last executing test programs: 2m11.332931805s ago: executing program 1 (id=735): r0 = socket$kcm(0x2, 0xa, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}}) 2m11.194581532s ago: executing program 1 (id=736): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r1 = userfaultfd(0x80001) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1ff}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x80}}, 0xc800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2e8}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) syz_open_dev$loop(0x0, 0x7, 0x180862) openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0xf) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r6, 0x707, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f00000002c0)=0x5, 0x4) 2m7.315488907s ago: executing program 1 (id=746): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0xcd3, &(0x7f0000000400)={0x0, 0x5889, 0x1000, 0x0, 0xffeffc03}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@un=@file={0x0, './mnt\x00'}}) io_uring_enter(r1, 0x3516, 0x483, 0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x4b, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r4, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0xc000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f0000000200)={'sit0\x00', &(0x7f00000001c0)={@empty, 0x1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0xc, 0xff9, &(0x7f0000001840)=""/4089, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) syz_usb_connect(0x6, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a009562010203010902340001000000000904"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 2m5.547838881s ago: executing program 1 (id=755): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a3", 0x1) r3 = syz_io_uring_setup(0xf90, &(0x7f0000000380)={0x0, 0x77e5, 0x800, 0x3, 0x32f}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000040)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_emit_vhci(0x0, 0x7) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x50) r7 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./bus\x00') lseek(r9, 0x7, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x24, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x84ca}}) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r11, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES8=r10], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m4.803445971s ago: executing program 1 (id=757): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000001c0)={0xcc2}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x2a, 0x2, 0x0) r6 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r6, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffffffffffd21, &(0x7f0000000280)={&(0x7f00000008c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x6, 0xffff}, {0x2, 0x4}}, [@qdisc_kind_options=@q_tbf={{}, {0x0, 0x2, [@TCA_TBF_RATE64={0x0, 0x4, 0x5b0276c0c83bf0b8}, @TCA_TBF_BURST={0x0, 0x6, 0x1}, @TCA_TBF_BURST={0x0, 0x6, 0xe}, @TCA_TBF_PARMS={0x0, 0x1, {{0x6, 0x2, 0x5, 0x5, 0x401, 0x9}, {0x85, 0x2, 0x1, 0x1, 0x5, 0x1}, 0x401, 0xf, 0x11b4}}, @TCA_TBF_RTAB={0x0, 0x2, [0x9, 0x4, 0x0, 0xfc4a, 0x9, 0x800, 0x9, 0x5, 0x7, 0x51, 0x32c, 0x6, 0x3, 0x1ff, 0x0, 0x18f2, 0x0, 0x5, 0x0, 0x4, 0xff, 0x3, 0x7, 0x8ed, 0xa, 0x3, 0x7, 0x9, 0x3, 0x1ff, 0x4, 0x7, 0x3, 0x2, 0x8bd, 0x9, 0x4, 0x5, 0xfff, 0x3, 0x0, 0x2, 0x3, 0x200, 0x7, 0x1, 0x0, 0x9, 0x2, 0x7, 0x4, 0xd7e0, 0x10, 0x3, 0x0, 0x2, 0x9, 0x3, 0x9, 0x80, 0x10001, 0x81c00000, 0x8, 0x0, 0x0, 0x8, 0x7, 0x8001, 0x800, 0x9, 0x2, 0x5, 0x3d, 0xa, 0xffffffc8, 0x800, 0x7, 0x41f, 0x3, 0x19d, 0x9, 0x0, 0x5, 0xaf3, 0xa00000, 0x1, 0x4, 0x9, 0x8, 0xf293, 0x0, 0x83f4, 0x6, 0x8, 0x4, 0x1, 0x8, 0x100, 0x0, 0x9, 0xd489, 0xaa, 0x10001, 0x1, 0x7fff, 0xfffffffb, 0x2, 0x7, 0x0, 0x81, 0x6d967366, 0xac, 0x3, 0x3, 0x3, 0x1, 0x2, 0xdc09, 0x9, 0x9, 0x3, 0x3ff, 0x6d, 0x7, 0x3, 0x0, 0x0, 0x5, 0x7, 0x4, 0x1, 0x9d7, 0xfffffffd, 0x0, 0x8, 0x80000000, 0x4, 0xffffffff, 0x5334261f, 0x3, 0x1, 0x4, 0x6, 0x4, 0x5, 0x2, 0xee6c, 0x6, 0x7, 0x9, 0x2, 0x400, 0x5, 0x6, 0xffff, 0x2, 0x4, 0x5, 0x1, 0x4, 0x0, 0x0, 0x2, 0x2, 0xe, 0x100, 0x8000, 0x5, 0xd3, 0x8000000, 0x8, 0x6, 0x8, 0x1, 0xc4f7, 0xe, 0xffff, 0x4, 0x0, 0x8, 0x8000, 0x2, 0xdbda, 0x1000, 0x2, 0x10, 0xa, 0xb3f, 0xffffffff, 0x6, 0x8, 0x1, 0x8, 0x2, 0x1, 0x6, 0x1, 0x6, 0x2, 0x7, 0x6, 0x8001, 0x3, 0x73, 0xe0b, 0x9b, 0xa3e, 0x3, 0x8, 0x10, 0x2, 0xfffffc00, 0x80000000, 0x832, 0x84, 0x8, 0x400, 0x7, 0x82, 0x7f, 0x3, 0x5, 0x5, 0x0, 0x3b3, 0x7, 0x5, 0x4, 0x401, 0x9, 0x2dceaa31, 0xe, 0xe, 0x6, 0x7, 0x1f5, 0x100, 0x8, 0x100, 0x8, 0x401, 0x3, 0x5, 0x1ff, 0x8, 0x2, 0xa, 0xf, 0x3, 0x2951, 0xf5a, 0x3ff, 0x7d, 0x6, 0x7fc00, 0xfffffffa]}, @TCA_TBF_PRATE64={0x0, 0x5, 0x397d94db17aa007d}, @TCA_TBF_PARMS={0x0, 0x1, {{0x9, 0x0, 0x1, 0x91, 0x3, 0x7}, {0x3, 0x1, 0x4, 0x0, 0x5}, 0x7d, 0x81, 0x9c2}}, @TCA_TBF_BURST={0x0, 0x6, 0x9}, @TCA_TBF_PTAB={0x0, 0x3, [0x10, 0x9, 0xfffffffd, 0x1ff, 0x7, 0x100, 0xffffffff, 0x5, 0x1, 0x6, 0x42, 0x762acd39, 0x7, 0x8, 0x401, 0x9, 0x101, 0x5, 0x3ff, 0x2, 0x7, 0x0, 0x800, 0x4, 0x309f, 0x5, 0x6, 0x101, 0x2, 0x2, 0xfffffffc, 0x1000, 0x8, 0x0, 0xb5, 0x3ff, 0x5, 0x806, 0x4, 0xffff, 0x4, 0x2, 0x5, 0x5, 0x0, 0x8000, 0x7, 0x7ff, 0x1, 0x29, 0x4, 0xac1e, 0x2800, 0x370bd4b, 0x10000, 0xf2d5, 0x800, 0x40, 0x9, 0x3, 0x7, 0xffffffff, 0x0, 0x2, 0x40, 0xe8, 0x6, 0x4, 0x4, 0x7, 0x8001, 0x2, 0x200, 0x2e, 0xfffff801, 0x9, 0x9, 0x7ff, 0x0, 0x6, 0x7fff, 0x7, 0x0, 0x6, 0xd, 0x5, 0x6, 0x1, 0x1, 0x1, 0x7, 0x6, 0x400, 0xffff, 0x4, 0x5, 0x1, 0x8, 0x3, 0x3, 0x3, 0x8, 0x4, 0x7, 0x1, 0x1, 0x8, 0x9, 0x3, 0x0, 0x9, 0x5, 0x8001, 0xfffffffc, 0xfffffffb, 0x6, 0x0, 0x2, 0x0, 0x7, 0x8001, 0x33, 0x1, 0xb, 0x3, 0xbf, 0x6a96, 0x4, 0x80, 0x0, 0x5, 0x3, 0x0, 0x200, 0x81, 0x1ff, 0xfff, 0x78f1, 0x2, 0x44, 0x80, 0x3, 0x9, 0x5, 0x6, 0x3, 0x3, 0x401, 0xfffffb8d, 0x5, 0x9, 0x9, 0x27, 0x800, 0x7f, 0x5, 0x932, 0x3, 0x81, 0xc10b, 0x6, 0xfffffffe, 0x392, 0x8, 0x5, 0x2, 0x330c, 0x8000, 0x80000001, 0x1000, 0x7, 0x3, 0x1b, 0x5, 0x40, 0x5, 0x80000000, 0x9, 0x1000, 0x5, 0x5, 0x5, 0x5, 0x60a0, 0xd4, 0xbf59, 0xe6, 0xfffffff7, 0x60f, 0x78, 0x8, 0x9, 0x10, 0xf9c8, 0x8, 0x0, 0xad, 0xa, 0x80, 0xfffffffb, 0x5, 0x2, 0xffff, 0x7f, 0x3, 0x2, 0x4b, 0xd, 0x7fff, 0x5, 0x80, 0x3, 0x6, 0x435, 0x7, 0x9, 0x4, 0x0, 0x7, 0x2, 0x0, 0x10, 0x7, 0xfffffff9, 0x0, 0x1, 0x74, 0x1, 0x3, 0xffffffff, 0x1, 0x5, 0x8, 0x7fffffff, 0x4, 0x7, 0x80000001, 0x5, 0x80, 0x32f, 0xdf, 0x42379c59, 0x9, 0x10, 0x6, 0x9, 0x6, 0x6, 0x31, 0x3b591ecd, 0x80000001, 0x0, 0x1, 0xeab8, 0x97, 0x1]}, @TCA_TBF_PRATE64={0x0, 0x5, 0x9818090248887e7e}]}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x97, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_KEY_TCP_SRC]}}]}, 0x6c}}, 0x24000000) r10 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1586dd6000021000403afffe8000000000000000000000000000bbff02000000000000000000000000000103019078300000006d5d296b08002bffff0100000000000000000000000000012001000000000000000000000000000209000800000000000000"], 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)="c851bdb4bb5e9f7bc33502edd120f5fce2c621f77621aeb601a45b0a46aa372f707d13087dec83ff3cfa51c65e92bf893ed6015e8e21e854", 0x38}, {&(0x7f0000000540)="beeeeb7975e2095dc0290104ad84fb8168eac9cdcae4ddd1fd46854257207e1ae0c96ec7bd665283901a8fe4cd6dc5431a73346c147870d09711120ac53505e1eb2b20bad6384b49a425413d47ef6b7fa366d50998c2cc821ef1231057188a716b2c82a4a54b7dc41a783bbd5009dd343141396b71610739c5eaa211ca67b2b151399ab9c1965129e35d064d5b3533b1aa956f035c5f2adb20ed9b5b2b6246c95e7773b95c7895d87e4ee39f28f65278a2e7915af216ca4e15a553a807c0fb3abc847a6a3f5dbd3f06d685b620eb84eca4135cb59d30fd3f2d5dd012d97f976378cab8", 0xe3}, {&(0x7f0000000640)="cc123e78d3c4812e5515680f4aadf06c45d4c309fee26c87220a4772bf9dd258cc79ff856c54f1c6f3067a6e6bfe73f1bb1ffd94355d66d3e3228519d37a1ac65c13f683c4e81898fde2d1f942acb2d96c2a6261974d23f5b4b4c7438e30b9c9a338", 0x62}, {&(0x7f00000004c0)="c7d6f5ce5bb11bb9744ac6d8f18fdb4d8d00332cd6017e8f0070eadba0fa", 0x1e}, {&(0x7f00000006c0)="ea6517c2", 0x4}], 0x5, 0x0, 0x0, 0x1000}], 0x1, 0x44) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r1, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m1.723739232s ago: executing program 1 (id=768): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ftruncate(r3, 0xc17a) lseek(r3, 0x2000, 0x4) r4 = openat$cgroup_int(r3, &(0x7f0000000300)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) r5 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x38) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r6, &(0x7f0000000340)=[{&(0x7f0000000480)=""/14, 0xe}, {&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f0000003a40)=""/4097, 0x1001}, {&(0x7f0000001680)=""/4082, 0xff2}], 0x4) syz_open_pts(r5, 0x4603) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000100)="2ddc150d306d4079c90f5cd8ba21e92e64cf382e157f23bc34c2f6404cc7263a68181a01a19682a0cc45e9d34b24f75f4f6f0e2ebfe2a4458bc093fd4b9d255c0e3ce0d1fbb00e5b1ab022315ab33e38b769e73e1b313b50cdd8bca34899c3f4b59f58756fe0bcb392527f4c5f566a07d942b94600df5eb1acd69a2f49d28758d1b82311d4f4c70fb622acf1bec7bad06d239b7da0cc28e068a476925cdedc00a72b7c623d0ae1be9d39cfc76d8fecb28a130baff6643d", &(0x7f0000000080)=@tcp6=r0}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x1, 0x1}, 0x20) r7 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xf, 0x0) ioctl$VIDIOC_LOG_STATUS(r7, 0x5646, 0x0) setsockopt$inet6_int(r1, 0x29, 0x12, &(0x7f00000002c0)=0x80025, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r1], 0x18}, 0x40c0) 1m58.443618765s ago: executing program 4 (id=779): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4}, 0x8) sendto$inet6(r0, &(0x7f0000001240)="b6", 0x1, 0x24000000, &(0x7f0000000280)={0xa, 0x4e22, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x85}, 0x1c) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m56.818883958s ago: executing program 4 (id=782): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21, 0x8, @mcast2, 0x47f40b73}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x100, @private2}, 0x1c) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000200)={0x6, "63ff8791919a5b70f918110cd2e1f7fbd15ec7918e806deb14c0f82379b49307", 0x3, 0x1, 0x7, 0xcd5, 0x4, 0x4, 0x400}) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x7, 0x81, 0x8, 0x18, 0x10, 0xfffff801}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000003c0)={0x3, &(0x7f0000000080)=[{0x50, 0x5, 0x5, 0x5}, {0x20, 0xfe, 0x22, 0xfffff038}, {0x6, 0xfc, 0x40, 0x2}]}, 0x10) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 1m55.591693805s ago: executing program 4 (id=783): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4d, 0x400, 0xe, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0xe, [0x0, 0x8, 0x4, 0x0, 0x7, 0x0, 0x1]}}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000014000f8008000240000000030800214000000004"], 0x4c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)="58ab", 0x2, 0x84, &(0x7f000005ffe4)={0xa, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000000100)="58ab", 0x2, 0x84, &(0x7f000005ffe4)={0xa, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x1000, 0x30}, &(0x7f0000000300)=0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x0, '\x00', 0x654}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m54.999247121s ago: executing program 4 (id=788): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r2, 0x402, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x80000001, 0x19}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x50) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x280449c, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 1m53.96053795s ago: executing program 4 (id=792): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x200}) r1 = landlock_create_ruleset(&(0x7f0000000100)={0x3006, 0x5, 0x1}, 0x18, 0x0) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r4 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0xffffffff, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents(r7, &(0x7f0000002380)=""/130, 0x82) mknodat(r7, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) io_uring_enter(r7, 0x643a, 0x143e, 0x22, &(0x7f0000000240)={[0x8]}, 0x8) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x4, 0x9}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328) sendfile(r8, r8, 0x0, 0x200000) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$dsp(r10, &(0x7f00000000c0)=""/152, 0x98) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], 0xfce) 1m53.714566966s ago: executing program 4 (id=793): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x4, 0x7ffffe39}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fadbdf25010000001400020077673100000000000046b0000000000024000300a0"], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) getresgid(&(0x7f00000001c0), &(0x7f0000000340), &(0x7f00000003c0)) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000040)=0x3ff) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x10ffff) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r2, 0x54a6) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendfile(r5, r3, &(0x7f0000000140)=0x9, 0x63) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @private2}, 0x1c) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x7, 0x81, 0x8, 0x18, 0x10, 0xfffff801}) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f00000003c0)={0x3, &(0x7f0000000080)=[{0x50, 0x5, 0x5, 0x5}, {0x20, 0xfe, 0x22, 0xfffff038}, {0x6, 0xfc, 0x40, 0x2}]}, 0x10) write$binfmt_aout(r8, &(0x7f0000000000)=ANY=[], 0xfdef) 1m53.308654818s ago: executing program 32 (id=793): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x4, 0x7ffffe39}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fadbdf25010000001400020077673100000000000046b0000000000024000300a0"], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) getresgid(&(0x7f00000001c0), &(0x7f0000000340), &(0x7f00000003c0)) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000040)=0x3ff) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x10ffff) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r2, 0x54a6) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendfile(r5, r3, &(0x7f0000000140)=0x9, 0x63) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @private2}, 0x1c) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x7, 0x81, 0x8, 0x18, 0x10, 0xfffff801}) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f00000003c0)={0x3, &(0x7f0000000080)=[{0x50, 0x5, 0x5, 0x5}, {0x20, 0xfe, 0x22, 0xfffff038}, {0x6, 0xfc, 0x40, 0x2}]}, 0x10) write$binfmt_aout(r8, &(0x7f0000000000)=ANY=[], 0xfdef) 1m46.64535712s ago: executing program 33 (id=768): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ftruncate(r3, 0xc17a) lseek(r3, 0x2000, 0x4) r4 = openat$cgroup_int(r3, &(0x7f0000000300)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) r5 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x38) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r6, &(0x7f0000000340)=[{&(0x7f0000000480)=""/14, 0xe}, {&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f0000003a40)=""/4097, 0x1001}, {&(0x7f0000001680)=""/4082, 0xff2}], 0x4) syz_open_pts(r5, 0x4603) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000100)="2ddc150d306d4079c90f5cd8ba21e92e64cf382e157f23bc34c2f6404cc7263a68181a01a19682a0cc45e9d34b24f75f4f6f0e2ebfe2a4458bc093fd4b9d255c0e3ce0d1fbb00e5b1ab022315ab33e38b769e73e1b313b50cdd8bca34899c3f4b59f58756fe0bcb392527f4c5f566a07d942b94600df5eb1acd69a2f49d28758d1b82311d4f4c70fb622acf1bec7bad06d239b7da0cc28e068a476925cdedc00a72b7c623d0ae1be9d39cfc76d8fecb28a130baff6643d", &(0x7f0000000080)=@tcp6=r0}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x1, 0x1}, 0x20) r7 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xf, 0x0) ioctl$VIDIOC_LOG_STATUS(r7, 0x5646, 0x0) setsockopt$inet6_int(r1, 0x29, 0x12, &(0x7f00000002c0)=0x80025, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r1], 0x18}, 0x40c0) 9.699511324s ago: executing program 0 (id=1201): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x28}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) 9.309358077s ago: executing program 0 (id=1203): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) pipe2(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000980)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r3, 0x3, r1, 0x5}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000200000008450c0b7600000000000109022400010000000009040000ff0300000009210400000122850009058103"], 0x0) (async) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x801, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000300)={0x0, 0x1}) (async) syz_usb_control_io(r5, &(0x7f0000000340)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00218500000085"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x3, 0x1) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv_slave_0\x00', 0x10) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f00000000c0)='fd', 0x0, r7) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f00000005c0)='fd', 0x0, r7) (async) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r11 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet6(r11, &(0x7f0000001780)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001240)="39e9", 0x2}, {0x0}], 0x2}}], 0x2, 0x20008041) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f00000002c0)=r12) (async) sendmsg$nl_xfrm(r10, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000844) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) write$tun(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000ff7f140000004500005c14000000000190780a010100ac1414aa05039078ac1e01014f14008000660001072fa771f0c97c97ecffffff89276a00000004fe530101ac1414aa00000000e00000020a010100ac1414aaac1414aa7f000001009cb8786cbd1864038a86c7f27f64cea2269105728efc2e8adf1e7300b60219fc1a159fc896b271344d41718d37c198949b4b45dea287173f218c5d279fa3cd5bc831fdc662d4a7d381549e451f5b9a4582a0f2f67f92331b04f1105d279dd9990c6be53faefb5508d8c9eca1fabc60266cbc0690c9cd86b35b85e78aba4877c6b520304fcb9c3c60b6edbd5fdc82c2441702274c3a757ad22ad564b6742737a666a3e16b9d"], 0x66) 9.007695097s ago: executing program 0 (id=1207): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 8.702514908s ago: executing program 3 (id=1210): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000010000000400000000000000100000000000000020"], 0x24, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, 0x0) 8.029925377s ago: executing program 5 (id=1212): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7.861060603s ago: executing program 5 (id=1213): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r4 = syz_io_uring_setup(0x9f7, &(0x7f0000000180)={0x0, 0x992a, 0x10, 0x4, 0x1a6}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) io_uring_enter(r4, 0x3517, 0x9141, 0x52, 0x0, 0xa) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x3}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000014) unshare(0x6a040000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x4e20, 0xfffe, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x5, 0x204}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x4010) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) r10 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f00000000c0)='name', &(0x7f00000002c0)='c!