last executing test programs: 1m30.901196224s ago: executing program 1 (id=530): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0xfc, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@private0, {0x3, 0x1, 0x2, 0x9, 0x10000000, 0x1}, {0x0, 0x2, 0x7}, {0x40000, 0xffffffff, 0xae8}, 0x0, 0x3504, 0xa, 0x2, 0xfe, 0x34}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xf}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x890) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000001f00)=ANY=[@ANYRESDEC=r0], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0x810) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_emit_ethernet(0x2e, &(0x7f0000000140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x141102) writev(r2, &(0x7f0000000440)=[{&(0x7f00000005c0)="94", 0xf000}, {0x0}], 0x2) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f00000007c0)=@buf={0xf2, &(0x7f00000006c0)="5bcfa4d9edcec73e14ada88ed5c778e9b3877177adf01dee5e10b9c3ea9a9bc5e9d910bbe99f13632cd4bae3a477699fd681385450d5733ecf50e46c97a06ea47f2393000403ad9c07227f11d4c5178ccb9cd9162db6ffcec5ff977d0f70f253b73968c39a4e3869b673d523e42bba7d69dade90afc2005b1cd8ce4ec296505744f018763abfa6a8301fd04709fd274fbe4f8f5b0ef911f07c95c3cce818a9224cc09e06d4a48381fe486e0ee4823090bdd559510d3232e91070ccf78e81dcf124a7e560727c9c8ad8f65a4d2b1b03f247db5c65e51d3600c4da4971633940f133be96d88d8506855be20cf096e8615cbdca"}) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000004c0)={0x0, 0x3, 0xd5, 0x7, 0x3, 0x1, 0x5, 0x6, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0xd, 0x0, 0x100, 0x8, 0x8}}, &(0x7f0000000580)=0xb0) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x80) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r3], 0x1000f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) stat(0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000600)={0xbe, 0xa, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x80, 0x8, 0x8, 0x0, 0x8}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000640)={0x0, 0x2c, &(0x7f0000000280)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00', 0xd066}]}, &(0x7f0000000840)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000880)={0x6, 0x5c, 0x204, 0x401, 0x80000000, 0xb2b, 0x400, 0x0, r5}, &(0x7f00000008c0)=0x20) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000900)=@sack_info={r7, 0x3, 0x4}, 0xc) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000980)={'syzkaller1\x00', 0xc201}) write$tun(r8, &(0x7f00000009c0)=ANY=[@ANYBLOB="0800430506000500000014000000400f"], 0x1200) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x401c2103, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x4, 0x4000000}) 1m30.130623844s ago: executing program 1 (id=532): bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x1, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b700000001ed0a00bfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003e000000000000005504000001ed0a002500000017ffffff46040000001000007b0a00fe000000006e04000000000000c6000aed010000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f0000001fc0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) 1m30.034198391s ago: executing program 1 (id=534): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x1000000, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) syz_open_dev$vcsu(&(0x7f0000000100), 0x4, 0x14102) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x1200008, 0x1a) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) mmap(&(0x7f000068d000/0x2000)=nil, 0x2000, 0x9, 0x10, r1, 0xadc4c000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280060006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000001c0)=0x7b1) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000340)={[0x7fffffff]}, 0x8) syz_clone(0x0, 0x0, 0x45, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000023c0)={&(0x7f00004c4000/0x4000)=nil, &(0x7f00004eb000/0x3000)=nil, &(0x7f00001cd000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000060000/0x2000)=nil, &(0x7f00000a4000/0x2000)=nil, &(0x7f00000f3000/0x1000)=nil, &(0x7f0000076000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000064000/0x3000)=nil, &(0x7f000014d000/0x4000)=nil, 0x0, 0x0, r4}, 0x68) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 1m29.247700731s ago: executing program 1 (id=535): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) (async) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002280)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) (async) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r1, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040b72040150000000000010902120001010080320904000000ff"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000240)={0x84, &(0x7f0000000300)={0xc0, 0x21}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r5, r1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x8001, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x8001, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000380)={0x2, 0x0, [{0x10, 0x0, 0x1780}, {0x10, 0x0, 0xfffffffffffffff9}]}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r8, 0x4018f50b, &(0x7f00000003c0)={0x0, 0x1}) close(0x3) (async) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x5, 0x189803) ioctl$XFS_IOC_GETBMAP(r10, 0xc0205826, &(0x7f0000000180)={0x2cf, 0x7, 0x81, 0x4, 0x96}) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x4718, 0x0, 0x0, 0x0, 0x0, 0x14, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333795f045158d97405000000000000040000000100", [0xfffffffffeff7ffc, 0xffffffffffffffff]}}) ioctl$BTRFS_IOC_SPACE_INFO(r9, 0x4c07, 0x0) (async) ioctl$BTRFS_IOC_SPACE_INFO(r9, 0x4c07, 0x0) 1m28.257783344s ago: executing program 1 (id=539): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000fdffffff00000000806d1034f200000000002020207b5a9b96e1784097d2a100000000000007010000f8ffffffb702070008000000b703000000f6ffff850000000600000095006f1ce63f0000000000005161db25c3d10d7a5c96db4c4b2cdd078ca5dcde711e270f1cb7ca00000000000000"], &(0x7f0000000040)='GPL\x00', 0x6, 0x1c, &(0x7f0000000280)=""/28, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x70, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x86, 0x1, {{0xfffffc00, 0xa, 0x7, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0xffffffffffffffb5}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_FW_CLASSID={0x0, 0x1, {0x7, 0xfffb}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x38, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x5, @mcast1, 0x3}, @in6={0xa, 0x4e20, 0x1000, @mcast2}]}, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x1, 0xf, 0x3, 0x1060, 0xb}, 0x30, 0x0) landlock_restrict_self(r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000480), 0xd, 0x123002) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000240)={0x1, 0x1000000, {0x7, 0xfffff962, 0x3001, 0x2, 0x7, 0x3, 0x2, 0x1}}) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x39000, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f47000) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0x2) 1m25.207975472s ago: executing program 1 (id=550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) (async) socket$inet(0x2, 0x2, 0x0) (async) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8, 0x3}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="9947156fcc47d3ec319e60", 0xb}], 0x1}, 0x41) (async) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4) syz_usb_connect(0x0, 0x64, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a2401000000021102052404"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f00000003c0)=0x800b, 0x4) (async) listen(r2, 0x0) (async) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000480)=0x20800001, 0x4) (async) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f00000004c0)=0x1, 0x4) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e22, 0x203, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000180)=0x469, 0x4) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x72, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x74, r6, {0x10, 0x7}, {}, {0xffff}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x84}, 0x0) (async) r8 = getpgid(0x0) syz_pidfd_open(r8, 0x0) (async) ptrace$setregs(0xf, r8, 0x7f, &(0x7f0000000400)="e50c6e81a4cd47d9faabe0aaf84a57becb39c6c046faa86d64a4600b252926730c3b793ef7af87f057a28d033a9ac41f34b2e0a7ab93bc69b359f32c444022c20f31a73cd83febf3131cbd63711f14f74c9ed9e02393c9d8b7df637a261911e2df9c887ed707cc7243713029b3b04e37a32adac8") sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x4000) 1m24.924358259s ago: executing program 32 (id=550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) (async) socket$inet(0x2, 0x2, 0x0) (async) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8, 0x3}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="9947156fcc47d3ec319e60", 0xb}], 0x1}, 0x41) (async) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4) syz_usb_connect(0x0, 0x64, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a2401000000021102052404"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f00000003c0)=0x800b, 0x4) (async) listen(r2, 0x0) (async) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000480)=0x20800001, 0x4) (async) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f00000004c0)=0x1, 0x4) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e22, 0x203, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000180)=0x469, 0x4) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x72, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x74, r6, {0x10, 0x7}, {}, {0xffff}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x84}, 0x0) (async) r8 = getpgid(0x0) syz_pidfd_open(r8, 0x0) (async) ptrace$setregs(0xf, r8, 0x7f, &(0x7f0000000400)="e50c6e81a4cd47d9faabe0aaf84a57becb39c6c046faa86d64a4600b252926730c3b793ef7af87f057a28d033a9ac41f34b2e0a7ab93bc69b359f32c444022c20f31a73cd83febf3131cbd63711f14f74c9ed9e02393c9d8b7df637a261911e2df9c887ed707cc7243713029b3b04e37a32adac8") sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x4000) 1m22.099918516s ago: executing program 5 (id=551): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x10, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd, 0x0, 0x4}}}}}]}}]}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000280)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f00000003c0)='n', 0x1) close(0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000004c0)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000580)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000005c0)=@gcm_128={{0x304}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000640)="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", 0xffffffa0}, {&(0x7f0000000780)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000800)="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", 0x149}], 0x3) 1m19.033336538s ago: executing program 5 (id=577): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000400)=0x2, 0x4) bind$inet6(r0, 0x0, 0x0) 1m18.822143498s ago: executing program 5 (id=578): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002440)={0x50, 0xffffffffffffffda, r2, {0x7, 0x27, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}}, 0x50) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) read$FUSE(r0, &(0x7f00000024c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000004500)={0x10, 0xffffffffffffffda, r3}, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000004540)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000340)={[0x7fffffff]}, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000023c0)={&(0x7f00004c4000/0x4000)=nil, &(0x7f00004eb000/0x3000)=nil, &(0x7f00001cd000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000060000/0x2000)=nil, &(0x7f00000a4000/0x2000)=nil, &(0x7f00000f3000/0x1000)=nil, &(0x7f0000076000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000064000/0x3000)=nil, &(0x7f000014d000/0x4000)=nil, 0x0, 0x0, r4}, 0x68) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 1m18.461885917s ago: executing program 5 (id=582): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fd\x00') fchdir(r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0xa, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004000}, 0x10) r2 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="120100005520f010402038b1420100000001090238000100000000090400000371055900090582eb10000000010200090502f3"], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0xffbffffc, @empty, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r3, 0xc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f00000003c0)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r7, r4, 0x0, 0x5) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000080)={0x7fffffff, "41ba4da6cf660f9153e7753891faa78eada4566cbfe2700bf9e55cd84a9e9b6a", 0x800, 0xe, 0x5, 0x8, 0x3}) write$cgroup_int(r1, &(0x7f0000000040)=0x985, 0x12) 1m18.214320281s ago: executing program 5 (id=583): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0x7, @local, 0x4}, 0x1c) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_newnexthop={0xfffffcb0, 0x68, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc802) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/icmp\x00') read$FUSE(r5, &(0x7f0000000680)={0x2020}, 0x2020) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @empty, 0x7}, 0x1c) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x14, 0x3, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4008854}, 0x20000800) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1m17.604939575s ago: executing program 33 (id=583): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0x7, @local, 0x4}, 0x1c) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_newnexthop={0xfffffcb0, 0x68, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc802) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/icmp\x00') read$FUSE(r5, &(0x7f0000000680)={0x2020}, 0x2020) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @empty, 0x7}, 0x1c) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x14, 0x3, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4008854}, 0x20000800) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1m10.516210849s ago: executing program 2 (id=609): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000014c0), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001580)={0xffffffffffffffff, 0x58, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001680)={&(0x7f00000015c0)={0x9c, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3ff}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20008080}, 0x20004840) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d31ce0108dc556e597655ba11bacc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141fa4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb67c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff4da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033b65ccd4e990cb2ba86ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aebe4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) pwritev(r4, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001340)}], 0x5, 0x4, 0x5) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001700)='environ\x00') preadv(r5, &(0x7f0000001740)=[{&(0x7f0000001780)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) r6 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r6, &(0x7f0000001080)={&(0x7f00000010c0)=@in6={0xa, 0x4e24, 0x7fffffff, @loopback, 0x5}, 0x1c, &(0x7f0000001100)=[{&(0x7f0000001140)='Z', 0x1}], 0x1, &(0x7f0000001180)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @sndrcv={0x30, 0x84, 0x1, {0x200, 0x800, 0x2, 0x6, 0x7e15, 0x2a2b, 0xfff, 0x8dc3}}], 0x48}, 0x24000052) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001380), 0x1c0002, 0x0) pwritev2(r7, &(0x7f00000013c0)=[{&(0x7f0000001400)='trylock ', 0x8}], 0x1, 0x8, 0x8, 0x1) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0xb8, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFCTH_TUPLE={0x54, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3f}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x50, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000001040)="99d3c9f30f09b993080000b800000000ba000000800f30660f38dfb1e4000000f4cfc4e1fe12230f01c3b9800000c00f3235010000000f30", 0x38}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x2, 0x0, 0x14, 0x0, 0x0, 0x40, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0xfc, 0xff, 0xff, 0x6, '\x00', 0x0, 0x1}) r9 = accept$alg(r6, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r9, 0x4018f50b, &(0x7f0000001440)={0x1, 0x7, 0x360000000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1m9.695721125s ago: executing program 2 (id=612): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x1000f) socket$kcm(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000002c00), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002cc0)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x20040810}, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000002d00)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x400000000000004) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x4001af84, &(0x7f0000002dc0)) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) close(r4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000002e40)={&(0x7f0000002e80)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000002ec0)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) clock_gettime(0x6, &(0x7f0000002f00)) recvmmsg(r1, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000003040)=""/163, 0xa3}, {&(0x7f0000003100)=""/106, 0x6a}, {&(0x7f00000020c0)=""/111, 0x6f}, {&(0x7f0000003200)=""/193, 0xc1}, {&(0x7f0000002000)=""/130, 0x82}, {&(0x7f00000021c0)=""/18, 0x12}, {&(0x7f00000033c0)=""/175, 0xaf}], 0x7}, 0x10000}, {{&(0x7f0000002140)=@hci, 0x80, &(0x7f0000003500)=[{0xffffffffffffffff}, {&(0x7f0000003540)=""/93, 0x5d}, {0x0}], 0x3, &(0x7f00000035c0)=""/226, 0xe2}, 0xb6}], 0x2, 0x42, &(0x7f00000036c0)) r5 = syz_open_dev$loop(&(0x7f0000003700), 0x4, 0x80000) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000003740)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000037c0)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000003800), 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000003880)}, 0x4048004) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200000000100905"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1m7.926631467s ago: executing program 2 (id=618): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000006, 0x42031, 0xffffffffffffffff, 0x180000000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) capset(&(0x7f0000000400)={0x20080522}, &(0x7f00000004c0)={0x0, 0x0, 0x1, 0x46a, 0xffdfffff, 0x5}) setns(r2, 0x4000000) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000580)={0x9}) r5 = epoll_create(0x10003) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000640)={{0x1, 0x1, 0x18, r4, {0x3}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000600)={0x2008}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r7 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r7, 0x541b, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x44, r0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x74}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) accept(r8, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd8, r0, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa3, 0x1c}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x41}, @NL80211_ATTR_SCAN_SSIDS={0x74, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xf, 0x0, @random="d3ffbec70b3a04087e983b"}, {0xa, 0x0, @random="ff352b410bca"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x9}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x40800) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000810}, 0x4008000) syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) 1m7.286455275s ago: executing program 2 (id=621): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40042, 0x13) r3 = socket(0x10, 0x3, 0x0) r4 = epoll_create1(0x0) dup3(r2, r3, 0x0) r5 = epoll_create1(0x0) r6 = dup3(r3, r5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000180)={0x200f}) move_mount(r6, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x232) 1m6.210083808s ago: executing program 2 (id=625): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000100)={0x0, @bt={0xa02, 0x86c, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x5, {"4772ffacff64a2b7d7e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0xcf4, 0x4}) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r3, 0x6f2d, 0x9) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000000)={0x6, {"ae0440edf8ffffffffffee00", "0009000000000000000000008000"}, 0x7, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$ublk_chdev(&(0x7f00000001c0), 0x0, 0x2000) r5 = syz_ublk_setup_io_uring(0xb, &(0x7f0000000200)={0x0, 0x30b5, 0x0, 0x2, 0x79}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000400)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000440)={0x0, 0x20fb87, 0x800, 0x3, 0x32c, 0x0, r5}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x1, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000740)={0x2e, 0x54, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x0, 0x3627, 0x80000, 0x2, 0x312}, &(0x7f00000008c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcea3, 0x200, 0x1, 0x24}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xada6, 0x1000, 0x2, 0xf7}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd603, 0x2000, 0x3, 0x5b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1d65, 0x400, 0x3, 0x189}}], 0x4, &(0x7f0000001b40)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0x2, 0x11c, 0x0, &(0x7f0000000b40)=@buf_1k="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"}}, &(0x7f0000001bc0)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000002100)={0x0, 0xbb59, 0x40, 0x0, 0x1ad}, &(0x7f0000002180)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcec, 0x80, 0x1, 0x238}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7bde, 0x4000, 0x2, 0xf2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1aee, 0x0, 0x3, 0x39d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x26f2, 0x1, 0x0, 0xe2}}], 0x4, &(0x7f0000003400)={0x2e, 0x1d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xf}, 0x0, 0x0, '\x00', {0x0, 0x599, 0x0, &(0x7f0000002400)=@buf_512="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"}}, &(0x7f0000003480)) r14 = syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, &(0x7f00000034c0)=0x0) r16 = io_uring_register$IORING_REGISTER_PERSONALITY(r14, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, r15, &(0x7f0000003500)=@IORING_OP_FALLOCATE={0x11, 0x44, 0x0, @fd, 0x5, 0x0, 0x4db, 0x0, 0x0, {0x0, r16}}) syz_ublk_setup_queues(r4, r9, &(0x7f00000007c0)={0x0, 0xaced, 0x80, 0x3, 0x312}, &(0x7f0000001e80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x55ce, 0x8, 0x0, 0x47, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x12c7, 0x10000, 0x0, 0x215}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb14c, 0x84100, 0x0, 0x8d, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x311a, 0x80, 0x2, 0x196}}], 0x4, &(0x7f0000004580)={0x2e, 0x24, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x5}, 0x0, r16, '\x00', {0x2, 0xba8, 0x0, &(0x7f0000003580)=@buf_512="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"}}, &(0x7f0000004600)) 1m5.956232507s ago: executing program 2 (id=626): r0 = socket(0x400000000010, 0x3, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000280)=0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203050009"], 0xfdef) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=@deltclass={0x44, 0x29, 0x2, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x8, 0xc}, {0xfff2, 0xa}, {0x4, 0x7}}, [@TCA_RATE={0x6, 0x5, {0xf8, 0x9}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0xfc, 0x9}}, @TCA_RATE={0x6, 0x5, {0x81, 