclaimable:0 [ 2597.923035][ T3573] free:1248768 free_pcp:10351 free_cma:0 [ 2597.925076][ C0] vkms_vblank_simulate: vblank timer overrun [ 2598.133663][ C0] vkms_vblank_simulate: vblank timer overrun [ 2598.142421][ T3573] Node 0 active_anon:39820kB inactive_anon:0kB active_file:79516kB inactive_file:163448kB unevictable:9728kB isolated(anon):0kB isolated(file):0kB mapped:129220kB dirty:1340kB writeback:0kB shmem:12156kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:8192kB kernel_stack:14024kB pagetables:7176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2598.174725][ C0] vkms_vblank_simulate: vblank timer overrun [ 2598.181795][ T3573] Node 1 active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2598.212102][ C0] vkms_vblank_simulate: vblank timer overrun [ 2598.218524][ T3573] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2598.248956][ T3573] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 2598.254874][ T3573] Node 0 DMA32 free:1070140kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39920kB inactive_anon:0kB active_file:79516kB inactive_file:163448kB unevictable:9728kB writepending:1340kB zspages:0kB present:3129332kB managed:2565184kB mlocked:8192kB bounce:0kB free_pcp:38772kB local_pcp:17344kB free_cma:0kB [ 2598.288668][ C0] vkms_vblank_simulate: vblank timer overrun [ 2598.299955][ T3573] lowmem_reserve[]: 0 0 0 0 0 [ 2598.304764][ T3573] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2598.334563][ T3573] lowmem_reserve[]: 0 0 0 0 0 [ 2598.339334][ T3573] Node 1 Normal free:3910072kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:2048kB free_cma:0kB [ 2598.371673][ C0] vkms_vblank_simulate: vblank timer overrun [ 2598.378376][ T3573] lowmem_reserve[]: 0 0 0 0 0 [ 2598.383193][ T3573] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2598.402018][ T3573] Node 0 DMA32: 1238*4kB (UME) 1059*8kB (UME) 394*16kB (UM) 256*32kB (UME) 87*64kB (UME) 59*128kB (UME) 23*256kB (UME) 27*512kB (UME) 16*1024kB (UME) 13*2048kB (UME) 239*4096kB (M) = 1082704kB [ 2598.421918][ T3573] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2598.670748][ T3577] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 2598.685033][ T3573] Node 1 Normal: 220*4kB (UME) 47*8kB (UME) 41*16kB (UME) 218*32kB (UME) 90*64kB (UME) 29*128kB (UME) 14*256kB (UM) 4*512kB (UM) 5*1024kB (UME) 5*2048kB (ME) 945*4096kB (UM) = 3910072kB [ 2598.705288][ T3573] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2598.715938][ T3573] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2598.725495][ T3573] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2598.735778][ T3573] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2598.751459][ T3577] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 2598.760535][ T3577] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 2598.931249][ T3573] 64238 total pagecache pages [ 2598.940713][ T3573] 0 pages in swap cache [ 2598.960419][ T3573] Free swap = 124996kB [ 2598.968625][ T3573] Total swap = 124996kB [ 2598.983599][ T3573] 2097051 pages RAM [ 2598.991167][ T3573] 0 pages HighMem/MovableOnly [ 2599.018862][ T3573] 424113 pages reserved [ 2599.024534][ T3573] 0 pages cma reserved [ 2599.343224][ T3571] loop6: detected capacity change from 0 to 524288000 [ 2599.590199][ T9673] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 2599.598131][ T3596] loop6: detected capacity change from 524288000 to 0 [ 2599.778903][ T3570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2599.809636][ T9673] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2599.817954][ T9673] usb 2-1: not running at top speed; connect to a high speed hub [ 2599.830416][ T9673] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2599.845865][ T9673] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2599.872656][ T9673] usb 2-1: string descriptor 0 read error: -22 [ 2599.893728][ T9673] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2599.919287][ T9673] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2599.947869][ T3601] FAULT_INJECTION: forcing a failure. [ 2599.947869][ T3601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2599.961673][ T3601] CPU: 1 UID: 0 PID: 3601 Comm: syz.5.7995 Not tainted syzkaller #0 PREEMPT(full) [ 2599.961700][ T3601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2599.961713][ T3601] Call Trace: [ 2599.961722][ T3601] [ 2599.961731][ T3601] dump_stack_lvl+0x189/0x250 [ 2599.961765][ T3601] ? __pfx____ratelimit+0x10/0x10 [ 2599.961792][ T3601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2599.961820][ T3601] ? __pfx__printk+0x10/0x10 [ 2599.961842][ T3601] ? __might_fault+0xb0/0x130 [ 2599.961882][ T3601] should_fail_ex+0x414/0x560 [ 2599.961918][ T3601] _copy_from_user+0x2d/0xb0 [ 2599.961954][ T3601] get_nodes+0x29c/0x390 [ 2599.961982][ T3601] ? __pfx_get_nodes+0x10/0x10 [ 2599.962009][ T3601] ? ksys_write+0x1cb/0x250 [ 2599.962040][ T3601] __se_sys_mbind+0x178/0xc40 [ 2599.962069][ T3601] ? __pfx_vfs_write+0x10/0x10 [ 2599.962100][ T3601] ? __pfx___se_sys_mbind+0x10/0x10 [ 2599.962124][ T3601] ? __fget_files+0x3a0/0x420 [ 2599.962145][ T3601] ? fput+0xa0/0xd0 [ 2599.962163][ T3601] ? ksys_write+0x22a/0x250 [ 2599.962187][ T3601] ? __pfx_ksys_write+0x10/0x10 [ 2599.962212][ T3601] ? __x64_sys_mbind+0x21/0xf0 [ 2599.962238][ T3601] do_syscall_64+0xfa/0xfa0 [ 2599.962257][ T3601] ? lockdep_hardirqs_on+0x9c/0x150 [ 2599.962278][ T3601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2599.962294][ T3601] ? clear_bhb_loop+0x60/0xb0 [ 2599.962314][ T3601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2599.962329][ T3601] RIP: 0033:0x7f77a938efc9 [ 2599.962344][ T3601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2599.962359][ T3601] RSP: 002b:00007f77a75b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 2599.962378][ T3601] RAX: ffffffffffffffda RBX: 00007f77a95e6180 RCX: 00007f77a938efc9 [ 2599.962390][ T3601] RDX: 0000000000000002 RSI: 0000000000002000 RDI: 0000200000ff6000 [ 2599.962401][ T3601] RBP: 00007f77a75b4090 R08: 0000000000000006 R09: 0000000000000003 [ 2599.962411][ T3601] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 2599.962422][ T3601] R13: 00007f77a95e6218 R14: 00007f77a95e6180 R15: 00007f77a970fa28 [ 2599.962449][ T3601] [ 2600.597393][ T9673] usb 2-1: 0:2 : does not exist [ 2600.791703][ T3595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2601.233513][ T3617] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8000'. [ 2601.329702][ T3594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2601.357301][ T3594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2601.452352][ T9673] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2601.508423][ T9673] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 2601.619376][ T9673] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2601.670329][ T9673] usb 2-1: USB disconnect, device number 118 [ 2602.034213][ T3632] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 2602.047371][ T3632] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 2602.065348][ T3632] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 2602.421248][ T3651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2602.680522][ T3651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2603.011736][ T3661] loop2: detected capacity change from 0 to 7 [ 2603.019213][ T3661] Dev loop2: unable to read RDB block 7 [ 2603.025059][ T3661] loop2: AHDI p2 p3 [ 2603.030001][ T3661] loop2: partition table partially beyond EOD, truncated [ 2603.080153][ T3661] loop2: p3 start 335544320 is beyond EOD, truncated [ 2603.288797][ T5198] Dev loop2: unable to read RDB block 7 [ 2603.294701][ T5198] loop2: AHDI p2 p3 [ 2603.309158][ T5198] loop2: partition table partially beyond EOD, truncated [ 2603.350907][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 2603.350928][ T30] audit: type=1326 audit(1761869445.148:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3662 comm="syz.3.8013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e38efc9 code=0x7ffc0000 [ 2603.390497][ T5198] loop2: p3 start 335544320 is beyond EOD, truncated [ 2603.418225][ T30] audit: type=1326 audit(1761869445.148:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3662 comm="syz.3.8013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e38efc9 code=0x7ffc0000 [ 2603.920210][ T30] audit: type=1326 audit(1761869445.148:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3662 comm="syz.3.8013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f346e38efc9 code=0x7ffc0000 [ 2603.989943][ T30] audit: type=1326 audit(1761869445.148:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3662 comm="syz.3.8013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e38efc9 code=0x7ffc0000 [ 2604.100805][ T30] audit: type=1326 audit(1761869445.148:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3662 comm="syz.3.8013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e38efc9 code=0x7ffc0000 [ 2604.270443][ T30] audit: type=1326 audit(1761869445.148:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3662 comm="syz.3.8013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f346e38efc9 code=0x7ffc0000 [ 2604.366488][ T30] audit: type=1326 audit(1761869445.148:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3662 comm="syz.3.8013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e38efc9 code=0x7ffc0000 [ 2604.439979][ T30] audit: type=1326 audit(1761869445.148:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3662 comm="syz.3.8013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f346e38d810 code=0x7ffc0000 [ 2604.510856][ T30] audit: type=1326 audit(1761869445.148:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3662 