\xf1\xa7\x9d', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000100)='name', &(0x7f0000000180)='-,))}}@\x00', 0x0) ioctl$FS_IOC_MEASURE_VERITY(r9, 0xc0046686, &(0x7f0000000240)={0x2, 0xe, "5204d857c73a32bbc5ac255d2198"}) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x0) 7.002503269s ago: executing program 0 (id=1214): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000004280)=@file={0x0, './cgroup\x00'}, 0x6e) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xfffffffe) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xe032, 0xffffffffffffffff, 0x80000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000f41000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_connect(0x7, 0x9dd, &(0x7f0000004340)=ANY=[@ANYBLOB="8a0dc8e8809269787e3e761107638c1bdde5466bfe6deebcdcb59ccfe3182b2bdd6079a4ab6ed2dc3f15af4db480502d6b19a01d88007df4bb8f554403d996d0c1f2d703499ecc0291b01c14a74e18b3745870479d4109ac73b97e22ec6495c26f30be4fc0d2841bdf2d4f7561f50a867788601a05f8fead8ec226d2b9d8bcc99f80"], &(0x7f0000001780)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x110, 0x7e, 0x4, 0x88, 0x10, 0xfd}, 0x19, &(0x7f0000000400)=ANY=[@ANYRES8=r2], 0x9, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x4001}}, {0x51, &(0x7f0000000880)=ANY=[@ANYRES8]}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc0a}}, {0x19, &(0x7f0000004300)=@string={0x19, 0x3, "1c3ac51f65b4d99e2d597c054e3b0110fcdd26694e48f5"}}, {0x54, &(0x7f0000000600)=ANY=[@ANYBLOB="540386ddf6fcc2029f9cbf6de18d28ede96a56ae3dfb15ecc05897e4627507175cdddee1b50c0ae2791dec8778c1bbfc11e9e1a5616ef24371004b7de15aad1f681afce8415c0fc213842219d36aa4a0"]}, {0x2, &(0x7f0000000680)=ANY=[]}, {0x11, &(0x7f0000000140)=ANY=[]}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x44a}}, {0xc8, &(0x7f0000003280)=ANY=[@ANYBLOB="7793088939c199e444bb41cec457a9abcaec61a38bc4eb609ddfdb9117dd41180d62a7b8b9fab4fb7065b424c5422745baca9aed652e681e854c3b9272ed18fb4f8ab2cea570c08ef2d12af3e5b8ecc874e5fbebb28bbae9a9b548e7d70d45e329b8b8ddbe402ae0dcd6a07f1007be6da5d43858e27d3b46162d000c6a8e181c1e25180cfad61812c6e086c5f6e8257c139c4ac91e16278ba5351f95f527d410375bc7c5ed79e876e6e4476667650e72ee78554a1aa902d7d709ae2950d5b58151ed84ecb594b8b5886d5dff83b1055318cd07572fae21b32afc351525c4d7babc794db3681e90b3cace3d78e83b27ec205f518156e6b9fdf12f96b79090d4b88e43820108b1f8eb2c760f51453861a7250a0f0318dac16655709ad1192fd6c29880824b5cb8f27ca2b2325efd9042ac117cb9dd528f54ae130630112fd900f00afb2a19ac54f5f50efbe65b37011b777191941b71924353ace85aa9996cb27ef5277a01ae5cb627611e5d73e935c5278068cb09dd8c3c7fbc96d25d5c74100861b94085c2c13479cf9f089d9825def615a3c4e6dc6a8f88a96df793fcffb632c55295aabcd7797d4d26b4d359b903ae9a0d3f5ce911acca0da19b02951f94b97c3c91e33ae9b99023b7c43ce0f6e83d3ef232c082882bb1a7a93ee384bd79378f67327a47d4145c2a55293e2d5d40e8f6368b65b9929fd12a66509097df425ef9723b80b9d22d33ca428ed19fc003008936910e36adadbb96e6f371b8c17ba90874d2679800fcfd5bc86eb50cb22129534484e43549f30b4d9a05c33b499b0c3448b22330bb6346fecb13b6f93ae6f3a8fabfbd02e5b6681bab83de4b32e8930b7a1bcedc0a77870eedb71e0043177d6b57cb05c699bc53063cb075502a4ed389282185049287ace571ba97a083b9cbd2fca6a5b32bdfb9c50a317b8ab1212e81c7716a569df98259d461dd4ce8c72a17c03e473576c12333950d8be19e9d2d6753eafe9d13f189a0ae21ac09538c398db59573617530d0be24c42fcbf912076356ff2c969a9af2922d6f35cca93a8cd3da3151906f5fba924aea1f66026e7743bdfb78dea20885b571cdb8f6a55230d64fbd552abbaa043c786bdea7544255ed0e2346a2ef623528f4e57622bd1594760fcb0116b9b326f990dd9379e36cdea2a1f7ec03c5fcbeda8a12edff6335bc6b86ca0909eab954769583a447cef375372bfcc76efad0e2df2bfdc817add90e9d1b7d33a99e70ccf8a9bed04ed705affeeda228beb8165f06389bad0692d760504306731459409bb31682ea71a073c3c6fd1553faa821edb5ac65697ca52992bf16e3e2fd9af0a56ab47dfa49ff67bd5291c2eda4ec9d22429109f7c1a7c61e96325cc88bd993ae1f730b7d201a5ceef2ce3a583595efff6fc6c15c54aaf028aa283ddc972623445f89c16b3482dbffdf6984ed280aedade0461e43d86ab10884831ae58a8b6d1627517362d78a5fce6d6833f73fe34bcebc01b54cd49092804720cea5cfcea009df66d86a349cf4a4fba88a13d52a16de7c23cf0bf1b9cc62142d07b17fa29726242a1ba9cd41c22f2fa70784dc361e8396046722654ace7dabc83932741bb567c9d29db58a9356e2826f831534a59bcb95665eca83700059f382d1d772b1c463f90bfcd6f7a29f0ca90367362f779f3f67c7cd7b2558941cbe86ba1738b0103d98398bb09b6538340cdbe4c0ec7422ff9221d37e3e607cd2151e9789866140a45ff20659210f7b4f46b7b8615b1286791fda0aab01d9e52eeb9974ed83144fb40aa1414c0d75d871f01b92937990a87d18c1660e54fcadf3c01db1b964ea2e2043eed2ffe27597185b6f82b8f87b150ec448fd7cb664c4ec8302dc946d70b30af280308046e797f6d7474d654069c032374e9ca4136e28c87e2df91b8235e4a8296642350e5f310f2010a6e65488274c98f1e3114f1f71997fecfc313f863b5afb02e30e77a79fbc8bcf0fdc22d751dd5cae48c0739f27cdf14e7199cfe8cc955c73f9d8aef04ea2fbeb6fd59d6e6f9eed0bf9fc3a2d5e0b93730c7120e8cc16d4ea6b144918cdcc48ba4d29120993ef689501a25d7573d54f8a0e8d5f5d401aa851f2215544107ac0b74655419dc047ddfa9f0decf970cb934c2bcdba9cae398fa1c57c4c759dac2c00ec6e96a40204616f0bbef136089887d4fe8f2d6a36123195bcb00dbcba0085830a55a6020c70b14ce593a7a8932e4bb8380d918c293581d0c61d961253b7bbbd5a112a5c6f23d0b4dc842a3610421e1423e48b63ae20bcf8bad026ef6e0732031b22256fe3c5ee47aa1a9fbf68b6933bf53071c19f4e9e0b54bb9caeeddf01b3e33c158b55f75cb04fb89e0a27e7dc5a74deabc3e1304434187d5c684423767b6146c3e5c648b82b7feb927a5262d0029dee77349594c908b5c73dfc5d8db29af7e8a73e6b621a3b0dd05e1895799482edc245c7705cc2064b8c36b457f645d2a04233fa29d680071b7591559d04fd928fb8070600ba53dad196af8b0619cefb835a455adb15005c1cead4e1915b32e718251fa7e19b3dec20a6232a6b14736c94eb044f69c8330414fa118a8fcf1e1c0c91b6e7a76b62b8a607a322f8dae5031993201705490f8b7cc8f77c413e502fabdd2679117ac51200eaf902a7005eb0a79d7533e0c6e123060fccd4e22e25e4bc7f0c549026b3c0478c9037d7c32516f3eeac87d063979b880a20609b71e1de4751adc89548778c3195a03600ff2e29bfb4486bf5187fe0d82ceb8531c3507097e47ba88defaffa608d4ac38a737276e8f2779f812d86ad1a05e6af95dc79afcc376fe3996765fd4a8578fed42148a45e109a96a5cd0b0bc6bf2c5d814944b66b6f2b009085497adfca65dff899f06d672c2777a5eec54cd60bc30d97998ddb6ca3421170afff6c716602a2add91680102b2eb3974a313f8f7e1c9700ba9f82faf348456a12192625693e21054f8765724d2e772e846602c5930013ed8c2611d0d32fce5094ead507c93d94286d3f3d9e4182297e73ead0d0f221029b2fd45c40d507ac46115c9dd314cc86d468b1303a638219c441739853ee342466237c5d23857ad6bc51345eb91e1c7317572f3cf072ae1dec65fc54105bcbb0781e13520e4b17f68cb2113ab1ff1b5a8d63c66c92bc535e6d7b375915004cb27a1eaf67a75ab416ee1f39da68b6b3d48e968f5dece1c2c4daf518b4b6e98f9fe5b17bbd8309d37bc6ea02248823277181f7c5a6fd2f54f14948b0c8667245b842c89b8e5cdf61bd0b6ff67b131407209b4a3484c314e2ae748aeb0d3cd07f981c425c044355f29f1059507dccc532748e458d3fc52dee711beb19359bb7bfdc2603e1171d79542f31815f3898741f072cbc87a96b152d0ae351f107bfdcaaceef5b545862bee863c4bc5f0b76f41c8c160e9c6947442571747a167098e49f5b56f285bdc1f14a298427f91a9ff7102dfe4b2695f1449c7f1fccddb026b09a5eb26886da1a17ecc097b177fd3e0a5e73b1d6cfbbf0847ff8bd6dd518497dd3fe89b24883eb9f11e385213c7ee5a63824769f34a25554e1847a85bbc1e588164f467075d7af99aa570d5282494a561f909e14db3b71cb75c89446cbda5074a85834d2675c8a79d8e1e1f8431155b035d02cb43f8480d37ee2eb921c1180fac49cfd14f900bc33f77c16d9883592b4ce54b964e6ba14ddec986d1b64173cf923b4bdd3fcf8aef02d7ef76466f9000197b7751670494345f1f91df7ce35435c82b6a0b997f34dae279dbae3bd636ec27e57a806db658391717faef5fcee89938b1c46b690965d90898f848ea03bdad605a4abdd57f70bf06879aeeb29beada00afeb9255cf7692012ed1409a1e57a6344c3cbf2a5251b9c406b33818148ef5f0cf9a386331090f730c60a1a0ba82c1604a8663be282e76eb8d625f9ba906c1acb9e47f2fd5828cf2a9dd5aee474e002fc2ea675ac654a5db696bc09a693a4160698afb267e98789c2017ba5807cda6cce35bcfb3efa19ded7455d18525911a163afeedb1ce7de35e96c02246d85c734cf53338d72e5e17ef7d1722e8e3e1e2254b405352269c4e758b3836f3fec3a636aa4ab8379f92702e176c7a72ccc6b45b9d98011a5cc28a503fd681472e24a4b7c1d00d43e5b07305d9b28a6f0fa33ed5a9a9a040a1ebb763182d9fe73c9b4bc081962d3f556c34b02a57a9dc43cf399b22ca88df47571601f9afa0d23c233cca736ba40cfc80d972bf63e061160c12432341e204a08e304000427928cf83c0cec23073fef7a55b569a540208ba38ccc715b9aebf8a47331973dfd1e1359877d48caea6e88ee9cc44f4a69b35f0a257b60ae972d4fc67c361e4e483407e49d038ab86e7f6d576e06817f6f50bdcaf9ae6b57e8047e2a992ac25d679a9737004ac6da4f237e723bbfb963f2bde5520dde8315c3a964217f8cd50523f477d9943eb2f3c8e07094353ab0edf94e499061e2bc9f7712df0372ffe4c36f0bb8827da116e68dc095269fa687ee8f8525f2dc0ee87a32fad5fa8effad7375b1db83af014114ff80bf1efba70f9e9d3d15afc2d770c6ec5ecca346f1caf909e097c53d8a50284218d638bb62593d91c943671eb58348f052341d763434e6d9fb697f23407cda3afa86cd9a5584aefa2481168bc82833d998d64d0bdf45ed34e15b657a92711d39f2e30495dcaa452827ddc0fa917c01f04766f10fafb263530b98d96e693e2ca03d526b63bda151cfc97cf644aafc2d3ea28ffd4e9ecd8c997af8eae0fe56d292ca8765985101e756212a0452cbe80dcc4d7ba642665d8f12d632c6540a0d298a700faf7f3523920eca871cef9bd662a52fcaf81df73b2b927aca24fc2f18789ab50df9e14a4542dcc164ca23e05104c1aaa7735b89138a12fc0aec26ab611c07a4e0b77986d11fa204f0faa503b5464922ea8406545b920ddd2a50122c7c1b496658f4a6286891a036ad020af763d139e8e4ffdebe5fc25104ab8db29bd2831d2fad3c4dd4d05d8ccaf69c6c7ddb16df45184144cbd75dad6ded35d294e18b06cfee99980d84c08bf81d4ffe2dbe19ab2e685464b576a5524ce9108da2c83742bf0f73883ba5f069656b5afda09e5d4ceb46367064c2c9e45cc1b90231ce046d2e1de4b3b8440dac241e85b7525af1be8b6ffa97308efe066a7bb1819a96d37c543c186b91b0c74271e15841b4b8a457d9378ce59d836bc716af2520795445e1138738ff9f77aa7b5044c4d26787007d19e0a624a3a7addc73f96515eabaa127401ce23315ec0648f84e18cbaac125c56cc65f434e8bf5141add843858f77e27bab620beb64254e0576d8b32cfcbf32e2969caf48bebd79c59b82aa420ddf191ce0e84a665acee4776f6889c9b15047df22a3c3bfa47450e684ea59dad91da979f6314e9536a759bc31db00c425aceead373358a63068da122bd5bd94f550131826623b7bef2076e96b308c510ebb98976dc86a7bd227eecd2e48e9a7a7bd857d3b9e08cf412bded66734d812b64a89d437b28c4f8a578ef088a9817287093e3a19004d64275b726e32b7643fe9c861be2464cc71df404d2db4a4fc17fe059e1a9449a4986ef5334440cf4d01ca792e77110d5d7cc2b1025743b25c2283a1acb047f78f8258bfece07774b30fef887eea3e65e4891a4fedd7abea322d8d34b95d41b459566e19abf9c36cd200eba9daef1b2d317f9e2d5cfaa7b6aba4a4766a93b224b153acec8990124dc0af5259f9b3842690dbaf0bfeb51631d34feb71ca95d"]}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) read$FUSE(r4, &(0x7f0000001240)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) read$dsp(r5, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$SNDCTL_DSP_GETISPACE(r5, 0x8010500d, &(0x7f0000000200)) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000c80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000018"], 0x30, 0x51}], 0x1, 0x40840) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x278, 0xc8, 0x8, 0x0, 0x5803, 0x348, 0x2e8, 0x2e8, 0x348, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xf7, 0x0, 0x1}, 0x0, 0x230, 0x278, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@multicast2, [0xff000000, 0x100fffe00, 0xff, 0xffffff00], @ipv6=@mcast2, [0xff, 0xffffff00, 0xffffffff, 0xffffff00], @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, [0x0, 0xffffff00, 0x0, 0xffffff00], @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xff, 0xff, 0xffffff00], 0x6cd, 0x7ff, 0x5e, 0x4e23, 0x4e21, 0x4e22, 0x4e21, 0x400}, 0x41, 0x0, 0x4e21, 0x4e22, 0x4e21, 0x4e21}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x81, 0x8, 0xe, 'syz0\x00', {0x5}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) 7.002139701s ago: executing program 3 (id=1215): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfa}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x1200, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd0000008019000000000000000000000000000000002000", [0x0, 0x2000000000001]}}) 6.543085962s ago: executing program 3 (id=1217): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e", 0x2}], 0x1}}], 0x1, 0x2090) 6.353540023s ago: executing program 3 (id=1218): r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="120100000001054b020109000009210000ffffffff0009cb2b98000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = io_uring_setup(0x1e56, &(0x7f0000000200)={0x0, 0xfffffffe, 0x400}) r2 = socket$netlink(0x10, 0x3, 0x12) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) getrandom(&(0x7f0000000180)=""/253, 0xfd, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x57, {0x57, 0x7, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b733000000000000000800000000000000ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x20, 0x9, 0x10, "46460d3cea7ac9e83fc9cbec9de9c6c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r7) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x3c, r5, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x54001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9, 0x0, r1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r9 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x10000}) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) unshare(0x22020400) 5.741341127s ago: executing program 5 (id=1220): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x29) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect(0x1, 0x4c, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES8=r2, @ANYRESOCT=r0], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 5.554875376s ago: executing program 6 (id=1221): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfe}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000500)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00000080190000000000000000000000000000000000000000000000000d", [0x0, 0x2000000000001]}}) 5.130738394s ago: executing program 6 (id=1222): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) (async, rerun: 32) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) (rerun: 64) shutdown(r1, 0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.773457228s ago: executing program 6 (id=1223): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3.69602125s ago: executing program 3 (id=1224): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 3.549071459s ago: executing program 6 (id=1225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203030000000000000000004c32f7640800010001"], 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000320a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a30"], 0x122}}, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, 0x0}) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000380)={0x2, 0x0, [{}, {}]}) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000002ac0), 0x0, 0x0, 0x0) r3 = syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r4, &(0x7f00000027c0)={0x2020}, 0x2020) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r6, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x8000, r4, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000001c0)='m', 0x1}]) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d105012000060102030109021200080000000009"], 0x0) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000000480)={0x14, &(0x7f0000000400)={0x0, 0x23, 0x15, {0x15, 0x7, "be9b7b05683b646aeefc3e9f32ca8443e6aef0"}}, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000580)={0x1c, &(0x7f00000004c0)={0x40, 0xe, 0x34, "1e9ba3c5509f1cb59d94805b89c65027a12fda1a747b9b33a45413427f176f0c76b51673483f66671635405c5573917f4b271419"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x80}}) syz_usb_control_io(r3, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000a40)={0x40, 0xf, 0x34, "0e24d7472175a6653e059936db5889714873ca94a07c68a993dad0f88c820ca90f720f6f14ca140cc4dff93db420f52bf2808a18"}, 0x0, 0x0, 0x0, &(0x7f0000000b80)={0x20, 0x0, 0x8, {0xa0, 0x2, [0xf0]}}, 0x0, 0x0, &(0x7f0000000c40)={0x40, 0xb, 0x2, 'z-'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.369123512s ago: executing program 2 (id=1226): dup(0xffffffffffffffff) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) r2 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x800, 0x0, 0xa7}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) (async) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) r3 = userfaultfd(0x80001) r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x200) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x33c}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) (async) socket$netlink(0x10, 0x3, 0xc) (async) mkdir(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x1, 0x8) (async) openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 3.315896029s ago: executing program 0 (id=1227): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getpeername(r0, 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000), 0x4) 3.079251148s ago: executing program 0 (id=1228): socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0xc1) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108edee501030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000340)={0xa000000f}) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f041}) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="4016cb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x42, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000080), 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x1f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$nl_xfrm(0x10, 0x3, 0x6) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x28801, 0x0) creat(&(0x7f0000000140)='./file1\x00', 0x0) 2.930832993s ago: executing program 2 (id=1229): r0 = inotify_init() r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4000010) inotify_rm_watch(r0, r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x43, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x8, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xd, 0xe}, {0x0, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x4d, 0xb5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.821891082s ago: executing program 2 (id=1230): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000ac0)={'\x00', 0x0, 0x32c, 0x2, 0xb66, 0x0, 0x0}) sched_setattr(r4, &(0x7f0000000740)={0x38, 0x0, 0x40, 0x40, 0x9, 0x800, 0x2, 0x2, 0x79d, 0x7d47}, 0x0) sendmmsg$inet(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x1e5}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) syz_open_procfs$userns(r5, &(0x7f0000000580)) r6 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000ec0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000080)='\xf6\x98l_\xf5<\x1a_6:', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', &(0x7f0000000000)='\xc1r\x9dnyb`\x00\xa2\xabCg\x13\b\x8f*\xdaA\x822\xf7\xaf\xf6U\xad\xb0\xb2\f\x88s\x19\xa3D\xa9\x82\x8a\xa3\x94\xab\"|\xcf\x1f\x12\x8d\xe1\xe5\xc3\x01\x03\x003\xa9p^\x01^\x16>tnF', &(0x7f00000007c0)='\x00', &(0x7f0000000900)='\x01-\x00\xb6\xb7\xe1\x7fl\xd5\xf8G\xfdQ=\xc3\xd4\x02RP\xb2\xbf\x99\xfc\x10\" \x93)\xc5\x93\x98\x11\xe0\xd4\x14\x9a\f#LU\xda\xeb\f\x03\xa4\xf7\x85\xddYL\xf7\xf2\xc4\xff@+\x04^\xcc\xc8\xa1\x9f\xa7p\xd2\xaa\xa2^\xa6\xd1\v\xd1\xdd+o\x91\xc8\x90\xeebUCE\xdc=\x89\x86\x81S\x038', &(0x7f0000000840)='\x10!%{@{+\x00', &(0x7f0000000880)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f00000008c0)='-\xf3\x00', &(0x7f0000000980)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000780)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f0000000a80)='::-$[]#:{\x00']}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f00000000c0)='-\xf3\x00']}) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) 2.699041808s ago: executing program 3 (id=1231): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102f2e1d507090582030002800000090503"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x50}}, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0xc8601, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x2fdb, &(0x7f0000000240)={0x0, 0x6f34, 0x1, 0x201001, 0x3a1}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x847ba, 0x79c, 0xe, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r3, 0xffffffffffffffff}) ppoll(&(0x7f0000000100)=[{r7, 0x2}], 0x1, 0x0, 0x0, 0x0) dup3(r3, r2, 0x0) 2.374387153s ago: executing program 5 (id=1232): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'sit0\x00'}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r1, 0x101, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x6a0881, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x10000, 0xffffffff, 0x601, 0x7fffffff, 0x0, [{0x7, 0x10, 0xff, '\x00', 0x38}, {0x4, 0xfc, 0x7c, '\x00', 0x31}, {0x5, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x1, 0x10, '\x00', 0x6}, {0x5, 0x7f, 0x6, '\x00', 0x9}, {0x7, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0xfd, '\x00', 0x45}, {0x52, 0x9, 0x3, '\x00', 0x5}, {0x5, 0x2, 0x73, '\x00', 0xff}, {0x1, 0xb6, 0x9, '\x00', 0x80}, {0x6, 0x8, 0xa0, '\x00', 0x1}, {0x1, 0x1, 0x7, '\x00', 0x4}, {0x88, 0xc, 0x5, '\x00', 0x6}, {0xd, 0x10, 0x8c, '\x00', 0x4}, {0x0, 0xc0, 0x7, '\x00', 0x1}, {0x8, 0x2, 0xfa, '\x00', 0x2}, {0x7, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x1, 0x3, 0x6, '\x00', 0x6}, {0xf8, 0x8, 0xa, '\x00', 0xf8}, {0x8, 0x1, 0xcc, '\x00', 0xf7}, {0x0, 0x6, 0xfe, '\x00', 0xa}, {0xff, 0x0, 0x3, '\x00', 0x7}, {0x16, 0xe, 0x4, '\x00', 0xff}]}}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0xc0bc5310, &(0x7f0000000000)={0x8, 0x200, 0x0, 0xffff, 0x6516, 0x2}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x80}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x58}}, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000180), 0x141040) fsetxattr$trusted_overlay_upper(r8, &(0x7f00000001c0), &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x1015, 0x0) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa02, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0xba2, 0x5, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x3c8, 0xffffffff, 0x188, 0xc8, 0xc8, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xa0, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'bridge0\x00', 'wg1\x00'}, 0x287, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x168, 0x1a8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xde, 0x0, 'syz1\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x33524742}}) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x80000006}]}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r10, 0x6628) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x2) 2.079071043s ago: executing program 5 (id=1233): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000040)=0x1) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x20}], 0x1) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4000}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@mcast2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0xa8db825f431dbca1}, {{@in=@loopback, 