0x40}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003880)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0xfff3}, {}, {0x10, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x1000, 0x0, 0x5}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c810) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = syz_usb_connect$uac1(0x6, 0xa0, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x582, 0x3b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x8, 0x100, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x19}, [@selector_unit={0x5, 0x24, 0x5, 0x4, 0x5}, @mixer_unit={0xa, 0x24, 0x4, 0x6, 0x0, "d308ab8bd9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x1, 0x5, 0x9d}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x6, 0x6, 0x33, {0x7, 0x25, 0x1, 0xc, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7, 0x2, 0x3, "fbc65188d6"}, @as_header={0x7, 0x24, 0x1, 0x2e, 0x9, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0xd, 0x1, {0x7, 0x25, 0x1, 0x4, 0x2, 0x3}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x10, 0x7f, 0x7d, 0xff, 0x24}, 0xca, &(0x7f0000000380)={0x5, 0xf, 0xca, 0x1, [@generic={0xc5, 0x10, 0xa, "7d01a3a41947ecbdf6918d757879601e18a9652139db83a50a5e7e585d59aaef66e14a0d0f5bd5cebc65242c7a6cf397c6ff3d45a6ce3a49c4a15befe070711a1c415e5193f809032b8a44f7016e2c87930b70d0bc96dbf10dc8f7f456f66f105f8b5c4c3f0aa9a686a984733b505f36262577f74502a309ccd1f5e3b4b5d2689d409df070fbb64d66b9e4e1709448a9282b143b409243cd667c89e82a6c52bf496f61e71764f4622becdf6b548872dce0291c66bc2fc0ef1a0b28a506943c5a185e"}]}, 0x7, [{0x42, &(0x7f0000000480)=@string={0x42, 0x3, "f2a53692ca2260ce3fc82658cc3b61c6b16e5f3ee57550abb4743592adb92deb533a958f7b1b0dfe33f2d4aef435e7d7e79d9f5c277962f4d62cb7cd7205fb6a"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x406}}, {0x64, &(0x7f0000000600)=@string={0x64, 0x3, "a6eca3203403bb28deb9324e218886571171e53f7979fa517f91a7f2accf32a64b37b1dc243c1c5c38de99cdfc180a598ca3c5b57326489221baff6ef7f2c8ccd9a281bb23740b7dfe206e6570babd541a929db8de165e23de9a417d000ff3927701"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x2427}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x814}}]}) r9 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r9, &(0x7f0000000800)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000002900000043000000060004"], 0x18}}], 0x1, 0x40000080) syz_usb_control_io$uac1(r8, &(0x7f0000000940)={0x14, &(0x7f0000000800)={0x0, 0xa, 0xe4, {0xe4, 0x21, "e9de1d95be52ec179d92fe6f6e8e740bb5c1c3ff3a19eed28656db3f93f9f19c392c28023d06cf91ada219ec8c4993429844059d2352563c86000855120384a7ca0ab8be1c66e5bf301dd1ac3b60a0e9cec1743c5d37643e2e7b89a7e180cad73cd37e5c1b4763a545ac8d5ef71a7dbef6df16cf980957779fe7a78f483a7bef781f6f47a7c69be8a470bbd7077854fda05bde10ff500579210c2d81bfec7f11ea199d03c547690ca21f8be00a5b42609256c215ef4e6864e2e81a01d24e1c7e0ea888656567dee644e726036e7574f14f30a69235d3f67e03f1025d5977152beaba"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40d}}}, &(0x7f0000000bc0)={0x44, &(0x7f0000000980)={0x60, 0xe, 0x65, "1fb0dcaa0684352ca3ada76e4237a7b263f33f505ba67de9bf3fd7e702605786f3696de1ada26a8ea260ae667ff7a55028b28b533850a8439a0bebc501049c3a5fdd353d7b976745b2257c4f2660214d644b593969f7a392b69174a552645af58d8c3c0856"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x4}, 0x0, &(0x7f0000000a80)={0x20, 0x81, 0x1, "d9"}, &(0x7f0000000ac0)={0x20, 0x82, 0x1, "aa"}, &(0x7f0000000b00)={0x20, 0x83, 0x3, "5ad1fc"}, &(0x7f0000000c40)=ANY=[@ANYBLOB="8945b3612be220b064ab093b08489ac36619eb80f25038ccab89be26d30bce8c3a35d50a445cc8dad786eeed"], &(0x7f0000000b80)={0x20, 0x85, 0x3, "fcb002"}}) syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x2, 0x0, 0x8, "008c"}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x2, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) syz_usb_ep_write(r7, 0x81, 0x59, &(0x7f0000000100)="b687fbe916") sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5c}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000340)="b4", 0x1}], 0x1}}], 0x1, 0x1) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m5.123533403s ago: executing program 34 (id=626): r0 = socket(0x400000000010, 0x3, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000280)=0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203050009"], 0xfdef) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=@deltclass={0x44, 0x29, 0x2, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x8, 0xc}, {0xfff2, 0xa}, {0x4, 0x7}}, [@TCA_RATE={0x6, 0x5, {0xf8, 0x9}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0xfc, 0x9}}, @TCA_RATE={0x6, 0x5, {0x81, 0x40}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003880)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0xfff3}, {}, {0x10, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x1000, 0x0, 0x5}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c810) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = syz_usb_connect$uac1(0x6, 0xa0, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x582, 0x3b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x8, 0x100, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x19}, [@selector_unit={0x5, 0x24, 0x5, 0x4, 0x5}, @mixer_unit={0xa, 0x24, 0x4, 0x6, 0x0, "d308ab8bd9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x1, 0x5, 0x9d}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x6, 0x6, 0x33, {0x7, 0x25, 0x1, 0xc, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7, 0x2, 0x3, "fbc65188d6"}, @as_header={0x7, 0x24, 0x1, 0x2e, 0x9, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0xd, 0x1, {0x7, 0x25, 0x1, 0x4, 0x2, 0x3}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x10, 0x7f, 0x7d, 0xff, 0x24}, 0xca, &(0x7f0000000380)={0x5, 0xf, 0xca, 0x1, [@generic={0xc5, 0x10, 0xa, "7d01a3a41947ecbdf6918d757879601e18a9652139db83a50a5e7e585d59aaef66e14a0d0f5bd5cebc65242c7a6cf397c6ff3d45a6ce3a49c4a15befe070711a1c415e5193f809032b8a44f7016e2c87930b70d0bc96dbf10dc8f7f456f66f105f8b5c4c3f0aa9a686a984733b505f36262577f74502a309ccd1f5e3b4b5d2689d409df070fbb64d66b9e4e1709448a9282b143b409243cd667c89e82a6c52bf496f61e71764f4622becdf6b548872dce0291c66bc2fc0ef1a0b28a506943c5a185e"}]}, 0x7, [{0x42, &(0x7f0000000480)=@string={0x42, 0x3, "f2a53692ca2260ce3fc82658cc3b61c6b16e5f3ee57550abb4743592adb92deb533a958f7b1b0dfe33f2d4aef435e7d7e79d9f5c277962f4d62cb7cd7205fb6a"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x406}}, {0x64, &(0x7f0000000600)=@string={0x64, 0x3, "a6eca3203403bb28deb9324e218886571171e53f7979fa517f91a7f2accf32a64b37b1dc243c1c5c38de99cdfc180a598ca3c5b57326489221baff6ef7f2c8ccd9a281bb23740b7dfe206e6570babd541a929db8de165e23de9a417d000ff3927701"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x2427}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x814}}]}) r9 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r9, &(0x7f0000000800)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000002900000043000000060004"], 0x18}}], 0x1, 0x40000080) syz_usb_control_io$uac1(r8, &(0x7f0000000940)={0x14, &(0x7f0000000800)={0x0, 0xa, 0xe4, {0xe4, 0x21, "e9de1d95be52ec179d92fe6f6e8e740bb5c1c3ff3a19eed28656db3f93f9f19c392c28023d06cf91ada219ec8c4993429844059d2352563c86000855120384a7ca0ab8be1c66e5bf301dd1ac3b60a0e9cec1743c5d37643e2e7b89a7e180cad73cd37e5c1b4763a545ac8d5ef71a7dbef6df16cf980957779fe7a78f483a7bef781f6f47a7c69be8a470bbd7077854fda05bde10ff500579210c2d81bfec7f11ea199d03c547690ca21f8be00a5b42609256c215ef4e6864e2e81a01d24e1c7e0ea888656567dee644e726036e7574f14f30a69235d3f67e03f1025d5977152beaba"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40d}}}, &(0x7f0000000bc0)={0x44, &(0x7f0000000980)={0x60, 0xe, 0x65, "1fb0dcaa0684352ca3ada76e4237a7b263f33f505ba67de9bf3fd7e702605786f3696de1ada26a8ea260ae667ff7a55028b28b533850a8439a0bebc501049c3a5fdd353d7b976745b2257c4f2660214d644b593969f7a392b69174a552645af58d8c3c0856"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x4}, 0x0, &(0x7f0000000a80)={0x20, 0x81, 0x1, "d9"}, &(0x7f0000000ac0)={0x20, 0x82, 0x1, "aa"}, &(0x7f0000000b00)={0x20, 0x83, 0x3, "5ad1fc"}, &(0x7f0000000c40)=ANY=[@ANYBLOB="8945b3612be220b064ab093b08489ac36619eb80f25038ccab89be26d30bce8c3a35d50a445cc8dad786eeed"], &(0x7f0000000b80)={0x20, 0x85, 0x3, "fcb002"}}) syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x2, 0x0, 0x8, "008c"}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x2, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) syz_usb_ep_write(r7, 0x81, 0x59, &(0x7f0000000100)="b687fbe916") sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5c}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000340)="b4", 0x1}], 0x1}}], 0x1, 0x1) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.093686369s ago: executing program 6 (id=929): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x1fd, 0x0, &(0x7f0000ffd000/0x3000)=nil}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004540)={0x18, 0x26, 0x301, 0x70bd27, 0x25dfdbfd, {0x5}, [@typed={0x4, 0xe, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000140)={0x80, 0x0, 0x4}) 6.883091473s ago: executing program 6 (id=931): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x88, 0x23) ptrace$pokeuser(0x6, r1, 0x80, 0x20000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x110, 0x10, 0x1, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x6922c, 0xc000}, [@IFLA_PORT_SELF={0xe8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xe1, 0x2, '\x00-\xd6$u\xa3\xb9n^\xbc;\xfa\x84\xbf\xcd\xa5\x9e\x98\"\x87\x1f\x97%\x96\x89\x05\x9c\x14\xea\x13r\b\xcd\x8d@\xb5n`\x88Xo\xfb\xd1\x11\\\xc1\xdd&\xd0\xfeK\xeb\xe2\xc4Od\x03\x8eWa\x0e\xd3H\a\x02\x95\x86#|Rf\x104[\xab\x98\xb7\xda\xe47\x93\xa0\xf3\xc3\x8dG.\xb5\xee\xb4\xbd\xf3\x02\xe9\xadP>\xbcn\xc8\xaf\xd2A\x91=\xf0\xfa\x88\x91\xdc\x122\x069%\x91\x17\xd4\x8dv\xea\xdc%\v\x95\xad\xe5\xcb!1\xcf\x93Y\xa2\xb5Pc\'\xfeZk\x14f\x8au\f\xefwR\xcb\xc5\xe7\xb7,f\xb4\xfe\xd2J\x18(|\xb8\x11\xbb]\xb1\xd8\xc0-jg\xfb\x85\xdbF\xa1\r\xed\x92\x94\x0ez\x94\xda\x9b\xb7\x1c3a\xce\xf9\x1a\x89\x15XN-\xd0\x98\x02\x9f4\xa0\x17E\x12\x8bS\xe4\\\xa2q\x13l\aya0\x1c\xec'}]}, @IFLA_GROUP={0x8, 0x1b, 0xffff}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x48080) ptrace$pokeuser(0x6, r1, 0xc0, 0x2b) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000100)=ANY=[@ANYBLOB="020a"], 0x60) 6.57383934s ago: executing program 6 (id=932): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xd01041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000200), 0x8, 0x10, &(0x7f0000000240), 0x10}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect$lan78xx(0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x14, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x4, 0x4, 0x4f8, 0xffffffff, 0x1e0, 0x0, 0x358, 0xfeffffff, 0xffffffff, 0x4e0, 0x4e0, 0x4e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0x1a0, 0x1e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x3d11b30a, 0x8, 0x2, 0x1, 'syz0\x00', 0x4}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r3 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0x8) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r3, 0x2000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x101, 0x1, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/power/hibernate_compression_threads', 0x60a02, 0x0) sendfile(r7, r7, 0x0, 0x3) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000b00)=[@text64={0x40, &(0x7f0000000b40)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000bc0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x1, 0x4000002}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000c40)={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0xfd}, 0x80a9}, 0x1c) gettid() 5.670062471s ago: executing program 3 (id=935): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x1000a4, 0x7a, 0x0, {r0}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) r1 = syz_open_dev$admmidi(&(0x7f0000000500), 0x20, 0x0) readv(r1, &(0x7f0000000540)=[{&(0x7f0000000580)=""/9, 0x9}], 0x1) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21}, &(0x7f0000000600)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000640)={0x0, 0x0, 0x10001, 0x4}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000680)={{}, {0x0, 0x989680}}, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6) timer_settime(0x0, 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0xfeff, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @loopback}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0x0) r3 = syz_ublk_setup_io_uring(0xf, &(0x7f0000000780)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x20fb87, 0x80000, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x27ffffe, 0x200, 0x1006, 0x15a, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x4000, 0x10000003, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) r11 = getpid() getpgrp(r11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 5.114125018s ago: executing program 6 (id=938): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x2c7, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000007feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a00000085000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee23404aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459664124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000500), 0x8, 0x10, &(0x7f0000000540), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) write$char_usb(r0, &(0x7f0000000000)="6453ace7b06fe9e69535a76324b29ece27", 0x11) socket$inet(0x2, 0x5, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0xc0802, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = syz_io_uring_setup(0x34b9, &(0x7f0000000640)={0x0, 0xa0b3, 0x1000, 0x0, 0x50}, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000780)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) socket$alg(0x26, 0x5, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000800)={[0xfffffffffffffffe]}, 0x8, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000840)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x24004045) r7 = io_uring_setup(0x7f9, &(0x7f0000000900)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000a40)=0x6, 0x4) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000a80)=@assoc_value, &(0x7f0000000ac0)=0x8) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) signalfd4(r6, &(0x7f0000000b00)={[0x5]}, 0x8, 0x800) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000580), &(0x7f00000005c0)=0x30) 4.68331215s ago: executing program 3 (id=940): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa3, 0x6, 0x4, 0x7, 0x0, 0x9, 0x4}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x5c}}, 0x4000010) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x489, 0x0, 0x100000005}]}) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r7, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r8, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0xe23, 0x3, @mcast1, 0x20002}, 0x1c) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r10 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r10, &(0x7f0000000480), 0x2e9, 0x0) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010029bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="159804000300000008000d000100000008001b00"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) socket(0x46, 0xa, 0x2feb) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000043b000/0x1000)=nil, 0xfffffffffffffdb5, &(0x7f0000000080)='\x00\xc9\xf5\x00\x00\x00\x00\x00\x00\x00+\x1ct\xc6\fr\xbaU\xc1\xb2\xd2\xde\xbfk\xc0\x18\x94\xc5&\xec\x03\xa0w\"E\xc9\xf2,K4\x10\xc8\x8cuj\xd3\xf0\xb3\xa9f\xf7\xb7\x17\xdf\xca\xac\x8b\x81K\t\x14^\xc3\xb7<\xa1\x15\v4\xd0\xbe\xa8\x01\x00<:-Y\n<\x1d\xb2\xe0kU\xc0\xc1\x14') io_submit(0x0, 0xfffffffffffffead, 0x0) io_setup(0xc, &(0x7f0000000040)) 4.03045131s ago: executing program 3 (id=942): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000440)=0x1, 0x4) setsockopt(r0, 0x7, 0x5, &(0x7f0000000480)="0100ddff", 0x4) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0xfffc, 0x1, @empty, 0x200}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='net/tcp6\x00') preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000580)=""/225, 0xe1}], 0x1, 0x7be, 0xc9) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r4 = open_tree(r3, &(0x7f0000000180)='./cgroup\x00', 0x89801) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0xa0}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x70bd26, 0x0, 0xa, 0x0, 0x2}}}, 0xf8}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x0, 0x32}, @in6=@private2, {0x0, 0x0, 0x0, 0x5, 0x0, 0x100000}, {0x0, 0x2}, {0x0, 0xff}, 0x0, 0x0, 0x2, 0x0, 0x7c}}}, 0xf8}, 0x1, 0x0, 0x0, 0x1000}, 0x4000000) r6 = syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./cgroup\x00', 0x4002, &(0x7f0000000240)=ANY=[], 0x1, 0x0, &(0x7f0000000280)="bdb5e2784e695231eeb54bcc1159ced0582cfeaa9ac390ee3cf11a0c71c9d339d2") r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000000)={0xa, 0xfffe, 0x3, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000380)='batadv0\x00', 0x10) sendto$inet6(r7, &(0x7f00000003c0)="846bb66f", 0x4, 0x4044, 0x0, 0x0) r8 = open_tree(r6, &(0x7f00000002c0)='./cgroup\x00', 0x0) eventfd2(0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000040000000500000000000400", @ANYRES32=0x0, @ANYBLOB="000000000008e757fefaff219c880e0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sysvipc/sem\x00', 0x0, 0x0) r9 = syz_io_uring_setup(0xf00, &(0x7f00000006c0)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000740)=0x0, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000800)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r9, 0x2000, 0xfffffffd, 0x9, 0x0, 0x20) move_mount(r4, 0x0, r8, 0x0, 0x46) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xae8}}, './file0\x00'}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r13, 0x4068aea3, &(0x7f00000000c0)={0xa3, 0x0, &(0x7f0000000080)}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, 0x0, &(0x7f0000000040)) 4.003854429s ago: executing program 7 (id=943): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xae, &(0x7f0000000180)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x78, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0xe, '\x00', {0xe, 0x6, "ea785a", 0x7fff, 0x2f, 0xff, @empty, @mcast2, [@srh={0x33, 0x8, 0x4, 0x4, 0x81, 0x0, 0xe, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1]}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 3.885829047s ago: executing program 7 (id=944): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, r1, 0x51dba000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) brk(0x200000ffa000) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x30001, 0x1478c1) 3.883941995s ago: executing program 3 (id=945): memfd_create(&(0x7f00000013c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+\xa0\x1c\x14\x01\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10\x95y\x8e\xa6\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES64=r0], 0x48}, 0x1, 0x0, 0x100000000000000, 0x4}, 0x8001) 3.816270793s ago: executing program 3 (id=946): r0 = syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x18d1, 0x2d04, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x0, 0x40, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x3, 0x3, 0x91, {0x7, 0x25, 0x1, 0xc, 0x9, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8, 0x3, 0x2, {0x7, 0x25, 0x1, 0x0, 0x8, 0x7}}}}}}}}]}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x80000001, 0x1000, 0xa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004044}, 0x20040084) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=@getqdisc={0x2c, 0x26, 0xa20, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xfff2, 0xc}, {0x8, 0x6}, {0xffe0, 0xfff2}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r5) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r5) openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_clone(0x900080, &(0x7f0000000c40)="86ef44c6cd97165f9a983235d7e50cf82305e5684b413a819e1e17b0b61367e8683956226c483c1ac637dba817944bda05adc0cf1f25f008fb462837476209adb38fae359171f6d23021e20b95390ec5b74dea7bb18faf2dfb023aeeac9bd86fdcbdbbaa77cd8b41333d6e40514f1b2278ee3fa2505edacd4a78e046fec5c7048f4c382279550407168fe17610834ff9e1d3ca0a0d10c659babdcd6c9887f30e828a6d96ebf26af9d1e8b55b6db5f3168468c4ec75467fd38be6526cfa1447b511999864a1a6043ac8456d9b0071def160a842af06af8a9d9ae48a526d8ad0a36f6cdcde867c55fa13596d395a0da006c4a05a38880440ca05", 0xf9, &(0x7f0000000d40), &(0x7f0000000d80), &(0x7f0000000dc0)="f669d05d22ef88173237966338d9ffe24b4f957baac515759f48484c5b1444e4c5d22ca9c359a9eb78249d2350cb382ab5cc343ae1f3e0b5bf47d1c8cd289d8cd81290141825e5ff1a81012075a9d6e6fdb53ce5") rmdir(&(0x7f0000000580)='./file0\x00') r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000600)={0x73622a85, 0x0, 0x0, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000600)={0x73622a85, 0x0, 0x0, 0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs/binder0\x00', 0x0, 0x0) (async) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000006c0)={0x8, 0x0, &(0x7f0000000740)=[@increfs], 0x0, 0x0, 0x0}) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000780)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r12, 0x0) (async) r13 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r12, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f00000007c0)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000840)={0x8, 0x0, &(0x7f0000000880)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000980)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000a00)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000a40)={0x6e, 0x0, &(0x7f00000003c0)=[@free_buffer={0x40086303, r13}, @release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0f0000007000fedbdf250d000000080031000900000008023c0037db000028c706d650f77b9d42e9c5fd9dab4ab50392191a1b5d4a065a427684ba4dfc09bab85808691fbfbdb80bf0bba74f2ee84b9205e0d4a94bbadd3c563c0c8c2d01c009edec4a1e15e46b825a305a2cfcdd879d76fdf0a61fdbb25cd8fb"], 0x24}}, 0x840) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0f0000007000fedbdf250d000000080031000900000008023c0037db000028c706d650f77b9d42e9c5fd9dab4ab50392191a1b5d4a065a427684ba4dfc09bab85808691fbfbdb80bf0bba74f2ee84b9205e0d4a94bbadd3c563c0c8c2d01c009edec4a1e15e46b825a305a2cfcdd879d76fdf0a61fdbb25cd8fb"], 0x24}}, 0x840) syz_usb_control_io$uac1(r0, 0x0, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xc0f}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xc0f}]}, 0x2c}}, 0x0) 3.214728696s ago: executing program 0 (id=947): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg(r1, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000880)="1eac413a9dcd35f1c1ccf362784a7f1d20a00a1830efde115fb84ee4beb941fee92201c72e0f01be1ab935dfe9427c002bb4e3e5b7e6bd87ed40716adc60335fb4068b50eec944795a29bb8bfdecd08cee2c395f9790cdb3f92ee26361c06191f71d32143a4ea799ba4a8c3fe64727fc7db74af6e9dbfabad98ced7a4d65819d73925a7a72f61fe245453473c2ea66582ebe553d9828035f52", 0x99}, {&(0x7f0000000940)="7946bf5f2b17197add81629b5db3b958c9b51123b3029f69bfc61bec6d03ec78a938b4dad80003bf99df34b68b7356180c0e461dadb64888dd42ac2a4eb1be7f75a2e65b3ea1d6c9e83f39de404bdf426543215785d0fd1ecff99fc1", 0x5c}], 0x2}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="a4c197896c6a268956c1c1aa8a672480c689b14c44e0c042e05df79ef0845108f3a41762142fdedea873bc496e23ebd4d32de8a6a3fccd2663a0f92fd746d0ad7959c53767d0aa297735b90acb8c531e27fe2ffb3ee629a2dd1bbd5a3989f7fec08843b62435112d26c9eca1b1099d8f7f4f8e86725d515ee0e61922cb55997dce68b8fcc198909ebff56692", 0x8c}], 0x1}}], 0x2, 0xc881) recvmsg(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b40)=""/243, 0x11000}], 0x1}, 0x142) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) r3 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x181) ioctl$HDIO_GETGEO(r3, 0x301, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e23, 0xa0cb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) syz_open_dev$loop(0x0, 0x75f, 0xa382) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000440)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000480)) syz_open_dev$dri(&(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/test\x00', 0x777) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r5, &(0x7f0000000580)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x123002, 0x58) write(r6, &(0x7f0000000600)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r7, &(0x7f0000000680)='0', 0x1) modify_ldt$write(0x1, &(0x7f00000006c0)={0x806, 0xffffffffffffffff}, 0x10) syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109022400010509401909047b07022d51d5980905eb022000020205090504"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.34901647s ago: executing program 7 (id=949): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0xffffffffffffff23, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) r0 = syz_create_resource$futex(&(0x7f0000000180)=0x1) (async) clock_gettime(0x1, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_create_resource$futex(&(0x7f0000000240)=0x2) futex(r0, 0x0, 0x1, &(0x7f0000000200)={r1, r2+60000000}, r3, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.219312166s ago: executing program 4 (id=950): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000020802002c00128009000100626f6e64000000001c000280050001000500000005000c000200000008000b"], 0x4c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) clock_settime(0x5, 0x0) 2.0258235s ago: executing program 6 (id=951): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x22020600) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000280)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000340)={0x7, "b546eb0000001c531841b8b7055e000000000000000800"}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400), 0x14, 0x2200) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000440)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x28, 0x2f, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}, [@typed={0x11, 0x16, 0x0, 0x0, @str='&*(-^/[#\\.