comm="syz.3.8013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e38efc9 code=0x7ffc0000 [ 2604.511811][ T3676] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8017'. [ 2604.534088][ C0] vkms_vblank_simulate: vblank timer overrun [ 2604.534882][ T30] audit: type=1326 audit(1761869445.148:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3662 comm="syz.3.8013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f346e38efc9 code=0x7ffc0000 [ 2604.690311][T29819] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 2604.850321][T29819] usb 6-1: Using ep0 maxpacket: 32 [ 2604.902040][ T3682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2605.011044][T29819] usb 6-1: config index 0 descriptor too short (expected 1316, got 36) [ 2605.019621][T29819] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2605.042748][T29819] usb 6-1: config 2 has 0 interfaces, different from the descriptor's value: 6 [ 2605.055286][T29819] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2605.065439][T29819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2605.463974][T29819] usb 6-1: Product: syz [ 2605.480971][T29819] usb 6-1: Manufacturer: syz [ 2605.485668][T29819] usb 6-1: SerialNumber: syz [ 2606.354957][ T3700] sctp: [Deprecated]: syz.4.8023 (pid 3700) Use of int in max_burst socket option. [ 2606.354957][ T3700] Use struct sctp_assoc_value instead [ 2606.451368][ T3700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2606.487151][ T3700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2606.539684][ T3700] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8023'. [ 2606.562068][ T3707] fuse: Bad value for 'fd' [ 2606.581948][ T3700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8023'. [ 2606.602283][ T3702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8023'. [ 2606.767307][ T3711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2606.821614][ T3711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2607.089588][ T3721] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 2607.097982][ T3721] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 2607.106541][ T3721] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 2607.601147][ T3729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2607.610095][ T3729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2607.690233][T29819] usb 6-1: USB disconnect, device number 96 [ 2607.966638][ T3729] loop6: detected capacity change from 0 to 524288000 [ 2608.120695][ T3729] loop6: detected capacity change from 524288000 to 0 [ 2608.355158][ T3728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2608.669941][ T9673] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 2608.790269][T29819] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2608.815136][ T3757] program syz.3.8041 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2608.829975][ T9673] usb 6-1: Using ep0 maxpacket: 16 [ 2608.837171][ T3757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8041'. [ 2608.857141][ T9673] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 2608.876496][ T9673] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2608.897295][ T9673] usb 6-1: Product: syz [ 2608.905009][ T9673] usb 6-1: Manufacturer: syz [ 2608.910291][ T9673] usb 6-1: SerialNumber: syz [ 2608.919589][ T9673] usb 6-1: config 0 descriptor?? [ 2608.936638][ T9673] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 2608.951643][ T9673] usb 6-1: Detected FT232B [ 2608.959786][T29819] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2608.972988][T29819] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2608.984089][T29819] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 2608.998899][T29819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2609.015685][T29819] usb 2-1: config 0 descriptor?? [ 2609.137456][ T3743] tipc: Enabled bearer , priority 0 [ 2609.159038][ T3743] tipc: Resetting bearer [ 2609.175177][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 2609.175197][ T30] audit: type=1326 audit(1761869450.998:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3764 comm="syz.6.8044" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52b878efc9 code=0x0 [ 2609.204032][ T9673] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2609.218446][ T9673] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2609.231795][ T9673] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2609.246728][ T9673] usb 6-1: USB disconnect, device number 97 [ 2609.260967][ T3742] tipc: Disabling bearer [ 2609.268201][ T9673] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2609.280717][ T3768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2609.292345][ T3768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2609.293435][ T9673] ftdi_sio 6-1:0.0: device disconnected [ 2609.346128][T29819] usb 2-1: string descriptor 0 read error: -71 [ 2609.368693][T29819] usb 2-1: USB disconnect, device number 119 [ 2609.807821][ T3783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2609.817409][ T3783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2610.072581][ T3791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2610.082335][ T3791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2610.265145][T29819] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 2610.294393][ T3782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2610.970004][T29819] usb 6-1: Using ep0 maxpacket: 32 [ 2610.977109][T29819] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2610.988158][T29819] usb 6-1: config 0 has no interfaces? [ 2610.996677][T29819] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 2611.006249][T29819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 2611.035413][T29819] usb 6-1: Product: syz [ 2611.042888][T29819] usb 6-1: Manufacturer: syz [ 2611.100424][T29819] usb 6-1: SerialNumber: syz [ 2611.900941][T29819] usb 6-1: config 0 descriptor?? [ 2612.017671][ T3806] geneve3: entered promiscuous mode [ 2612.024234][ T3806] geneve3: entered allmulticast mode [ 2612.283682][ T3788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2612.328684][ T3788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2612.539980][ T9673] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2612.688877][ T3813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2612.699384][ T3813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2612.853714][ T3815] netlink: 'syz.5.8053': attribute type 1 has an invalid length. [ 2612.888418][ T9673] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2612.900007][ T9673] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2612.930775][ T9673] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2612.940384][ T9673] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2612.980072][ T3810] raw-gadget.8 gadget.1: fail, usb_ep_enable returned -22 [ 2612.996969][ T3815] bond4: entered promiscuous mode [ 2613.006831][ T9673] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2613.020618][ T3815] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2613.220455][ T3810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2613.231805][ T3810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2614.792805][T29827] usb 6-1: USB disconnect, device number 98 [ 2615.038538][ T3838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2615.049048][ T3838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2615.345625][ T3837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2615.482033][T29827] usb 2-1: USB disconnect, device number 120 [ 2615.520018][ T9673] usb 6-1: new full-speed USB device number 99 using dummy_hcd [ 2615.624668][ T3848] netlink: 'syz.1.8068': attribute type 1 has an invalid length. [ 2615.648187][ T3851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2615.657629][ T3851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2615.667783][ T3851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2615.677828][ T3848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2615.681952][ T3851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2615.697024][ T30] audit: type=1326 audit(1761869457.518:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3849 comm="syz.3.8069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e38efc9 code=0x7ffc0000 [ 2615.711221][ T9673] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 2615.721554][ T3851] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8069'. [ 2615.742989][ T3851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2615.747554][ T3852] vlan4: entered allmulticast mode [ 2615.752729][ T30] audit: type=1326 audit(1761869457.518:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3849 comm="syz.3.8069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e38efc9 code=0x7ffc0000 [ 2615.758654][ T3852] bond0: entered allmulticast mode [ 2615.782237][ T30] audit: type=1326 audit(1761869457.548:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3849 comm="syz.3.8069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f346e38efc9 code=0x7ffc0000 [ 2615.788838][ T3851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2615.821676][ T9673] usb 6-1: config 179 has no interface number 0 [ 2615.828024][ T9673] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 2615.830682][ T30] audit: type=1326 audit(1761869457.548:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3849 comm="syz.3.8069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e38efc9 code=0x7ffc0000 [ 2615.865406][ T9673] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 2615.896955][ T9673] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 2615.910500][ T30] audit: type=1326 audit(1761869457.548:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3849 comm="syz.3.8069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f346e38efc9 