0x10, 0x33}, 0x0, @in=@empty}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.959262473s ago: executing program 5 (id=1234): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r2, 0xabd6b000) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1, 0x0, 0x60, 0x0, 0x5c}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000001c0)={0x0, 0xe, 0x1, '#'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.61999849s ago: executing program 2 (id=1235): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.551031884s ago: executing program 2 (id=1236): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r5, 0x80000}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r8, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, 0x1, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000406030000000000000000000300000105000100e9ffffffe810030073797a31000000000900020073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x1800}, 0x40004) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$nci(r10, &(0x7f0000001180)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x1, 0x2, 0x4, 0x6, {0x0, 0x9, 0xff, 0x3}}, 0x7) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 222.6473ms ago: executing program 6 (id=1237): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000009702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000020000000b7040000100000207207f0ff00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551557f05dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086061d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224090000000000000096e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d615efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d181210bb6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0108007734c1d2bc6a9d32d2560a88bad976b6000100002b712e632eeca810fb73fc8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b965714144652cdc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbd8ea2a77dccdc3fe247feb121d9440a3ea9012a9d23a7e3110b0f25c5f8bf803d688de4d92b5dfdbd69fb8b426b55c10ba01b5f18b10cce8de3369300000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xea, 0x0, &(0x7f0000000180)="e30080670000ec67838717bd55b464f065237cd51065d48dddca86dde148f063f26144fe42904bcee14d3723dceef6451d9946b4241544716b9ea02231ed3373a3b79a82e193242fc778e60d0bced55f4e3d26efbf795b46347ac8d3c4a7c26b4b9b08fcea50fe3f99824bc9359df40b5e388ad30b7fa42e16a931c92a32a4b00fc0b0b446059b199c2ddadbf9b299dde2c97978b3ff828d5ff726585c13de40130a0964f2b62f821ce478a19ee09302a78bcad2195a07103c7c8350b716951e6cd4855ada22f0a96807d66286b23a5a1f565f3a036e04d9b1c47b9518104dbf489d37e7cc46c7688389", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async, rerun: 32) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r5, r4], 0x2, 0x0, 0x0, 0xffffffffffffffff}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000100)={r2, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r8 = socket$inet6(0x10, 0x2, 0x0) write(r8, &(0x7f0000000240)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848ff7f00000000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db40016cb1e4798119b600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc51105568881000953134bb9600463ae4f50f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000140)={r7, 0xbc, 0x6634, 0x8, 0x1, [0x0, 0x0, 0x0, 0x0], [0x3, 0x7, 0x9, 0x8000], [0x5, 0x8001, 0x6, 0x9], [0x5, 0x4, 0xff, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f00000001c0)={r9}) 116.352857ms ago: executing program 2 (id=1238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000000c0)="0f21b034000f21c9440f20c03507000000440f22c066bad00466b8af0066ef66b85b0066b83d018e9bf0f0b887008ee867360f062e0f09", 0x37}], 0x1, 0x8, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001f80)=ANY=[@ANYBLOB="600000000101010200000000000000000a0000000c00198008000200050000000600124000030000380002802c00018014000300fe8000000000000000000000000000bb14000400fe880000000000000000000000000001060003"], 0x60}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009937f0103c41d281e8250102030109021b0002000000000904d5000005de67000904008000ff"], 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0x7ba0, 0x7, 0x6, 0x7f}, 0x8) sendmsg$inet_sctp(r4, &(0x7f0000000680)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r5 = dup(r4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000380), &(0x7f0000000040)=0x8) syz_usb_connect$cdc_ecm(0x0, 0x8c, &(0x7f00000006c0)=ANY=[@ANYBLOB="12011003020000ff2505a1a440000102030109027a0001010410010904000203020600090b240600002c18c565322d05240008000d240f010500000000801000080424020808241cfaff06050008241c07009b05001524120a00a317a88b045e4f01a607c0ffcb7e392a07240aa209f40109058103ff030936fb0905820240000718020905030200020909054c56d979dfd612759bcb20193c7d7ca96b9092114db892b20dd0d1e1015ee21e9524b9d2a8c57ea9f5e357671baf5db4e364a0086aa805a46b2782919c97bb2ecfb5607a0ad17ffe93d7a07fdd87acbd589634"], &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x5b0, 0xe, 0x73, 0xd7, 0x40, 0x2}, 0x35, &(0x7f0000000180)={0x5, 0xf, 0x35, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0xff, 0x6, 0xc8}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0xf, 0x5, 0x43, 0xf00, 0x800, [0xff00c0, 0x0, 0x30, 0xc000, 0xf]}]}, 0x7, [{0x42, &(0x7f00000001c0)=@string={0x42, 0x3, "a2a8e80a8866dbb00eac9975f5fab7d225fe19478d2f9ffbdb01810bcce41f633e02f3179eb2f5ab4378fc4bd119f4b3ebe36abe530ae1b9500022efcae5d05e"}}, {0xfa, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x340a}}]}) syz_open_dev$I2C(&(0x7f0000000000), 0x10, 0x2000) 0s ago: executing program 6 (id=1239): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000740)={@my=0x1}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x28001, 0x109000, 0x1}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000000440)={0x0, 0x6, 0x0, 0x4}) kernel console output (not intermixed with test programs): [ T24] usb 5-1: USB disconnect, device number 53 [ 269.931940][ T8636] netlink: 44 bytes leftover after parsing attributes in process `syz.1.695'. [ 270.085895][ T8636] netlink: 24 bytes leftover after parsing attributes in process `syz.1.695'. [ 270.391672][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 270.542637][ T24] usb 4-1: device descriptor read/64, error -71 [ 270.632788][ T1223] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 270.734782][ T8668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.758657][ T8668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.782125][ T1223] usb 5-1: Using ep0 maxpacket: 32 [ 270.782856][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 270.806395][ T1223] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 270.815679][ T1223] usb 5-1: config 0 has no interface number 0 [ 270.830591][ T1223] usb 5-1: config 0 interface 184 has no altsetting 0 [ 270.902129][ T1223] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 270.915803][ T1223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.929986][ T1223] usb 5-1: Product: syz [ 270.938441][ T1223] usb 5-1: Manufacturer: syz [ 270.949139][ T1223] usb 5-1: SerialNumber: syz [ 270.951930][ T24] usb 4-1: device descriptor read/64, error -71 [ 270.969184][ T1223] usb 5-1: config 0 descriptor?? [ 270.986518][ T1223] smsc75xx v1.0.0 [ 271.072135][ T24] usb usb4-port1: attempt power cycle [ 271.580747][ T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 271.612240][ T24] usb 4-1: device descriptor read/8, error -71 [ 271.664325][ T1223] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 271.676290][ T1223] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 271.700847][ T1223] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 271.756949][ T1223] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 271.767596][ T1223] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 271.778753][ T1223] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 271.826741][ T1223] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 271.844147][ T8688] ipip0: entered promiscuous mode [ 271.892140][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 271.948108][ T8685] kvm: vcpu 1: requested 131070 ns lapic timer period limited to 200000 ns [ 271.961650][ T8688] ipip0: entered allmulticast mode [ 272.012287][ T24] usb 4-1: device descriptor read/8, error -71 [ 272.152266][ T24] usb usb4-port1: unable to enumerate USB device [ 272.804971][ T1223] usb 5-1: USB disconnect, device number 54 [ 273.319857][ T8719] ptrace attach of "./syz-executor exec"[8722] was attempted by "./syz-executor exec"[8719] [ 274.859996][ T8749] syzkaller1: entered promiscuous mode [ 274.878129][ T8749] syzkaller1: entered allmulticast mode [ 275.130376][ T8766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.146881][ T8766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.162267][ T8766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.175935][ T8768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.230349][ T8766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.731887][ T8768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.001647][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 276.179428][ T9] usb 2-1: device descriptor read/64, error -71 [ 276.351987][ T24] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 276.491815][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 276.512541][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 276.520877][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.532337][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 276.545521][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 276.556081][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 276.566512][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.582470][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 276.598877][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 276.607683][ T24] usb 5-1: Manufacturer: syz [ 276.615867][ T24] usb 5-1: config 0 descriptor?? [ 276.641865][ T1223] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 276.649644][ T9] usb 2-1: device descriptor read/64, error -71 [ 276.764255][ T9] usb usb2-port1: attempt power cycle [ 276.836700][ T24] usb 5-1: USB disconnect, device number 55 [ 276.860539][ T1223] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 276.882559][ T1223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.890709][ T1223] usb 4-1: Product: syz [ 276.912842][ T1223] usb 4-1: Manufacturer: syz [ 276.917589][ T1223] usb 4-1: SerialNumber: syz [ 276.939382][ T1223] usb 4-1: config 0 descriptor?? [ 277.142934][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 277.157814][ T1223] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 277.172335][ T9] usb 2-1: device descriptor read/8, error -71 [ 277.411710][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 277.452735][ T9] usb 2-1: device descriptor read/8, error -71 [ 277.572143][ T9] usb usb2-port1: unable to enumerate USB device [ 277.782615][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'. [ 277.792186][ T8789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.733'. [ 278.638239][ T8800] xt_CT: No such helper "pptp" [ 278.862971][ T48] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 279.042447][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 279.121680][ T48] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 279.134315][ T48] usb 2-1: config 0 has no interface number 0 [ 279.156343][ T48] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 279.183736][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.208159][ T48] usb 2-1: Product: syz [ 279.223930][ T48] usb 2-1: Manufacturer: syz [ 279.228575][ T48] usb 2-1: SerialNumber: syz [ 279.283863][ T48] usb 2-1: config 0 descriptor?? [ 279.326745][ T48] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 279.354174][ T48] usb 2-1: selecting invalid altsetting 1 [ 279.359967][ T48] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 279.426593][ T8804] gtp0: entered allmulticast mode [ 279.453491][ T48] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 279.483589][ T48] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 279.648877][ T1223] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 279.724707][ T48] usb 2-1: media controller created [ 279.873995][ T48] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 279.955057][ T8809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.055622][ T8809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.291769][ T1223] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 280.488273][ T1223] usb 5-1: Using ep0 maxpacket: 16 [ 280.533006][ T1223] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 280.557388][ T1223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.603614][ T1223] usb 5-1: Product: syz [ 280.611085][ T1223] usb 5-1: Manufacturer: syz [ 280.621952][ T1223] usb 5-1: SerialNumber: syz [ 280.636268][ T1223] usb 5-1: config 0 descriptor?? [ 280.661669][ T1223] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 280.864859][ T1223] gp8psk: usb in 128 operation failed. [ 280.886737][ T1223] gp8psk: usb in 137 operation failed. [ 280.901196][ T1223] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 280.942139][ T48] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 280.950912][ T48] zl10353_read_register: readreg error (reg=127, ret==-110) [ 280.951257][ T1223] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 280.998146][ T1223] usb 5-1: media controller created [ 281.064400][ T1223] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 281.138477][ T1223] gp8psk_fe: Frontend revision 1 attached [ 281.156876][ T1223] usb 5-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 281.199234][ T1223] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 281.463893][ T48] usb 4-1: USB disconnect, device number 32 [ 281.554664][ T1223] gp8psk: usb in 138 operation failed. [ 281.560189][ T1223] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 281.589943][ T8824] loop5: detected capacity change from 0 to 7 [ 281.618323][ T1223] gp8psk: found Genpix USB device pID = 201 (hex) [ 281.716832][ T8824] loop5: [ 281.723175][ T9] usb 2-1: USB disconnect, device number 40 [ 281.898977][ T8824] loop5: partition table partially beyond EOD, truncated [ 282.067498][ T1223] usb 5-1: USB disconnect, device number 56 [ 282.354349][ T1223] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 282.441563][ T30] audit: type=1326 audit(1769725133.218:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8841 comm="syz.2.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32ef9aeb9 code=0x7ffc0000 [ 282.473884][ T8843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.490824][ T8843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.510602][ T30] audit: type=1326 audit(1769725133.258:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8841 comm="syz.2.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32ef9aeb9 code=0x7ffc0000 [ 282.541867][ T24] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 282.570228][ T30] audit: type=1326 audit(1769725133.278:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8841 comm="syz.2.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fe32ef9aeb9 code=0x7ffc0000 [ 282.601139][ T30] audit: type=1326 audit(1769725133.278:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8841 comm="syz.2.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32ef9aeb9 code=0x7ffc0000 [ 282.631139][ T30] audit: type=1326 audit(1769725133.278:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8841 comm="syz.2.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32ef9aeb9 code=0x7ffc0000 [ 282.702133][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 282.712540][ T24] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 282.729606][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.750317][ T24] usb 4-1: config 0 descriptor?? [ 282.752068][ T5922] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 282.773879][ T24] gspca_main: sunplus-2.14.0 probing 041e:400b [ 282.821986][ T1223] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 282.933000][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 282.940917][ T5922] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.972245][ T5922] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 282.981905][ T1223] usb 5-1: Using ep0 maxpacket: 16 [ 282.993943][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.011934][ T1223] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 283.031833][ T1223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 283.043437][ T5922] usb 2-1: Product: syz [ 283.047636][ T5922] usb 2-1: Manufacturer: syz [ 283.062793][ T5922] usb 2-1: SerialNumber: syz [ 283.074281][ T1223] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 283.101813][ T1223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.102225][ T8850] loop2: detected capacity change from 0 to 7 [ 283.109941][ T1223] usb 5-1: Product: syz [ 283.109964][ T1223] usb 5-1: Manufacturer: syz [ 283.109978][ T1223] usb 5-1: SerialNumber: syz [ 283.112160][ T5922] usb 2-1: config 0 descriptor?? [ 283.120024][ T6066] loop2: [ 283.124677][ T1223] usb 5-1: config 0 descriptor?? [ 283.137099][ T6066] loop2: partition table partially beyond EOD, truncated [ 283.152371][ T5922] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 283.166152][ T8850] loop2: [ 283.166702][ T1223] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 283.171125][ T8850] loop2: partition table partially beyond EOD, truncated [ 283.195685][ T1223] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 283.407106][ T2154] usb 2-1: USB disconnect, device number 41 [ 283.588697][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.753'. [ 283.612323][ T8861] netlink: 24 bytes leftover after parsing attributes in process `syz.2.753'. [ 283.657474][ T8861] netlink: 24 bytes leftover after parsing attributes in process `syz.2.753'. [ 283.782325][ T1223] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 283.788741][ T8836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.790079][ T1223] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 283.799799][ T8836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.819806][ T1223] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 283.827304][ T1223] em28xx 5-1:0.0: No AC97 audio processor [ 284.231338][ T24] gspca_sunplus: reg_w_riv err -71 [ 284.239057][ T24] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 284.252729][ T24] usb 4-1: USB disconnect, device number 33 [ 284.471448][ T8836] syzkaller0: entered promiscuous mode [ 284.480892][ T8836] syzkaller0: entered allmulticast mode [ 284.695520][ T8875] loop5: detected capacity change from 0 to 7 [ 284.714110][ T8875] loop5: [ 284.717128][ T8875] loop5: partition table partially beyond EOD, truncated [ 284.840921][ T8878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.899378][ T24] usb 5-1: USB disconnect, device number 57 [ 284.906871][ T24] em28xx 5-1:0.0: Disconnecting em28xx [ 284.929100][ T24] em28xx 5-1:0.0: Freeing device [ 284.930498][ T8878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.981917][ T8885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.757'. [ 285.029157][ T8885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.757'. [ 287.791653][ T8918] Scaler: ================= START STATUS ================= [ 287.799404][ T8918] Scaler: ================== END STATUS ================== [ 288.179197][ T8922] kvm: user requested TSC rate below hardware speed [ 288.278143][ T8930] netlink: 32 bytes leftover after parsing attributes in process `syz.2.769'. [ 288.925666][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.771'. [ 288.965246][ T8935] netlink: 'syz.0.771': attribute type 5 has an invalid length. [ 289.141740][ T8935] netlink: 20 bytes leftover after parsing attributes in process `syz.0.771'. [ 289.277073][ T8911] ip6tnl3: entered allmulticast mode [ 289.306351][ T2977] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 289.363153][ T48] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 289.381358][ T2977] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 289.652981][ T8938] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 289.660427][ T8938] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 289.675234][ T8938] netlink: 'syz.2.772': attribute type 10 has an invalid length. [ 289.684533][ T8938] batman_adv: batadv0: Adding interface: netdevsim0 [ 289.691163][ T8938] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.728802][ T8938] batman_adv: batadv0: Interface activated: netdevsim0 [ 289.809217][ T8941] use of bytesused == 0 is deprecated and will be removed in the future, [ 