\xa5%\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x42014}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000740), 0x318, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000780), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0x80804120, &(0x7f00000007c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004884) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000940)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200000000a900", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000980)={0x2, &(0x7f00000009c0)=[{0x1, 0x2, 0x8, 0x2}, {0x3, 0xd, 0x9, 0x7}]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000a00)=0xa, 0x1959cc36) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x14, 0x3, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000880) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14000000170a0101000000000000000000000008926682a3da81618af59a0a247df3f5c4bcba174031301b15aaa43adaa2b65074dfa96453abcc88e345c79202bc77509da63b35ad6645991f289252dfcbb4115b0d5bcf740acf9db2bd8abd075b79c0c7b201e4e1df73b07424342575ca9331f1dfd7fafacd05454dda57b5aae2af0c69dd54704998ed49d921c4615441a740a43b17674f026b02c9890271947ba9"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000c40)={0x8, 0x80000100008b}, 0x0) 2.013926245s ago: executing program 0 (id=952): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_emit_ethernet(0x15e, &(0x7f0000000280)={@random="e33110495bfd", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @mcast1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b70200001a140000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000002b000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e6185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f659cb132b80300000066"], 0x0}, 0x94) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/rpc\x00') r4 = openat(r3, &(0x7f0000000640)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000680)='nfsd 127.0.0.1 2000000000 localhost\n', 0x24) (async) close(r4) r5 = openat(r3, &(0x7f00000006c0)='nfsd.fh/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000700)='localhost 1 \\x00000001 2000000000 /\n', 0x24) (async) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000740)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) (async) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) (async) r7 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000ac0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) (async) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="03000000000000000a004e2300000009ff010000000000000000000000000001"], 0x90) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000c40)={0x1, &(0x7f0000000c80)=[{0x6, 0x0, 0xfe, 0x7fff7ffc}]}) (async) capset(&(0x7f0000000cc0)={0x20071026}, &(0x7f0000000d00)={0x0, 0x7, 0x4, 0x0, 0x2, 0x1}) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r9, 0x8936, 0x0) (async) close_range(r8, 0xffffffffffffffff, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000d40)=[@text64={0x40, &(0x7f0000000d80)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000e00)=[@dstype3={0x7, 0x9}], 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000e40)='/dev/snd/controlC#\x00') ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000e80)={[0x3, 0xf0, 0x401, 0x3, 0x4000000000007, 0x4, 0x77b1, 0x80000001, 0x4, 0x200, 0xff, 0x6, 0x5, 0x100000000036, 0x3, 0xc], 0x0, 0x2a80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=@delnexthop={0x38, 0x69, 0x4, 0x70bd29, 0x25dfdbff, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8}, {0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) (async) socket$inet6(0x10, 0x3, 0x0) 1.754951018s ago: executing program 0 (id=953): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xc3}, 0x1, 0x100000000000000, 0x0, 0x20000040}, 0x14) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x2401, r0, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000002c0), 0x1, r0}, 0x38) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x4, 0x1, 0xfffffffe) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.706272213s ago: executing program 4 (id=954): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0xe000, 0x1000, &(0x7f0000040000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, 0x0}], 0x1, 0x7d, 0x0, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(r3) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r3, 0xf505, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000f88d00000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaacdaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r5], 0x68}, 0x1, 0x0, 0x0, 0x80080}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x44060}, 0x20000880) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)=@x86={0x1, 0x0, 0xff, 0x0, 0x10, 0xf, 0x5, 0x9, 0x6, 0x7f, 0x8, 0x2, 0x0, 0x10001, 0xe, 0x0, 0x3, 0x5, 0x4, '\x00', 0x1, 0xec3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.526241864s ago: executing program 0 (id=955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x38, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}]}, 0x38}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0/../file0/../file0\x00', 0x80801) rseq(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000480), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000004c0)={0xf0f018, 0x7fffffff}) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x42400, 0x0) socket(0x400000000010, 0x3, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) move_mount(r4, &(0x7f00000003c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) umount2(&(0x7f0000000440)='./file0\x00', 0x2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$DVB_DEMUX_DMX_QBUF(r3, 0xc0186f3f, &(0x7f00000002c0)={0x7, 0x7, 0x7, 0x4, 0x1a, 0x5}) 1.44737909s ago: executing program 7 (id=956): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x1, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0x8000, 0x1}, {}, {}, @result={0xbac, 0x28}}], 0x54) socket(0x10, 0x3, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$cont(0x15, r1, 0x6a, 0x200008) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0x4, 0x5}) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x2, 0x4f}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd=r3, 0x1, 0x0, 0x0, 0x16, 0x0, {0x2, 0x0, 0x4, '\x00', 0x0}}) io_uring_enter(r4, 0x2000, 0xb963, 0xa9, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) fsetxattr$security_capability(r2, &(0x7f00000000c0), &(0x7f0000000280)=@v2={0x2000000, [{0x10, 0x7}, {0x5, 0x2}]}, 0x14, 0x3) write$cgroup_int(r8, &(0x7f0000000040)=0x920, 0x12) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r9 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r9, 0x110, 0x2, &(0x7f0000000100), 0x5) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/43, 0x2b}], 0x1, 0x42, 0x116d) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xffffffffffffffff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 1.398328766s ago: executing program 4 (id=957): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x8c0002) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x9a400, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d14, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) syz_open_dev$usbfs(0x0, 0x9, 0x24080) io_uring_setup(0x6858, &(0x7f0000000100)={0x0, 0x40f0ce, 0x3480, 0x0, 0x22d}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r4) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x38, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000800}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000001}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40468}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x100, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa1c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4008044}, 0x8000) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r6) ptrace$getsig(0x4202, r6, 0xf7, 0x0) r7 = gettid() r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x0) read(r8, &(0x7f0000000540)=""/201, 0xc9) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000640)={0x335, @tick=0xe, 0x42, {}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r8, 0x404c534a, &(0x7f0000000680)={0x3e38, 0x0, 0x200}) tkill(r7, 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @fwd={0x2, 0x0, 0x0, 0x12}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x34, 0x0, 0xa}, 0x28) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000000)={0x8, 0x1}) 1.397984285s ago: executing program 0 (id=958): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000300)=0x8, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_out(r2, 0x2, &(0x7f0000000400)) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000340)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000500)=@int=0x2c, 0x4) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/19, 0x13}, 0x8}], 0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x5e21, @local}, 0x10) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0xb, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000280)={0x6, 0x1, 0x10, "839148ae34f8a738fcea570009000000052b21e1bf1a32dcc9000000004000", 0x35315258}) r4 = socket$inet(0x2, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r6, 0xae44, 0x7) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) r7 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r7, 0x1, 0x4b, 0x0, &(0x7f0000000140)) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x5e21, @empty}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c000000000805010000000000000000020000000900010073797a3000010000060002400600000005000300060000000c000480f0ff00401e000000"], 0x3c}}, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000580), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$I2C_SMBUS(r9, 0x720, 0x0) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004850}, 0x8020) 1.24391284s ago: executing program 0 (id=959): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x3, @tick=0x8, 0x7, {0x80, 0x1}, 0x0, 0x2, 0xf9}) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0xea, 0xf6, 0xd1, 0x8, 0x483, 0x1234, 0x761a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x8, 0x80, 0x40, "", [{{0x9, 0x4, 0xac, 0x5, 0x0, 0x62, 0x11, 0xe1, 0x9}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x0, 0x0}, {0xee, &(0x7f0000000340)=@string={0xee, 0x3, "2d7a8b13ead504f11fd8bee8fd77f65a480fbd223b644f74ddaaa3b24c1280f7b85de0ad4805572fd4c18db4dfc57d72ddcc711f2a1dea49d900dac079ca609a20e92d43cf6b37b284969ef75e9d1e90e578e845d3e138065661b1969f9b40e655e05252e18678261c00c5dacb5c30816b51166a01b33dbe7c6c6cf6b4821e6bcc5896cd3752054924ff48a604b86fa1e657d43520645979f565462aaabe68e2e35c03eedc3cae35ec44de6f5c7e5be6959510eb48c40be776148b7e8d5f005ea0d397e08f4b167d0c402ef5ac4664e26ced29d7df2321484cf79f83462e32800c9ed091f8c97faa28cf1cee"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41d}}, {0xeb, &(0x7f0000000540)=@string={0xeb, 0x3, "90363313d8fa9d05991d09fd41c472a3b04a1a50deebb7483f4709902c35d44d02a6b865a8eebf28b1c6de4a80ca76edff0fbd58fdee2c89295642bd1b0fd88bcefdb3ec2946ce62a1b1a9fcc4cf6ca723aa26c58ae4989b1464e577710b550010650e5f3d9e627666f1e0ec9d695c3c3411628f3c76ca9ee5b379847ad8edc1be7e000000008c35be6c066cfe96b881c2f0961d73d51999dc0effd5a65079df0306e4529664cd21a7e53919f4d18c35252a58e2103c7cf25a72cad85326e6ae78a451ac05fa3f1a479e8a406e676adb97e4e44ab10a3a76dca4e30e0ec208d53c0000000000465e82"}}, {0x50, &(0x7f00000002c0)=@string={0x50, 0x3, "aadccab4216ab898fcef961123406fdd9c813a0beb166859ebbe345d8e7bca2acc302c45ca30b3ba9f2d792e16619664b4af099d6b4ff7c771bcc51c609c4d53412ea131393f2a95b23a9e0f907b"}}]}) 1.160269384s ago: executing program 7 (id=960): openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x109842, 0x0) (async) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x109842, 0x0) epoll_create1(0x0) (async) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000040)=0x10000000) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000040)=0x10000000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0xa, 0x3, 0x87) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket(0x1e, 0x4, 0x0) epoll_create(0x800) (async) r5 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x10000005}) connect$can_bcm(r3, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500000008000000ed00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="03"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1d, r6}, 0x10, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES64=r3], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8001) (async) sendmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1d, r6}, 0x10, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES64=r3], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8001) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000020000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000020000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) dup2(r8, r7) (async) dup2(r8, r7) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000500)="1d427db80836d03a3c1eaf76037b97c4f6a8e72ef8fc69dcb6e35630606913e9e76a3a743f6004f6cc34348d8acb1e73ef4cdaaa23d04d8b5a5efa3e3e88328d70c06fb8b0f1b7e7983e6b5673a68be02d07c024ee1cd2641607a1b92a442f2dd3ffab63dd66bd9698ae0e1d335ec7e5370afb31dd97f8a7233e1a9f92a86eb6ebcc00ad7d6bb0f545f71d4c54ab02123754736ab26d22e1b54f96ad720654baeb7e91f6adfdf4a042af8cd1cc2f017be4759ee1cca3b935aa627cf797fcf66b3897ab47c1ac9fcd778c28c3550ebba6be9f", &(0x7f0000000600)="1e06ac4539251885af7862f381a8553ddbc35df0a8ebce74e78f985361ffd6ccc5da1b2dac013453d1e9033a1d07d34cea9acb2d3528e7af02462964e8114b0fe9daff4a32207714022569ac24cee0d153c90cb389a29c18095633359de9abb66dca4c5795ba22051f5dce7b2eb150dfb63eab63e96e52fb75f0ffd641798703685663ee42ae"}}, 0x0) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) (async) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) (async) ioctl$UFFDIO_REGISTER(r9, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2000200e}) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 1.04033116s ago: executing program 6 (id=961): r0 = openat$kvm(0xffffff9c, &(0x7f00000003c0), 0xa00, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="120100010038d408f01002204ddc0102030109022d00f4da06800809045f40030a0000400905ff0f010202040c09050a0c400001c60d"], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key(&(0x7f0000000380)='asymmetric\x00', 0x0, &(0x7f0000000400)="3080", 0x2, 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x6, 0xc1, 0x4f, 0x42, 0x44, 0x80, 0x53, 0x5e, 0x44, 0x8, 0xfd, 0x24}, {0xb, 0xa6f3, 0x4, 0x3, 0x9, 0x60, 0x24, 0x3, 0xa, 0x7f, 0x7, 0x8, 0xfffffffffffffffb}, {0x2, 0x0, 0xd, 0x10, 0x25, 0x7, 0x8, 0xfb, 0x7, 0x15, 0x0, 0x3, 0x20000000000c}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x10679, 0x6, 0xf3b8, 0x11de, 0x51, 0x400, 0x4002004c4, 0x1000, 0xfffffffffffffffd, 0x97, 0x10, 0x0, 0x3, 0x4, 0x0, 0x5], 0x2000, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x14) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r10, 0x0) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r11, &(0x7f0000000180)={0x0, 0x40, &(0x7f00000001c0)=[{&(0x7f00000002c0)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0xfdf2}], 0x1}, 0x4040) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 633.897051ms ago: executing program 3 (id=962): syz_usb_connect$uac2(0x5, 0x9f, &(0x7f0000000180)=ANY=[@ANYBLOB="120110030000004082254c0040000102030109028d00030105b009080b00010107208c0904000000010120000924010040041d000708240a0001ff2341612403020703000400070081"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) (async) r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x101301) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x409, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) (async) unshare(0x22020600) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) unshare(0x40000000) (async) unshare(0x2040400) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000480)=0x1ff) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="30000000030119800800010028000000100001800c000280050001"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r4) (async) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0x8000) (async) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000008732b0a0040000102030109024e00030109200c080b0001010130080904000000010130000a2401010a00001000000904010000010230000904010101010230000905"], 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x101002) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) geteuid() (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) unlinkat(0xffffffffffffff9c, 0x0, 0x200) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000001040500000010000000000040000000070500010002000000050001000100000006000640000400000800054000000005080003400000000900000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x2000c804}, 0x4000010) (async) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') 411.075164ms ago: executing program 4 (id=963): r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f00000000c0)={0x18, r2, 0x2, 0x0, &(0x7f0000000140)=[{0xfffffffffffffffe, 0xffffffffffffffff}, {0xa0000002, 0xfffffffff7fffffa}]}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000180)={0x28, 0x6, r2, 0x0, &(0x7f00000001c0)='L', 0x1, 0x56149216}) (async) r3 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') (async) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x2f) (async) connect$inet(r6, &(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f00000002c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000300)='bic', 0x3) (async) recvfrom$inet(r6, &(0x7f0000000340)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) execveat$binfmt(r0, r3, 0x0, 0x0, 0x1000) 375.469555ms ago: executing program 7 (id=964): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000480)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@local}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100004b41460860163209ea800102010109021e0001000000000904d7"], 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000003c0), 0x4) prctl$PR_SET_MM_MAP(0x23, 0xf, &(0x7f0000000500)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) getsockopt$inet6_tcp_int(r3, 0x6, 0xa, 0x0, &(0x7f0000000400)) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000040)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000140)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000180)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000001c0)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0xa, r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="23a1a5000800000071b933650300000001000000ed36511ca0f37b206850631a6167c20e6dcc47c905065293189eafd7c4c9d58e6ee356dd5e04ad4efaa94d21a6dd4a61652708b4ca2fc3d0d8741c2eb2be3ed46ba4345a5e41503595c2e5fcb1d255830e3257c025365f7dae7fce5575b95fc5d88b6309af7bd1b6d1406c27566e99a734d35f8ca6b1684ea480f7c8a77cc6b44919806e1f7cf98180191578358974e60074d8f20e7c70234ff45d17204531f3d6f201c3e782f1", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 242.567788ms ago: executing program 4 (id=965): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xc3}, 0x1, 0x100000000000000, 0x0, 0x20000040}, 0x14) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x2401, r0, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000002c0), 0x1, r0}, 0x38) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x4, 0x1, 0xfffffffe) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 4 (id=966): eventfd2(0x1, 0x80001) r0 = syz_create_resource$futex(&(0x7f0000000140)=0x1) socket$pptp(0x18, 0x1, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="230000006d0200000300160022bf000001"], 0x50) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000002c0), 0x2401, r1, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000400), 0x1, r1}, 0x38) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x85, 0x2, 0x0, r0, 0xfffffffe) socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ffbe"], 0x0) r3 = syz_open_dev$evdev(0x0, 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000000)={0x0, 0x1, 0x2b, 0x5, "2af15ef6983d2e9e4cea7f3567bf701fa00d6a39ad4b3eb72544d4c1ba33b030"}) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x62be, 0x80, 0x2, 0x344}, 0x0, &(0x7f0000000280), 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) dup(r5) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000380)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) kernel console output (not intermixed with test programs): mmy_hcd [ 200.036776][ T9] usb 1-1: device descriptor read/64, error -71 [ 200.205790][ T7902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.206051][ T7902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.225620][ T7912] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 200.225646][ T7912] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.241721][ T7912] vhci_hcd vhci_hcd.0: Device attached [ 200.261421][ T7912] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 200.261447][ T7912] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.261530][ T7912] vhci_hcd vhci_hcd.0: Device attached [ 200.288891][ T9] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 200.289302][ T7912] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8) [ 200.289323][ T7912] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 200.289371][ T7912] vhci_hcd vhci_hcd.0: Device attached [ 200.296253][ T7912] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(10) [ 200.296282][ T7912] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.347412][ T7912] vhci_hcd vhci_hcd.0: Device attached [ 200.353154][ T7919] vhci_hcd: connection closed [ 200.353542][ T5963] vhci_hcd vhci_hcd.4: stop threads [ 200.353566][ T5963] vhci_hcd vhci_hcd.4: release socket [ 200.353585][ T5963] vhci_hcd vhci_hcd.4: disconnect device [ 200.353659][ T7921] vhci_hcd: connection closed [ 200.353931][ T5963] vhci_hcd vhci_hcd.4: stop threads [ 200.353941][ T5963] vhci_hcd vhci_hcd.4: release socket [ 200.353950][ T5963] vhci_hcd vhci_hcd.4: disconnect device [ 200.364326][ T7917] vhci_hcd: connection closed [ 200.364409][ T7915] vhci_hcd: connection closed [ 200.386882][ T58] vhci_hcd vhci_hcd.4: stop threads [ 200.386907][ T58] vhci_hcd vhci_hcd.4: release socket [ 200.386957][ T58] vhci_hcd vhci_hcd.4: disconnect device [ 200.392999][ T58] vhci_hcd vhci_hcd.4: stop threads [ 200.393021][ T58] vhci_hcd vhci_hcd.4: release socket [ 200.393083][ T58] vhci_hcd vhci_hcd.4: disconnect device [ 200.407606][ T7514] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 200.447397][ T9] usb 1-1: device descriptor read/64, error -71 [ 200.458781][ T5683] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 200.556912][ T9] usb usb1-port1: attempt power cycle [ 200.560867][ T7514] usb 3-1: Using ep0 maxpacket: 16 [ 200.563011][ T7514] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 200.563969][ T7514] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.564001][ T7514] usb 3-1: config 0 interface 0 has no altsetting 0 [ 200.572640][ T7514] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.572667][ T7514] usb 3-1: Product: syz [ 200.572681][ T7514] usb 3-1: Manufacturer: syz [ 200.572695][ T7514] usb 3-1: SerialNumber: syz [ 200.577302][ T7514] usb 3-1: config 0 descriptor?? [ 200.730450][ T7928] usb usb9: usbfs: process 7928 (syz.3.511) did not claim interface 0 before use [ 200.791975][ T7514] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input25 [ 200.906461][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 200.929406][ T9] usb 1-1: device descriptor read/8, error -71 [ 200.966709][ T2250] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 201.056411][ T7514] rc_core: IR keymap rc-imon-pad not found [ 201.056430][ T7514] Registered IR keymap rc-empty [ 201.056527][ T7514] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 201.056545][ T7514] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 201.116372][ T2250] usb 4-1: Using ep0 maxpacket: 32 [ 201.123166][ T2250] usb 4-1: unable to get BOS descriptor or descriptor too short [ 201.123217][ T2250] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 201.124378][ T2250] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 201.124405][ T2250] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 201.124426][ T2250] usb 4-1: config 14 has no interface number 0 [ 201.124441][ T2250] usb 4-1: config 14 has no interface number 1 [ 201.124500][ T2250] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 201.124523][ T2250] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 201.124548][ T2250] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 201.124651][ T2250] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 201.124680][ T2250] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 201.124706][ T2250] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.124732][ T2250] usb 4-1: config 14 interface 57 has no altsetting 0 [ 201.124750][ T2250] usb 4-1: config 14 interface 228 has no altsetting 0 [ 201.149588][ T2250] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.149617][ T2250] usb 4-1: Product: syz [ 201.149633][ T2250] usb 4-1: Manufacturer: syz [ 201.149647][ T2250] usb 4-1: SerialNumber: syz [ 201.192442][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 201.229262][ T7514] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 201.252364][ T7514] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input26 [ 201.269888][ T9] usb 1-1: device descriptor read/8, error -71 [ 201.279877][ T7514] imon 3-1:0.0: iMON device (15c2:0041, intf0) on usb<3:37> initialized [ 201.377521][ T9] usb usb1-port1: unable to enumerate USB device [ 201.421053][ T7889] Bluetooth: hci0: command 0x0406 tx timeout [ 201.421092][ T7889] Bluetooth: hci1: command 0x0406 tx timeout [ 201.421112][ T7889] Bluetooth: hci3: command 0x0406 tx timeout [ 201.421130][ T7889] Bluetooth: hci2: command 0x0406 tx timeout [ 201.636611][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 201.639867][ T7514] usb 3-1: USB disconnect, device number 37 [ 202.420936][ T7955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.425740][ T7955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.667661][ T7955] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 202.783655][ T30] audit: type=1326 audit(1791638565.676:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.0.518" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb079e1d9 code=0x7ffc0000 [ 202.783882][ T30] audit: type=1326 audit(1791638565.676:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.0.518" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb079e1d9 code=0x7ffc0000 [ 202.874707][ T30] audit: type=1326 audit(1791638565.766:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.0.518" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f0fb079e1d9 code=0x7ffc0000 [ 202.874873][ T30] audit: type=1326 audit(1791638565.766:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.0.518" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb079e1d9 code=0x7ffc0000 [ 202.875028][ T30] audit: type=1326 audit(1791638565.766:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.0.518" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb079e1d9 code=0x7ffc0000 [ 202.875550][ T30] audit: type=1326 audit(1791638565.766:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.0.518" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fb079e1d9 code=0x7ffc0000 [ 203.022081][ T30] audit: type=1326 audit(1791638565.916:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.0.518" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb079e1d9 code=0x7ffc0000 [ 203.053698][ T30] audit: type=1326 audit(1791638565.916:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.0.518" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb079e1d9 code=0x7ffc0000 [ 203.328777][ T7968] netlink: 52 bytes leftover after parsing attributes in process `syz.1.520'. [ 203.335217][ T7955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.356419][ T7955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.384258][ T7955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.385198][ T7955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.541439][ T7974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.521'. [ 204.262434][ T7999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.280690][ T7999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.367460][ T9] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 204.531511][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 204.532264][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 204.532321][ T9] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.82 [ 204.547159][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 204.547196][ T9] usb 1-1: can't read configurations, error -61 [ 204.594943][ T8007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.595475][ T8007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.683158][ T9] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 204.836396][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 204.837068][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 204.837100][ T9] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.82 [ 204.842172][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 204.842204][ T9] usb 1-1: can't read configurations, error -61 [ 204.843708][ T9] usb usb1-port1: attempt power cycle [ 205.177044][ T9] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 205.212495][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 205.213761][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 205.213795][ T9] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.82 [ 205.248057][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 205.248083][ T9] usb 1-1: can't read configurations, error -61 [ 205.342013][ T30] audit: type=1326 audit(1791638568.236:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.1.530" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120b99e1d9 code=0x7ffc0000 [ 205.342076][ T30] audit: type=1326 audit(1791638568.236:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.1.530" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120b99e1d9 code=0x7ffc0000 [ 205.402341][ T9] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 205.420307][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 205.422534][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 205.422588][ T9] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.82 [ 205.452582][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 205.452613][ T9] usb 1-1: can't read configurations, error -61 [ 205.460497][ T9] usb usb1-port1: unable to enumerate USB device [ 205.643929][ T2250] legousbtower 4-1:14.57: interrupt endpoints not found [ 205.663494][ T2250] legousbtower 4-1:14.228: get version request failed: -71 [ 205.664085][ T2250] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 205.697416][ T2250] usb 4-1: USB disconnect, device number 28 [ 206.198207][ T8031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.887012][ T8039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.887997][ T8039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.269270][ T8042] raw_sendmsg: syz.0.536 forgot to set AF_INET. Fix it! [ 207.527275][ T8045] netlink: 24 bytes leftover after parsing attributes in process `syz.0.537'. [ 207.548752][ T8045] netlink: 16 bytes leftover after parsing attributes in process `syz.0.537'. [ 207.813264][ T2250] usb 2-1: USB disconnect, device number 19 [ 207.970586][ T8052] netlink: 24 bytes leftover after parsing attributes in process `syz.4.540'. [ 208.207940][ T8050] syz.3.538: vmalloc error: size 57344, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 208.211285][ T8050] CPU: 1 UID: 0 PID: 8050 Comm: syz.3.538 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.211314][ T8050] Tainted: [L]=SOFTLOCKUP [ 208.211322][ T8050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 208.211333][ T8050] Call Trace: [ 208.211339][ T8050] [ 208.211345][ T8050] dump_stack_lvl+0xe8/0x150 [ 208.211366][ T8050] warn_alloc+0x24d/0x270 [ 208.211382][ T8050] ? __pfx_warn_alloc+0x10/0x10 [ 208.211432][ T8050] ? alloc_pages_mpol+0x256/0x390 [ 208.211455][ T8050] __vmalloc_node_range_noprof+0x11a9/0x1540 [ 208.211482][ T8050] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 208.211493][ T8050] ? bpf_check+0xb4/0x2ef0 [ 208.211506][ T8050] ? rcu_is_watching+0x16/0xb0 [ 208.211520][ T8050] ? bpf_check+0xb4/0x2ef0 [ 208.211531][ T8050] ? rcu_is_watching+0x16/0xb0 [ 208.211546][ T8050] ? bpf_check+0xb4/0x2ef0 [ 208.211557][ T8050] __kvmalloc_node_noprof+0x5a1/0x820 [ 208.211571][ T8050] ? bpf_check+0xb4/0x2ef0 [ 208.211583][ T8050] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 208.211596][ T8050] ? bpf_check+0xb4/0x2ef0 [ 208.211611][ T8050] bpf_check+0xb4/0x2ef0 [ 208.211625][ T8050] ? lock_acquire+0x115/0x350 [ 208.211640][ T8050] ? ktime_get_with_offset+0x93/0x2d0 [ 208.211654][ T8050] ? ktime_get_with_offset+0x93/0x2d0 [ 208.211667][ T8050] ? __pfx_bpf_check+0x10/0x10 [ 208.211680][ T8050] ? __asan_memset+0x22/0x50 [ 208.211692][ T8050] ? bpf_obj_name_cpy+0x194/0x1e0 [ 208.211709][ T8050] bpf_prog_load+0x14d6/0x1c20 [ 208.211729][ T8050] ? __pfx_bpf_prog_load+0x10/0x10 [ 208.211754][ T8050] __sys_bpf+0xd0d/0xd90 [ 208.211771][ T8050] ? __pfx___sys_bpf+0x10/0x10 [ 208.211789][ T8050] ? do_futex+0x3e7/0x4e0 [ 208.211817][ T8050] ? rcu_is_watching+0x16/0xb0 [ 208.211834][ T8050] __x64_sys_bpf+0xba/0xd0 [ 208.211847][ T8050] do_syscall_64+0x166/0x520 [ 208.211860][ T8050] ? trace_irq_disable+0x3b/0x140 [ 208.211872][ T8050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.211883][ T8050] ? clear_bhb_loop+0x70/0xc0 [ 208.211897][ T8050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.211907][ T8050] RIP: 0033:0x7f3ab799e1d9 [ 208.211919][ T8050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.211929][ T8050] RSP: 002b:00007f3ab87bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 208.211941][ T8050] RAX: ffffffffffffffda RBX: 00007f3ab7c25fa0 RCX: 00007f3ab799e1d9 [ 208.211949][ T8050] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 208.211957][ T8050] RBP: 00007f3ab7a35888 R08: 0000000000000000 R09: 0000000000000000 [ 208.211964][ T8050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.211971][ T8050] R13: 00007f3ab7c26038 R14: 00007f3ab7c25fa0 R15: 00007f3ab7d4fa48 [ 208.211988][ T8050] [ 208.213411][ T8050] Mem-Info: [ 208.213451][ T8050] active_anon:27325 inactive_anon:4 isolated_anon:0 [ 208.213451][ T8050] active_file:50 inactive_file:60535 isolated_file:0 [ 208.213451][ T8050] unevictable:0 dirty:28 writeback:2 [ 208.213451][ T8050] slab_reclaimable:11326 slab_unreclaimable:97269 [ 208.213451][ T8050] mapped:31061 shmem:19894 pagetables:1496 [ 208.213451][ T8050] sec_pagetables:0 bounce:0 [ 208.213451][ T8050] kernel_misc_reclaimable:0 [ 208.213451][ T8050] free:1214703 free_pcp:24297 free_cma:0 [ 208.213539][ T8050] Node 0 active_anon:109300kB inactive_anon:16kB active_file:200kB inactive_file:241936kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124244kB dirty:112kB writeback:8kB shmem:79576kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:14236kB pagetables:5844kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 208.213594][ T8050] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 208.213627][ T8050] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 208.213668][ T8050] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 208.213695][ T8050] Node 0 DMA32 free:912104kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:109300kB inactive_anon:16kB active_file:200kB inactive_file:241936kB unevictable:0kB writepending:120kB zspages:0kB present:3129332kB managed:2527508kB mlocked:0kB bounce:0kB free_pcp:92024kB local_pcp:51952kB free_cma:0kB [ 208.213727][ T8050] lowmem_reserve[]: 0 0 0 0 0 [ 208.213746][ T8050] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 208.213778][ T8050] lowmem_reserve[]: 0 0 0 0 0 [ 208.213796][ T8050] Node 1 Normal free:3931348kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:5160kB local_pcp:4640kB free_cma:0kB [ 208.213826][ T8050] lowmem_reserve[]: 0 0 0 0 0 [ 208.213844][ T8050] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 208.213908][ T8050] Node 0 DMA32: 970*4kB (UME) 343*8kB (UME) 257*16kB (UME) 22*32kB (UE) 62*64kB (UE) 458*128kB (UME) 332*256kB (UME) 127*512kB (UME) 38*1024kB (UM) 7*2048kB (UM) 155*4096kB (M) = 912176kB [ 208.213991][ T8050] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 208.214046][ T8050] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 6*16kB (UM) 4*32kB (UM) 4*64kB (UM) 6*128kB (UM) 4*256kB (M) 2*512kB (UM) 0*1024kB 2*2048kB (U) 958*4096kB (M) = 3931400kB [ 208.214128][ T8050] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 208.214137][ T8050] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 208.214145][ T8050] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 208.214154][ T8050] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 208.214163][ T8050] 80477 total pagecache pages [ 208.214170][ T8050] 2 pages in swap cache [ 208.214175][ T8050] Free swap = 124976kB [ 208.214179][ T8050] Total swap = 124996kB [ 208.214183][ T8050] 2097051 pages RAM [ 208.214187][ T8050] 0 pages HighMem/MovableOnly [ 208.214192][ T8050] 433558 pages reserved [ 208.214196][ T8050] 0 pages cma reserved [ 208.388641][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.538'. [ 209.009564][ T8050] syz.3.538 (8050) used greatest stack depth: 15656 bytes left [ 209.357790][ T8056] netlink: 24 bytes leftover after parsing attributes in process `syz.3.541'. [ 209.787258][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 209.787277][ T30] audit: type=1326 audit(1791638572.676:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.2.542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3159e1d9 code=0x7ffc0000 [ 209.787402][ T30] audit: type=1326 audit(1791638572.686:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.2.542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9b3159e1d9 code=0x7ffc0000 [ 209.787533][ T30] audit: type=1326 audit(1791638572.686:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.2.542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3159e1d9 code=0x7ffc0000 [ 209.787690][ T30] audit: type=1326 audit(1791638572.686:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.2.542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3159e1d9 code=0x7ffc0000 [ 209.791152][ T30] audit: type=1326 audit(1791638572.686:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.2.542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9b3159e1d9 code=0x7ffc0000 [ 209.791521][ T30] audit: type=1326 audit(1791638572.686:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.2.542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3159e1d9 code=0x7ffc0000 [ 209.791564][ T30] audit: type=1326 audit(1791638572.686:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.2.542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3159e1d9 code=0x7ffc0000 [ 209.794778][ T30] audit: type=1326 audit(1791638572.686:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.2.542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9b3159e1d9 code=0x7ffc0000 [ 209.811079][ T8060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.542'. [ 209.831867][ T30] audit: type=1326 audit(1791638572.726:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.2.542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3159e1d9 code=0x7ffc0000 [ 209.831919][ T30] audit: type=1326 audit(1791638572.726:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.2.542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3159e1d9 code=0x7ffc0000 [ 209.959092][ T8060] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.244922][ T53] Bluetooth: min 0 < 6 [ 210.966384][ T5706] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 211.116383][ T5706] usb 4-1: Using ep0 maxpacket: 8 [ 211.117115][ T5706] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice= 0.40 [ 211.119249][ T5706] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 211.121819][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.121834][ T5706] usb 4-1: Product: syz [ 211.121842][ T5706] usb 4-1: Manufacturer: syz [ 211.121849][ T5706] usb 4-1: SerialNumber: syz [ 211.159748][ T5613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.163596][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.169517][ T5613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.170618][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.175047][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.337397][ T5706] usb 4-1: 1:1 : bogus bTerminalLink 1 [ 211.390932][ T8098] netlink: 36 bytes leftover after parsing attributes in process `syz.2.553'. [ 211.404982][ T8098] netlink: 24 bytes leftover after parsing attributes in process `syz.2.553'. [ 211.533801][ T5706] usb 4-1: unit 4 not found! [ 211.533826][ T5706] usb 4-1: unit 6 not found! [ 211.579484][ T8092] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.579542][ T8092] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.579635][ T8092] bridge_slave_0: entered allmulticast mode [ 211.582236][ T8092] bridge_slave_0: entered promiscuous mode [ 211.585770][ T8092] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.585865][ T8092] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.585974][ T8092] bridge_slave_1: entered allmulticast mode [ 211.593497][ T8092] bridge_slave_1: entered promiscuous mode [ 211.625531][ T5706] usb 4-1: USB disconnect, device number 29 [ 211.732412][ T8092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.748382][ T8092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.819861][ T8092] team0: Port device team_slave_0 added [ 211.829816][ T8092] team0: Port device team_slave_1 added [ 211.853416][ T8113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.853677][ T8113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.898104][ T8110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.555'. [ 211.919335][ T8092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.919352][ T8092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.919367][ T8092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.922787][ T8092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.922801][ T8092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.922825][ T8092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.032052][ T8092] hsr_slave_0: entered promiscuous mode [ 212.032673][ T8092] hsr_slave_1: entered promiscuous mode [ 212.033088][ T8092] debugfs: 'hsr0' already exists in 'hsr' [ 212.033107][ T8092] Cannot create hsr debugfs directory [ 212.298962][ T5613] Bluetooth: hci3: command 0x0406 tx timeout [ 212.338987][ T8092] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 212.344504][ T8092] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 212.345361][ T8092] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 212.367670][ T8092] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 212.377021][ T8092] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 212.392587][ T8092] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 212.393371][ T8092] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 212.396004][ T8092] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 212.434147][ T8092] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.434259][ T8092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.434413][ T8092] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.434474][ T8092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.465504][ T7728] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.466149][ T7728] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.534930][ T8092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.563835][ T8092] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.581518][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.581578][ T5963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.597555][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.597655][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.606798][ T5708] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 212.744286][ T8092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.756998][ T5708] usb 3-1: Using ep0 maxpacket: 32 [ 212.757688][ T5708] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 212.758671][ T5708] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.758700][ T5708] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.758737][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.766560][ T5708] usb 3-1: config 0 descriptor?? [ 212.896754][ T8092] veth0_vlan: entered promiscuous mode [ 212.941233][ T8092] veth1_vlan: entered promiscuous mode [ 212.990708][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.560'. [ 213.053040][ T8092] veth0_macvtap: entered promiscuous mode [ 213.071557][ T8092] veth1_macvtap: entered promiscuous mode [ 213.115539][ T8092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.142474][ T8092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.212454][ T5708] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 213.212492][ T5708] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 213.229821][ T7752] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.248439][ T7728] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.259326][ T5613] Bluetooth: hci4: command tx timeout [ 213.282836][ T7728] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.282879][ T7728] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.418341][ T5708] ft260 0003:0403:6030.000C: chip code: 0000 0000 [ 213.469347][ T7727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.469362][ T7727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.615728][ T5708] ft260 0003:0403:6030.000C: failed to retrieve system status [ 213.615981][ T5708] ft260 0003:0403:6030.000C: probe with driver ft260 failed with error -32 [ 213.635895][ T5963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.635916][ T5963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.740987][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.562'. [ 214.137482][ T977] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 214.286975][ T977] usb 6-1: Using ep0 maxpacket: 16 [ 214.287829][ T977] usb 6-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 214.293339][ T977] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 214.293361][ T977] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.293373][ T977] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.293388][ T977] usb 6-1: config 0 interface 0 has no altsetting 0 [ 214.293407][ T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.305392][ T977] usb 6-1: config 0 descriptor?? [ 214.582550][ T8150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.592516][ T8150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.944694][ T8168] netlink: 24 bytes leftover after parsing attributes in process `syz.0.568'. [ 215.333611][ T2250] usb 3-1: USB disconnect, device number 38 [ 215.337129][ T5613] Bluetooth: hci4: command tx timeout [ 215.381871][ T30] audit: type=1326 audit(1791638578.256:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8170 comm="syz.3.569" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab799e1d9 code=0x7ffc0000 [ 215.384356][ T30] audit: type=1326 audit(1791638578.276:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8170 comm="syz.3.569" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab799e1d9 code=0x7ffc0000 [ 216.251272][ T977] usbhid 6-1:0.0: can't add hid device: -71 [ 216.251338][ T977] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 216.278486][ T977] usb 6-1: USB disconnect, device number 2 [ 216.556434][ T5708] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 216.706632][ T5708] usb 3-1: Using ep0 maxpacket: 8 [ 216.709855][ T5708] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 216.711078][ T5708] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 216.711102][ T5708] usb 3-1: config 0 has no interface number 0 [ 216.713445][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.713470][ T5708] usb 3-1: Product: syz [ 216.713485][ T5708] usb 3-1: Manufacturer: syz [ 216.713499][ T5708] usb 3-1: SerialNumber: syz [ 216.775472][ T5708] usb 3-1: config 0 descriptor?? [ 216.989513][ T5708] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 216.989577][ T5708] uvcvideo 3-1:0.31: Failed to initialize entity for entity 32774 [ 216.989593][ T5708] uvcvideo 3-1:0.31: Failed to register entities (-22). [ 217.198693][ T5708] usb 3-1: USB disconnect, device number 39 [ 217.416702][ T5613] Bluetooth: hci4: command tx timeout [ 217.561948][ T8205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.580'. [ 217.918611][ T7752] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.031669][ T8208] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 218.031906][ T8208] block device autoloading is deprecated and will be removed. [ 218.252878][ T7752] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.340162][ T5708] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 218.428055][ T7752] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.491793][ T5708] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 218.496361][ T5708] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 218.496385][ T5708] usb 3-1: config 0 has no interface number 0 [ 218.496423][ T5708] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 218.499279][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.499303][ T5708] usb 3-1: Product: syz [ 218.499317][ T5708] usb 3-1: Manufacturer: syz [ 218.499331][ T5708] usb 3-1: SerialNumber: syz [ 218.503011][ T8223] netlink: 36 bytes leftover after parsing attributes in process `syz.4.586'. [ 218.507875][ T5708] usb 3-1: config 0 descriptor?? [ 218.531268][ T5708] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 218.531340][ T5708] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 218.618993][ T7752] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.683686][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.685360][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.701229][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.702667][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.703688][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.849886][ T5708] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 218.852364][ T5708] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 218.858425][ T5708] usb 3-1: USB disconnect, device number 40 [ 219.022697][ T8232] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 219.023754][ T8232] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 219.238954][ T7752] bridge_slave_1: left allmulticast mode [ 219.238980][ T7752] bridge_slave_1: left promiscuous mode [ 219.240292][ T7752] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.267918][ T7752] bridge_slave_0: left allmulticast mode [ 219.267945][ T7752] bridge_slave_0: left promiscuous mode [ 219.268142][ T7752] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.364714][ T7752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.404502][ T7752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.417617][ T7752] bond0 (unregistering): Released all slaves [ 220.472272][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 220.730618][ T8271] netlink: 24 bytes leftover after parsing attributes in process `syz.4.596'. [ 220.776423][ T53] Bluetooth: hci4: command tx timeout [ 220.852300][ T8188] syz.3.575 (8188): drop_caches: 1 [ 221.286373][ T5683] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 221.466455][ T5683] usb 4-1: Using ep0 maxpacket: 16 [ 221.467079][ T5683] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 221.468028][ T5683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.468046][ T5683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.468058][ T5683] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 221.468082][ T5683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.473017][ T5683] usb 4-1: config 0 descriptor?? [ 221.575537][ T7752] hsr_slave_0: left promiscuous mode [ 221.584442][ T7752] hsr_slave_1: left promiscuous mode [ 221.586190][ T7752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.586213][ T7752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.610469][ T7752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.610493][ T7752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.693463][ T7752] veth1_macvtap: left promiscuous mode [ 221.693497][ T7752] veth0_macvtap: left promiscuous mode [ 221.693590][ T7752] veth1_vlan: left promiscuous mode [ 221.693628][ T7752] veth0_vlan: left promiscuous mode [ 221.780042][ T8282] FAULT_INJECTION: forcing a failure. [ 221.780042][ T8282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.780070][ T8282] CPU: 1 UID: 0 PID: 8282 Comm: syz.4.598 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.780085][ T8282] Tainted: [L]=SOFTLOCKUP [ 221.780089][ T8282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 221.780096][ T8282] Call Trace: [ 221.780101][ T8282] [ 221.780106][ T8282] dump_stack_lvl+0xe8/0x150 [ 221.780136][ T8282] should_fail_ex+0x410/0x560 [ 221.780168][ T8282] _copy_from_user+0x2d/0xb0 [ 221.780188][ T8282] __sys_bind+0x1c6/0x410 [ 221.780217][ T8282] ? __pfx___sys_bind+0x10/0x10 [ 221.780238][ T8282] ? __pfx_ksys_write+0x10/0x10 [ 221.780253][ T8282] __x64_sys_bind+0x7a/0x90 [ 221.780274][ T8282] do_syscall_64+0x166/0x520 [ 221.780302][ T8282] ? trace_irq_disable+0x3b/0x140 [ 221.780323][ T8282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.780343][ T8282] ? clear_bhb_loop+0x70/0xc0 [ 221.780361][ T8282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.780371][ T8282] RIP: 0033:0x7f5a3a19e1d9 [ 221.780387][ T8282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.780396][ T8282] RSP: 002b:00007f5a3b01d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 221.780409][ T8282] RAX: ffffffffffffffda RBX: 00007f5a3a425fa0 RCX: 00007f5a3a19e1d9 [ 221.780420][ T8282] RDX: 000000000000001c RSI: 0000200000000440 RDI: 0000000000000003 [ 221.780432][ T8282] RBP: 00007f5a3b01d090 R08: 0000000000000000 R09: 0000000000000000 [ 221.780445][ T8282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.780456][ T8282] R13: 00007f5a3a426038 R14: 00007f5a3a425fa0 R15: 00007f5a3a54fa48 [ 221.780487][ T8282] [ 222.813686][ T7752] team0 (unregistering): Port device team_slave_1 removed [ 222.856652][ T53] Bluetooth: hci4: command tx timeout [ 222.864658][ T7752] team0 (unregistering): Port device team_slave_0 removed [ 223.210063][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 223.792549][ T8227] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.792980][ T8227] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.793140][ T8227] bridge_slave_0: entered allmulticast mode [ 223.805837][ T8227] bridge_slave_0: entered promiscuous mode [ 223.830304][ T8227] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.830396][ T8227] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.830522][ T8227] bridge_slave_1: entered allmulticast mode [ 223.845736][ T8227] bridge_slave_1: entered promiscuous mode [ 223.856121][ T8311] netlink: 64 bytes leftover after parsing attributes in process `syz.4.602'. [ 224.059825][ T8227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.076697][ T8227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.274592][ T8227] team0: Port device team_slave_0 added [ 224.292830][ T8227] team0: Port device team_slave_1 added [ 224.317991][ T2250] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 224.413878][ T8227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.413897][ T8227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.413923][ T8227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.420641][ T8227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.420657][ T8227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.420683][ T8227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.444641][ T8323] netlink: 104 bytes leftover after parsing attributes in process `syz.2.604'. [ 224.576561][ T2250] usb 1-1: device descriptor read/64, error -71 [ 224.654358][ T8227] hsr_slave_0: entered promiscuous mode [ 224.655412][ T8227] hsr_slave_1: entered promiscuous mode [ 224.660649][ T8227] debugfs: 'hsr0' already exists in 'hsr' [ 224.660671][ T8227] Cannot create hsr debugfs directory [ 224.821294][ T2250] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 224.938977][ T53] Bluetooth: hci4: command tx timeout [ 224.951835][ T2250] usb 1-1: device descriptor read/64, error -71 [ 225.003996][ T5683] usbhid 4-1:0.0: can't add hid device: -71 [ 225.004105][ T5683] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 225.031440][ T5683] usb 4-1: USB disconnect, device number 30 [ 225.056611][ T2250] usb usb1-port1: attempt power cycle [ 225.111748][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 225.113973][ T8335] netlink: 'syz.2.606': attribute type 1 has an invalid length. [ 225.164063][ T8335] bond2: entered promiscuous mode [ 225.169004][ T8335] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.226119][ T8342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.608'. [ 225.226841][ T8342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.608'. [ 225.277235][ T8337] netlink: 24 bytes leftover after parsing attributes in process `syz.3.607'. [ 225.326504][ T8335] bond2: (slave bridge1): making interface the new active one [ 225.326530][ T8335] bridge1: entered promiscuous mode [ 225.329867][ T8335] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 225.397321][ T2250] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 225.409686][ T8343] ip6erspan0: entered allmulticast mode [ 225.426885][ T2250] usb 1-1: device descriptor read/8, error -71 [ 225.666864][ T2250] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 225.690865][ T2250] usb 1-1: device descriptor read/8, error -71 [ 225.730496][ T8363] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 225.730640][ T8363] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 225.796658][ T2250] usb usb1-port1: unable to enumerate USB device [ 225.904329][ T8227] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 225.922275][ T8227] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 225.925127][ T8227] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 225.977486][ T8227] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 225.979990][ T8227] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 226.018913][ T8227] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 226.023433][ T8227] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 226.042788][ T8227] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 226.183875][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 226.220766][ T8227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.257709][ T8227] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.264615][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.264719][ T5963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.308264][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.308367][ T5963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.450348][ T8227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.515655][ T8227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.614439][ T8227] veth0_vlan: entered promiscuous mode [ 226.654294][ T8227] veth1_vlan: entered promiscuous mode [ 226.730723][ T8227] veth0_macvtap: entered promiscuous mode [ 226.746208][ T8227] veth1_macvtap: entered promiscuous mode [ 226.772619][ T8227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.838458][ T8227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.915466][ T7727] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.915642][ T7727] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.927125][ T5963] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.927384][ T5963] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.936557][ T977] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 227.017649][ T53] Bluetooth: hci4: command tx timeout [ 227.086849][ T977] usb 3-1: Using ep0 maxpacket: 8 [ 227.087712][ T977] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 227.089244][ T977] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 227.089261][ T977] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 227.089273][ T977] usb 3-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 227.089286][ T977] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 227.089300][ T977] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 227.089312][ T977] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.089335][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.184210][ T7727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.184232][ T7727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.331851][ T7727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.331868][ T7727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.348816][ T977] usb 3-1: usb_control_msg returned -71 [ 227.348861][ T977] usbtmc 3-1:16.0: can't read capabilities [ 227.390830][ T8404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.391214][ T8404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.419414][ T977] usb 3-1: USB disconnect, device number 41 [ 227.536766][ T5668] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 227.686814][ T5668] usb 4-1: Using ep0 maxpacket: 16 [ 227.687930][ T5668] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 227.689985][ T5668] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.690040][ T5668] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.690063][ T5668] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 227.690101][ T5668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.695480][ T5668] usb 4-1: config 0 descriptor?? [ 228.815696][ T8429] netlink: 24 bytes leftover after parsing attributes in process `syz.0.620'. [ 228.945792][ T8436] ip6tnl1: entered allmulticast mode [ 229.396506][ T10] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 229.567133][ T10] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 229.568716][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.568762][ T10] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 229.568789][ T10] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.568814][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 229.568846][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.638882][ T10] usb 1-1: config 0 descriptor?? [ 229.772191][ T5617] tipc: Resetting bearer [ 229.848594][ T5617] tipc: Disabling bearer [ 230.348697][ T7727] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.562197][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 230.562297][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 230.604399][ T10] usb 1-1: USB disconnect, device number 60 [ 230.837418][ T7727] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.906729][ T5668] usbhid 4-1:0.0: can't add hid device: -71 [ 230.906830][ T5668] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 230.920036][ T5668] usb 4-1: USB disconnect, device number 31 [ 231.043819][ T7727] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.143892][ T7727] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.208287][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 231.218516][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 231.226238][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 231.240161][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 231.240544][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 231.952861][ T7727] bridge_slave_1: left allmulticast mode [ 231.953015][ T7727] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.975030][ T7727] bridge_slave_0: left allmulticast mode [ 231.975050][ T7727] bridge_slave_0: left promiscuous mode [ 231.975189][ T7727] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.040961][ T7727] lo: left allmulticast mode [ 232.557686][ T8473] netlink: 24 bytes leftover after parsing attributes in process `syz.6.633'. [ 232.915462][ T7727] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 232.915488][ T7727] bridge1 (unregistering): left promiscuous mode [ 232.978615][ T7727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.012080][ T7727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.015057][ T7727] bond0 (unregistering): Released all slaves [ 233.065873][ T7727] bond1 (unregistering): Released all slaves [ 233.178141][ T7727] bond2 (unregistering): Released all slaves [ 233.336504][ T5613] Bluetooth: hci1: command tx timeout [ 233.425457][ T7727] tipc: Left network mode [ 233.432949][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5 [ 233.870724][ T8503] netlink: 8628 bytes leftover after parsing attributes in process `syz.3.637'. [ 233.947577][ T8503] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 234.040480][ T7727] hsr_slave_0: left promiscuous mode [ 234.044100][ T7727] hsr_slave_1: left promiscuous mode [ 234.045770][ T7727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.045792][ T7727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.069072][ T7727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.069096][ T7727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.131249][ T7727] veth1_macvtap: left promiscuous mode [ 234.131276][ T7727] veth0_macvtap: left promiscuous mode [ 234.131347][ T7727] veth1_vlan: left promiscuous mode [ 234.131384][ T7727] veth0_vlan: left promiscuous mode [ 234.142516][ T30] audit: type=1326 audit(1791638597.036:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.4.638" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3a19e1d9 code=0x7ffc0000 [ 234.147835][ T30] audit: type=1326 audit(1791638597.046:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.4.638" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3a19e1d9 code=0x7ffc0000 [ 234.218386][ T30] audit: type=1326 audit(1791638597.116:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.4.638" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a3a19e1d9 code=0x7ffc0000 [ 234.247842][ T30] audit: type=1326 audit(1791638597.126:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.4.638" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3a19e1d9 code=0x7ffc0000 [ 234.247892][ T30] audit: type=1326 audit(1791638597.126:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.4.638" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3a19e1d9 code=0x7ffc0000 [ 234.247929][ T30] audit: type=1326 audit(1791638597.126:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.4.638" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a3a19e1d9 code=0x7ffc0000 [ 234.247966][ T30] audit: type=1326 audit(1791638597.126:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.4.638" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3a19e1d9 code=0x7ffc0000 [ 234.248004][ T30] audit: type=1326 audit(1791638597.126:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.4.638" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3a19e1d9 code=0x7ffc0000 [ 234.248054][ T30] audit: type=1326 audit(1791638597.126:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.4.638" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f5a3a19e1d9 code=0x7ffc0000 [ 234.248092][ T30] audit: type=1326 audit(1791638597.126:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.4.638" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3a19e1d9 code=0x7ffc0000 [ 234.348355][ T10] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 234.496411][ T10] usb 4-1: device descriptor read/64, error -71 [ 234.769823][ T10] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 234.896347][ T10] usb 4-1: device descriptor read/64, error -71 [ 235.007877][ T10] usb usb4-port1: attempt power cycle [ 235.120850][ T5278] 8021q: adding VLAN 0 to HW filter on device eth6 [ 235.232320][ T7728] IPVS: starting estimator thread 0... [ 235.317267][ T8538] IPVS: using max 39 ests per chain, 93600 per kthread [ 235.366412][ T10] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 235.373553][ T8454] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.373770][ T8454] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.373892][ T8454] bridge_slave_0: entered allmulticast mode [ 235.375766][ T8454] bridge_slave_0: entered promiscuous mode [ 235.414438][ T10] usb 4-1: device descriptor read/8, error -71 [ 235.418282][ T5613] Bluetooth: hci1: command tx timeout [ 235.432485][ T8454] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.432661][ T8454] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.432924][ T8454] bridge_slave_1: entered allmulticast mode [ 235.434762][ T8454] bridge_slave_1: entered promiscuous mode [ 235.536226][ T8454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.558792][ T8454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.573340][ T7727] IPVS: stop unused estimator thread 0... [ 235.616031][ T8454] team0: Port device team_slave_0 added [ 235.625245][ T8454] team0: Port device team_slave_1 added [ 235.646414][ T10] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 235.672228][ T8454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.672244][ T8454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.672271][ T8454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.675213][ T8454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.675228][ T8454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.675255][ T8454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.721307][ T10] usb 4-1: device descriptor read/8, error -71 [ 235.812737][ T8454] hsr_slave_0: entered promiscuous mode [ 235.813711][ T8454] hsr_slave_1: entered promiscuous