code=0x7ffc0000 [ 2615.925122][ T9673] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2615.943744][ T30] audit: type=1326 audit(1761869457.568:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3849 comm="syz.3.8069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e38efc9 code=0x7ffc0000 [ 2615.958194][ T9673] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2615.970532][ T30] audit: type=1326 audit(1761869457.568:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3849 comm="syz.3.8069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f346e38efc9 code=0x7ffc0000 [ 2615.978536][ T9673] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 2616.005315][ T30] audit: type=1326 audit(1761869457.568:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3849 comm="syz.3.8069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e38efc9 code=0x7ffc0000 [ 2616.057311][ T9673] usb 6-1: Product: syz [ 2616.079037][ T3842] raw-gadget.6 gadget.5: fail, usb_ep_enable returned -22 [ 2616.080116][ T30] audit: type=1326 audit(1761869457.568:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3849 comm="syz.3.8069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e38efc9 code=0x7ffc0000 [ 2616.130264][ T30] audit: type=1326 audit(1761869457.568:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3849 comm="syz.3.8069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f346e38d810 code=0x7ffc0000 [ 2616.575981][ T9673] usb 6-1: USB disconnect, device number 99 [ 2616.576043][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2616.590405][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2617.600016][ T9673] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 2617.780894][ T9673] usb 6-1: Using ep0 maxpacket: 16 [ 2617.792288][ T9673] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2617.815250][ T9673] usb 6-1: config 0 has no interface number 0 [ 2617.847637][ T9673] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2617.887136][ T9673] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2617.926081][ T9673] usb 6-1: Product: syz [ 2617.941276][ T9673] usb 6-1: Manufacturer: syz [ 2617.976868][ T9673] usb 6-1: SerialNumber: syz [ 2618.033598][ T9673] usb 6-1: config 0 descriptor?? [ 2618.052551][ T9673] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2618.120167][ T5911] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2618.334822][ T5911] usb 2-1: config 0 has no interfaces? [ 2618.354482][ T5911] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2618.374308][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2618.393406][ T5911] usb 2-1: Product: syz [ 2618.402238][ T5911] usb 2-1: Manufacturer: syz [ 2618.410985][ T5911] usb 2-1: SerialNumber: syz [ 2618.438030][ T5911] usb 2-1: config 0 descriptor?? [ 2619.332054][ T9673] gspca_spca1528: reg_w err -71 [ 2619.337062][ T9673] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 2619.346990][ T9673] usb 6-1: USB disconnect, device number 100 [ 2619.830463][ T3907] fuse: Bad value for 'fd' [ 2620.066546][ T3916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2620.076837][ T3916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2620.094048][ T3916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2620.103209][ T3916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2620.220018][ T9673] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 2620.371853][ T9673] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 2620.380178][ T9673] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2620.390946][ T9673] usb 6-1: config 0 has no interface number 0 [ 2620.397429][ T9673] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2620.407804][ T9673] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2620.423722][ T9673] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2620.433082][ T9673] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2620.441791][ T9673] usb 6-1: Product: syz [ 2620.446172][ T9673] usb 6-1: Manufacturer: syz [ 2620.450846][ T9673] usb 6-1: SerialNumber: syz [ 2620.457522][ T9673] usb 6-1: config 0 descriptor?? [ 2620.972182][T29818] usb 2-1: USB disconnect, device number 121 [ 2621.044952][ T3927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2621.320244][ T3927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2621.408423][ T3927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2621.462624][ T3927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2621.661935][ T3940] syzkaller0: entered promiscuous mode [ 2621.667444][ T3940] syzkaller0: entered allmulticast mode [ 2623.026536][ T3954] xt_bpf: check failed: parse error [ 2623.290871][ T5911] usb 6-1: USB disconnect, device number 101 [ 2623.690319][T29827] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2623.821905][T29827] usb 2-1: device descriptor read/64, error -71 [ 2624.032259][ T3971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2624.045210][ T3971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2624.070505][T29827] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2624.140224][T29818] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 2624.209957][T29827] usb 2-1: device descriptor read/64, error -71 [ 2624.230539][ T3978] kvm: user requested TSC rate below hardware speed [ 2624.299978][T29818] usb 6-1: Using ep0 maxpacket: 16 [ 2624.308098][T29818] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2624.319156][T29818] usb 6-1: config 0 has no interface number 0 [ 2624.328843][T29827] usb usb2-port1: attempt power cycle [ 2624.337649][T29818] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2624.348179][T29818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2624.356817][T29818] usb 6-1: Product: syz [ 2624.371279][T29818] usb 6-1: Manufacturer: syz [ 2624.376386][T29818] usb 6-1: SerialNumber: syz [ 2624.391277][T29818] usb 6-1: config 0 descriptor?? [ 2624.418148][T29818] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2624.629310][ T3963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2624.646743][ T3963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2624.667065][ T3980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2624.678307][ T3980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2624.711128][T29827] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2624.730877][T29827] usb 2-1: device descriptor read/8, error -71 [ 2625.050128][T29827] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 2625.084778][T29827] usb 2-1: device descriptor read/8, error -71 [ 2625.200626][T29827] usb usb2-port1: unable to enumerate USB device [ 2625.334528][ T3989] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 2625.897328][T29818] gspca_spca1528: reg_w err -71 [ 2625.904753][T29818] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 2625.950673][T29818] usb 6-1: USB disconnect, device number 102 [ 2626.857249][ T4029] netlink: 12 bytes leftover after parsing attributes in process `wޣ'. [ 2626.898289][ T4031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2626.910067][ T9673] usb 6-1: new full-speed USB device number 103 using dummy_hcd [ 2626.946362][ T4031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2626.979446][ T4029] netlink: 16 bytes leftover after parsing attributes in process `wޣ'. [ 2627.014938][ T4029] random: crng reseeded on system resumption [ 2627.094559][ T9673] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 2627.107265][ T9673] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2627.123062][ T9673] usb 6-1: Product: syz [ 2627.127296][ T9673] usb 6-1: Manufacturer: syz [ 2627.133036][ T9673] usb 6-1: SerialNumber: syz [ 2627.159522][ T9673] usb 6-1: config 0 descriptor?? [ 2627.176495][ T9673] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 2627.218530][ T9673] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2627.269218][ T9673] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 2627.417245][ T4026] bond5: entered allmulticast mode [ 2627.432550][ T9673] usb 6-1: USB disconnect, device number 103 [ 2627.825225][ T4050] vhci_hcd vhci_hcd.0: port 0 already used [ 2627.863079][ T4048] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8130'. [ 2628.004373][ T4056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2628.026717][ T4056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2629.309949][ T1211] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2629.552183][ T1211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2629.569950][ T1211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2629.643416][ T1211] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2629.673866][ T1211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2629.715164][ T1211] usb 2-1: config 0 descriptor?? [ 2630.158974][ T4071] bond15: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 2630.171718][ T1211] usbhid 2-1:0.0: can't add hid device: -71 [ 2630.177921][ T1211] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2630.198748][ T1211] usb 2-1: USB disconnect, device number 126 [ 2630.202361][ T4071] bond15 (unregistering): Released all slaves [ 2630.544388][ T4082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2630.583057][ T4082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2631.001304][ T4089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2631.012318][ T4089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2631.247637][ T4091] netlink: 'syz.5.8142': attribute type 21 has an invalid length. [ 2631.257271][ T4091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8142'. [ 2632.041073][ T4105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2632.105928][ T4105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2632.464892][ T4105] loop6: detected capacity change from 0 to 524288000 [ 2632.770550][ T4105] loop6: detected capacity change from 524288000 to 0 [ 2632.779241][ T4104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2633.184192][ T4130] netlink: 'syz.6.8150': attribute type 27 has an invalid length. [ 2633.336283][ T4124] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8150'. [ 2633.618907][ T4130] bridge0: port 2(bridge_slave_1) entered disabled state [ 2633.626173][ T4130] bridge0: port 1(bridge_slave_0) entered disabled state [ 2633.902590][ T4130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2633.979335][ T4130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2634.079766][ T4130] tipc: Resetting bearer [ 2634.085520][ T4130] tipc: Resetting bearer [ 2634.147740][ T4148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2634.181775][ T4148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2634.313761][ T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2634.364055][ T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2634.460841][ T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2634.482640][ T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2634.875250][ T1211] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 2635.180341][ T1211] usb 2-1: Using ep0 maxpacket: 8 [ 2635.195765][ T1211] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2635.234063][ T1211] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2635.379685][ T1211] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2635.390301][ T1211] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2635.404793][ T1211] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2635.424472][ T1211] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2635.513107][ T1211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2635.730670][ T4169] fuse: Bad value for 'fd' [ 2635.808491][ T1211] usb 2-1: usb_control_msg returned -32 [ 2635.814400][ T1211] usbtmc 2-1:16.0: can't read capabilities [ 2637.032283][ T4193] usbtmc 2-1:16.0: control status returned 6c [ 2637.787836][ T4201] netlink: 'syz.6.8169': attribute type 27 has an invalid length. [ 2637.853335][ T4201] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8169'. [ 2638.412765][T29818] usb 2-1: USB disconnect, device number 127 [ 2638.744929][ T4218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2638.755403][ T4222] usb usb8: usbfs: process 4222 (syz.1.8173) did not claim interface 0 before use [ 2638.771998][ T4222] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2638.786918][ T4221] fuse: Bad value for 'fd' [ 2639.482727][ T4230] x_tables: duplicate entry at hook 2 [ 2639.995463][ T4234] team0: Device gtp0 is of different type [ 2640.660044][ T4246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2640.670171][ T4246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2640.857626][ T4243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2640.867963][ T4243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2641.340373][T29818] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 2641.413235][ T4257] netlink: 'syz.4.8184': attribute type 27 has an invalid length. [ 2641.474232][ T4253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8184'. [ 2641.511809][T29818] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 2641.523491][T29818] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2641.540003][T29818] usb 6-1: config 0 has no interface number 0 [ 2641.550885][T29818] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 2641.565651][T29818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2641.575046][T29818] usb 6-1: Product: syz [ 2641.579313][T29818] usb 6-1: Manufacturer: syz [ 2641.585868][T29818] usb 6-1: SerialNumber: syz [ 2641.603815][T29818] usb 6-1: config 0 descriptor?? [ 2641.628477][T29818] ims_pcu 6-1:0.41: probe with driver ims_pcu failed with error -22 [ 2641.831596][T29818] usb 6-1: USB disconnect, device number 104 [ 2642.258393][ T4269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2642.267292][ T4269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2642.313509][ T4269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2642.332063][ T4269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2643.009763][ T4284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2643.018768][ T4284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2643.105011][ T4284] loop6: detected capacity change from 0 to 524288000 [ 2644.310873][ T4284] loop6: detected capacity change from 524288000 to 0 [ 2644.322824][ T4283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2644.340121][ T1211] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 2644.859530][ T4286] syz.1.8191: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2644.980676][ T4286] CPU: 0 UID: 0 PID: 4286 Comm: syz.1.8191 Not tainted syzkaller #0 PREEMPT(full) [ 2644.980704][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2644.980713][ T4286] Call Trace: [ 2644.980718][ T4286] [ 2644.980724][ T4286] dump_stack_lvl+0x189/0x250 [ 2644.980749][ T4286] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 2644.980770][ T4286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2644.980787][ T4286] ? __pfx__printk+0x10/0x10 [ 2644.980800][ T4286] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2644.980817][ T4286] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2644.980839][ T4286] warn_alloc+0x214/0x310 [ 2644.980867][ T4286] ? __pfx_warn_alloc+0x10/0x10 [ 2644.980892][ T4286] ? __get_vm_area_node+0x28f/0x300 [ 2644.980913][ T4286] ? translate_table+0x19b/0x2040 [ 2644.980934][ T4286] __vmalloc_node_range_noprof+0x690/0x12d0 [ 2644.980969][ T4286] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2644.980987][ T4286] ? translate_table+0x19b/0x2040 [ 2644.981007][ T4286] ? rcu_is_watching+0x15/0xb0 [ 2644.981022][ T4286] ? translate_table+0x19b/0x2040 [ 2644.981039][ T4286] __kvmalloc_node_noprof+0x674/0x910 [ 2644.981058][ T4286] ? translate_table+0x19b/0x2040 [ 2644.981074][ T4286] ? do_ip6t_set_ctl+0x88a/0xce0 [ 2644.981090][ T4286] ? nf_setsockopt+0x26f/0x290 [ 2644.981104][ T4286] ? do_sock_setsockopt+0x17c/0x1b0 [ 2644.981116][ T4286] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 2644.981131][ T4286] translate_table+0x19b/0x2040 [ 2644.981157][ T4286] ? __lock_acquire+0xab9/0xd20 [ 2644.981173][ T4286] ? __pfx_translate_table+0x10/0x10 [ 2644.981192][ T4286] ? __might_fault+0xb0/0x130 [ 2644.981221][ T4286] ? _copy_from_user+0x94/0xb0 [ 2644.981240][ T4286] do_ip6t_set_ctl+0x970/0xce0 [ 2644.981272][ T4286] ? rcu_is_watching+0x15/0xb0 [ 2644.981286][ T4286] ? trace_contention_end+0x39/0x120 [ 2644.981302][ T4286] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 2644.981333][ T4286] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2644.981354][ T4286] ? file_init_path+0x3b/0x590 [ 2644.981370][ T4286] ? __lock_acquire+0xab9/0xd20 [ 2644.981385][ T4286] nf_setsockopt+0x26f/0x290 [ 2644.981403][ T4286] rawv6_setsockopt+0x23b/0x5b0 [ 2644.981418][ T4286] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 2644.981430][ T4286] ? aa_sock_opt_perm+0xff/0x1b0 [ 2644.981449][ T4286] ? sock_common_setsockopt+0x36/0xc0 [ 2644.981467][ T4286] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2644.981485][ T4286] do_sock_setsockopt+0x17c/0x1b0 [ 2644.981500][ T4286] __x64_sys_setsockopt+0x13f/0x1b0 [ 2644.981516][ T4286] do_syscall_64+0xfa/0xfa0 [ 2644.981532][ T4286] ? lockdep_hardirqs_on+0x9c/0x150 [ 2644.981547][ T4286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2644.981559][ T4286] ? clear_bhb_loop+0x60/0xb0 [ 2644.981575][ T4286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2644.981587][ T4286] RIP: 0033:0x7f8beb18efc9 [ 2644.981600][ T4286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2644.981611][ T4286] RSP: 002b:00007f8be8ff4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2644.981626][ T4286] RAX: ffffffffffffffda RBX: 00007f8beb3e6270 RCX: 00007f8beb18efc9 [ 2644.981635][ T4286] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000a [ 2644.981651][ T4286] RBP: 00007f8beb211f91 R08: 0000000000000508 R09: 0000000000000000 [ 2644.981659][ T4286] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 2644.981667][ T4286] R13: 00007f8beb3e6308 R14: 00007f8beb3e6270 R15: 00007f8beb50fa28 [ 2644.981687][ T4286] [ 2644.982094][ T4286] Mem-Info: [ 2644.999964][ T1211] usb 6-1: config 0 has no interfaces? [ 2645.033353][ T4286] active_anon:11343 inactive_anon:0 isolated_anon:0 [ 2645.033353][ T4286] active_file:20407 inactive_file:40994 isolated_file:0 [ 2645.033353][ T4286] unevictable:2816 dirty:216 writeback:0 [ 2645.033353][ T4286] slab_reclaimable:7102 slab_unreclaimable:146340 [ 2645.033353][ T4286] mapped:33471 shmem:3423 pagetables:1847 [ 2645.033353][ T4286] sec_pagetables:0 bounce:0 [ 2645.033353][ T4286] kernel_misc_reclaimable:0 [ 2645.033353][ T4286] free:1228075 free_pcp:12334 free_cma:0 [ 2645.690628][ T4286] Node 0 active_anon:46308kB inactive_anon:0kB active_file:81512kB inactive_file:163772kB unevictable:12028kB isolated(anon):0kB isolated(file):0kB mapped:138044kB dirty:876kB writeback:0kB shmem:12156kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:8192kB kernel_stack:14244kB pagetables:7384kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2645.830345][ T1211] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2645.922710][ T1211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2645.939938][ T4304] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 2645.948239][ T4304] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 2645.957021][ T4304] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 2646.008285][ T4286] Node 1 