289.818097][ T8941] use the actual size instead. [ 289.881780][ T24] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 290.002174][ T24] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 293.181729][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 294.551640][ T5922] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 294.684331][ T9003] netlink: 'syz.2.789': attribute type 10 has an invalid length. [ 294.694634][ T9003] netlink: 40 bytes leftover after parsing attributes in process `syz.2.789'. [ 294.706550][ T9003] batadv0: entered promiscuous mode [ 294.713622][ T9003] batadv0: entered allmulticast mode [ 294.722329][ T5922] usb 4-1: device descriptor read/64, error -71 [ 294.771684][ T9003] bridge0: port 3(batadv0) entered blocking state [ 294.778478][ T9003] bridge0: port 3(batadv0) entered disabled state [ 294.836125][ T9003] bridge0: port 3(batadv0) entered blocking state [ 294.843012][ T9003] bridge0: port 3(batadv0) entered forwarding state [ 294.962219][ T5922] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 295.111441][ T5922] usb 4-1: device descriptor read/64, error -71 [ 295.222006][ T5922] usb usb4-port1: attempt power cycle [ 295.262644][ T2963] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 295.272366][ T2963] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 295.561905][ T5922] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 295.633449][ T5922] usb 4-1: device descriptor read/8, error -71 [ 295.777067][ T2963] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.889052][ T2963] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.899754][ T5922] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 295.932569][ T5922] usb 4-1: device descriptor read/8, error -71 [ 295.984626][ T2963] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.042107][ T5922] usb usb4-port1: unable to enumerate USB device [ 296.106713][ T2963] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.450986][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 296.463236][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 296.475948][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 296.484758][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 296.494509][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 296.529226][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 296.537584][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 296.545779][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 296.556426][ T2963] bond0: left allmulticast mode [ 296.604474][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 296.611712][ T2963] bond_slave_0: left allmulticast mode [ 296.611800][ T2963] bond_slave_1: left allmulticast mode [ 296.611868][ T2963] bond0: left promiscuous mode [ 296.611882][ T2963] bond_slave_0: left promiscuous mode [ 296.612110][ T2963] bond_slave_1: left promiscuous mode [ 296.614888][ T2963] bridge0: port 3(bond0) entered disabled state [ 296.693747][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 296.739386][ T2963] bridge_slave_1: left allmulticast mode [ 296.755841][ T2963] bridge_slave_1: left promiscuous mode [ 296.796419][ T2963] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.826481][ T2963] bridge_slave_0: left allmulticast mode [ 296.840705][ T2963] bridge_slave_0: left promiscuous mode [ 296.856820][ T2963] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.839358][ T2963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.894734][ T2963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.914203][ T2963] bond0 (unregistering): Released all slaves [ 297.938856][ T9046] Cannot find add_set index 0 as target [ 298.108768][ T9048] netlink: 'syz.2.799': attribute type 1 has an invalid length. [ 298.153724][ T9053] binder: BINDER_SET_CONTEXT_MGR already set [ 298.160930][ T2963] bond1 (unregistering): (slave dummy0): Releasing active interface [ 298.162389][ T9053] binder: 9050:9053 ioctl 4018620d 2000000000c0 returned -16 [ 298.182360][ T2963] bond1 (unregistering): Released all slaves [ 298.201641][ T24] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 298.316329][ T2963] bond2 (unregistering): Released all slaves [ 298.334203][ T9048] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 298.361593][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 298.437724][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 298.464157][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 298.479669][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 298.498868][ T2963] m1Ie5n: left promiscuous mode [ 298.504932][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.523770][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 298.565409][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.685382][ T9066] pim6reg9: entered allmulticast mode [ 298.782346][ T5832] Bluetooth: hci2: command tx timeout [ 298.798232][ T24] usb 4-1: usb_control_msg returned -32 [ 298.813567][ T24] usbtmc 4-1:16.0: can't read capabilities [ 298.892594][ T9075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.917667][ T9075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.936699][ T9075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.947929][ T9075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.101957][ T2963] hsr_slave_0: left promiscuous mode [ 299.118823][ T2963] hsr_slave_1: left promiscuous mode [ 299.139078][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.161020][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.179429][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.197029][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.261399][ T2963] veth1_macvtap: left promiscuous mode [ 299.285602][ T2963] veth0_macvtap: left promiscuous mode [ 299.302059][ T2963] veth1_vlan: left promiscuous mode [ 299.334667][ T2963] veth0_vlan: left promiscuous mode [ 299.535964][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'. [ 300.140332][ T2963] team0 (unregistering): Port device team_slave_1 removed [ 300.196028][ T2963] team0 (unregistering): Port device team_slave_0 removed [ 300.864436][ T5832] Bluetooth: hci2: command tx timeout [ 300.901189][ T9026] chnl_net:caif_netlink_parms(): no params data found [ 300.969105][ T5922] usb 4-1: USB disconnect, device number 38 [ 301.261741][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 301.358756][ T9111] netlink: 'syz.3.809': attribute type 6 has an invalid length. [ 301.366670][ T9111] netlink: 'syz.3.809': attribute type 7 has an invalid length. [ 301.453932][ T9111] netlink: 'syz.3.809': attribute type 8 has an invalid length. [ 301.570840][ T9026] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.611997][ T9026] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.644506][ T9026] bridge_slave_0: entered allmulticast mode [ 301.666233][ T9026] bridge_slave_0: entered promiscuous mode [ 301.698282][ T9026] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.724092][ T9026] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.760225][ T9026] bridge_slave_1: entered allmulticast mode [ 301.779896][ T9026] bridge_slave_1: entered promiscuous mode [ 302.016422][ T9126] syz.0.810: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 302.060882][ T9026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.079926][ T9126] CPU: 1 UID: 0 PID: 9126 Comm: syz.0.810 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.079949][ T9126] Tainted: [L]=SOFTLOCKUP [ 302.079953][ T9126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 302.079960][ T9126] Call Trace: [ 302.079966][ T9126] [ 302.079972][ T9126] dump_stack_lvl+0xe8/0x150 [ 302.079992][ T9126] warn_alloc+0x249/0x340 [ 302.080013][ T9126] ? stack_trace_save+0xa9/0x100 [ 302.080029][ T9126] ? __pfx_warn_alloc+0x10/0x10 [ 302.080046][ T9126] ? kasan_save_track+0x4f/0x80 [ 302.080056][ T9126] ? kasan_save_track+0x3e/0x80 [ 302.080066][ T9126] ? __kasan_kmalloc+0x93/0xb0 [ 302.080076][ T9126] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 302.080085][ T9126] ? xskq_create+0x56/0x170 [ 302.080096][ T9126] ? xsk_setsockopt+0x54c/0x990 [ 302.080110][ T9126] ? do_sock_setsockopt+0x17c/0x1b0 [ 302.080123][ T9126] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 302.080136][ T9126] ? do_syscall_64+0xe2/0xf80 [ 302.080150][ T9126] __vmalloc_node_range_noprof+0x132/0x1730 [ 302.080180][ T9126] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 302.080195][ T9126] ? __kasan_kmalloc+0x93/0xb0 [ 302.080209][ T9126] vmalloc_user_noprof+0xad/0xe0 [ 302.080221][ T9126] ? xskq_create+0xbf/0x170 [ 302.080232][ T9126] xskq_create+0xbf/0x170 [ 302.080244][ T9126] xsk_init_queue+0xad/0x110 [ 302.080262][ T9126] xsk_setsockopt+0x54c/0x990 [ 302.080279][ T9126] ? __pfx_xsk_setsockopt+0x10/0x10 [ 302.080300][ T9126] ? __pfx_aa_sk_perm+0x10/0x10 [ 302.080315][ T9126] ? aa_sock_opt_perm+0xff/0x1a0 [ 302.080331][ T9126] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 302.080344][ T9126] ? __pfx_xsk_setsockopt+0x10/0x10 [ 302.080361][ T9126] do_sock_setsockopt+0x17c/0x1b0 [ 302.080378][ T9126] __x64_sys_setsockopt+0x13d/0x1b0 [ 302.080396][ T9126] do_syscall_64+0xe2/0xf80 [ 302.080408][ T9126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.080418][ T9126] ? trace_irq_disable+0x37/0x100 [ 302.080429][ T9126] ? clear_bhb_loop+0x60/0xb0 [ 302.080443][ T9126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.080454][ T9126] RIP: 0033:0x7fbdca79aeb9 [ 302.080466][ T9126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.080476][ T9126] RSP: 002b:00007fbdcb711028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 302.080490][ T9126] RAX: ffffffffffffffda RBX: 00007fbdcaa16090 RCX: 00007fbdca79aeb9 [ 302.080498][ T9126] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 302.080506][ T9126] RBP: 00007fbdca808c1f R08: 0000000000000004 R09: 0000000000000000 [ 302.080513][ T9126] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.080520][ T9126] R13: 00007fbdcaa16128 R14: 00007fbdcaa16090 R15: 00007fbdcab3fa48 [ 302.080537][ T9126] [ 302.080541][ T9126] Mem-Info: [ 302.381163][ T9026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.642427][ T9026] team0: Port device team_slave_0 added [ 302.673824][ T9026] team0: Port device team_slave_1 added [ 302.747233][ T9126] active_anon:9102 inactive_anon:0 isolated_anon:0 [ 302.747233][ T9126] active_file:16542 inactive_file:40042 isolated_file:0 [ 302.747233][ T9126] unevictable:768 dirty:175 writeback:0 [ 302.747233][ T9126] slab_reclaimable:11093 slab_unreclaimable:96171 [ 302.747233][ T9126] mapped:31625 shmem:3517 pagetables:1410 [ 302.747233][ T9126] sec_pagetables:0 bounce:0 [ 302.747233][ T9126] kernel_misc_reclaimable:0 [ 302.747233][ T9126] free:1306873 free_pcp:13540 free_cma:0 [ 302.923065][ T9126] Node 0 active_anon:38508kB inactive_anon:0kB active_file:66168kB inactive_file:159964kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126296kB dirty:700kB writeback:0kB shmem:13432kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12116kB pagetables:5504kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 302.972940][ T5832] Bluetooth: hci2: command tx timeout [ 302.979181][ T9126] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:72kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 303.009589][ T9126] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 303.035451][ T9026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.043285][ T9126] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 303.052881][ T9126] Node 0 DMA32 free:1320360kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39044kB inactive_anon:0kB active_file:66168kB inactive_file:159968kB unevictable:1536kB writepending:708kB zspages:0kB present:3129332kB managed:2554124kB mlocked:0kB bounce:0kB free_pcp:33684kB local_pcp:20504kB free_cma:0kB [ 303.086888][ T9026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.086926][ T9026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.394794][ T9026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.405415][ T9026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.412574][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.442787][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.462857][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.492322][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.525065][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 303.537977][ T9026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.633399][ T9126] lowmem_reserve[]: 0 0 1 1 1 [ 303.638193][ T9126] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 303.970209][ T9026] hsr_slave_0: entered promiscuous mode [ 303.975880][ T9126] lowmem_reserve[]: 0 0 0 0 0 [ 303.990515][ T9026] hsr_slave_1: entered promiscuous mode [ 304.011593][ T9126] Node 1 Normal free:3887352kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17568kB local_pcp:5440kB free_cma:0kB [ 304.056358][ T9126] lowmem_reserve[]: 0 0 0 0 0 [ 304.183666][ T9126] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 304.218894][ T9126] Node 0 DMA32: 6*4kB (UME) 600*8kB (UME) 312*16kB (UM) 986*32kB (UME) 341*64kB (UME) 185*128kB (UME) 90*256kB (UME) 59*512kB (UME) 27*1024kB (UME) 12*2048kB (UME) 263*4096kB (M) = 1269592kB [ 304.288950][ T9126] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 304.325992][ T9126] Node 1 Normal: 168*4kB (UE) 41*8kB (UME) 47*16kB (UME) 83*32kB (UME) 27*64kB (UME) 6*128kB (UM) 6*256kB (UM) 4*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 945*4096kB (M) = 3887352kB [ 304.370183][ T9126] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 304.401116][ T9126] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 304.432157][ T5922] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 304.442078][ T9126] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 304.459491][ T9126] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 304.488540][ T9126] 63827 total pagecache pages [ 304.501981][ T9126] 0 pages in swap cache [ 304.506305][ T9126] Free swap = 124996kB [ 304.510486][ T9126] Total swap = 124996kB [ 304.527805][ T9126] 2097051 pages RAM [ 304.553286][ T9126] 0 pages HighMem/MovableOnly [ 304.558016][ T9126] 426622 pages reserved [ 304.562130][ T5922] usb 4-1: device descriptor read/64, error -71 [ 304.630428][ T9126] 0 pages cma reserved [ 304.697181][ T9026] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 304.727365][ T9026] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 304.805369][ T5922] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 304.831176][ T9026] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 304.868319][ T9026] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 304.951905][ T5922] usb 4-1: device descriptor read/64, error -71 [ 304.971074][ T9140] chnl_net:caif_netlink_parms(): no params data found [ 305.021987][ T5832] Bluetooth: hci2: command tx timeout [ 305.062239][ T5922] usb usb4-port1: attempt power cycle [ 305.235125][ T9173] netlink: 190 bytes leftover after parsing attributes in process `syz.0.816'. [ 305.274456][ T9140] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.281996][ T9140] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.289725][ T9140] bridge_slave_0: entered allmulticast mode [ 305.299904][ T9140] bridge_slave_0: entered promiscuous mode [ 305.342566][ T9140] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.350024][ T9140] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.381025][ T9140] bridge_slave_1: entered allmulticast mode [ 305.407632][ T9140] bridge_slave_1: entered promiscuous mode [ 305.432023][ T5922] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 305.485372][ T5922] usb 4-1: device descriptor read/8, error -71 [ 305.565283][ T9140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.583819][ T5832] Bluetooth: hci5: command tx timeout [ 305.594408][ T9140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.707215][ T9181] xt_CT: No such helper "pptp" [ 305.738049][ T9140] team0: Port device team_slave_0 added [ 305.752452][ T5922] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 305.778764][ T9140] team0: Port device team_slave_1 added [ 305.792860][ T5922] usb 4-1: device descriptor read/8, error -71 [ 305.869094][ T9140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.889269][ T9140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.917108][ T9140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.928104][ T5922] usb usb4-port1: unable to enumerate USB device [ 305.939126][ T9026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.951905][ T9140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.962857][ T9140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.994384][ T9140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.143447][ T9026] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.266073][ T9140] hsr_slave_0: entered promiscuous mode [ 306.272745][ T9140] hsr_slave_1: entered promiscuous mode [ 306.278771][ T9140] debugfs: 'hsr0' already exists in 'hsr' [ 306.294014][ T9140] Cannot create hsr debugfs directory [ 306.319536][ T2963] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.326824][ T2963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.409780][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.417089][ T2963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.305049][ T9026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.564337][ T9026] veth0_vlan: entered promiscuous mode [ 307.627592][ T9140] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 307.660217][ T9140] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 307.668231][ T5832] Bluetooth: hci5: command tx timeout [ 307.691055][ T9026] veth1_vlan: entered promiscuous mode [ 307.705994][ T9140] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 307.767296][ T9140] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 308.064689][ T9026] veth0_macvtap: entered promiscuous mode [ 308.102725][ T9026] veth1_macvtap: entered promiscuous mode [ 308.187834][ T9026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.303967][ T9026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.399113][ T2977] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.411649][ T2977] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.451406][ T2977] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.478523][ T2977] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.550444][ T9140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.695858][ T9140] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.914048][ T2977] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.921455][ T2977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.990630][ T2977] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.997906][ T2977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.062613][ T8187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.083482][ T8187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.255675][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.273577][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.391968][ T2154] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 309.418913][ T9140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.537423][ T9236] syzkaller0: entered promiscuous mode [ 309.551712][ T2154] usb 4-1: device descriptor read/64, error -71 [ 309.560130][ T9236] syzkaller0: entered allmulticast mode [ 309.595426][ T9140] veth0_vlan: entered promiscuous mode [ 309.639685][ T9140] veth1_vlan: entered promiscuous mode [ 309.735581][ T9140] veth0_macvtap: entered promiscuous mode [ 309.742018][ T5832] Bluetooth: hci5: command tx timeout [ 309.755928][ T9140] veth1_macvtap: entered promiscuous mode [ 309.801611][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 309.801614][ T2154] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 309.813716][ T9140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.857499][ T9140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.894603][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.916397][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.927040][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.954721][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 309.959896][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.962705][ T9] usb 6-1: config 0 has no interfaces? [ 309.969182][ T2154] usb 4-1: device descriptor read/64, error -71 [ 309.976754][ T9] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 309.997582][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.060498][ T9] usb 6-1: config 0 descriptor?? [ 310.089251][ T2154] usb usb4-port1: attempt power cycle [ 