mode [ 235.814399][ T8454] debugfs: 'hsr0' already exists in 'hsr' [ 235.814418][ T8454] Cannot create hsr debugfs directory [ 235.831919][ T10] usb usb4-port1: unable to enumerate USB device [ 236.091665][ T5278] 8021q: adding VLAN 0 to HW filter on device eth7 [ 236.183502][ T8563] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 236.183912][ T8563] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 236.184770][ T8563] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 236.270763][ T8454] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 236.291182][ T8454] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 236.293302][ T8454] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 236.319190][ T8454] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 236.321249][ T8454] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 236.332917][ T8454] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 236.333339][ T8567] sit0: entered promiscuous mode [ 236.352913][ T8567] netlink: 'syz.4.645': attribute type 1 has an invalid length. [ 236.352962][ T8567] netlink: 1 bytes leftover after parsing attributes in process `syz.4.645'. [ 236.353286][ T8454] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 236.380473][ T8454] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 236.535182][ T8578] netlink: 'syz.0.646': attribute type 39 has an invalid length. [ 236.801523][ T8454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.872597][ T8454] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.895180][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.895279][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.936964][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.937060][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.101793][ T977] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 237.169518][ T8454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.246459][ T977] usb 1-1: Using ep0 maxpacket: 8 [ 237.248839][ T977] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 237.250033][ T977] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 24, changing to 7 [ 237.260962][ T977] usb 1-1: string descriptor 0 read error: -22 [ 237.261094][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.317869][ T977] usb 1-1: 1:1: invalid format type 0xa6da is detected, processed as PCM [ 237.317887][ T977] usb 1-1: 1:1 : sample bitwidth 79 in over sample bytes 9 [ 237.317899][ T977] usb 1-1: 1:1 : unsupported sample bitwidth 79 in 9 bytes [ 237.484923][ T8454] veth0_vlan: entered promiscuous mode [ 237.496457][ T5613] Bluetooth: hci1: command tx timeout [ 237.498933][ T8578] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 237.563479][ T8454] veth1_vlan: entered promiscuous mode [ 237.624600][ T5278] 8021q: adding VLAN 0 to HW filter on device eth8 [ 237.681002][ T8454] veth0_macvtap: entered promiscuous mode [ 237.685106][ T8454] veth1_macvtap: entered promiscuous mode [ 237.820954][ T8454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.850497][ T8454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.908302][ T58] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.909744][ T7727] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.909788][ T7727] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.909849][ T7727] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.143339][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.143360][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.212520][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.212566][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.410642][ T8639] netlink: 40 bytes leftover after parsing attributes in process `syz.6.654'. [ 238.501873][ T8638] team0: left promiscuous mode [ 238.501898][ T8638] team_slave_0: left promiscuous mode [ 238.527785][ T8638] team_slave_1: left promiscuous mode [ 238.564384][ T8638] geneve1: left promiscuous mode [ 238.581916][ T8638] bond1: left promiscuous mode [ 238.747440][ T25] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 238.818087][ T8648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.818545][ T8648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.897511][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 238.898207][ T25] usb 8-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 238.899253][ T25] usb 8-1: config 0 interface 0 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.899273][ T25] usb 8-1: config 0 interface 0 has no altsetting 0 [ 238.899292][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.903423][ T25] usb 8-1: config 0 descriptor?? [ 239.576617][ T5613] Bluetooth: hci1: command tx timeout [ 239.609191][ T25] usb 8-1: string descriptor 0 read error: -71 [ 239.652024][ T25] usbhid 8-1:0.0: can't add hid device: -71 [ 239.652173][ T25] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 239.690496][ T977] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 239.701543][ T25] usb 8-1: USB disconnect, device number 2 [ 240.013553][ T977] usb 1-1: USB disconnect, device number 61 [ 240.317153][ T8675] netlink: 48 bytes leftover after parsing attributes in process `syz.6.661'. [ 240.386109][ T8675] tipc: Started in network mode [ 240.401950][ T8675] tipc: Node identity 9e4bc229f717, cluster identity 4711 [ 240.402303][ T8675] tipc: Enabled bearer , priority 0 [ 240.569383][ T8675] tipc: Resetting bearer [ 240.868188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 241.152170][ T8696] netlink: 348 bytes leftover after parsing attributes in process `syz.3.666'. [ 241.174088][ T8696] IPv6: NLM_F_CREATE should be specified when creating new route [ 241.238371][ T8689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.238632][ T8689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.406954][ T5706] tipc: Node number set to 1767686697 [ 242.079051][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.671'. [ 242.114643][ T8732] bond4: entered promiscuous mode [ 242.115061][ T8732] 8021q: adding VLAN 0 to HW filter on device bond4 [ 242.134936][ T8732] 8021q: adding VLAN 0 to HW filter on device bond4 [ 242.138012][ T8732] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 242.138936][ T8732] bond4: (slave ip6gre1): Error -95 calling set_mac_address [ 242.557079][ T8749] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 242.558640][ T8754] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 242.636170][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'. [ 242.651741][ T8759] gretap0: entered promiscuous mode [ 242.654588][ T8759] macvlan4: entered allmulticast mode [ 242.654608][ T8759] gretap0: entered allmulticast mode [ 242.799698][ T8770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.806209][ T8770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.546036][ T8785] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component [ 243.986089][ T8794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.001075][ T8794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.034571][ T8794] netlink: 'syz.4.684': attribute type 4 has an invalid length. [ 244.034593][ T8794] netlink: 152 bytes leftover after parsing attributes in process `syz.4.684'. [ 244.071328][ T8794] .`: renamed from bond0 (while UP) [ 244.238279][ T10] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 244.367306][ T5706] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 244.397084][ T10] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 244.398558][ T10] usb 8-1: config 0 has an invalid interface number: 35 but max is 0 [ 244.398603][ T10] usb 8-1: config 0 has no interface number 0 [ 244.398644][ T10] usb 8-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 244.403940][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.403965][ T10] usb 8-1: Product: syz [ 244.403980][ T10] usb 8-1: Manufacturer: syz [ 244.403995][ T10] usb 8-1: SerialNumber: syz [ 244.413481][ T10] usb 8-1: config 0 descriptor?? [ 244.441943][ T10] radio-si470x 8-1:0.35: could not find interrupt in endpoint [ 244.442016][ T10] radio-si470x 8-1:0.35: probe with driver radio-si470x failed with error -5 [ 244.545722][ T8819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.566987][ T5706] usb 4-1: Invalid ep0 maxpacket: 16 [ 244.696414][ T5706] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 244.837326][ T10] radio-raremono 8-1:0.35: this is not Thanko's Raremono. [ 244.837725][ T10] usbhid 8-1:0.35: couldn't find an input interrupt endpoint [ 244.858670][ T10] usb 8-1: USB disconnect, device number 3 [ 244.861963][ T5706] usb 4-1: Invalid ep0 maxpacket: 16 [ 244.870224][ T5706] usb usb4-port1: attempt power cycle [ 245.129176][ T8841] netlink: 44 bytes leftover after parsing attributes in process `syz.4.695'. [ 245.129196][ T8841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.695'. [ 245.129204][ T8841] netlink: 16 bytes leftover after parsing attributes in process `syz.4.695'. [ 245.227176][ T5706] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 245.247050][ T5706] usb 4-1: Invalid ep0 maxpacket: 16 [ 245.264625][ T8844] loop5: detected capacity change from 0 to 7 [ 245.268051][ T8844] Dev loop5: unable to read RDB block 7 [ 245.268092][ T8844] loop5: unable to read partition table [ 245.268349][ T8844] loop5: partition table beyond EOD, truncated [ 245.269938][ T8844] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 245.285291][ T8849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.285693][ T8849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.379186][ T5706] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 245.398527][ T5706] usb 4-1: Invalid ep0 maxpacket: 16 [ 245.398782][ T5706] usb usb4-port1: unable to enumerate USB device [ 245.687427][ T8857] veth1_to_batadv: entered promiscuous mode [ 245.821472][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 245.821490][ T30] audit: type=1326 audit(1791638608.716:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8861 comm="syz.0.702" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fb079e1d9 code=0x0 [ 246.057160][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 246.226579][ T2250] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 246.226697][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 246.227550][ T10] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 246.228609][ T10] usb 8-1: config 0 has no interfaces? [ 246.231377][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.231467][ T10] usb 8-1: Product: syz [ 246.231476][ T10] usb 8-1: Manufacturer: syz [ 246.231484][ T10] usb 8-1: SerialNumber: syz [ 246.287530][ T10] r8152-cfgselector 8-1: Unknown version 0x0000 [ 246.287577][ T10] r8152-cfgselector 8-1: config 0 descriptor?? [ 246.497197][ T30] audit: type=1326 audit(1791638609.396:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8860 comm="syz.7.703" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697639e1d9 code=0x7ffc0000 [ 246.497515][ T30] audit: type=1326 audit(1791638609.396:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8860 comm="syz.7.703" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f697639e1d9 code=0x7ffc0000 [ 246.500659][ T30] audit: type=1326 audit(1791638609.396:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8860 comm="syz.7.703" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697639e1d9 code=0x7ffc0000 [ 246.501945][ T30] audit: type=1326 audit(1791638609.396:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8860 comm="syz.7.703" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f697639e1d9 code=0x7ffc0000 [ 246.502637][ T30] audit: type=1326 audit(1791638609.396:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8860 comm="syz.7.703" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697639e1d9 code=0x7ffc0000 [ 246.502808][ T30] audit: type=1326 audit(1791638609.396:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8860 comm="syz.7.703" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697639e1d9 code=0x7ffc0000 [ 246.503094][ T30] audit: type=1326 audit(1791638609.396:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8860 comm="syz.7.703" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f697639e1d9 code=0x7ffc0000 [ 246.503487][ T30] audit: type=1326 audit(1791638609.396:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8860 comm="syz.7.703" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697639e1d9 code=0x7ffc0000 [ 246.503928][ T30] audit: type=1326 audit(1791638609.396:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8860 comm="syz.7.703" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697639e1d9 code=0x7ffc0000 [ 246.814857][ T5706] r8152-cfgselector 8-1: USB disconnect, device number 4 [ 246.875349][ T8878] loop5: detected capacity change from 0 to 7 [ 246.882869][ T8878] Dev loop5: unable to read RDB block 7 [ 246.882912][ T8878] loop5: unable to read partition table [ 246.884913][ T8878] loop5: partition table beyond EOD, truncated [ 246.884966][ T8878] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 247.459945][ T8903] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 247.461045][ T8904] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 248.192817][ T8920] usb usb8: usbfs: process 8920 (syz.6.713) did not claim interface 0 before use [ 248.267980][ T8923] netlink: 324 bytes leftover after parsing attributes in process `syz.3.714'. [ 248.303845][ T8923] lo: Caught tx_queue_len zero misconfig [ 248.707876][ T8932] binder: BINDER_SET_CONTEXT_MGR already set [ 248.713433][ T8932] binder: 8930:8932 ioctl 4018620d 200000000100 returned -16 [ 248.752720][ T8932] binder: 8930:8932 ioctl c0306201 2000000001c0 returned -14 [ 248.754203][ T8931] binder: 8930:8931 ioctl c0306201 2000000001c0 returned -14 [ 248.906560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 249.280863][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.716'. [ 249.438226][ T8936] netlink: 32 bytes leftover after parsing attributes in process `syz.3.716'. [ 249.964222][ T8948] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 249.965270][ T8948] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 250.748754][ T8971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.962037][ T8980] netlink: 16 bytes leftover after parsing attributes in process `syz.4.726'. [ 250.962061][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.726'. [ 251.037698][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 251.037751][ T30] audit: type=1326 audit(1791638613.936:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8979 comm="syz.4.726" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a3a19e1d9 code=0x0 [ 251.227215][ T10] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 251.393802][ T10] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 251.401778][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.401839][ T10] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 251.406911][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.406938][ T10] usb 4-1: Product: syz [ 251.406952][ T10] usb 4-1: Manufacturer: syz [ 251.406966][ T10] usb 4-1: SerialNumber: syz [ 251.747768][ T9003] CIFS: VFS: bad security option: kb [ 252.061578][ T9015] program syz.3.725 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.972536][ T9025] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=96 (192 ns) > initial count (144 ns). Using initial count to start timer. [ 253.097994][ C0] usb 4-1: received EP1 urb->status = -2 [ 253.098080][ T10] usb 4-1: unable to init card! (ret=-19) [ 253.371995][ T9042] vivid-000: disconnect [ 253.992800][ T5706] usb 4-1: USB disconnect, device number 40 [ 254.015540][ T9024] vivid-000: reconnect [ 254.093379][ T9056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.821006][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 254.943399][ T9064] syzkaller0: entered promiscuous mode [ 254.943422][ T9064] syzkaller0: entered allmulticast mode [ 255.106023][ T5613] Bluetooth: Unexpected continuation frame (len 4) [ 255.495401][ T9080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.499247][ T9080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.662031][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.662098][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.769578][ T9080] batman_adv: batadv0: Adding interface: ipvlan2 [ 255.769593][ T9080] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.769608][ T9080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.769618][ T9080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.769630][ T9080] batman_adv: batadv0: Interface activated: ipvlan2 [ 257.799021][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.763'. [ 257.993565][ T9147] bond0 (unregistering): Released all slaves [ 258.073028][ T9155] netlink: 20 bytes leftover after parsing attributes in process `syz.6.764'. [ 258.703624][ T9171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.759636][ T10] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 258.786849][ T2250] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 258.921252][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 258.923981][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.924945][ T9179] binder: 9178:9179 ioctl c0306201 200000002d00 returned -22 [ 258.925242][ T9179] binder: 9178:9179 ioctl c0306201 200000002d80 returned -22 [ 258.943795][ T2250] usb 8-1: Using ep0 maxpacket: 16 [ 258.952032][ T2250] usb 8-1: New USB device found, idVendor=12d1, idProduct=e155, bcdDevice=ce.aa [ 258.960802][ T2250] usb 8-1: config 6 has an invalid interface number: 105 but max is 0 [ 258.960828][ T2250] usb 8-1: config 6 has no interface number 0 [ 258.960855][ T2250] usb 8-1: config 6 interface 105 has no altsetting 0 [ 258.977525][ T7520] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 258.985351][ T9179] ipvlan2: entered promiscuous mode [ 258.995814][ T9179] team0: Device ipvlan2 failed to register rx_handler [ 259.003280][ T10] usb 1-1: config 0 descriptor?? [ 259.033173][ T2250] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.033197][ T2250] usb 8-1: Product: syz [ 259.033210][ T2250] usb 8-1: Manufacturer: syz [ 259.033223][ T2250] usb 8-1: SerialNumber: syz [ 259.060349][ T10] gspca_main: spca508-2.14.0 probing 8086:0110 [ 259.131516][ T7520] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 259.135990][ T7520] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.136017][ T7520] usb 4-1: Product: syz [ 259.136032][ T7520] usb 4-1: Manufacturer: syz [ 259.136074][ T7520] usb 4-1: SerialNumber: syz [ 259.214955][ T10] gspca_spca508: reg_read err -32 [ 259.353653][ T2250] uvcvideo 8-1:6.105: Found Unit with invalid ID 0 [ 259.354870][ T2250] uvcvideo 8-1:6.105: probe with driver uvcvideo failed with error -22 [ 259.372585][ T2250] usb 8-1: USB disconnect, device number 5 [ 259.431102][ T9163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.431527][ T9163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.455326][ T9163] fuse: Unknown parameter ')ôíŽö³*rootmode' [ 259.482019][ T9185] gretap0: entered promiscuous mode [ 259.493115][ T10] gspca_spca508: reg_read err -71 [ 259.493555][ T10] gspca_spca508: reg_read err -71 [ 259.493914][ T10] gspca_spca508: reg_read err -71 [ 259.494385][ T10] gspca_spca508: reg write: error -71 [ 259.494458][ T10] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 259.527735][ T10] usb 1-1: USB disconnect, device number 63 [ 259.609449][ T7520] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 259.612276][ T7520] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 260.023561][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.768'. [ 260.482491][ T9173] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1500) ! [ 260.495864][ T9173] syzkaller0: entered promiscuous mode [ 260.495910][ T9173] syzkaller0: entered allmulticast mode [ 260.513566][ T9195] loop5: detected capacity change from 0 to 7 [ 260.526481][ T10] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 260.531494][ T9195] Dev loop5: unable to read RDB block 7 [ 260.531522][ T9195] loop5: unable to read partition table [ 260.531676][ T9195] loop5: partition table beyond EOD, truncated [ 260.531694][ T9195] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 260.687818][ T10] usb 1-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 260.689656][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.689701][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.742268][ T10] pegasus 1-1:1.0: Missing or invalid endpoints [ 260.818349][ T9198] syzkaller0: entered promiscuous mode [ 260.818371][ T9198] syzkaller0: entered allmulticast mode [ 261.129041][ T9209] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 261.149848][ T9207] netlink: 36 bytes leftover after parsing attributes in process `syz.0.772'. [ 261.166116][ T7520] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 261.180410][ T7520] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 261.180979][ T7520] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 261.181019][ T7520] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 261.235335][ T7520] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 261.260364][ T7520] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 261.265775][ T7520] usb 4-1: USB disconnect, device number 41 [ 261.694265][ T9222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.694523][ T9222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.924423][ T9228] fuse: Bad value for 'fd' [ 262.176468][ T7520] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 262.297152][ T977] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 262.326921][ T7520] usb 4-1: Using ep0 maxpacket: 32 [ 262.337535][ T7520] usb 4-1: unable to get BOS descriptor or descriptor too short [ 262.337584][ T7520] usb 4-1: New USB device found, idVendor=0781, idProduct=0001, bcdDevice= 2.00 [ 262.338584][ T7520] usb 4-1: config index 0 descriptor too short (expected 29202, got 18) [ 262.338610][ T7520] usb 4-1: config 6 has an invalid interface number: 253 but max is 0 [ 262.338629][ T7520] usb 4-1: config 6 has no interface number 0 [ 262.338657][ T7520] usb 4-1: config 6 interface 253 has no altsetting 0 [ 262.341081][ T7520] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.341105][ T7520] usb 4-1: Product: syz [ 262.341120][ T7520] usb 4-1: Manufacturer: syz [ 262.341135][ T7520] usb 4-1: SerialNumber: syz [ 262.449079][ T977] usb 8-1: unable to get BOS descriptor or descriptor too short [ 262.449131][ T977] usb 8-1: New USB device found, idVendor=10c4, idProduct=813d, bcdDevice=5a.12 [ 262.450730][ T977] usb 8-1: config 74 has an invalid interface number: 18 but max is 0 [ 262.450747][ T977] usb 8-1: config 74 has no interface number 0 [ 262.450787][ T977] usb 8-1: config 74 interface 18 has no altsetting 0 [ 262.455357][ T977] usb 8-1: Dual-Role OTG device on HNP port [ 262.455641][ T977] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.455658][ T977] usb 8-1: Product: syz [ 262.455666][ T977] usb 8-1: Manufacturer: syz [ 262.455674][ T977] usb 8-1: SerialNumber: syz [ 262.552976][ T9228] input input28: cannot allocate more than FF_MAX_EFFECTS effects [ 262.585430][ T7520] usb-storage 4-1:6.253: USB Mass Storage device detected [ 262.600397][ T7520] usb-storage 4-1:6.253: Quirks match for vid 0781 pid 0001: 1 [ 262.648435][ T7520] usb 4-1: USB disconnect, device number 42 [ 262.708545][ T9232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.708862][ T9232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.724373][ T977] cp210x 8-1:74.18: cp210x converter detected [ 262.725895][ T977] cp210x 8-1:74.18: failed to get vendor val 0x370b size 1: -71 [ 262.725920][ T977] cp210x 8-1:74.18: querying part number failed [ 262.734979][ T977] usb 8-1: cp210x converter now attached to ttyUSB0 [ 262.774264][ T977] usb 8-1: USB disconnect, device number 6 [ 262.792809][ T977] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 262.793319][ T977] cp210x 8-1:74.18: device disconnected [ 262.867418][ T9239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.255072][ T5706] usb 1-1: USB disconnect, device number 64 [ 263.696414][ T977] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 263.727814][ T2250] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 263.824927][ T9254] wg2: Caught tx_queue_len zero misconfig [ 263.846479][ T977] usb 8-1: Using ep0 maxpacket: 16 [ 263.848004][ T977] usb 8-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 263.850583][ T977] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.850629][ T977] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 263.850658][ T977] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.853925][ T977] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.853939][ T977] usb 8-1: Product: syz [ 263.853947][ T977] usb 8-1: Manufacturer: syz [ 263.853955][ T977] usb 8-1: SerialNumber: syz [ 263.860377][ T977] usb 8-1: config 0 descriptor?? [ 263.868435][ T977] mcba_usb 8-1:0.0: Can't find endpoints [ 263.871494][ T2250] usb 1-1: device descriptor read/64, error -71 [ 264.065447][ T9245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.066730][ T9245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.101478][ T9245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.101916][ T9245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.105428][ T9260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.105671][ T9260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.111568][ T5706] usb 8-1: USB disconnect, device number 7 [ 264.114866][ T2250] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 264.277538][ T2250] usb 1-1: device descriptor read/64, error -71 [ 264.387535][ T2250] usb usb1-port1: attempt power cycle [ 264.429206][ T9266] ovs-dp0: entered promiscuous mode [ 264.726797][ T2250] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 264.748384][ T2250] usb 1-1: device descriptor read/8, error -71 [ 264.986681][ T2250] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 265.007982][ T2250] usb 1-1: device descriptor read/8, error -71 [ 265.096651][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 265.116617][ T2250] usb usb1-port1: unable to enumerate USB device [ 265.234329][ T9280] netlink: 'syz.4.798': attribute type 21 has an invalid length. [ 265.236456][ T10] usb 8-1: device descriptor read/64, error -71 [ 265.297096][ T9280] netlink: 68 bytes leftover after parsing attributes in process `syz.4.798'. [ 265.486373][ T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 265.507611][ T9283] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 265.616371][ T10] usb 8-1: device descriptor read/64, error -71 [ 265.726752][ T10] usb usb8-port1: attempt power cycle [ 266.068922][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 266.100077][ T10] usb 8-1: device descriptor read/8, error -71 [ 266.356585][ T10] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 266.377285][ T10] usb 8-1: device descriptor read/8, error -71 [ 266.426081][ T9288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.437251][ T9288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.455118][ T9288] vlan0: entered promiscuous mode [ 266.486744][ T10] usb usb8-port1: unable to enumerate USB device [ 266.927392][ T9295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.941090][ T2250] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 267.097288][ T2250] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 267.099678][ T2250] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.099710][ T2250] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.099733][ T2250] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 267.099773][ T2250] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.160184][ T2250] usb 4-1: config 0 descriptor?? [ 267.360789][ T9297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.361073][ T9297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.599885][ T2250] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 267.599910][ T2250] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 267.599926][ T2250] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 267.599942][ T2250] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 267.599957][ T2250] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 267.599971][ T2250] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 267.599986][ T2250] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 267.600001][ T2250] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 267.600015][ T2250] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 267.600030][ T2250] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 267.720455][ T2250] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 268.031972][ T9303] netlink: 'syz.4.806': attribute type 10 has an invalid length. [ 268.035265][ T9303] team0: Device veth0_vlan failed to register rx_handler [ 268.157646][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.6.807'. [ 268.218184][ T25] usb 4-1: USB disconnect, device number 43 [ 268.226507][ T2250] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 268.355368][ T9308] netlink: 27 bytes leftover after parsing attributes in process `syz.4.808'. [ 268.414437][ T2250] usb 8-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 268.417519][ T2250] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.417568][ T2250] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.417608][ T2250] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.556425][ T9310] xt_time: unknown flags 0x4 [ 268.680243][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.7.805'. [ 268.733534][ T9300] vlan2: entered promiscuous mode [ 268.733557][ T9300] bond0: entered promiscuous mode [ 268.733570][ T9300] bond_slave_0: entered promiscuous mode [ 268.733829][ T9300] bond_slave_1: entered promiscuous mode [ 268.884986][ T9315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.909400][ T9301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.909839][ T9301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.909933][ T9315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.979224][ T2250] rtsx_usb 8-1:1.0: probe with driver rtsx_usb failed with error -71 [ 268.999919][ T2250] usb 8-1: USB disconnect, device number 12 [ 269.289943][ T9325] batadv_slave_1: entered promiscuous mode [ 269.345950][ T9324] batadv_slave_1: left promiscuous mode [ 269.714403][ T9334] netlink: 28 bytes leftover after parsing attributes in process `syz.0.816'. [ 269.825002][ T9342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.816'. [ 270.211477][ T9348] ip_tables: iptables: counters copy to user failed while replacing table [ 270.327945][ T9356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.328396][ T9356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.336815][ T977] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 270.364420][ T9356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.375807][ T9356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.496373][ T977] usb 1-1: Using ep0 maxpacket: 16 [ 270.497083][ T977] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 270.498190][ T977] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.498213][ T977] usb 1-1: config 0 has no interfaces? [ 270.501420][ T977] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 270.501444][ T977] usb 1-1: Product: syz [ 270.501459][ T977] usb 1-1: Manufacturer: syz [ 270.501473][ T977] usb 1-1: SerialNumber: syz [ 270.503585][ T977] usb 1-1: config 0 descriptor?? [ 270.655703][ T9362] syzkaller0: entered promiscuous mode [ 270.655726][ T9362] syzkaller0: entered allmulticast mode [ 270.808020][ T2250] usb 1-1: USB disconnect, device number 69 [ 270.848267][ T9365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.994356][ T977] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 272.087710][ T9390] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 272.175144][ T9396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.189819][ T9396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.212413][ T9398] ip_tables: iptables: counters copy to user failed while replacing table [ 272.396441][ T977] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 272.553828][ T977] usb 1-1: unable to get BOS descriptor or descriptor too short [ 272.553874][ T977] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 272.554959][ T977] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 272.554986][ T977] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 272.555006][ T977] usb 1-1: config 63 has no interface number 0 [ 272.555027][ T977] usb 1-1: config 63 interface 66 has no altsetting 0 [ 272.607528][ T9404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.615741][ T977] usb 1-1: string descriptor 0 read error: -22 [ 272.615912][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.663190][ T977] uvcvideo 1-1:63.66: Found UVC 0.07 device (174f:8acf) [ 272.663799][ T977] uvcvideo 1-1:63.66: No valid video chain found. [ 272.860811][ T9394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.861095][ T9394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.884015][ T9394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.884289][ T9394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.892270][ T9394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.892760][ T9394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.915338][ T9394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.920072][ T9394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.958239][ T10] usb 1-1: USB disconnect, device number 70 [ 273.612005][ T9421] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 274.337206][ T25] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 274.488710][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 274.489917][ T25] usb 8-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 274.490905][ T25] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAC, changing to 0x8C [ 274.490950][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 45207, setting to 64 [ 274.494672][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.494686][ T25] usb 8-1: Product: syz [ 274.494694][ T25] usb 8-1: Manufacturer: syz [ 274.494702][ T25] usb 8-1: SerialNumber: syz [ 274.561443][ T25] usb 8-1: config 0 descriptor?? [ 274.576243][ T25] pegasus_notetaker 8-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 274.782722][ T7520] usb 8-1: USB disconnect, device number 13 [ 274.842515][ T9445] syz_tun: entered allmulticast mode [ 274.866739][ T9444] syz_tun: left allmulticast mode [ 275.690326][ T9447] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 275.691246][ T9447] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 275.881826][ T9447] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 275.881972][ T9447] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 275.923938][ T9447] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 275.924077][ T9447] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 275.958536][ T9447] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 275.958605][ T9447] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 275.990679][ T9447] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 276.025188][ T9447] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 276.026845][ T9447] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 276.066322][ T9447] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 276.090644][ T9463] xt_connbytes: Forcing CT accounting to be enabled [ 276.396632][ T9470] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 276.431491][ T9471] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 276.621028][ T9483] netlink: 'syz.7.861': attribute type 11 has an invalid length. [ 276.820829][ T9484] kAFS: unable to lookup cell '(,c¾ûM' [ 277.017465][ T5613] Bluetooth: hci0: command 0x0406 tx timeout [ 277.458856][ T5668] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 277.608355][ T5668] usb 1-1: Using ep0 maxpacket: 32 [ 277.609071][ T5668] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 277.614839][ T5668] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.614855][ T5668] usb 1-1: Product: syz [ 277.614863][ T5668] usb 1-1: Manufacturer: syz [ 277.614870][ T5668] usb 1-1: SerialNumber: syz [ 277.884016][ T5668] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 277.895806][ T5668] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 277.896421][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 277.976489][ T5613] Bluetooth: hci4: command 0x0c1a tx timeout [ 277.976547][ T5613] Bluetooth: hci3: command 0x0406 tx timeout [ 278.023055][ T5668] usb 1-1: USB disconnect, device number 71 [ 278.066591][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 278.320774][ T9513] syzkaller0: entered promiscuous mode [ 278.320798][ T9513] syzkaller0: entered allmulticast mode [ 278.478085][ T5668] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 278.628196][ T5668] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 278.630049][ T5668] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.631936][ T5668] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.631961][ T5668] usb 8-1: Product: syz [ 278.631977][ T5668] usb 8-1: Manufacturer: syz [ 278.631991][ T5668] usb 8-1: SerialNumber: syz [ 278.751503][ T2250] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 278.768789][ T9531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.770126][ T9531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.797934][ T9531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.800235][ T9531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.889031][ T5668] usb 8-1: Limiting number of CPorts to U8_MAX [ 278.892387][ T5668] usb 8-1: Not enough endpoints found in device, aborting! [ 278.920785][ T2250] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 278.933840][ T2250] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.933890][ T2250] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.933931][ T2250] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.096446][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 279.264346][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'. [ 279.298760][ T9523] vlan2: entered promiscuous mode [ 279.298777][ T9523] bond0: entered promiscuous mode [ 279.298784][ T9523] bond_slave_0: entered promiscuous mode [ 279.298912][ T9523] bond_slave_1: entered promiscuous mode [ 279.299042][ T9523] geneve1: entered promiscuous mode [ 279.299257][ T9523] vxlan0: entered promiscuous mode [ 279.461526][ T9540] netlink: 232 bytes leftover after parsing attributes in process `syz.4.877'. [ 279.623213][ T30] audit: type=1326 audit(1791638642.516:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9541 comm="syz.4.878" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a3a19e1d9 code=0x0 [ 279.623459][ T30] audit: type=1326 audit(1791638642.516:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9541 comm="syz.4.878" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a3a19e1d9 code=0x0 [ 279.626538][ T7520] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 279.692379][ T977] usb 8-1: USB disconnect, device number 14 [ 279.717542][ T2250] rtsx_usb 4-1:1.0: probe with driver rtsx_usb failed with error -110 [ 279.782598][ T7520] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 279.783785][ T7520] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.829153][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.7.879'. [ 279.829177][ T9553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.829189][ T9553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.830121][ T9553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.830141][ T9553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.977413][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 280.056476][ T5613] Bluetooth: hci4: command 0x0c1a tx timeout [ 280.056708][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 280.136752][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 280.825131][ T7520] usb 1-1: Firmware version (0.0) predates our first public release. [ 280.825149][ T7520] usb 1-1: Please update to version 0.2 or newer [ 280.902231][ T9570] can: request_module (can-proto-0) failed. [ 281.027295][ T9538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.027628][ T9538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.522728][ T5668] usb 4-1: USB disconnect, device number 44 [ 281.699352][ T9595] netlink: 19 bytes leftover after parsing attributes in process `syz.7.890'. [ 281.710776][ T9595] netlink: 19 bytes leftover after parsing attributes in process `syz.7.890'. [ 282.066374][ T5668] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 282.066477][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 282.136676][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 282.196539][ T9] usb 4-1: device descriptor read/64, error -71 [ 282.216450][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 282.217329][ T5668] usb 8-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 282.218274][ T5668] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.218331][ T5668] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 282.218365][ T5668] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.389926][ T9611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.390293][ T9611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.437989][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 282.459034][ T9611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.459356][ T9611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.485956][ T9611] loop5: detected capacity change from 0 to 7 [ 282.488058][ T9611] Dev loop5: unable to read RDB block 7 [ 282.488098][ T9611] loop5: unable to read partition table [ 282.488274][ T9611] loop5: partition table beyond EOD, truncated [ 282.488289][ T9611] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 282.576549][ T9] usb 4-1: device descriptor read/64, error -71 [ 282.625380][ T5668] dvb_ttusb_budget: cmd xter failed, receive error -22 [ 282.625418][ T5668] dvb_ttusb_budget: ttusb_init_controller: error [ 282.625431][ T5668] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 282.685284][ T5668] DVB: Unable to find symbol stv0299_attach() [ 282.687584][ T9] usb usb4-port1: attempt power cycle [ 282.718211][ T5668] DVB: Unable to find symbol tda8083_attach() [ 282.718224][ T5668] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 282.830252][ T7520] usb 1-1: USB disconnect, device number 72 [ 282.979528][ T9616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.979879][ T9616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.035134][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 283.059202][ T9] usb 4-1: device descriptor read/8, error -71 [ 283.154360][ T9621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.156166][ T9621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.175879][ T9621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.188014][ T9621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.189638][ T9621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.190449][ T9621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.195665][ T9621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.196072][ T9621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.199725][ T9621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.200166][ T9621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.205365][ T9621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.220081][ T9621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.249446][ T7520] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 283.306704][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 283.339771][ T9] usb 4-1: device descriptor read/8, error -71 [ 283.406403][ T7520] usb 1-1: Using ep0 maxpacket: 16 [ 283.407174][ T7520] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 283.408124][ T7520] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 283.408155][ T7520] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.408177][ T7520] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.408196][ T7520] usb 1-1: config 0 interface 0 has no altsetting 0 [ 283.408215][ T7520] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.410097][ T7520] usb 1-1: config 0 descriptor?? [ 283.486607][ T9] usb usb4-port1: unable to enumerate USB device [ 283.635413][ T7520] usbhid 1-1:0.0: can't add hid device: -71 [ 283.635806][ T7520] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 283.655623][ T7520] usb 1-1: USB disconnect, device number 73 [ 283.891532][ T9625] netlink: 4 bytes leftover after parsing attributes in process `syz.6.899'. [ 283.913812][ T9625] batadv0: entered promiscuous mode [ 283.925107][ T9625] macsec2: entered promiscuous mode [ 283.925362][ T9625] macsec2: entered allmulticast mode [ 283.925377][ T9625] batadv0: entered allmulticast mode [ 283.943880][ T9625] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 283.945884][ T9625] batadv0: left allmulticast mode [ 283.946075][ T9625] batadv0: left promiscuous mode [ 284.831789][ T2250] usb 8-1: USB disconnect, device number 15 [ 284.913804][ T9648] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 284.914490][ T9648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.906'. [ 284.914983][ T9648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.955703][ T9648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.906'. [ 285.316857][ T977] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 285.466431][ T977] usb 4-1: Using ep0 maxpacket: 8 [ 285.467719][ T977] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 285.470198][ T977] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 285.470223][ T977] usb 4-1: config 0 has no interface number 0 [ 285.470244][ T977] usb 4-1: config 0 interface 1 has no altsetting 0 [ 285.473747][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.473773][ T977] usb 4-1: Product: syz [ 285.473787][ T977] usb 4-1: Manufacturer: syz [ 285.473802][ T977] usb 4-1: SerialNumber: syz [ 285.480121][ T977] usb 4-1: config 0 descriptor?? [ 285.641979][ T30] audit: type=1326 audit(1791638648.536:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9665 comm="syz.0.914" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fb079e1d9 code=0x0 [ 285.699640][ T977] i2c-cp2615 4-1:0.1: probe with driver i2c-cp2615 failed with error -71 [ 285.702729][ T977] usb 4-1: USB disconnect, device number 49 [ 286.618225][ T9686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.979576][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 287.006412][ T5668] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 287.046759][ T7520] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 287.136406][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 287.137230][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 287.138418][ T9] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 287.138443][ T9] usb 4-1: config 0 has no interface number 0 [ 287.138481][ T9] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 287.138505][ T9] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 287.138527][ T9] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 287.138550][ T9] usb 4-1: config 0 interface 196 has no altsetting 0 [ 287.141082][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.141107][ T9] usb 4-1: Product: syz [ 287.141121][ T9] usb 4-1: Manufacturer: syz [ 287.141136][ T9] usb 4-1: SerialNumber: syz [ 287.143927][ T9] usb 4-1: config 0 descriptor?? [ 287.144704][ T9690] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 287.158965][ T5668] usb 1-1: Using ep0 maxpacket: 16 [ 287.161074][ T5668] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 