active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2646.052054][ T1211] usb 6-1: Product: syz [ 2646.052081][ T1211] usb 6-1: Manufacturer: syz [ 2646.052098][ T1211] usb 6-1: SerialNumber: syz [ 2646.060754][ T1211] usb 6-1: config 0 descriptor?? [ 2646.170013][ T4286] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2646.412892][ T4286] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 2646.418876][ T4286] Node 0 DMA32 free:978972kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47040kB inactive_anon:0kB active_file:81512kB inactive_file:163772kB unevictable:17920kB writepending:880kB zspages:0kB present:3129332kB managed:2565184kB mlocked:16384kB bounce:0kB free_pcp:44784kB local_pcp:22980kB free_cma:0kB [ 2646.456663][ T4286] lowmem_reserve[]: 0 0 0 0 0 [ 2646.469262][ T4286] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2646.580005][ T4286] lowmem_reserve[]: 0 0 0 0 0 [ 2646.642928][ T4286] Node 1 Normal free:3910072kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:2048kB free_cma:0kB [ 2646.890502][ T4286] lowmem_reserve[]: 0 0 0 0 0 [ 2646.895315][ T4286] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2646.964137][ T4286] Node 0 DMA32: 1*4kB (U) 51*8kB (UE) 2*16kB (UM) 23*32kB (UME) 132*64kB (UME) 83*128kB (UME) 39*256kB (UME) 27*512kB (ME) 15*1024kB (ME) 1*2048kB (E) 224*4096kB (M) = 978972kB [ 2647.059230][ T4286] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2647.121331][ T4286] Node 1 Normal: 220*4kB (UME) 47*8kB (UME) 41*16kB (UME) 218*32kB (UME) 90*64kB (UME) 29*128kB (UME) 14*256kB (UM) 4*512kB (UM) 5*1024kB (UME) 5*2048kB (ME) 945*4096kB (UM) = 3910072kB [ 2647.214056][ T4313] netlink: 'syz.6.8197': attribute type 27 has an invalid length. [ 2647.240929][ T4286] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2647.268622][ T4315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2647.289176][ T4313] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8197'. [ 2647.298413][ T4286] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2647.330121][ T4315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2647.340267][ T4286] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2647.379378][ T4286] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2647.400571][ T1211] usb 6-1: can't set config #0, error -71 [ 2647.418523][ T4286] 64757 total pagecache pages [ 2647.439222][ T4286] 0 pages in swap cache [ 2647.452639][ T4286] Free swap = 124996kB [ 2647.470464][ T1211] usb 6-1: USB disconnect, device number 105 [ 2647.489522][ T4286] Total swap = 124996kB [ 2647.522610][ T4286] 2097051 pages RAM [ 2647.541542][ T4286] 0 pages HighMem/MovableOnly [ 2647.548095][ T4286] 424113 pages reserved [ 2647.553452][ T4286] 0 pages cma reserved [ 2647.629089][ T4319] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8199'. [ 2648.976503][ T4345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2649.039468][ T4345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2649.287185][ T4349] FAULT_INJECTION: forcing a failure. [ 2649.287185][ T4349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2649.305971][ T4349] CPU: 0 UID: 0 PID: 4349 Comm: syz.4.8205 Not tainted syzkaller #0 PREEMPT(full) [ 2649.305993][ T4349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2649.306001][ T4349] Call Trace: [ 2649.306007][ T4349] [ 2649.306013][ T4349] dump_stack_lvl+0x189/0x250 [ 2649.306035][ T4349] ? __pfx____ratelimit+0x10/0x10 [ 2649.306051][ T4349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2649.306068][ T4349] ? __pfx__printk+0x10/0x10 [ 2649.306081][ T4349] ? __might_fault+0xb0/0x130 [ 2649.306105][ T4349] should_fail_ex+0x414/0x560 [ 2649.306128][ T4349] _copy_from_iter+0x1de/0x1790 [ 2649.306153][ T4349] ? __pfx__copy_from_iter+0x10/0x10 [ 2649.306168][ T4349] ? rcu_is_watching+0x15/0xb0 [ 2649.306183][ T4349] ? trace_kmalloc+0x1f/0xd0 [ 2649.306198][ T4349] ? __kmalloc_noprof+0x432/0x7f0 [ 2649.306213][ T4349] ? rcu_read_lock_any_held+0xb3/0x120 [ 2649.306228][ T4349] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 2649.306246][ T4349] kernfs_fop_write_iter+0x19b/0x540 [ 2649.306263][ T4349] vfs_write+0x5c9/0xb30 [ 2649.306284][ T4349] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 2649.306303][ T4349] ? __pfx_vfs_write+0x10/0x10 [ 2649.306327][ T4349] ? __fget_files+0x2a/0x420 [ 2649.306345][ T4349] ksys_write+0x145/0x250 [ 2649.306363][ T4349] ? __pfx_ksys_write+0x10/0x10 [ 2649.306382][ T4349] ? do_syscall_64+0xbe/0xfa0 [ 2649.306400][ T4349] do_syscall_64+0xfa/0xfa0 [ 2649.306414][ T4349] ? lockdep_hardirqs_on+0x9c/0x150 [ 2649.306430][ T4349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2649.306442][ T4349] ? clear_bhb_loop+0x60/0xb0 [ 2649.306456][ T4349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2649.306468][ T4349] RIP: 0033:0x7f634b18efc9 [ 2649.306480][ T4349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2649.306491][ T4349] RSP: 002b:00007f634c03c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2649.306506][ T4349] RAX: ffffffffffffffda RBX: 00007f634b3e6090 RCX: 00007f634b18efc9 [ 2649.306515][ T4349] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003 [ 2649.306523][ T4349] RBP: 00007f634c03c090 R08: 0000000000000000 R09: 0000000000000000 [ 2649.306531][ T4349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2649.306539][ T4349] R13: 00007f634b3e6128 R14: 00007f634b3e6090 R15: 00007f634b50fa28 [ 2649.306559][ T4349] [ 2651.332750][ T4366] team0: Device gtp3 is of different type [ 2651.978828][ T1211] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2652.090967][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.097415][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.183596][ T4385] netlink: 'syz.3.8214': attribute type 27 has an invalid length. [ 2652.220695][ T4385] bond14: left promiscuous mode [ 2652.225834][ T4385] gre2: left promiscuous mode [ 2652.269960][ T1211] usb 2-1: device descriptor read/64, error -71 [ 2652.290052][ T4385] gre2: left allmulticast mode [ 2652.380329][ T4380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8214'. [ 2652.529955][ T1211] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2652.679645][ T1211] usb 2-1: device descriptor read/64, error -71 [ 2652.800536][ T1211] usb usb2-port1: attempt power cycle [ 2652.848333][ T4395] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8218'. [ 2652.948349][ T4396] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8218'. [ 2653.140008][ T1211] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2653.162116][ T1211] usb 2-1: device descriptor read/8, error -71 [ 2653.399967][ T1211] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2653.420504][ T1211] usb 2-1: device descriptor read/8, error -71 [ 2653.530431][ T1211] usb usb2-port1: unable to enumerate USB device [ 2653.540293][T29818] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 2653.690178][T29818] usb 6-1: Using ep0 maxpacket: 16 [ 2653.697205][T29818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2653.708564][T29818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2653.722183][T29818] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 2653.732468][T29818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2653.751321][T29818] usb 6-1: config 0 descriptor?? [ 2653.776923][ T4405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2653.786982][ T4405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2653.803999][ T4405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2653.821588][ T4405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2653.963000][ T1211] usb 5-1: USB disconnect, device number 108 [ 2654.363194][T29818] usb 6-1: language id specifier not provided by device, defaulting to English [ 2654.574595][T29818] letsketch 0003:6161:4D15.003E: Device info: ☲潧⌭ [ 2654.774883][T29818] letsketch 0003:6161:4D15.003E: Device info: Ÿᒁ莳㔮⌶ꚷ귙ᕒ卑惊쫯塂໿ [ 2654.977466][T29818] letsketch 0003:6161:4D15.003E: Device info: В [ 2655.426306][T29818] usb 6-1: Max retries (5) exceeded reading string descriptor 2 [ 2655.462230][T29818] letsketch 0003:6161:4D15.003E: probe with driver letsketch failed with error -71 [ 2655.540866][ T4414] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8225'. [ 2655.693288][T29818] usb 6-1: USB disconnect, device number 106 [ 2655.857054][T22223] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2655.877852][T22223] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2655.886875][T22223] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2655.922390][T22223] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2655.930880][T22223] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2656.315530][ T9673] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 2656.489904][ T9673] usb 6-1: Using ep0 maxpacket: 16 [ 2656.506451][ T9673] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2656.514821][ T9673] usb 6-1: config 0 has no interface number 0 [ 2656.539032][ T9673] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2656.554016][ T9673] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2656.772633][ T9673] usb 6-1: Product: syz [ 2656.779915][ T9673] usb 6-1: Manufacturer: syz [ 2656.794672][ T9673] usb 6-1: SerialNumber: syz [ 2656.819171][ T49] bond6 (unregistering): (slave gretap1): Releasing backup interface [ 2656.861301][ T9673] usb 6-1: config 0 descriptor?? [ 2656.901283][ T9673] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2657.295953][ T49] bond2 (unregistering): (slave gre1): Releasing backup interface [ 2657.914642][ T4454] fuse: Bad value for 'fd' [ 2657.977227][ T4457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2657.987695][ T4457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2657.990191][T22223] Bluetooth: hci2: command tx timeout [ 2658.230239][ T49] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2658.240209][ T49] bond0 (unregistering): Released all slaves [ 2658.309445][ T9673] gspca_spca1528: reg_w err -71 [ 2658.314631][ T9673] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 2658.331276][ T9673] usb 6-1: USB disconnect, device number 107 [ 2658.431446][ T49] bond1 (unregistering): Released all slaves [ 2658.578212][ T4459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2658.589276][ T4459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2658.610105][ T49] bond2 (unregistering): Released all slaves [ 2658.771307][ T49] bond3 (unregistering): Released all slaves [ 2658.961227][ T49] bond4 (unregistering): Released all slaves [ 2659.122041][ T49] bond5 (unregistering): Released all slaves [ 2659.198798][ T9673] usb 6-1: new full-speed USB device number 108 using dummy_hcd [ 2659.341773][ T49] bond6 (unregistering): Released all slaves [ 2659.383865][ T9673] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2659.394013][ T9673] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2659.402542][ T9673] usb 6-1: Product: syz [ 2659.406762][ T9673] usb 6-1: Manufacturer: syz [ 2659.411614][ T9673] usb 6-1: SerialNumber: syz [ 2659.419629][ T9673] usb 6-1: config 0 descriptor?? [ 2659.523725][ T4469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2659.546081][ T4469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2659.630285][ T49] bond7 (unregistering): Released all slaves [ 2659.640040][ T9673] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2659.650649][ T4469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2659.702811][ T4469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2659.901794][ T49] bond8 (unregistering): Released all slaves [ 2660.071911][T22223] Bluetooth: hci2: command tx timeout [ 2660.132957][ T9673] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2660.163305][ T9673] usb 6-1: USB disconnect, device number 108 [ 2660.378651][ T49] bond9 (unregistering): Released all slaves [ 2660.586687][ T49] bond10 (unregistering): Released all slaves [ 2660.750005][ T9673] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 2660.833207][ T49] bond11 (unregistering): Released all slaves [ 2660.926574][ T9673] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2660.935175][ T9673] usb 6-1: config 0 has no interface number 0 [ 2660.941845][ T9673] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2660.969751][ T9673] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2660.980858][ T9673] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 2660.990190][ T9673] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2661.003185][ T9673] usb 6-1: config 0 descriptor?? [ 2661.104065][ T49] bond12 (unregistering): Released all slaves [ 2661.281185][ T49] bond13 (unregistering): Released all slaves [ 2661.311016][ T4452] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8231'. [ 2661.328468][ T4455] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8231'. [ 2661.576088][ T49] [: left promiscuous mode [ 2661.769382][ T49] : left promiscuous mode [ 2661.891811][ T49] : left promiscuous mode [ 2662.075277][ T49] tipc: Left network mode [ 2662.150541][T22223] Bluetooth: hci2: command tx timeout [ 2663.239007][ T4428] chnl_net:caif_netlink_parms(): no params data found [ 2663.396025][ T9673] usbhid 6-1:0.1: can't add hid device: -71 [ 2663.410040][ T9673] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 2663.439881][ T9673] usb 6-1: USB disconnect, device number 109 [ 2663.539257][ T4515] FAULT_INJECTION: forcing a failure. [ 2663.539257][ T4515] name failslab, interval 1, probability 0, space 0, times 0 [ 2663.584432][ T4515] CPU: 0 UID: 0 PID: 4515 Comm: syz.5.8246 Not tainted syzkaller #0 PREEMPT(full) [ 2663.584462][ T4515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2663.584475][ T4515] Call Trace: [ 2663.584483][ T4515] [ 2663.584493][ T4515] dump_stack_lvl+0x189/0x250 [ 2663.584526][ T4515] ? __pfx____ratelimit+0x10/0x10 [ 2663.584552][ T4515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2663.584579][ T4515] ? __pfx__printk+0x10/0x10 [ 2663.584608][ T4515] ? __pfx___might_resched+0x10/0x10 [ 2663.584644][ T4515] should_fail_ex+0x414/0x560 [ 2663.584680][ T4515] should_failslab+0xa8/0x100 [ 2663.584704][ T4515] __kmalloc_noprof+0xcb/0x7f0 [ 2663.584729][ T4515] ? kfree+0x4d/0x6d0 [ 2663.584751][ T4515] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2663.584788][ T4515] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2663.584820][ T4515] ? tomoyo_domain+0xd9/0x130 [ 2663.584845][ T4515] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2663.584870][ T4515] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2663.584899][ T4515] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2663.584969][ T4515] ? __fget_files+0x2a/0x420 [ 2663.584995][ T4515] ? __fget_files+0x3a0/0x420 [ 2663.585013][ T4515] ? __fget_files+0x2a/0x420 [ 2663.585038][ T4515] security_file_ioctl+0xcb/0x2d0 [ 2663.585065][ T4515] __se_sys_ioctl+0x47/0x170 [ 2663.585095][ T4515] do_syscall_64+0xfa/0xfa0 [ 2663.585120][ T4515] ? lockdep_hardirqs_on+0x9c/0x150 [ 2663.585146][ T4515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2663.585167][ T4515] ? clear_bhb_loop+0x60/0xb0 [ 2663.585193][ T4515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2663.585212][ T4515] RIP: 0033:0x7f77a938efc9 [ 2663.585232][ T4515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2663.585251][ T4515] RSP: 002b:00007f77a75f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2663.585275][ T4515] RAX: ffffffffffffffda RBX: 00007f77a95e5fa0 RCX: 00007f77a938efc9 [ 2663.585292][ T4515] RDX: 0000200000000340 RSI: 00000000c1205531 RDI: 0000000000000003 [ 2663.585306][ T4515] RBP: 00007f77a75f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2663.585319][ T4515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2663.585332][ T4515] R13: 00007f77a95e6038 R14: 00007f77a95e5fa0 R15: 00007f77a970fa28 [ 2663.585368][ T4515] [ 2663.585377][ T4515] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2663.983738][ T4523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2663.997418][ T4523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2664.079402][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 2664.079416][ T30] audit: type=1326 audit(1761869505.898:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.1.8242" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8beb18efc9 code=0x0 [ 2664.139680][ T49] macvlan0: left promiscuous mode [ 2664.146873][ T49] batadv0: left promiscuous mode [ 2664.236592][T22223] Bluetooth: hci2: command tx timeout [ 2664.308265][ T49] hsr_slave_0: left promiscuous mode [ 2664.319237][ T49] hsr_slave_1: left promiscuous mode [ 2664.588595][ T49] team0 (unregistering): Port device batadv1 removed [ 2667.748038][ T4535] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8249'. [ 2667.772893][ T4536] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8249'. [ 2668.024287][ T4540] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 2668.118217][ T4428] bridge0: port 1(bridge_slave_0) entered blocking state [ 2668.126065][ T4428] bridge0: port 1(bridge_slave_0) entered disabled state [ 2668.133631][ T4428] bridge_slave_0: entered allmulticast mode [ 2668.142900][ T4428] bridge_slave_0: entered promiscuous mode [ 2668.192990][ T4428] bridge0: port 2(bridge_slave_1) entered blocking state [ 2668.222671][ T4428] bridge0: port 2(bridge_slave_1) entered disabled state [ 2668.230189][ T4428] bridge_slave_1: entered allmulticast mode [ 2668.239697][ T4428] bridge_slave_1: entered promiscuous mode [ 2668.318038][ T4428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2668.356715][ T4428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2668.464154][ T4428] team0: Port device team_slave_0 added [ 2668.485655][ T4428] team0: Port device team_slave_1 added [ 2668.502776][ T49] IPVS: stop unused estimator thread 0... [ 2668.662742][ T4428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2668.678126][ T4428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2668.706788][ T4428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2668.823811][ T4428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2668.859179][ T4428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2668.982771][ T4428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2669.078793][ T4554] fuse: Bad value for 'fd' [ 2669.093924][ T4428] hsr_slave_0: entered promiscuous mode [ 2669.211610][ T4428] hsr_slave_1: entered promiscuous mode [ 2669.241018][ T4428] debugfs: 'hsr0' already exists in 'hsr' [ 2669.287030][ T4428] Cannot create hsr debugfs directory [ 2669.763127][ T4569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2669.772405][ T4569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2669.783098][ T30] audit: type=1326 audit(1761869511.608:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4567 comm="syz.3.8255" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f346e38efc9 code=0x0 [ 2669.870067][ T1211] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 2670.108095][ T4581] syzkaller0: entered promiscuous mode [ 2670.113860][ T4581] syzkaller0: entered allmulticast mode [ 2670.200596][ T1211] usb 6-1: config 0 has no interfaces? [ 2670.230871][ T1211] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2670.240356][ T1211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2670.248436][ T1211] usb 6-1: Product: syz [ 2670.273206][ T1211] usb 6-1: Manufacturer: syz [ 2670.277864][ T1211] usb 6-1: SerialNumber: syz [ 2670.511812][ T1211] usb 6-1: config 0 descriptor?? [ 2670.521147][ T4428] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2670.813252][ T4428] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2671.007895][ T4428] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2671.118946][ T4428] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2671.785747][ T4428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2671.849614][ T4428] 8021q: adding VLAN 0 to HW filter on device team0 [ 2671.976355][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2671.983669][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2672.101711][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2672.108857][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2672.144509][ T4428] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2672.160663][ T4428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2672.310578][ T4428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2672.320197][ T1211] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2672.371959][ T4428] veth0_vlan: entered promiscuous mode [ 2672.408767][ T4428] veth1_vlan: entered promiscuous mode [ 2672.492826][ T1211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2672.510796][ T1211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2672.601545][ T4428] veth0_macvtap: entered promiscuous mode [ 2672.607507][ T1211] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2672.642789][ T4428] veth1_macvtap: entered promiscuous mode [ 2672.649462][ T1211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2672.709001][ T1211] usb 2-1: config 0 descriptor?? [ 2672.774891][ T4428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2672.830495][ T4428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2672.933835][ T5911] usb 6-1: USB disconnect, device number 110 [ 2672.984842][T17962] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2673.008517][T17962] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2673.039731][T17962] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2673.101160][T17962] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2673.370590][ T1211] usbhid 2-1:0.0: can't add hid device: -71 [ 2673.378461][ T1211] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2673.417209][ T1211] usb 2-1: USB disconnect, device number 7 [ 2673.433367][T20672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2673.450439][T20672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2673.548187][ T4612] delete_channel: no stack [ 2673.631096][T17962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2673.643765][T17962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2673.730042][T29819] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 2673.881762][T29819] usb 6-1: Using ep0 maxpacket: 32 [ 2673.903259][T29819] usb 6-1: config 3 has an invalid interface number: 171 but max is 29 [ 2673.945757][T29819] usb 6-1: config 3 has 1 interface, different from the descriptor's value: 30 [ 2673.977264][T29819] usb 6-1: config 3 has no interface number 0 [ 2673.984674][T29819] usb 6-1: config 3 interface 171 altsetting 108 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2674.000601][T29819] usb 6-1: config 3 interface 171 has no altsetting 0 [ 2674.012579][T29819] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5 [ 2674.021890][T29819] usb 6-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 2674.032735][T29819] usb 6-1: Product: syz [ 2674.036956][T29819] usb 6-1: Manufacturer: syz [ 2674.046665][T29819] usb 6-1: SerialNumber: syz [ 2674.290406][T29818] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2674.555575][ T4641] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 2674.564021][ T4641] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 2674.572815][ T4641] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 2674.591291][ T4626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2674.635503][ T4626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2674.762451][T29818] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 2674.809675][T29818] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2674.833023][T29818] usb 2-1: config 0 has no interface number 0 [ 2674.839412][T29818] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2674.891747][T29818] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2674.916490][T29818] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2674.934462][T29818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2674.944294][T29818] usb 2-1: Product: syz [ 2675.039216][T29818] usb 2-1: Manufacturer: syz [ 2675.045793][T29818] usb 2-1: SerialNumber: syz [ 2675.057353][T29818] usb 2-1: config 0 descriptor?? [ 2675.599415][T29818] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 2675.641626][ T4626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2675.660601][ T4626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2675.708565][T29818] usb 2-1: USB disconnect, device number 8 [ 2675.828775][ T4656] syzkaller0: entered promiscuous mode [ 2675.843050][ T4656] syzkaller0: entered allmulticast mode [ 2675.907779][T29819] as10x_usb: device has been detected [ 2675.926149][T29819] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 2676.000104][T29819] usb 6-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 2676.023022][T29819] as10x_usb: error during firmware upload part1 [ 2676.032798][T29819] Registered device Sky IT Digital Key (green led) [ 2676.037668][T29819] usb 6-1: USB disconnect, device number 111 [ 2676.088538][T29819] Unregistered device Sky IT Digital Key (green led) [ 2676.096373][T29819] as10x_usb: device has been disconnected [ 2676.370872][ T4666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2676.382500][ T4666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2676.397013][ T4666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2676.407387][ T4666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2676.479979][T29818] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2676.669973][T29818] usb 2-1: Using ep0 maxpacket: 32 [ 2676.977971][T29818] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 2676.988070][T29818] usb 2-1: config 0 has no interface number 0 [ 2677.003786][T29818] usb 2-1: config 0 interface 12 has no altsetting 0 [ 2677.076731][T29818] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2677.097761][T29818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2677.127633][T29818] usb 2-1: Product: syz [ 2677.140247][T29818] usb 2-1: Manufacturer: syz [ 2677.162993][T29818] usb 2-1: SerialNumber: syz [ 2677.238386][T29818] usb 2-1: config 0 descriptor?? [ 2679.186232][ T4664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2679.195765][ T4664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2679.221988][T29818] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2679.245356][T29818] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 2679.357840][T29818] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2679.373670][T29818] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 2679.394753][T29818] usb 2-1: USB disconnect, device number 9 [ 2680.324310][ T4710] syzkaller0: entered promiscuous mode [ 2680.334563][ T4710] syzkaller0: entered allmulticast mode [ 2680.786564][ T4724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2680.795934][ T4724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2681.458106][T29818] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 2681.496286][T29818] hid-generic 0000:0000:0000.003F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2682.643012][ T4747] program syz.7.8290 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2682.739945][T29834] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 2682.809481][ T4747] syz.7.8290 (4747): drop_caches: 2 [ 2682.910097][T29834] usb 6-1: Using ep0 maxpacket: 16 [ 2682.920292][T29834] usb 6-1: too many configurations: 24, using maximum allowed: 8 [ 2682.942505][T29834] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2682.961265][T29834] usb 6-1: can't read configurations, error -61 [ 2683.197150][T29834] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 2683.264575][ T4757] syzkaller0: entered promiscuous mode [ 2683.279949][ T4757] syzkaller0: entered allmulticast mode [ 2683.760104][T29834] usb 6-1: Using ep0 maxpacket: 16 [ 2683.826530][T29834] usb 6-1: too many configurations: 24, using maximum allowed: 8 [ 2683.838501][T29834] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2683.869941][T29834] usb 6-1: can't read configurations, error -61 [ 2683.903302][T29834] usb usb6-port1: attempt power cycle [ 2684.256945][ T4769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2684.266531][ T4769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2684.284380][ T4769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2684.293795][ T4769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2684.310431][T29834] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 2684.779929][ T4486] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2684.841539][T29834] usb 6-1: device descriptor read/8, error -71 [ 2684.934458][ T4486] usb 2-1: Using ep0 maxpacket: 8 [ 2685.000475][ T4486] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2685.022667][ T4486] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2685.045014][ T4486] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2685.117933][ T4486] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2685.154263][ T4486] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2685.196929][ T4486] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2685.281645][ T4486] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2685.682316][ T4486] usb 2-1: usb_control_msg returned -32 [ 2685.689273][ T4486] usbtmc 2-1:16.0: can't read capabilities [ 2686.379928][T29834] usb 