287.162031][ T5668] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.162058][ T5668] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.162079][ T5668] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 287.162117][ T5668] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.215354][ T7520] usb 8-1: Using ep0 maxpacket: 32 [ 287.227975][ T7520] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 287.276250][ T7520] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 287.276326][ T7520] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 287.276351][ T7520] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 287.276375][ T7520] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 287.385607][ T5668] usb 1-1: config 0 descriptor?? [ 287.399289][ T7520] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.399340][ T7520] usb 8-1: Product: syz [ 287.399354][ T7520] usb 8-1: Manufacturer: syz [ 287.399368][ T7520] usb 8-1: SerialNumber: syz [ 287.407689][ T9690] netlink: 16 bytes leftover after parsing attributes in process `syz.3.920'. [ 287.428856][ T9695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 287.456135][ C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 287.471305][ T7520] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/input/input31 [ 287.532007][ T9702] netlink: 'syz.6.924': attribute type 4 has an invalid length. [ 287.532023][ T9702] netlink: 17 bytes leftover after parsing attributes in process `syz.6.924'. [ 287.716345][ T7520] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 287.716389][ T7520] (id 0x00) [ 287.866372][ T7520] rc_core: IR keymap rc-imon-pad not found [ 287.866392][ T7520] Registered IR keymap rc-empty [ 287.868164][ T7520] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 287.868207][ T7520] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 287.937779][ T7520] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0 [ 287.941027][ T7520] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0/input32 [ 287.982495][ T7520] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:16> initialized [ 288.156609][ T9] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: -110 [ 288.192185][ T9] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 288.282968][ T977] usb 4-1: USB disconnect, device number 50 [ 288.367875][ T977] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 288.796091][ T9722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.820118][ T9722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.990628][ T9749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.006888][ T9749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.252019][ T5668] usbhid 1-1:0.0: can't add hid device: -71 [ 290.252089][ T5668] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 290.272370][ T5668] usb 1-1: USB disconnect, device number 74 [ 290.635994][ T977] usb 8-1: USB disconnect, device number 16 [ 290.729255][ T9757] Cannot find add_set index 0 as target [ 291.257719][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.939'. [ 291.352698][ T9769] tunl0: Caught tx_queue_len zero misconfig [ 291.353708][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.940'. [ 291.469722][ T9771] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 291.525876][ T9771] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 291.552151][ T9771] 8021q: adding VLAN 0 to HW filter on device bond2 [ 291.557907][ T7520] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 291.579016][ T9771] 8021q: adding VLAN 0 to HW filter on device bond3 [ 291.603906][ T9771] 8021q: adding VLAN 0 to HW filter on device bond4 [ 291.636403][ T58] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 291.636451][ T58] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 291.636485][ T58] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 291.636518][ T58] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 291.719748][ T7520] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 291.721098][ T7520] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 291.721126][ T7520] usb 1-1: config 0 has no interface number 0 [ 291.721167][ T7520] usb 1-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 291.721274][ T7520] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 291.721300][ T7520] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 291.721341][ T7520] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.799443][ T7520] usb 1-1: config 0 descriptor?? [ 291.801465][ T9770] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 291.822410][ T7520] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input33 [ 292.068414][ C0] usbtouchscreen 1-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 292.101468][ T9767] netlink: 'syz.0.939': attribute type 10 has an invalid length. [ 292.128397][ T9767] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 292.130879][ T9767] .`: (slave netdevsim1): Enslaving as an active interface with an up link [ 292.174534][ T977] usb 1-1: USB disconnect, device number 75 [ 292.276741][ T25] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 292.377305][ T5668] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 292.426364][ T25] usb 8-1: Using ep0 maxpacket: 32 [ 292.427387][ T25] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 292.428293][ T25] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 292.428316][ T25] usb 8-1: config 0 has no interface number 0 [ 292.428354][ T25] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 292.428368][ T25] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 292.428380][ T25] usb 8-1: config 0 interface 85 has no altsetting 0 [ 292.430215][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.430238][ T25] usb 8-1: Product: syz [ 292.430252][ T25] usb 8-1: Manufacturer: syz [ 292.430266][ T25] usb 8-1: SerialNumber: syz [ 292.434354][ T25] usb 8-1: config 0 descriptor?? [ 292.576420][ T5668] usb 4-1: Using ep0 maxpacket: 8 [ 292.577827][ T5668] usb 4-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 292.580863][ T5668] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.580887][ T5668] usb 4-1: Product: syz [ 292.580901][ T5668] usb 4-1: Manufacturer: syz [ 292.580911][ T5668] usb 4-1: SerialNumber: syz [ 292.624806][ T5668] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 292.836046][ T9793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.836948][ T9793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.845572][ T9794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.848119][ T9794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.855091][ T25] appletouch 8-1:0.85: Geyser mode initialized. [ 292.883374][ T5668] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 292.886937][ T25] input: appletouch as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.85/input/input34 [ 292.997322][ T7520] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 293.005630][ T9794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.948'. [ 293.005630][ T9793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.948'. [ 293.044627][ T9793] vlan3: entered allmulticast mode [ 293.044641][ T9793] bond0: entered allmulticast mode [ 293.061354][ T10] usb 8-1: USB disconnect, device number 17 [ 293.085768][ T10] appletouch 8-1:0.85: input: appletouch disconnected [ 293.147242][ T7520] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 293.148402][ T7520] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 293.148427][ T7520] usb 1-1: config 5 has no interface number 0 [ 293.148465][ T7520] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 293.148493][ T7520] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 293.148515][ T7520] usb 1-1: config 5 interface 123 has no altsetting 0 [ 293.150944][ T7520] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.150968][ T7520] usb 1-1: Product: syz [ 293.150982][ T7520] usb 1-1: Manufacturer: syz [ 293.150996][ T7520] usb 1-1: SerialNumber: syz [ 293.371329][ T7520] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device. [ 293.375833][ T7520] usb 1-1: USB disconnect, device number 76 [ 293.606813][ T9799] netlink: 'syz.7.949': attribute type 7 has an invalid length. [ 293.939653][ T9807] netlink: 'syz.6.951': attribute type 11 has an invalid length. [ 294.371410][ T9819] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 294.447902][ T9824] binder: 9823:9824 ioctl c0186f3f 2000000002c0 returned -22 [ 294.587940][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.958'. [ 294.704148][ T9829] tipc: Started in network mode [ 294.704172][ T9829] tipc: Node identity 1000001, cluster identity 4711 [ 294.704186][ T9829] tipc: Node number set to 16777217 [ 294.704645][ T9829] tipc: Cannot configure node identity twice [ 294.864621][ T30] audit: type=1326 audit(1791638657.756:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9826 comm="syz.4.957" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a3a19e1d9 code=0x0 [ 295.334368][ T5668] usb 4-1: USB disconnect, device number 51 [ 295.433718][ T9850] netlink: 16 bytes leftover after parsing attributes in process `syz.3.962'. [ 295.440593][ T9852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.440979][ T9852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.706549][ T5668] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 295.836431][ T25] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 295.860281][ T5668] usb 4-1: unable to get BOS descriptor or descriptor too short [ 295.860334][ T5668] usb 4-1: New USB device found, idVendor=2582, idProduct=004c, bcdDevice= 0.40 [ 295.861783][ T5668] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 295.861806][ T5668] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 295.863775][ T5668] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.863799][ T5668] usb 4-1: Product: syz [ 295.863814][ T5668] usb 4-1: Manufacturer: syz [ 295.863828][ T5668] usb 4-1: SerialNumber: syz [ 295.978977][ T31] INFO: task kworker/0:7:5707 blocked for more than 163 seconds. [ 295.979005][ T31] Tainted: G L syzkaller #0 [ 295.979016][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 295.979026][ T31] task:kworker/0:7 state:D stack:22080 pid:5707 tgid:5707 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 295.979078][ T31] Workqueue: usb_hub_wq hub_event [ 295.979111][ T31] Call Trace: [ 295.979118][ T31] [ 295.979130][ T31] __schedule+0x17db/0x58f0 [ 295.979182][ T31] ? __pfx___schedule+0x10/0x10 [ 295.979201][ T31] ? lock_acquire+0x115/0x350 [ 295.979233][ T31] ? schedule+0x90/0x2b0 [ 295.979257][ T31] schedule+0x164/0x2b0 [ 295.979280][ T31] schedule_timeout+0xc0/0x2c0 [ 295.979309][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 295.979335][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 295.979372][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 295.979390][ T31] ? wait_for_completion+0x272/0x5e0 [ 295.979408][ T31] wait_for_completion+0x2ca/0x5e0 [ 295.979441][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 295.979468][ T31] ? kobject_put+0x50f/0x550 [ 295.979500][ T31] i2c_del_adapter+0x292/0x440 [ 295.979532][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 295.979562][ T31] ? dvb_usbv2_exit+0x94d/0xb80 [ 295.979596][ T31] dvb_usbv2_probe+0x4bb/0x3950 [ 295.979657][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 295.979686][ T31] ? __pm_runtime_set_status+0x994/0xc80 [ 295.979724][ T31] usb_probe_interface+0x788/0xe50 [ 295.979755][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 295.979780][ T31] ? sysfs_do_create_link_sd+0xe0/0x110 [ 295.979806][ T31] ? driver_sysfs_add+0x1fe/0x210 [ 295.979836][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 295.979855][ T31] really_probe+0x254/0xae0 [ 295.979888][ T31] __driver_probe_device+0x1e8/0x360 [ 295.979921][ T31] driver_probe_device+0x4f/0x240 [ 295.979953][ T31] __device_attach_driver+0x270/0x410 [ 295.979987][ T31] bus_for_each_drv+0x258/0x2f0 [ 295.980012][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 295.980041][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 295.980068][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 295.980093][ T31] __device_attach+0x2c4/0x450 [ 295.980122][ T31] ? __pfx___device_attach+0x10/0x10 [ 295.980148][ T31] ? do_raw_spin_unlock+0xf5/0x200 [ 295.980179][ T31] ? _raw_spin_unlock+0x28/0x50 [ 295.980202][ T31] device_initial_probe+0xa1/0xd0 [ 295.980233][ T31] bus_probe_device+0x12a/0x220 [ 295.980260][ T31] device_add+0x7d7/0xb80 [ 295.980290][ T31] usb_set_configuration+0x1bb5/0x2260 [ 295.980346][ T31] usb_generic_driver_probe+0x8d/0x150 [ 295.980377][ T31] usb_probe_device+0x1c3/0x3b0 [ 295.980401][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 295.980419][ T31] really_probe+0x254/0xae0 [ 295.987164][ T31] __driver_probe_device+0x1e8/0x360 [ 295.987204][ T31] driver_probe_device+0x4f/0x240 [ 295.987257][ T31] __device_attach_driver+0x270/0x410 [ 295.987291][ T31] bus_for_each_drv+0x258/0x2f0 [ 295.987314][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 295.987340][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 295.987363][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 295.987410][ T31] __device_attach+0x2c4/0x450 [ 295.987440][ T31] ? __pfx___device_attach+0x10/0x10 [ 295.987466][ T31] ? do_raw_spin_unlock+0xf5/0x200 [ 295.987497][ T31] ? _raw_spin_unlock+0x28/0x50 [ 295.987519][ T31] device_initial_probe+0xa1/0xd0 [ 295.987569][ T31] bus_probe_device+0x12a/0x220 [ 295.987595][ T31] device_add+0x7d7/0xb80 [ 295.987631][ T31] usb_new_device+0x9aa/0x1690 [ 295.987666][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 295.987716][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 295.987738][ T31] hub_event+0x28e8/0x4d30 [ 295.987765][ T31] ? do_raw_spin_unlock+0xf5/0x200 [ 295.987857][ T31] ? __pfx_hub_event+0x10/0x10 [ 295.987893][ T31] ? rcu_is_watching+0x16/0xb0 [ 295.987918][ T31] ? process_scheduled_works+0x97a/0x1630 [ 295.987945][ T31] process_scheduled_works+0xc3d/0x1630 [ 295.988020][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 295.988052][ T31] ? assign_work+0x3cf/0x5d0 [ 295.988082][ T31] worker_thread+0xa47/0xfb0 [ 295.988153][ T31] kthread+0x38b/0x480 [ 295.988174][ T31] ? __pfx_worker_thread+0x10/0x10 [ 295.988198][ T31] ? __pfx_kthread+0x10/0x10 [ 295.988219][ T31] ret_from_fork+0x514/0xb70 [ 295.988241][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 295.988280][ T31] ? __switch_to+0xc89/0x1420 [ 295.988309][ T31] ? __pfx_kthread+0x10/0x10 [ 295.988330][ T31] ret_from_fork_asm+0x1a/0x30 [ 295.988364][ T31] [ 295.988461][ T31] [ 295.988461][ T31] Showing all locks held in the system: [ 295.988471][ T31] locks held by pr/ttyS0/16: 2, last CPU#0: [ 295.988485][ T31] #0: ffffffff8fc364d8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 295.988559][ T31] #1: ffffffff9bd4be38 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 295.988609][ T31] locks held by kworker/1:0/25: 5, last CPU#1: [ 295.988631][ T31] #0: ffff888020ef5140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 295.988703][ T31] #1: ffffc900001f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 295.988754][ T31] #2: ffff88802aa5a1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 295.988805][ T31] #3: ffff88802aa5e568 (&port_dev->status_lock){+.+.}-{4:4} [ 295.988915][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 295.994241][ T31] , at: hub_event+0x20a1/0x4d30 [ 295.994295][ T31] #4: ffff88802a92b060 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 295.994353][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 295.994367][ T31] #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 295.994457][ T31] locks held by getty/5374: 2, on CPU#0: [ 295.994472][ T31] #0: ffff888036ff30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 295.994523][ T31] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 295.994603][ T31] locks held by syz-executor/5623: 4, last CPU#1: [ 295.994624][ T31] #0: ffffffff8fe36530 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x480 [ 295.994675][ T31] #1: ffff888036f81bc0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 295.994745][ T31] #2: ffff88807dd3ccc0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 295.994798][ T31] #3: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 295.994875][ T31] locks held by udevd/5626: 4, on CPU#1: [ 295.994888][ T31] #0: ffff888032126998 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 295.994936][ T31] #1: ffff88805895e080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 295.995019][ T31] #2: ffff88805a35b5a8 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 295.995079][ T31] #3: ffff88802c8371d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 295.995134][ T31] locks held by kworker/1:3/5668: 4, on CPU#1: [ 295.995170][ T31] #0: ffff888020ef5140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 295.995224][ T31] #1: ffffc90004487c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 295.995277][ T31] #2: ffff88802a8b81d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 295.995352][ T31] #3: ffff88803020c1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 295.995408][ T31] locks held by kworker/1:6/5706: 2, last CPU#1: [ 295.995422][ T31] #0: ffff88805a27d140 ((wq_completion)wg-crypt-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 295.995501][ T31] #1: ffffc90004ad7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 295.995588][ T31] locks held by kworker/0:7/5707: 5, on CPU#0: [ 295.995603][ T31] #0: ffff888020ef5140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 295.995661][ T31] #1: ffffc90004ae7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 295.995735][ T31] #2: ffff88802a8e71d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 295.995786][ T31] #3: ffff88802c8371d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 295.995837][ T31] #4: ffff88802ed361a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 295.995918][ T31] locks held by syz.4.957/9832: 3, last CPU#1: [ 295.996065][ T25] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 295.999004][ T25] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 295.999027][ T25] usb 8-1: config 0 has an invalid interface number: 215 but max is 0 [ 295.999046][ T25] usb 8-1: config 0 has no interface number 0 [ 296.002305][ T31] #0: ffff8880295ac460 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x3764/0x4520 [ 296.002447][ T31] #1: ffff88802b974cc0 (&mm->mmap_lock){++++}-{4:4}, at: dump_user_range+0x1c5/0x12c0 [ 296.002499][ T31] #2: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 296.002577][ T31] [ 296.002582][ T31] ============================================= [ 296.002582][ T31] [ 296.002591][ T31] NMI backtrace for cpu 1 [ 296.002605][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 296.002636][ T31] Tainted: [L]=SOFTLOCKUP [ 296.002642][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 296.002655][ T31] Call Trace: [ 296.002662][ T31] [ 296.002670][ T31] dump_stack_lvl+0xe8/0x150 [ 296.002697][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 296.002727][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 296.002756][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 296.002786][ T31] sys_info+0x135/0x170 [ 296.002809][ T31] watchdog+0xfd7/0x1030 [ 296.002837][ T31] ? watchdog+0x1c7/0x1030 [ 296.002862][ T31] kthread+0x38b/0x480 [ 296.002881][ T31] ? __pfx_watchdog+0x10/0x10 [ 296.002899][ T31] ? __pfx_kthread+0x10/0x10 [ 296.002919][ T31] ret_from_fork+0x514/0xb70 [ 296.002940][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 296.002958][ T31] ? __switch_to+0xc89/0x1420 [ 296.002985][ T31] ? __pfx_kthread+0x10/0x10 [ 296.003005][ T31] ret_from_fork_asm+0x1a/0x30 [ 296.003036][ T31] [ 296.003062][ T31] Sending NMI from CPU 1 to CPUs 0: [ 296.003098][ C0] NMI backtrace for cpu 0 [ 296.003112][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.003140][ C0] Tainted: [L]=SOFTLOCKUP [ 296.003146][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 296.003156][ C0] RIP: 0010:delay_tsc+0x73/0xd0 [ 296.003182][ C0] Code: e8 42 b6 ad f5 65 48 8b 05 fa b8 ae 08 48 85 c0 74 1c f3 90 bf 01 00 00 00 e8 d9 b4 ad f5 e8 f4 7b 01 00 39 c5 75 0e 0f 01 f9 <66> 90 eb bb e8 24 0e 4c f5 eb dd 4c 29 fb e8 da 7b 01 00 89 c5 0f [ 296.003199][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000046 [ 296.003215][ C0] RAX: 000000008c641f14 RBX: 0000000000000899 RCX: 0000000000000000 [ 296.003227][ C0] RDX: 000000000000009d RSI: ffffffff8c6dde60 RDI: ffffffff8c6dde20 [ 296.003239][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 296.003250][ C0] R10: dffffc0000000000 R11: ffffffff8be756c0 R12: 1ffffffff37a9821 [ 296.003263][ C0] R13: 00000000ffffffff R14: 0000009d8c641614 R15: 0000000000000884 [ 296.003275][ C0] FS: 0000000000000000(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 [ 296.003290][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 296.003302][ C0] CR2: 00007f1e71abf7a6 CR3: 000000007a014000 CR4: 00000000003526f0 [ 296.003318][ C0] Call Trace: [ 296.003324][ C0] [ 296.003333][ C0] wait_for_lsr+0x147/0x2f0 [ 296.003360][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 296.003383][ C0] serial8250_console_write+0xa7e/0x1200 [ 296.003405][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 296.003428][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 296.003450][ C0] ? __schedule+0x17f1/0x58f0 [ 296.003476][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 296.003505][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 296.003528][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 296.003554][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 296.003572][ C0] nbcon_kthread_func+0x679/0x880 [ 296.003595][ C0] ? nbcon_kthread_func+0x163/0x880 [ 296.003615][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 296.003638][ C0] ? __kthread_parkme+0x71/0x1f0 [ 296.003661][ C0] ? __kthread_parkme+0x199/0x1f0 [ 296.003687][ C0] kthread+0x38b/0x480 [ 296.003704][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 296.003722][ C0] ? __pfx_kthread+0x10/0x10 [ 296.003739][ C0] ret_from_fork+0x514/0xb70 [ 296.003759][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 296.003775][ C0] ? __switch_to+0xc89/0x1420 [ 296.003799][ C0] ? __pfx_kthread+0x10/0x10 [ 296.003816][ C0] ret_from_fork_asm+0x1a/0x30 [ 296.003839][ C0] [ 296.006044][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 296.006067][ T25] usb 8-1: Product: syz [ 296.006081][ T25] usb 8-1: Manufacturer: syz [ 296.006116][ T25] usb 8-1: SerialNumber: syz [ 296.068577][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 297.285290][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 297.295969][ T31] Tainted: [L]=SOFTLOCKUP [ 297.300288][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 297.310336][ T31] Call Trace: [ 297.313609][ T31] [ 297.316533][ T31] vpanic+0x56d/0xa60 [ 297.320520][ T31] ? __pfx___schedule+0x10/0x10 [ 297.325364][ T31] ? __pfx_vpanic+0x10/0x10 [ 297.329874][ T31] panic+0xc5/0xd0 [ 297.333594][ T31] ? __pfx_panic+0x10/0x10 [ 297.338241][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 297.343711][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 297.349088][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 297.355254][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 297.361420][ T31] watchdog+0x1030/0x1030 [ 297.365756][ T31] ? watchdog+0x1c7/0x1030 [ 297.370181][ T31] kthread+0x38b/0x480 [ 297.374244][ T31] ? __pfx_watchdog+0x10/0x10 [ 297.378911][ T31] ? __pfx_kthread+0x10/0x10 [ 297.383500][ T31] ret_from_fork+0x514/0xb70 [ 297.388081][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 297.393183][ T31] ? __switch_to+0xc89/0x1420 [ 297.397858][ T31] ? __pfx_kthread+0x10/0x10 [ 297.402440][ T31] ret_from_fork_asm+0x1a/0x30 [ 297.407206][ T31] [ 297.410474][ T31] Kernel Offset: disabled [ 297.414871][ T31] Rebooting in 86400 seconds..