6-1: new full-speed USB device number 116 using dummy_hcd [ 2686.421056][ T4800] usbtmc 2-1:16.0: control status returned 6c [ 2686.562594][T29834] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 2686.570986][T29834] usb 6-1: config 179 has no interface number 0 [ 2686.577917][T29834] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 2686.639025][T29834] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 2686.737285][T29834] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 2686.792379][T29834] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2686.815631][T29834] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2686.833583][T29834] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 2686.867738][T29834] usb 6-1: Product: syz [ 2686.894339][ T4795] raw-gadget.8 gadget.5: fail, usb_ep_enable returned -22 [ 2687.207468][ T4486] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 2687.223054][ T4486] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2687.584792][ T1211] usb 6-1: USB disconnect, device number 116 [ 2687.584840][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2687.584879][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2687.662802][ T4811] fido_id[4811]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2688.730318][ T1211] usb 2-1: USB disconnect, device number 10 [ 2713.516924][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.523519][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2774.953696][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.960596][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2782.152246][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 2836.394146][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.400743][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2848.550006][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 2848.557620][ T31] Not tainted syzkaller #0 [ 2848.562874][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2848.571715][ T31] task:kworker/1:0 state:D stack:20408 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2848.583872][ T31] Workqueue: usb_hub_wq hub_event [ 2848.589029][ T31] Call Trace: [ 2848.592543][ T31] [ 2848.595540][ T31] __schedule+0x1798/0x4cc0 [ 2848.600209][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2848.605652][ T31] ? __pfx___schedule+0x10/0x10 [ 2848.610646][ T31] ? schedule+0x91/0x360 [ 2848.614931][ T31] schedule+0x165/0x360 [ 2848.619115][ T31] usb_kill_urb+0x1be/0x2d0 [ 2848.623969][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2848.629047][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2848.636008][ T31] usb_start_wait_urb+0x18c/0x4c0 [ 2848.641576][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2848.647206][ T31] ? usb_alloc_urb+0x46/0x150 [ 2848.652061][ T31] usb_control_msg+0x232/0x3e0 [ 2848.656878][ T31] hub_port_init+0xbf9/0x2800 [ 2848.661889][ T31] hub_event+0x2532/0x4a20 [ 2848.666383][ T31] ? __pfx_hub_event+0x10/0x10 [ 2848.671332][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2848.677269][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2848.682580][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2848.688333][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2848.694187][ T31] process_scheduled_works+0xae1/0x17b0 [ 2848.699967][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2848.705979][ T31] worker_thread+0x8a0/0xda0 [ 2848.711001][ T31] kthread+0x711/0x8a0 [ 2848.715103][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2848.720319][ T31] ? __pfx_kthread+0x10/0x10 [ 2848.724939][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2848.730262][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2848.735487][ T31] ? __pfx_kthread+0x10/0x10 [ 2848.741034][ T31] ret_from_fork+0x4bc/0x870 [ 2848.745678][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2848.751259][ T31] ? __switch_to_asm+0x39/0x70 [ 2848.756054][ T31] ? __switch_to_asm+0x33/0x70 [ 2848.761098][ T31] ? __pfx_kthread+0x10/0x10 [ 2848.765913][ T31] ret_from_fork_asm+0x1a/0x30 [ 2848.771053][ T31] [ 2848.774272][ T31] [ 2848.774272][ T31] Showing all locks held in the system: [ 2848.783274][ T31] 5 locks held by kworker/1:0/24: [ 2848.788447][ T31] #0: ffff88802168d148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2848.800309][ T31] #1: ffffc900001e7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2848.812260][ T31] #2: ffff88823beb6998 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2848.821250][ T31] #3: ffff888028714518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2848.831456][ T31] #4: ffff888028405a68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2848.841829][ T31] 1 lock held by khungtaskd/31: [ 2848.846790][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2848.856780][ T31] 2 locks held by getty/5588: [ 2848.861790][ T31] #0: ffff88814da7d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2848.871737][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2848.881980][ T31] [ 2848.884309][ T31] ============================================= [ 2848.884309][ T31] [ 2848.892974][ T31] NMI backtrace for cpu 0 [ 2848.892993][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2848.893015][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2848.893026][ T31] Call Trace: [ 2848.893034][ T31] [ 2848.893041][ T31] dump_stack_lvl+0x189/0x250 [ 2848.893076][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2848.893114][ T31] ? __pfx__printk+0x10/0x10 [ 2848.893145][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2848.893171][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2848.893194][ T31] ? __pfx__printk+0x10/0x10 [ 2848.893219][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2848.893251][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2848.893275][ T31] watchdog+0xf60/0xfa0 [ 2848.893301][ T31] ? watchdog+0x1e2/0xfa0 [ 2848.893328][ T31] kthread+0x711/0x8a0 [ 2848.893358][ T31] ? __pfx_watchdog+0x10/0x10 [ 2848.893385][ T31] ? __pfx_kthread+0x10/0x10 [ 2848.893421][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2848.893446][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2848.893469][ T31] ? __pfx_kthread+0x10/0x10 [ 2848.893495][ T31] ret_from_fork+0x4bc/0x870 [ 2848.893518][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2848.893547][ T31] ? __switch_to_asm+0x39/0x70 [ 2848.893563][ T31] ? __switch_to_asm+0x33/0x70 [ 2848.893578][ T31] ? __pfx_kthread+0x10/0x10 [ 2848.893604][ T31] ret_from_fork_asm+0x1a/0x30 [ 2848.893647][ T31] [ 2848.893656][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2849.041754][ C1] NMI backtrace for cpu 1 [ 2849.041775][ C1] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 2849.041795][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2849.041806][ C1] Workqueue: events_unbound toggle_allocation_gate [ 2849.041828][ C1] RIP: 0010:hrtimer_try_to_cancel+0x29d/0x420 [ 2849.041848][ C1] Code: b9 7d 12 00 f3 90 e9 6d ff ff ff 48 83 c5 48 48 89 e8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 ef e8 b8 32 78 00 48 8b 44 24 18 <48> 39 45 00 74 43 4c 89 7c 24 20 48 8b 44 24 28 42 0f b6 04 30 84 [ 2849.041862][ C1] RSP: 0018:ffffc90000ba7478 EFLAGS: 00000046 [ 2849.041875][ C1] RAX: ffff8880b893aa88 RBX: 1ffff11017124f68 RCX: dffffc0000000000 [ 2849.041888][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000ba7360 [ 2849.041899][ C1] RBP: ffff8880b8927b88 R08: 0000000000000003 R09: 0000000000000004 [ 2849.041910][ C1] R10: dffffc0000000000 R11: fffff52000174e6c R12: ffff8880b893aab8 [ 2849.041921][ C1] R13: ffff8880b8927b40 R14: dffffc0000000000 R15: 0000000000000802 [ 2849.041934][ C1] FS: 0000000000000000(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000 [ 2849.041947][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2849.041966][ C1] CR2: 0000558d025b0660 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 2849.041983][ C1] Call Trace: [ 2849.041990][ C1] [ 2849.042001][ C1] update_curr_dl_se+0x1ef/0x990 [ 2849.042020][ C1] update_curr+0x3fb/0x730 [ 2849.042047][ C1] dequeue_entities+0x1b3/0x30b0 [ 2849.042066][ C1] ? sched_clock+0x3f/0x60 [ 2849.042087][ C1] ? sched_clock_cpu+0x74/0x430 [ 2849.042103][ C1] ? do_raw_spin_lock+0x121/0x290 [ 2849.042124][ C1] ? rcu_is_watching+0x15/0xb0 [ 2849.042145][ C1] dequeue_task_fair+0x20e/0x790 [ 2849.042167][ C1] __schedule+0x5f1/0x4cc0 [ 2849.042191][ C1] ? do_raw_spin_lock+0x121/0x290 [ 2849.042213][ C1] ? __lock_acquire+0xab9/0xd20 [ 2849.042227][ C1] ? __pfx___schedule+0x10/0x10 [ 2849.042252][ C1] ? schedule+0x91/0x360 [ 2849.042270][ C1] schedule+0x165/0x360 [ 2849.042289][ C1] toggle_allocation_gate+0x159/0x240 [ 2849.042304][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 2849.042320][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2849.042343][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 2849.042359][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 2849.042376][ C1] process_scheduled_works+0xae1/0x17b0 [ 2849.042403][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2849.042426][ C1] worker_thread+0x8a0/0xda0 [ 2849.042453][ C1] kthread+0x711/0x8a0 [ 2849.042474][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2849.042490][ C1] ? __pfx_kthread+0x10/0x10 [ 2849.042510][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2849.042527][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2849.042545][ C1] ? __pfx_kthread+0x10/0x10 [ 2849.042565][ C1] ret_from_fork+0x4bc/0x870 [ 2849.042582][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2849.042600][ C1] ? __switch_to_asm+0x39/0x70 [ 2849.042613][ C1] ? __switch_to_asm+0x33/0x70 [ 2849.042626][ C1] ? __pfx_kthread+0x10/0x10 [ 2849.042645][ C1] ret_from_fork_asm+0x1a/0x30 [ 2849.042666][ C1]