310.167861][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.191897][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.287607][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.293072][ T9] usb 6-1: USB disconnect, device number 2 [ 310.316678][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.382783][ T9242] netlink: 60 bytes leftover after parsing attributes in process `syz.2.829'. [ 310.471850][ T2154] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 310.522713][ T2154] usb 4-1: device descriptor read/8, error -71 [ 310.762769][ T2154] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 310.792300][ T2154] usb 4-1: device descriptor read/8, error -71 [ 310.923305][ T2154] usb usb4-port1: unable to enumerate USB device [ 311.073620][ T9253] netlink: 424 bytes leftover after parsing attributes in process `syz.5.831'. [ 311.241407][ T9258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.312248][ T9258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.337081][ T9262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.447134][ T9262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.495381][ T9258] 8021q: VLANs not supported on ip_vti0 [ 311.698699][ T9272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.762097][ T9272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.826208][ T9272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.833598][ T5832] Bluetooth: hci5: command tx timeout [ 311.858344][ T9272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.882146][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 312.073641][ T9] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 312.090344][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.110844][ T9] usb 6-1: config 0 descriptor?? [ 312.133603][ T9] cp210x 6-1:0.0: cp210x converter detected [ 312.261168][ T9276] loop5: detected capacity change from 0 to 7 [ 312.270360][ T5931] loop5: [ 312.280737][ T5931] loop5: partition table partially beyond EOD, truncated [ 312.304592][ T9276] loop5: [ 312.312103][ T9276] loop5: partition table partially beyond EOD, truncated [ 312.751616][ T5927] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 312.780463][ T9] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 312.818980][ T9] usb 6-1: cp210x converter now attached to ttyUSB0 [ 312.879182][ T9299] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 312.936824][ T5927] usb 7-1: config 4 has an invalid interface number: 28 but max is 0 [ 312.955788][ T5927] usb 7-1: config 4 has no interface number 0 [ 312.981982][ T5927] usb 7-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 312.997117][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.015959][ T5927] usb 7-1: Product: syz [ 313.025599][ T5927] usb 7-1: Manufacturer: syz [ 313.158069][ T5927] usb 7-1: SerialNumber: syz [ 313.397629][ T5927] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:4.28/input/input27 [ 313.407161][ T9304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.419293][ T9304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.649290][ T5181] bcm5974 7-1:4.28: could not read from device [ 313.665553][ T5181] bcm5974 7-1:4.28: could not read from device [ 313.707713][ T5181] bcm5974 7-1:4.28: could not read from device [ 313.731958][ T5927] usb 7-1: USB disconnect, device number 2 [ 313.757962][ T5181] bcm5974 7-1:4.28: could not read from device [ 313.994210][ T9314] syzkaller0: entered promiscuous mode [ 314.001475][ T9314] syzkaller0: entered allmulticast mode [ 314.225183][ T9316] openvswitch: netlink: Duplicate or invalid key (type 0). [ 314.233511][ T9316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.312391][ T9317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.312834][ T9317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.127203][ T2154] usb 6-1: USB disconnect, device number 3 [ 315.159003][ T2154] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 315.226806][ T2154] cp210x 6-1:0.0: device disconnected [ 315.306130][ T9340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.853'. [ 316.674763][ T9351] syzkaller0: entered promiscuous mode [ 316.680644][ T9351] syzkaller0: entered allmulticast mode [ 316.884340][ T9360] input: syz0 as /devices/virtual/input/input28 [ 316.989454][ T9367] gretap3: entered allmulticast mode [ 317.108260][ T9373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.133321][ T9373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.144842][ T9372] syzkaller0: entered promiscuous mode [ 317.147511][ T9373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.150508][ T9372] syzkaller0: entered allmulticast mode [ 317.161894][ T9373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.262504][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 317.283627][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.290103][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.402715][ T9378] netlink: 4 bytes leftover after parsing attributes in process `syz.5.860'. [ 317.599202][ T9390] netlink: 12 bytes leftover after parsing attributes in process `syz.5.862'. [ 317.791629][ T1223] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 317.987423][ T1223] usb 7-1: Using ep0 maxpacket: 8 [ 318.037830][ T1223] usb 7-1: unable to get BOS descriptor or descriptor too short [ 318.145194][ T1223] usb 7-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 318.164728][ T1223] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.173966][ T1223] usb 7-1: Product: syz [ 318.178178][ T1223] usb 7-1: Manufacturer: syz [ 318.262094][ T1223] usb 7-1: SerialNumber: syz [ 318.268491][ T9411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.302935][ T9411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.572958][ T30] audit: type=1326 audit(1769725169.358:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9386 comm="syz.6.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7059aeb9 code=0x7ffc0000 [ 318.595917][ T30] audit: type=1326 audit(1769725169.358:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9386 comm="syz.6.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7059aeb9 code=0x7ffc0000 [ 318.800797][ T30] audit: type=1326 audit(1769725169.408:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9386 comm="syz.6.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fcb7059aeb9 code=0x7ffc0000 [ 319.247444][ T30] audit: type=1326 audit(1769725169.408:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9386 comm="syz.6.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7059aeb9 code=0x7ffc0000 [ 319.438500][ T30] audit: type=1326 audit(1769725169.408:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9386 comm="syz.6.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb7059aeb9 code=0x7ffc0000 [ 319.643131][ T30] audit: type=1326 audit(1769725169.408:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9386 comm="syz.6.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7059aeb9 code=0x7ffc0000 [ 319.742234][ T30] audit: type=1326 audit(1769725169.408:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9386 comm="syz.6.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fcb7059aeb9 code=0x7ffc0000 [ 319.819665][ T30] audit: type=1326 audit(1769725169.408:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9386 comm="syz.6.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcb7059ac22 code=0x7ffc0000 [ 319.906606][ T30] audit: type=1326 audit(1769725169.408:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9386 comm="syz.6.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcb7059ac22 code=0x7ffc0000 [ 320.002627][ T30] audit: type=1326 audit(1769725169.408:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9386 comm="syz.6.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7059aeb9 code=0x7ffc0000 [ 320.352835][ T1223] usb 7-1: selecting invalid altsetting 1 [ 320.414654][ T1223] catc 7-1:8.0: Can't set altsetting 1. [ 320.440373][ T1223] catc 7-1:8.0: probe with driver catc failed with error -5 [ 320.485796][ T1223] usb 7-1: USB disconnect, device number 3 [ 321.312320][ T9450] xt_CT: You must specify a L4 protocol and not use inversions on it [ 321.435146][ T9452] binder: 9451:9452 ioctl 4058534c 200000000440 returned -22 [ 322.413404][ T9484] loop7: detected capacity change from 0 to 16384 [ 322.581447][ T9492] pimreg: entered allmulticast mode [ 322.834596][ C0] I/O error, dev loop7, sector 32 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 322.844812][ C0] I/O error, dev loop7, sector 4608 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 322.859993][ T9489] loop7: detected capacity change from 16384 to 0 [ 322.866779][ C0] I/O error, dev loop7, sector 4864 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 322.866926][ C0] I/O error, dev loop7, sector 4608 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 322.867158][ C0] Buffer I/O error on dev loop7, logical block 576, async page read [ 322.867249][ C0] I/O error, dev loop7, sector 4616 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 322.867273][ C0] Buffer I/O error on dev loop7, logical block 577, async page read [ 322.867351][ C0] I/O error, dev loop7, sector 4624 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 322.867376][ C0] Buffer I/O error on dev loop7, logical block 578, async page read [ 322.867460][ C0] I/O error, dev loop7, sector 4632 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 322.867484][ C0] Buffer I/O error on dev loop7, logical block 579, async page read [ 322.867570][ C0] I/O error, dev loop7, sector 4640 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 322.867595][ C0] Buffer I/O error on dev loop7, logical block 580, async page read [ 322.867673][ C0] I/O error, dev loop7, sector 4648 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 322.867697][ C0] Buffer I/O error on dev loop7, logical block 581, async page read [ 322.867779][ C0] I/O error, dev loop7, sector 4656 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 322.867802][ C0] Buffer I/O error on dev loop7, logical block 582, async page read [ 322.867893][ C0] Buffer I/O error on dev loop7, logical block 583, async page read [ 322.867979][ C0] Buffer I/O error on dev loop7, logical block 584, async page read [ 322.868061][ C0] Buffer I/O error on dev loop7, logical block 585, async page read [ 323.269896][ T1223] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 323.461920][ T1223] usb 6-1: Using ep0 maxpacket: 8 [ 323.495713][ T1223] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 323.512265][ T1223] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.520668][ T1223] usb 6-1: Product: syz [ 323.526368][ T1223] usb 6-1: Manufacturer: syz [ 323.531171][ T1223] usb 6-1: SerialNumber: syz [ 323.554588][ T1223] usb 6-1: config 0 descriptor?? [ 323.823943][ T1223] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 323.834407][ T1223] gspca_sunplus: reg_w_riv err -71 [ 323.839751][ T1223] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 323.866880][ T1223] usb 6-1: USB disconnect, device number 4 [ 324.547166][ T9531] FAULT_INJECTION: forcing a failure. [ 324.547166][ T9531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.569359][ T9529] netlink: 182 bytes leftover after parsing attributes in process `syz.2.890'. [ 324.601214][ T9531] CPU: 0 UID: 0 PID: 9531 Comm: syz.5.891 Tainted: G L syzkaller #0 PREEMPT(full) [ 324.601252][ T9531] Tainted: [L]=SOFTLOCKUP [ 324.601259][ T9531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 324.601270][ T9531] Call Trace: [ 324.601278][ T9531] [ 324.601286][ T9531] dump_stack_lvl+0xe8/0x150 [ 324.601317][ T9531] should_fail_ex+0x412/0x560 [ 324.601345][ T9531] _copy_from_user+0x2d/0xb0 [ 324.601375][ T9531] ___sys_sendmsg+0x1c6/0x360 [ 324.601401][ T9531] ? __lock_acquire+0x6b5/0x2cf0 [ 324.601431][ T9531] ? __pfx____sys_sendmsg+0x10/0x10 [ 324.601489][ T9531] ? __fget_files+0x2a/0x420 [ 324.601509][ T9531] ? __fget_files+0x3a0/0x420 [ 324.601539][ T9531] __x64_sys_sendmsg+0x1bd/0x2a0 [ 324.601565][ T9531] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 324.601600][ T9531] ? __pfx_ksys_write+0x10/0x10 [ 324.601640][ T9531] do_syscall_64+0xe2/0xf80 [ 324.601660][ T9531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.601678][ T9531] ? trace_irq_disable+0x37/0x100 [ 324.601695][ T9531] ? clear_bhb_loop+0x60/0xb0 [ 324.601719][ T9531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.601737][ T9531] RIP: 0033:0x7fd925f9aeb9 [ 324.601755][ T9531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.601771][ T9531] RSP: 002b:00007fd926e5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.601792][ T9531] RAX: ffffffffffffffda RBX: 00007fd926215fa0 RCX: 00007fd925f9aeb9 [ 324.601807][ T9531] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 324.601818][ T9531] RBP: 00007fd926e5f090 R08: 0000000000000000 R09: 0000000000000000 [ 324.601829][ T9531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.601839][ T9531] R13: 00007fd926216038 R14: 00007fd926215fa0 R15: 00007fd92633fa48 [ 324.601868][ T9531] [ 325.730791][ T9560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.839726][ T9560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.413841][ T9578] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 326.561816][ T5893] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 326.712216][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 326.728905][ T5893] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 326.748257][ T5893] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 326.791616][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.815210][ T5893] usb 4-1: Product: syz [ 326.828396][ T5893] usb 4-1: Manufacturer: syz [ 326.847757][ T5893] usb 4-1: SerialNumber: syz [ 326.888507][ T5893] usb 4-1: config 0 descriptor?? [ 326.904836][ T9588] FAULT_INJECTION: forcing a failure. [ 326.904836][ T9588] name failslab, interval 1, probability 0, space 0, times 0 [ 326.997881][ T9588] CPU: 0 UID: 0 PID: 9588 Comm: syz.2.903 Tainted: G L syzkaller #0 PREEMPT(full) [ 326.997905][ T9588] Tainted: [L]=SOFTLOCKUP [ 326.997910][ T9588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 326.997917][ T9588] Call Trace: [ 326.997922][ T9588] [ 326.997928][ T9588] dump_stack_lvl+0xe8/0x150 [ 326.997949][ T9588] should_fail_ex+0x412/0x560 [ 326.997966][ T9588] should_failslab+0xa8/0x100 [ 326.997980][ T9588] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 326.997997][ T9588] ? __alloc_skb+0x193/0x390 [ 326.998017][ T9588] ? __alloc_skb+0x1d7/0x390 [ 326.998029][ T9588] ? __local_bh_enable_ip+0xd0/0x130 [ 326.998040][ T9588] ? __alloc_skb+0x193/0x390 [ 326.998054][ T9588] __alloc_skb+0x1d7/0x390 [ 326.998069][ T9588] netlink_sendmsg+0x5d4/0xb40 [ 326.998087][ T9588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.998101][ T9588] ? aa_sock_msg_perm+0xf1/0x1b0 [ 326.998116][ T9588] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 326.998129][ T9588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.998141][ T9588] ____sys_sendmsg+0xa68/0xad0 [ 326.998156][ T9588] ? __might_fault+0xaf/0x130 [ 326.998176][ T9588] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.998196][ T9588] ? import_iovec+0x73/0xa0 [ 326.998214][ T9588] ___sys_sendmsg+0x2a5/0x360 [ 326.998229][ T9588] ? __lock_acquire+0x6b5/0x2cf0 [ 326.998247][ T9588] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.998280][ T9588] ? __fget_files+0x2a/0x420 [ 326.998292][ T9588] ? __fget_files+0x3a0/0x420 [ 326.998309][ T9588] __x64_sys_sendmsg+0x1bd/0x2a0 [ 326.998326][ T9588] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 326.998346][ T9588] ? __pfx_ksys_write+0x10/0x10 [ 326.998368][ T9588] do_syscall_64+0xe2/0xf80 [ 326.998380][ T9588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.998391][ T9588] ? trace_irq_disable+0x37/0x100 [ 326.998402][ T9588] ? clear_bhb_loop+0x60/0xb0 [ 326.998416][ T9588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.998427][ T9588] RIP: 0033:0x7fe32ef9aeb9 [ 326.998438][ T9588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.998448][ T9588] RSP: 002b:00007fe32fd70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.998462][ T9588] RAX: ffffffffffffffda RBX: 00007fe32f215fa0 RCX: 00007fe32ef9aeb9 [ 326.998471][ T9588] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 326.998478][ T9588] RBP: 00007fe32fd70090 R08: 0000000000000000 R09: 0000000000000000 [ 326.998485][ T9588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.998492][ T9588] R13: 00007fe32f216038 R14: 00007fe32f215fa0 R15: 00007fe32f33fa48 [ 326.998509][ T9588] [ 327.694318][ T9595] netlink: 182 bytes leftover after parsing attributes in process `syz.0.904'. [ 327.804111][ T9599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.813761][ T9602] netlink: 'syz.0.909': attribute type 6 has an invalid length. [ 327.835301][ T9599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.844183][ T9598] xt_ecn: cannot match TCP bits for non-tcp packets [ 328.410500][ T9616] vivid-000: disconnect [ 328.504658][ T9615] vivid-000: reconnect [ 329.182706][ T9624] FAULT_INJECTION: forcing a failure. [ 329.182706][ T9624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.202468][ T9624] CPU: 1 UID: 0 PID: 9624 Comm: syz.6.916 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.202501][ T9624] Tainted: [L]=SOFTLOCKUP [ 329.202508][ T9624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 329.202518][ T9624] Call Trace: [ 329.202526][ T9624] [ 329.202534][ T9624] dump_stack_lvl+0xe8/0x150 [ 329.202564][ T9624] should_fail_ex+0x412/0x560 [ 329.202592][ T9624] _copy_from_iter+0x1d3/0x1670 [ 329.202624][ T9624] ? trace_kmalloc+0x1f/0xb0 [ 329.202645][ T9624] ? __pfx__copy_from_iter+0x10/0x10 [ 329.202671][ T9624] ? __build_skb_around+0x22d/0x3c0 [ 329.202695][ T9624] ? __alloc_skb+0x193/0x390 [ 329.202716][ T9624] ? netlink_sendmsg+0x650/0xb40 [ 329.202734][ T9624] ? skb_put+0x11b/0x210 [ 329.202766][ T9624] netlink_sendmsg+0x6c0/0xb40 [ 329.202794][ T9624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.202818][ T9624] ? aa_sock_msg_perm+0xf1/0x1b0 [ 329.202841][ T9624] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 329.202862][ T9624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.202879][ T9624] ____sys_sendmsg+0xa68/0xad0 [ 329.202903][ T9624] ? __might_fault+0xaf/0x130 [ 329.202932][ T9624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.202959][ T9624] ? import_iovec+0x73/0xa0 [ 329.202982][ T9624] ___sys_sendmsg+0x2a5/0x360 [ 329.203008][ T9624] ? __lock_acquire+0x6b5/0x2cf0 [ 329.203031][ T9624] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.203077][ T9624] ? __fget_files+0x2a/0x420 [ 329.203093][ T9624] ? __fget_files+0x3a0/0x420 [ 329.203116][ T9624] __x64_sys_sendmsg+0x1bd/0x2a0 [ 329.203137][ T9624] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 329.203163][ T9624] ? __pfx_ksys_write+0x10/0x10 [ 329.203192][ T9624] do_syscall_64+0xe2/0xf80 [ 329.203208][ T9624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.203221][ T9624] ? trace_irq_disable+0x37/0x100 [ 329.203236][ T9624] ? clear_bhb_loop+0x60/0xb0 [ 329.203254][ T9624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.203267][ T9624] RIP: 0033:0x7fcb7059aeb9 [ 329.203283][ T9624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.203296][ T9624] RSP: 002b:00007fcb71375028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.203314][ T9624] RAX: ffffffffffffffda RBX: 00007fcb70815fa0 RCX: 00007fcb7059aeb9 [ 329.203324][ T9624] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 329.203334][ T9624] RBP: 00007fcb71375090 R08: 0000000000000000 R09: 0000000000000000 [ 329.203343][ T9624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.203352][ T9624] R13: 00007fcb70816038 R14: 00007fcb70815fa0 R15: 00007fcb7093fa48 [ 329.203375][ T9624] [ 329.572081][ T2154] usb 4-1: USB disconnect, device number 47 [ 329.663599][ T9631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.918'. [ 330.017005][ T9641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.139290][ T9641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.199140][ T9641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.208555][ T9641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.135731][ T9667] FAULT_INJECTION: forcing a failure. [ 331.135731][ T9667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.162387][ T9667] CPU: 1 UID: 0 PID: 9667 Comm: syz.0.927 Tainted: G L syzkaller #0 PREEMPT(full) [ 331.162421][ T9667] Tainted: [L]=SOFTLOCKUP [ 331.162428][ T9667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 331.162439][ T9667] Call Trace: [ 331.162447][ T9667] [ 331.162456][ T9667] dump_stack_lvl+0xe8/0x150 [ 331.162484][ T9667] should_fail_ex+0x412/0x560 [ 331.162510][ T9667] _copy_from_iter+0x1d3/0x1670 [ 331.162542][ T9667] ? trace_kmalloc+0x1f/0xb0 [ 331.162565][ T9667] ? __pfx__copy_from_iter+0x10/0x10 [ 331.162590][ T9667] ? __build_skb_around+0x22d/0x3c0 [ 331.162615][ T9667] ? __alloc_skb+0x193/0x390 [ 331.162635][ T9667] ? netlink_sendmsg+0x650/0xb40 [ 331.162654][ T9667] ? skb_put+0x11b/0x210 [ 331.162679][ T9667] netlink_sendmsg+0x6c0/0xb40 [ 331.162708][ T9667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.162730][ T9667] ? aa_sock_msg_perm+0xf1/0x1b0 [ 331.162753][ T9667] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 331.162775][ T9667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.162795][ T9667] ____sys_sendmsg+0xa68/0xad0 [ 331.162820][ T9667] ? __might_fault+0xaf/0x130 [ 331.162850][ T9667] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.162883][ T9667] ? import_iovec+0x73/0xa0 [ 331.162914][ T9667] ___sys_sendmsg+0x2a5/0x360 [ 331.162936][ T9667] ? __lock_acquire+0x6b5/0x2cf0 [ 331.162978][ T9667] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.163039][ T9667] ? __fget_files+0x2a/0x420 [ 331.163060][ T9667] ? __fget_files+0x3a0/0x420 [ 331.163091][ T9667] __x64_sys_sendmsg+0x1bd/0x2a0 [ 331.163119][ T9667] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 331.163154][ T9667] ? __pfx_ksys_write+0x10/0x10 [ 331.163194][ T9667] do_syscall_64+0xe2/0xf80 [ 331.163214][ T9667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.163233][ T9667] ? trace_irq_disable+0x37/0x100 [ 331.163251][ T9667] ? clear_bhb_loop+0x60/0xb0 [ 331.163273][ T9667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.163292][ T9667] RIP: 0033:0x7fbdca79aeb9 [ 331.163311][ T9667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.163327][ T9667] RSP: 002b:00007fbdcb732028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.163349][ T9667] RAX: ffffffffffffffda RBX: 00007fbdcaa15fa0 RCX: 00007fbdca79aeb9 [ 331.163363][ T9667] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 331.163376][ T9667] RBP: 00007fbdcb732090 R08: 0000000000000000 R09: 0000000000000000 [ 331.163388][ T9667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.163399][ T9667] R13: 00007fbdcaa16038 R14: 00007fbdcaa15fa0 R15: 00007fbdcab3fa48 [ 331.163431][ T9667] [ 331.441826][ T9665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.454417][ T9665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.475324][ T9665] netlink: 'syz.2.926': attribute type 1 has an invalid length. [ 333.665034][ T9691] loop2: detected capacity change from 0 to 7 [ 333.673207][ T6066] Dev loop2: unable to read RDB block 7 [ 333.678805][ T6066] loop2: unable to read partition table [ 333.685107][ T6066] loop2: partition table beyond EOD, truncated [ 333.693744][ T9691] Dev loop2: unable to read RDB block 7 [ 333.699538][ T9691] loop2: unable to read partition table [ 333.721973][ T9691] loop2: partition table beyond EOD, truncated [ 333.745442][ T9691] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 334.066789][ T9697] fuse: Bad value for 'fd' [ 334.354268][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.5.937'. [ 334.374172][ T9702] veth1_macvtap: left promiscuous mode [ 334.538414][ T9704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.556262][ T9704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.575993][ T9704] netlink: zone id is out of range [ 334.591974][ T9704] netlink: zone id is out of range [ 334.597134][ T9704] netlink: zone id is out of range [ 334.607687][ T9704] netlink: zone id is out of range [ 334.620951][ T9704] netlink: zone id is out of range [ 334.626524][ T9704] netlink: zone id is out of range [ 334.643296][ T9704] netlink: zone id is out of range [ 334.691956][ T9704] netlink: zone id is out of range [ 334.697122][ T9704] netlink: zone id is out of range [ 334.734867][ T9704] netlink: zone id is out of range [ 334.978742][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 334.978763][ T30] audit: type=1326 audit(1769725185.758:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.5.941" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd925f9aeb9 code=0x0 [ 335.606407][ T9737] loop2: detected capacity change from 0 to 7 [ 335.620746][ T5931] Dev loop2: unable to read RDB block 7 [ 335.628956][ T5931] loop2: unable to read partition table [ 335.642857][ T5931] loop2: partition table beyond EOD, truncated [ 335.655454][ T9737] Dev loop2: unable to read RDB block 7 [ 335.789173][ T9737] loop2: unable to read partition table [ 335.808317][ T9737] loop2: partition table beyond EOD, truncated [ 335.842340][ T9737] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 335.921708][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 336.115262][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.129374][ T9] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 336.152191][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.202965][ T9] usb 7-1: config 0 descriptor?? [ 336.234457][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 336.340437][ T9740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.381213][ T9740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.613230][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 336.621374][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 336.633245][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 337.553574][ T9753] netlink: 'syz.5.949': attribute type 6 has an invalid length. [ 337.571820][ T9753] netlink: 'syz.5.949': attribute type 7 has an invalid length. [ 337.589094][ T9753] netlink: 'syz.5.949': attribute type 8 has an invalid length. [ 338.523569][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 338.591377][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 338.612985][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 338.619936][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 338.691818][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 338.701938][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 338.712090][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 338.729111][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 338.739669][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 338.749743][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 338.810199][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 338.834665][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 338.863825][ T9] pwc: Registered as video103. [ 338.870027][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input29 [ 338.883061][ T9] usb 7-1: USB disconnect, device number 4 [ 339.121697][ T1223] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 339.281767][ T1223] usb 4-1: Using ep0 maxpacket: 16 [ 339.305143][ T1223] usb 4-1: config 64 has 0 interfaces, different from the descriptor's value: 22 [ 339.332317][ T1223] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 339.342234][ T1223] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 339.354124][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 339.366265][ T1223] usb 4-1: Manufacturer: syz [ 339.420601][ T1223] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 339.466812][ T1223] usb 4-1: no configuration chosen from 1 choice [ 339.623252][ T5907] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 339.687660][ T9] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 339.700409][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.725161][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.750776][ T9] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 339.760847][ T9] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 339.769032][ T9] usb 7-1: Manufacturer: syz [ 339.775598][ T9] usb 7-1: config 0 descriptor?? [ 339.785307][ T9] igorplugusb 7-1:0.0: endpoint incorrect [ 339.791595][ T5907] usb 6-1: device descriptor read/64, error -71 [ 340.048178][ T9764] sctp: [Deprecated]: syz.6.952 (pid 9764) Use of struct sctp_assoc_value in delayed_ack socket option. [ 340.048178][ T9764] Use struct sctp_sack_info instead [ 340.074540][ T5907] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 340.230276][ T9784] netlink: 168 bytes leftover after parsing attributes in process `syz.6.952'. [ 340.250529][ T5907] usb 6-1: device descriptor read/64, error -71 [ 340.333470][ T1223] usb 7-1: USB disconnect, device number 5 [ 340.382105][ T5907] usb usb6-port1: attempt power cycle [ 340.721722][ T5907] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 340.743465][ T5907] usb 6-1: device descriptor read/8, error -71 [ 340.991590][ T5907] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 341.032509][ T5907] usb 6-1: device descriptor read/8, error -71 [ 341.120434][ T9795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.138733][ T9795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.152437][ T5907] usb usb6-port1: unable to enumerate USB device [ 341.191603][ T5927] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 341.222124][ T5907] usb 4-1: USB disconnect, device number 48 [ 341.341976][ T5927] usb 7-1: Using ep0 maxpacket: 32 [ 341.348971][ T5927] usb 7-1: config 1 has an invalid interface number: 137 but max is 0 [ 341.358253][ T5927] usb 7-1: config 1 has no interface number 0 [ 341.364948][ T5927] usb 7-1: config 1 interface 137 has no altsetting 0 [ 341.397738][ T5927] usb 7-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a [ 341.408350][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.417740][ T5927] usb 7-1: Product: syz [ 341.422574][ T5927] usb 7-1: Manufacturer: syz [ 341.427398][ T5927] usb 7-1: SerialNumber: syz [ 341.815142][ T5927] pl2303 7-1:1.137: required interrupt-in endpoint missing [ 341.859403][ T5927] usb 7-1: USB disconnect, device number 6 [ 342.153731][ T9808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.524871][ T9819] sctp: [Deprecated]: syz.0.966 (pid 9819) Use of struct sctp_assoc_value in delayed_ack socket option. [ 342.524871][ T9819] Use struct sctp_sack_info instead [ 342.901760][ T9829] ptrace attach of ""[9830] was attempted by "./syz-executor exec"[9829] [ 342.911612][ T9831] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 342.944535][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.6.964'. [ 343.219715][ T5893] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 343.422354][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 343.446466][ T5893] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.491859][ T5893] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 343.515811][ T5893] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 343.526518][ T5893] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 343.550079][ T5893] usb 6-1: config 1 interface 1 has no altsetting 0 [ 343.561869][ T5893] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 343.571062][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.579387][ T5893] usb 6-1: Product: syz [ 343.584126][ T5893] usb 6-1: Manufacturer: syz [ 343.745877][ T5893] usb 6-1: SerialNumber: syz [ 344.381906][ T5893] usb 6-1: USB disconnect, device number 9 [ 344.588816][ T5931] udevd[5931]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 344.711197][ T9863] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.408933][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.988'. [ 347.095245][ T9924] x_tables: duplicate underflow at hook 2 [ 348.221766][ T9932] sctp: [Deprecated]: syz.3.994 (pid 9932) Use of struct sctp_assoc_value in delayed_ack socket option. [ 348.221766][ T9932] Use struct sctp_sack_info instead [ 348.257078][ T9932] pimreg: tun_chr_ioctl cmd 1074025677 [ 348.265040][ T9932] pimreg: linktype set to 773 [ 348.271866][ T5893] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 348.430440][ T9941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.439773][ T9941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.460902][ T30] audit: type=1326 audit(1769725199.198:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9938 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32ef9aeb9 code=0x7ffc0000 [ 348.486995][ T5893] usb 7-1: device descriptor read/64, error -71 [ 348.494174][ T30] audit: type=1326 audit(1769725199.198:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9938 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32ef9aeb9 code=0x7ffc0000 [ 348.525871][ T30] audit: type=1326 audit(1769725199.198:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9938 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe32ef9aeb9 code=0x7ffc0000 [ 348.548603][ T1223] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 348.565130][ T30] audit: type=1326 audit(1769725199.198:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9938 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32ef9aeb9 code=0x7ffc0000 [ 348.598057][ T30] audit: type=1326 audit(1769725199.198:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9938 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32ef9aeb9 code=0x7ffc0000 [ 348.653417][ T30] audit: type=1326 audit(1769725199.198:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9938 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe32ef9aeb9 code=0x7ffc0000 [ 348.692807][ T30] audit: type=1326 audit(1769725199.198:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9938 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32ef9aeb9 code=0x7ffc0000 [ 348.716062][ T1223] usb 6-1: device descriptor read/64, error -71 [ 348.726893][ T30] audit: type=1326 audit(1769725199.198:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9938 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe32ef9aeb9 code=0x7ffc0000 [ 348.817359][ T5893] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 348.862057][ T30] audit: type=1326 audit(1769725199.198:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9938 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32ef9aeb9 code=0x7ffc0000 [ 349.100029][ T1223] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 349.107844][ T5893] usb 7-1: device descriptor read/64, error -71 [ 349.118263][ T30] audit: type=1326 audit(1769725199.198:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9938 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe32ef9aeb9 code=0x7ffc0000 [ 349.234399][ T5893] usb usb7-port1: attempt power cycle [ 349.241657][ T1223] usb 6-1: device descriptor read/64, error -71 [ 349.352370][ T1223] usb usb6-port1: attempt power cycle [ 349.381870][ T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 349.541654][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 349.549418][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 349.558766][ T9] usb 4-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 96 [ 349.568997][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 349.575726][ T5893] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 349.585305][ T9] usb 4-1: language id specifier not provided by device, defaulting to English [ 349.598047][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 349.607351][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.615729][ T9] usb 4-1: Product: syz [ 349.620069][ T5893] usb 7-1: device descriptor read/8, error -71 [ 349.626759][ T9] usb 4-1: Manufacturer: 得㇩ឈ謆⿢ [ 349.633361][ T9] usb 4-1: SerialNumber: syz [ 349.642179][ T9943] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 349.691863][ T1223] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 349.722316][ T1223] usb 6-1: device descriptor read/8, error -71 [ 349.863101][ T9] usb 4-1: USB disconnect, device number 49 [ 349.871609][ T5893] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 349.901890][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 349.916894][ T5893] usb 7-1: device descriptor read/8, error -71 [ 349.962396][ T1223] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 349.983774][ T1223] usb 6-1: device descriptor read/8, error -71 [ 350.033310][ T5893] usb usb7-port1: unable to enumerate USB device [ 350.091890][ T1223] usb usb6-port1: unable to enumerate USB device [ 350.698043][ T9952] bond3: Removing last ns target with arp_interval on [ 351.461263][ T9962] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1004'. [ 352.712662][ T9968] loop2: detected capacity change from 0 to 7 [ 352.719975][ T9968] loop2: [ 352.728616][ T9968] loop2: partition table partially beyond EOD, truncated [ 353.306004][ T9983] netlink: 190 bytes leftover after parsing attributes in process `syz.5.1009'. [ 353.651976][ T9989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.661578][ T9989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.345245][ T9997] loop5: detected capacity change from 0 to 7 [ 354.356244][ T9997] loop5: [ 354.359239][ T9997] loop5: partition table partially beyond EOD, truncated [ 354.607614][T10002] netlink: 'syz.5.1014': attribute type 1 has an invalid length. [ 354.654819][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1014'. [ 355.487693][T10016] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 355.494279][T10016] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 355.606202][T10016] vhci_hcd vhci_hcd.0: Device attached [ 355.644565][T10020] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(8) [ 355.651225][T10020] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 355.697969][T10016] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 355.704540][T10016] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 355.720079][T10026] loop2: detected capacity change from 0 to 7 [ 355.732560][T10026] loop2: [ 355.739399][T10020] vhci_hcd vhci_hcd.0: Device attached [ 355.751619][T10026] loop2: partition table partially beyond EOD, truncated [ 355.817159][T10016] vhci_hcd vhci_hcd.0: Device attached [ 355.908594][T10020] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 355.915626][T10020] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 355.923423][ T1223] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 356.010144][T10020] vhci_hcd vhci_hcd.0: Device attached [ 356.103575][T10023] vhci_hcd: connection closed [ 356.104525][T10028] vhci_hcd: connection closed [ 356.104599][ T8187] vhci_hcd vhci_hcd.0: stop threads [ 356.109481][T10021] vhci_hcd: connection closed [ 356.128048][T10017] vhci_hcd: connection reset by peer [ 356.129561][ T8187] vhci_hcd vhci_hcd.0: release socket [ 356.159561][ T8187] vhci_hcd vhci_hcd.0: disconnect device [ 356.175999][ T8187] vhci_hcd vhci_hcd.0: stop threads [ 356.189968][ T8187] vhci_hcd vhci_hcd.0: release socket [ 356.204885][ T8187] vhci_hcd vhci_hcd.0: disconnect device [ 356.224895][ T8187] vhci_hcd vhci_hcd.0: stop threads [ 356.264411][ T8187] vhci_hcd vhci_hcd.0: release socket [ 356.276673][ T8187] vhci_hcd vhci_hcd.0: disconnect device [ 356.283436][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 356.297539][ T8187] vhci_hcd vhci_hcd.0: stop threads [ 356.303681][ T8187] vhci_hcd vhci_hcd.0: release socket [ 356.309266][ T8187] vhci_hcd vhci_hcd.0: disconnect device [ 356.508232][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 356.520453][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.532478][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.553135][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 356.565498][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.588072][ T9] usb 6-1: config 0 descriptor?? [ 356.925747][T10044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.941831][T10044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.230283][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 357.230304][ T30] audit: type=1800 audit(1769725207.988:372): pid=10041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1021" name="bus" dev="ramfs" ino=34570 res=0 errno=0 [ 357.793417][ T9] savu 0003:1E7D:2D5A.0012: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 358.288686][T10063] loop5: detected capacity change from 0 to 7 [ 358.303068][ T5931] loop5: [ 358.306527][ T5931] loop5: partition table partially beyond EOD, truncated [ 358.352591][T10063] loop5: [ 358.357036][T10063] loop5: partition table partially beyond EOD, truncated [ 358.552429][ T5907] usb 6-1: USB disconnect, device number 14 [ 358.863774][T10065] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1027'. [ 358.973067][T10066] binder: BC_ATTEMPT_ACQUIRE not supported [ 358.980732][T10066] binder: 10064:10066 ioctl c0306201 2000000001c0 returned -22 [ 359.504211][T10080] loop2: detected capacity change from 0 to 7 [ 359.540395][ T6066] loop2: [ 359.553796][ T6066] loop2: partition table partially beyond EOD, truncated [ 359.588950][T10080] loop2: [ 359.595165][T10080] loop2: partition table partially beyond EOD, truncated [ 359.764082][T10090] netlink: 190 bytes leftover after parsing attributes in process `syz.5.1033'. [ 360.114857][T10099] loop5: detected capacity change from 0 to 7 [ 360.150407][ T9026] loop5: [ 360.157474][ T9026] loop5: partition table partially beyond EOD, truncated [ 360.172424][T10099] loop5: [ 360.175456][T10099] loop5: partition table partially beyond EOD, truncated [ 360.306767][T10107] xt_TPROXY: Can be used only with -p tcp or -p udp [ 361.062968][ T1223] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 361.308452][T10124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.342884][T10124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.711005][T10128] kAFS: unable to lookup cell '' [ 361.717971][T10128] kAFS: unable to lookup cell '(,c' [ 362.493520][ T5921] usb usb34-port1: attempt power cycle [ 362.516755][T10134] netlink: 182 bytes leftover after parsing attributes in process `syz.6.1046'. [ 363.053024][ T5921] usb usb34-port1: unable to enumerate USB device [ 364.361621][ T5927] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 364.689746][ T5927] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c9.98 [ 364.716266][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.742870][ T5927] usb 6-1: config 0 descriptor?? [ 364.769411][ T5927] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 364.864423][ T5927] ftdi_sio ttyUSB0: unknown device type: 0xc998 [ 364.867757][T10151] input: syz1 as /devices/virtual/input/input30 [ 365.167494][ T5927] usb 6-1: USB disconnect, device number 15 [ 365.169235][ T5927] ftdi_sio 6-1:0.0: device disconnected [ 366.361305][ T5927] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 366.575458][ T5927] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 366.588731][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.603558][ T5927] usb 4-1: Product: syz [ 366.612457][ T5927] usb 4-1: Manufacturer: syz [ 366.641868][ T5927] usb 4-1: SerialNumber: syz [ 367.084836][T10192] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1063'. [ 367.534978][T10207] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1065'. [ 367.876846][ T5927] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 367.892849][ T5927] cdc_ncm 4-1:1.0: dwNtbInMaxSize=128 is too small. Using 2048 [ 367.914185][ T5927] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 367.976113][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 368.078120][ T5927] cdc_ncm 4-1:1.0: setting tx_max = 48 [ 368.311745][ T9] usb 7-1: device descriptor read/64, error -71 [ 368.381788][ T5927] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 368.445999][ T5927] usb 4-1: USB disconnect, device number 50 [ 368.478911][ T5927] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 368.571727][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 368.732013][ T9] usb 7-1: device descriptor read/64, error -71 [ 368.776667][T10221] vivid-002: disconnect [ 368.791665][T10220] vivid-002: reconnect [ 368.852973][ T9] usb usb7-port1: attempt power cycle [ 368.861446][T10225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.923191][T10225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.964760][T10225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.976456][T10225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.989938][T10225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.999039][T10225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.236154][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 369.283561][ T9] usb 7-1: device descriptor read/8, error -71 [ 369.614074][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 369.642591][ T9] usb 7-1: device descriptor read/8, error -71 [ 369.855880][ T9] usb usb7-port1: unable to enumerate USB device [ 371.372668][ T9] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 371.463299][ T1223] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 371.521593][ T9] usb 4-1: device descriptor read/64, error -71 [ 371.654367][ T1223] usb 7-1: Using ep0 maxpacket: 16 [ 371.668721][ T1223] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 371.688015][ T1223] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 371.703875][ T1223] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.731060][ T1223] usb 7-1: Product: syz [ 371.748652][ T1223] usb 7-1: Manufacturer: syz [ 371.763484][ T1223] usb 7-1: SerialNumber: syz [ 371.771872][ T9] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 371.792943][ T1223] usb 7-1: config 0 descriptor?? [ 371.931949][ T9] usb 4-1: device descriptor read/64, error -71 [ 372.052193][ T9] usb usb4-port1: attempt power cycle [ 372.411754][ T9] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 372.464987][ T9] usb 4-1: device descriptor read/8, error -71 [ 372.711903][ T9] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 372.814119][ T9] usb 4-1: device descriptor read/8, error -71 [ 372.937507][ T9] usb usb4-port1: unable to enumerate USB device [ 374.250333][ T9] usb 7-1: USB disconnect, device number 15 [ 374.860408][T10328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.893812][T10328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.978792][T10336] bridge0: port 3(batadv0) entered disabled state [ 374.979515][T10336] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.979952][T10336] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.035921][T10335] binder: BINDER_SET_CONTEXT_MGR already set [ 375.035956][T10335] binder: 10333:10335 ioctl 4018620d 2000000002c0 returned -16 [ 376.186031][T10362] net_ratelimit: 563 callbacks suppressed [ 376.186063][T10362] sit0: mtu less than device minimum [ 376.198623][T10363] sit0: mtu less than device minimum [ 376.342385][ T1223] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 376.402094][ T48] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 376.764452][ T48] usb 6-1: not running at top speed; connect to a high speed hub [ 376.773795][ T48] usb 6-1: config 14 has an invalid interface number: 21 but max is 0 [ 376.784631][ T48] usb 6-1: config 14 has no interface number 0 [ 376.790853][ T48] usb 6-1: config 14 interface 21 has no altsetting 0 [ 376.797848][ T1223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.850101][ T1223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.889805][ T1223] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 376.900160][ T48] usb 6-1: string descriptor 0 read error: -22 [ 376.909275][ T48] usb 6-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 376.922408][ T1223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.922433][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.960037][ T48] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 376.969913][ T48] usb 6-1: MIDIStreaming interface descriptor not found [ 377.016400][ T1223] usb 4-1: config 0 descriptor?? [ 377.163452][ T9] usb 6-1: USB disconnect, device number 16 [ 377.515616][ T1223] hid-led 0003:0FC5:B080.0013: unknown main item tag 0x0 [ 377.708508][ T1223] hid-led 0003:0FC5:B080.0013: probe with driver hid-led failed with error -71 [ 377.780955][ T1223] usb 4-1: USB disconnect, device number 55 [ 378.161712][ T48] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 378.382741][ T48] usb 6-1: Using ep0 maxpacket: 32 [ 378.399302][ T48] usb 6-1: config 0 interface 0 has no altsetting 0 [ 378.434987][ T48] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 378.451562][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.464555][ T48] usb 6-1: Product: syz [ 378.468751][ T48] usb 6-1: Manufacturer: syz [ 378.482404][ T48] usb 6-1: SerialNumber: syz [ 378.498996][ T48] usb 6-1: config 0 descriptor?? [ 378.514701][ T48] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 378.526206][ T48] dvb-usb: bulk message failed: -22 (4/0) [ 378.545361][ T48] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 378.624876][ T48] dvb-usb: bulk message failed: -22 (5/0) [ 378.651213][ T48] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 378.718516][T10375] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1104'. [ 378.728166][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.737173][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.761159][T10375] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1104'. [ 378.772530][ T48] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 378.997840][ T48] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 379.023692][ T48] usb 6-1: media controller created [ 379.180052][ T48] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 379.269829][T10398] loop5: detected capacity change from 0 to 7 [ 379.286644][ T48] usb 6-1: selecting invalid altsetting 3 [ 379.293244][T10398] loop5: [ 379.296202][T10398] loop5: partition table partially beyond EOD, truncated [ 379.312677][ T48] ttusb2: set interface to alts=3 failed [ 379.476349][ T48] DVB: Unable to find symbol tda10086_attach() [ 379.492798][ T48] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 379.542864][ T48] dvb-usb: bulk message failed: -22 (4/0) [ 379.576723][ T48] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 379.589620][T10402] netlink: 'syz.2.1112': attribute type 1 has an invalid length. [ 379.611177][ T48] dvb-usb: bulk message failed: -22 (5/0) [ 379.626135][ T48] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 379.652399][ T48] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 379.707252][ T48] usb 6-1: USB disconnect, device number 17 [ 379.880980][ T48] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 380.885171][T10427] netlink: 182 bytes leftover after parsing attributes in process `syz.0.1118'. [ 381.560878][T10437] loop5: detected capacity change from 0 to 7 [ 381.570316][ T5931] loop5: [ 381.639101][ T5931] loop5: partition table partially beyond EOD, truncated [ 381.661531][T10437] loop5: [ 381.664800][T10437] loop5: partition table partially beyond EOD, truncated [ 381.925290][T10447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.013799][T10447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.223275][T10447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.278904][T10447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.406962][T10447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.436095][T10447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.485653][T10447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.502792][T10454] xt_l2tp: v2 doesn't support IP mode [ 382.508557][T10453] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1127'. [ 382.511904][ T5893] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 382.541010][T10447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.564958][T10447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.738815][T10447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.851752][ T5893] usb 6-1: Using ep0 maxpacket: 8 [ 382.883550][ T5893] usb 6-1: device descriptor read/all, error -71 [ 382.940654][T10466] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1130'. [ 382.951222][T10466] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1130'. [ 383.338760][T10470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 383.687565][T10470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.701721][T10470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.853834][T10478] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1133'. [ 383.886387][ T1223] IPVS: starting estimator thread 0... [ 383.915599][T10478] 8021q: adding VLAN 0 to HW filter on device bond1 [ 383.987929][T10484] IPVS: using max 50 ests per chain, 120000 per kthread [ 384.471838][ T5927] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 384.672197][T10505] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1138'. [ 384.712131][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 384.720371][ T5927] usb 4-1: unable to get BOS descriptor or descriptor too short [ 384.750492][ T5927] usb 4-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 96 [ 384.761810][ T5927] usb 4-1: config 1 interface 0 has no altsetting 0 [ 384.783547][ T5927] usb 4-1: language id specifier not provided by device, defaulting to English [ 384.817663][ T5927] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 384.835335][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.865138][ T5927] usb 4-1: Product: syz [ 384.881616][ T5927] usb 4-1: Manufacturer: 得㇩ឈ謆⿢ [ 384.889007][ T5927] usb 4-1: SerialNumber: syz [ 384.895220][T10509] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1139'. [ 384.918370][T10494] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 385.241861][ T5893] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 385.394871][ T5893] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 385.414093][ T5893] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 385.435298][ T5893] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 385.457779][ T5893] usb 6-1: config 220 has no interface number 2 [ 385.471071][ T5893] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 385.502012][ T5893] usb 6-1: config 220 interface 0 has no altsetting 0 [ 385.514744][ T5893] usb 6-1: config 220 interface 76 has no altsetting 0 [ 385.524926][ T5893] usb 6-1: config 220 interface 1 has no altsetting 0 [ 385.539378][ T5893] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 385.549400][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.557719][ T5893] usb 6-1: Product: syz [ 385.562531][ T5893] usb 6-1: Manufacturer: syz [ 385.567350][ T5893] usb 6-1: SerialNumber: syz [ 385.649971][T10524] wg1: entered promiscuous mode [ 385.799333][ T5893] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 385.807566][ T5893] uvcvideo 6-1:220.0: No valid video chain found. [ 385.817366][ T5893] usb 6-1: selecting invalid altsetting 0 [ 385.837848][ T5893] usb 6-1: selecting invalid altsetting 0 [ 385.857329][ T5893] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 385.893327][ T5893] usb 6-1: USB disconnect, device number 20 [ 385.990329][T10533] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1144'. [ 386.003421][T10533] netlink: 388 bytes leftover after parsing attributes in process `syz.6.1144'. [ 387.131622][ T5893] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 387.224637][ T5927] usb 4-1: USB disconnect, device number 56 [ 387.291992][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 387.316571][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.348313][ T5893] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 387.385687][ T5893] usb 6-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 387.411594][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.438671][ T5893] usb 6-1: config 0 descriptor?? [ 387.467095][T10561] netlink: 'syz.3.1152': attribute type 3 has an invalid length. [ 387.734795][T10563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.751615][ T2154] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 387.780212][T10563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.803565][T10563] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1153'. [ 387.858396][ T30] audit: type=1326 audit(1769725238.638:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10570 comm="syz.0.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdca79aeb9 code=0x7ffc0000 [ 387.889141][ T30] audit: type=1326 audit(1769725238.638:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10570 comm="syz.0.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdca79aeb9 code=0x7ffc0000 [ 387.924102][ T2154] usb 4-1: device descriptor read/64, error -71 [ 388.047821][ T30] audit: type=1326 audit(1769725238.638:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10570 comm="syz.0.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fbdca79aeb9 code=0x7ffc0000 [ 388.073232][ T30] audit: type=1326 audit(1769725238.638:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10570 comm="syz.0.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdca79aeb9 code=0x7ffc0000 [ 388.117538][ T30] audit: type=1326 audit(1769725238.638:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10570 comm="syz.0.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbdca79aeb9 code=0x7ffc0000 [ 388.156999][T10563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.165787][ T5893] usbhid 6-1:0.0: can't add hid device: -71 [ 388.171887][ T5893] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 388.180289][ T30] audit: type=1326 audit(1769725238.638:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10570 comm="syz.0.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdca79aeb9 code=0x7ffc0000 [ 388.182249][ T2154] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 388.212785][T10563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.237551][ T5893] usb 6-1: USB disconnect, device number 21 [ 388.291361][ T30] audit: type=1326 audit(1769725238.638:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10570 comm="syz.0.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdca79aeb9 code=0x7ffc0000 [ 388.408474][ T30] audit: type=1326 audit(1769725238.638:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10570 comm="syz.0.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fbdca79aeb9 code=0x7ffc0000 [ 388.445054][ T2154] usb 4-1: device descriptor read/64, error -71 [ 388.455402][ T30] audit: type=1326 audit(1769725238.638:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10570 comm="syz.0.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdca79aeb9 code=0x7ffc0000 [ 388.562301][ T2154] usb usb4-port1: attempt power cycle [ 388.747557][T10597] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1160'. [ 388.782594][T10597] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1160'. [ 388.799981][ T30] audit: type=1326 audit(1769725238.638:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10570 comm="syz.0.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbdca79aeb9 code=0x7ffc0000 [ 388.991079][ T2154] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 389.022269][ T2154] usb 4-1: device descriptor read/8, error -71 [ 389.261698][ T2154] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 389.392687][ T2154] usb 4-1: device descriptor read/8, error -71 [ 389.502715][T10611] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1161'. [ 389.512232][ T2154] usb usb4-port1: unable to enumerate USB device [ 390.271660][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 390.425167][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 390.433706][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 390.456485][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 390.468585][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 390.492148][T10621] input: syz1 as /devices/virtual/input/input33 [ 390.501193][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 390.515877][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 390.531134][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 390.543023][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.796769][ T9] usb 7-1: GET_CAPABILITIES returned 0 [ 390.803120][ T5921] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 390.824738][ T9] usbtmc 7-1:16.0: can't read capabilities [ 390.971584][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 390.979816][ T5921] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 390.988768][ T5921] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 390.999301][ T5921] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 391.009680][ T5921] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 391.027438][ T5921] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 391.043950][ T9] usb 7-1: USB disconnect, device number 16 [ 391.068850][ T5921] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 391.083750][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.318321][ T5921] usb 4-1: GET_CAPABILITIES returned 0 [ 391.335220][ T5921] usbtmc 4-1:16.0: can't read capabilities [ 392.023123][ T48] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 392.184691][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 392.197021][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.227396][ T48] usb 7-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.00 [ 392.255745][ T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.286819][ T48] usb 7-1: config 0 descriptor?? [ 392.727230][ T48] usbhid 7-1:0.0: can't add hid device: -71 [ 392.738497][ T48] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 392.781394][ T48] usb 7-1: USB disconnect, device number 17 [ 392.899031][T10649] netlink: 'syz.5.1175': attribute type 6 has an invalid length. [ 392.916443][T10649] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1175'. [ 393.258157][T10654] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1177'. [ 393.274916][T10654] netlink: 'syz.2.1177': attribute type 39 has an invalid length. [ 393.443711][ T48] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 393.475339][T10658] capability: warning: `syz.2.1179' uses 32-bit capabilities (legacy support in use) [ 393.503027][ T9] usb 4-1: USB disconnect, device number 61 [ 393.581649][ T48] usb 6-1: device descriptor read/64, error -71 [ 393.661644][ T5927] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 393.745573][T10667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.755896][T10667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.770298][T10670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.780758][T10670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.844769][ T48] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 393.868684][ T5927] usb 7-1: unable to get BOS descriptor or descriptor too short [ 393.904825][ T5927] usb 7-1: config 3 has an invalid interface number: 8 but max is 3 [ 393.913925][ T5927] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 393.924427][ T5927] usb 7-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 393.934604][ T5927] usb 7-1: config 3 has no interface number 0 [ 393.940783][ T5927] usb 7-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 248, changing to 11 [ 393.952498][ T5927] usb 7-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 393.965947][ T5927] usb 7-1: config 3 interface 8 has no altsetting 0 [ 393.985083][ T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 393.988750][ T5927] usb 7-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be [ 394.003316][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.011632][ T5927] usb 7-1: Product: syz [ 394.021633][ T5927] usb 7-1: Manufacturer: syz [ 394.028928][ T5927] usb 7-1: SerialNumber: syz [ 394.033780][ T48] usb 6-1: device descriptor read/64, error -71 [ 394.143082][ T48] usb usb6-port1: attempt power cycle [ 394.223193][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 394.239258][ T9] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 394.249658][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.276434][ T9] usb 4-1: Product: syz [ 394.276656][ T5927] appledisplay 7-1:3.8: Error while getting initial brightness: -71 [ 394.305765][ T9] usb 4-1: Manufacturer: syz [ 394.314336][ T9] usb 4-1: SerialNumber: syz [ 394.338002][ T5927] appledisplay 7-1:3.8: probe with driver appledisplay failed with error -71 [ 394.385506][ T5927] usbhid 7-1:3.8: fixing wrong optional hid class descriptors count [ 394.403051][ T5927] usbhid 7-1:3.8: can't add hid device: -22 [ 394.417595][ T5927] usbhid 7-1:3.8: probe with driver usbhid failed with error -22 [ 394.458562][ T5927] usb 7-1: USB disconnect, device number 18 [ 394.481595][ T48] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 394.543682][ T48] usb 6-1: device descriptor read/8, error -71 [ 394.806174][ T48] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 394.889942][ T48] usb 6-1: device descriptor read/8, error -71 [ 395.048374][ T48] usb usb6-port1: unable to enumerate USB device [ 396.280657][T10691] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1189'. [ 396.306854][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 396.306945][ T30] audit: type=1800 audit(1769725247.088:409): pid=10689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1187" name=FE80 dev="tmpfs" ino=1491 res=0 errno=0 [ 396.419170][T10691] netlink: 'syz.5.1189': attribute type 39 has an invalid length. [ 397.630012][T10710] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1194'. [ 397.717447][ T9] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 397.769289][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 397.792536][ T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 397.802179][ T9] usb 4-1: media controller created [ 397.878596][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 397.901838][ T1223] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 397.955848][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 398.098398][ T1223] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 398.115323][ T1223] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.128121][ T9] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 398.144653][ T1223] usb 7-1: Product: syz [ 398.157925][ T1223] usb 7-1: Manufacturer: syz [ 398.163505][ T9] usb 4-1: USB disconnect, device number 62 [ 398.173351][ T1223] usb 7-1: SerialNumber: syz [ 398.198155][ T1223] usb 7-1: config 0 descriptor?? [ 398.422925][ T9] usb 7-1: USB disconnect, device number 19 [ 398.462908][T10719] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 398.986515][ T9] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 399.231574][ T9] usb 7-1: device descriptor read/64, error -71 [ 399.491743][ T9] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 399.841833][ T9] usb 7-1: device descriptor read/64, error -71 [ 399.852411][T10728] netlink: 'syz.0.1201': attribute type 10 has an invalid length. [ 399.881267][T10728] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1201'. [ 399.904602][T10728] batadv0: entered promiscuous mode [ 399.927740][T10728] batadv0: entered allmulticast mode [ 399.942390][T10728] bridge0: port 4(batadv0) entered blocking state [ 399.962336][ T9] usb usb7-port1: attempt power cycle [ 399.971710][T10728] bridge0: port 4(batadv0) entered disabled state [ 400.001103][T10728] bridge0: port 4(batadv0) entered blocking state [ 400.007768][T10728] bridge0: port 4(batadv0) entered forwarding state [ 400.024621][ T8187] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 400.034914][ T8187] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 400.187872][T10731] loop2: detected capacity change from 0 to 7 [ 400.204396][T10731] loop2: [ 400.207606][T10731] loop2: partition table partially beyond EOD, truncated [ 400.332140][ T9] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 400.373156][ T9] usb 7-1: device descriptor read/8, error -71 [ 400.626267][ T9] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 400.841599][ T9] usb 7-1: device not accepting address 23, error -71 [ 400.875297][ T9] usb usb7-port1: unable to enumerate USB device [ 401.123234][ T30] audit: type=1326 audit(1769725251.888:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.6.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7059aeb9 code=0x7ffc0000 [ 401.231390][ T30] audit: type=1326 audit(1769725251.888:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.6.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7059aeb9 code=0x7ffc0000 [ 401.334854][ T30] audit: type=1326 audit(1769725251.888:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.6.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb7059aeb9 code=0x7ffc0000 [ 401.406718][ T30] audit: type=1326 audit(1769725251.888:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.6.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7059aeb9 code=0x7ffc0000 [ 401.481037][ T30] audit: type=1326 audit(1769725251.888:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.6.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fcb7059aeb9 code=0x7ffc0000 [ 401.567969][ T30] audit: type=1326 audit(1769725251.888:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.6.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7059aeb9 code=0x7ffc0000 [ 401.629554][ T30] audit: type=1326 audit(1769725251.888:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.6.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb7059aeb9 code=0x7ffc0000 [ 401.691968][ T30] audit: type=1326 audit(1769725251.888:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.6.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7059aeb9 code=0x7ffc0000 [ 401.801898][ T30] audit: type=1326 audit(1769725251.888:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.6.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb7055b78e code=0x7ffc0000 [ 401.991607][ T30] audit: type=1326 audit(1769725251.898:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.6.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7059aeb9 code=0x7ffc0000 [ 402.111652][ T30] audit: type=1326 audit(1769725251.898:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.6.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcb7059aeb9 code=0x7ffc0000 [ 402.341830][ T30] audit: type=1326 audit(1769725251.898:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.6.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7059aeb9 code=0x7ffc0000 [ 402.708350][T10779] loop2: detected capacity change from 0 to 7 [ 402.731434][T10779] loop2: [ 402.771626][T10779] loop2: partition table partially beyond EOD, truncated [ 403.039068][T10786] ptrace attach of "./syz-executor exec"[5849] was attempted by "./syz-executor exec"[10786] [ 403.236923][T10791] random: crng reseeded on system resumption [ 403.542075][ T5907] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 403.787967][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.872278][ T5907] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 403.936561][ T5907] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 403.973340][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.025833][ T5907] usb 4-1: config 0 descriptor?? [ 404.035230][T10802] loop5: detected capacity change from 0 to 7 [ 404.135512][ T5931] loop5: [ 404.138911][ T5931] loop5: partition table partially beyond EOD, truncated [ 404.150518][T10802] loop5: [ 404.164194][T10802] loop5: partition table partially beyond EOD, truncated [ 404.409520][ T48] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 404.552112][ T48] usb 6-1: device descriptor read/64, error -71 [ 404.576980][ T5907] kovaplus 0003:1E7D:2D50.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 404.709350][ T9] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 404.791565][ T48] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 404.886359][ T9] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 404.896373][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.910500][ T9] usb 7-1: config 0 descriptor?? [ 404.930641][ T9] cp210x 7-1:0.0: cp210x converter detected [ 404.944774][ T48] usb 6-1: device descriptor read/64, error -71 [ 405.062613][ T48] usb usb6-port1: attempt power cycle [ 405.143464][ T9] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 405.189578][ T9] cp210x 7-1:0.0: querying part number failed [ 405.202557][ T5907] kovaplus 0003:1E7D:2D50.0014: couldn't init struct kovaplus_device [ 405.217929][ T5907] kovaplus 0003:1E7D:2D50.0014: couldn't install mouse [ 405.235044][ T9] usb 7-1: cp210x converter now attached to ttyUSB0 [ 405.260816][ T9] usb 7-1: USB disconnect, device number 24 [ 405.261169][ T5907] kovaplus 0003:1E7D:2D50.0014: probe with driver kovaplus failed with error -71 [ 405.322232][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 405.338846][ T9] cp210x 7-1:0.0: device disconnected [ 405.342406][ T5907] usb 4-1: USB disconnect, device number 63 [ 405.403624][ T48] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 405.432248][ T48] usb 6-1: device descriptor read/8, error -71 [ 405.671789][ T48] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 405.703118][ T48] usb 6-1: device descriptor read/8, error -71 [ 405.812226][ T48] usb usb6-port1: unable to enumerate USB device [ 406.331806][ T9] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 406.481863][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 406.492749][ T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 406.510306][ T9] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 406.527637][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.549717][ T9] usb 7-1: Product: syz [ 406.558675][ T9] usb 7-1: Manufacturer: syz [ 406.584120][ T9] usb 7-1: SerialNumber: syz [ 406.595402][ T9] usb 7-1: config 0 descriptor?? [ 406.615427][T10827] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1229'. [ 406.626327][T10827] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1229'. [ 407.101652][ T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 407.231948][T10836] xt_recent: Unsupported userspace flags (000000de) [ 407.254359][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.267025][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 11 [ 407.291994][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 407.343457][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 407.353749][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.362633][ T9] usb 4-1: Product: syz [ 407.367395][ T9] usb 4-1: Manufacturer: syz [ 407.405373][ T9] usb 4-1: SerialNumber: syz [ 408.061718][ T5907] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 408.108201][T10848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1236'. [ 408.221549][ T5907] usb 6-1: Using ep0 maxpacket: 8 [ 408.232977][ T5907] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 408.246700][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.254916][ T5907] usb 6-1: Product: syz [ 408.259115][ T5907] usb 6-1: Manufacturer: syz [ 408.269408][ T5907] usb 6-1: SerialNumber: syz [ 408.280186][ T5907] usb 6-1: config 0 descriptor?? [ 408.498501][ T5907] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 409.182121][ T5927] usb 7-1: USB disconnect, device number 25 [ 409.283273][T10857] program syz.6.1237 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 409.360149][T10858] netlink: 'syz.6.1237': attribute type 12 has an invalid length. [ 409.422033][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 409.429658][ T31] Tainted: G L syzkaller #0 [ 409.445844][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 409.456569][ T31] task:kworker/0:1 state:D stack:21848 pid:10 tgid:10 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 409.490257][ T31] Workqueue: usb_hub_wq hub_event [ 409.502541][ T31] Call Trace: [ 409.505917][ T31] [ 409.508990][ T31] __schedule+0x14ea/0x5050 [ 409.532925][ T31] ? __pfx___schedule+0x10/0x10 [ 409.545290][ T31] ? schedule+0x90/0x360 [ 409.557709][ T31] schedule+0x164/0x360 [ 409.568316][ T31] schedule_timeout+0xc3/0x2c0 [ 409.574903][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 409.580591][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 409.587172][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 409.592964][ T31] ? wait_for_completion+0x274/0x5e0 [ 409.599473][ T31] wait_for_completion+0x2cc/0x5e0 [ 409.605745][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 409.612525][ T31] i2c_del_adapter+0x5c0/0x790 [ 409.617613][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 409.620648][T10864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.627020][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 409.643401][ T31] ? kfree+0x1be/0x650 [ 409.648262][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 409.651931][T10864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.653995][ T31] dvb_usb_device_exit+0x1cb/0x360 [ 409.669177][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 409.675422][ T31] ? usb_disable_interface+0x5d/0x350 [ 409.681133][ T31] ? usb_disable_interface+0x31d/0x350 [ 409.687358][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 409.693415][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 409.700330][ T31] usb_unbind_interface+0x26e/0x910 [ 409.706335][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 409.712548][ T31] device_release_driver_internal+0x4d9/0x860 [ 409.719102][ T31] bus_remove_device+0x34d/0x440 [ 409.725206][ T31] device_del+0x527/0x8f0 [ 409.729728][ T31] ? usb_disconnect+0xf8/0x990 [ 409.739437][ T31] ? __pfx_device_del+0x10/0x10 [ 409.747959][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 409.756671][ T31] usb_disable_device+0x3d4/0x8d0 [ 409.762236][ T31] usb_disconnect+0x32f/0x990 [ 409.767138][ T31] hub_event+0x1cc9/0x4f30 [ 409.768890][T10861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.775131][ T31] ? __pfx_hub_event+0x10/0x10 [ 409.782161][T10861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.787040][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 409.799303][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 409.805762][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 409.812295][ T31] process_scheduled_works+0xaec/0x17a0 [ 409.818188][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 409.825061][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 409.830280][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 409.836624][ T31] ? schedule+0x90/0x360 [ 409.841097][ T31] worker_thread+0xda6/0x1360 [ 409.850558][ T31] ? __kthread_parkme+0x19c/0x1f0 [ 409.857190][ T31] kthread+0x726/0x8b0 [ 409.861370][ T31] ? __pfx_worker_thread+0x10/0x10 [ 409.868851][ T31] ? __pfx_kthread+0x10/0x10 [ 409.874198][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 409.879942][ T31] ? __pfx_kthread+0x10/0x10 [ 409.886126][ T31] ret_from_fork+0x51b/0xa40 [ 409.891632][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 409.896981][ T31] ? __switch_to+0xc82/0x1410 [ 409.903016][ T31] ? __pfx_kthread+0x10/0x10 [ 409.907792][ T31] ret_from_fork_asm+0x1a/0x30 [ 409.913092][ T31] [ 409.917072][ T31] [ 409.917072][ T31] Showing all locks held in the system: [ 409.931071][ T31] 6 locks held by kworker/0:0/9: [ 409.952770][ T5907] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 409.957981][ T31] #0: [ 409.973033][ T5907] usb 6-1: USB disconnect, device number 30 [ 409.999160][ T31] ffff88823be1cf48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 410.022375][ T31] #1: ffffc900000e7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 410.038809][ T31] #2: ffff888143f9c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 410.048039][ T31] #3: ffff88803244f198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 410.057925][ T31] #4: ffff88805dba4160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 410.069804][ T31] #5: ffff8880286bbe68 (hcd->bandwidth_mutex){+.+.}-{4:4}, at: usb_set_interface+0x353/0x1450 [ 410.080454][ T31] 5 locks held by kworker/0:1/10: [ 410.086072][ T31] #0: ffff88823be1cf48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 410.097636][ T31] #1: ffffc900000f7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 410.110113][ T31] #2: ffff88802856c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 410.119795][ T31] #3: ffff888031933198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x990 [ 410.129134][ T31] #4: ffff88807552f160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x860 [ 410.140083][ T31] 1 lock held by khungtaskd/31: [ 410.145401][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 410.155508][ T31] 2 locks held by getty/5587: [ 410.160419][ T31] #0: ffff88814e0200a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 410.170541][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 410.181393][ T31] 4 locks held by udevd/6066: [ 410.186378][ T31] #0: ffff88802f0660a0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 410.195284][ T31] #1: ffff888030b0b488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 410.220330][ T9] cdc_ncm 4-1:1.0: bind() failure [ 410.228879][ T31] #2: ffff88807e0393c8 (kn->active#26){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 410.245717][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 410.253214][ T31] #3: ffff88803244f198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 410.264819][ T9] cdc_ncm 4-1:1.1: bind() failure [ 410.270739][ T31] 1 lock held by syz.1.768/8917: [ 410.280117][ T31] #0: ffff88802856c198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 410.290838][ T9] usb 4-1: USB disconnect, device number 64 [ 410.308937][ T31] [ 410.314738][ T31] ============================================= [ 410.314738][ T31] [ 410.324991][ T31] NMI backtrace for cpu 0 [ 410.325013][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 410.325037][ T31] Tainted: [L]=SOFTLOCKUP [ 410.325043][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 410.325053][ T31] Call Trace: [ 410.325061][ T31] [ 410.325070][ T31] dump_stack_lvl+0xe8/0x150 [ 410.325099][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 410.325124][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 410.325154][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 410.325179][ T31] sys_info+0x135/0x170 [ 410.325200][ T31] watchdog+0xf90/0xfe0 [ 410.325226][ T31] ? watchdog+0x209/0xfe0 [ 410.325252][ T31] kthread+0x726/0x8b0 [ 410.325277][ T31] ? __pfx_watchdog+0x10/0x10 [ 410.325296][ T31] ? __pfx_kthread+0x10/0x10 [ 410.325320][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 410.325347][ T31] ? __pfx_kthread+0x10/0x10 [ 410.325367][ T31] ret_from_fork+0x51b/0xa40 [ 410.325396][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 410.325422][ T31] ? __switch_to+0xc82/0x1410 [ 410.325449][ T31] ? __pfx_kthread+0x10/0x10 [ 410.325470][ T31] ret_from_fork_asm+0x1a/0x30 [ 410.325509][ T31] [ 410.325516][ T31] Sending NMI from CPU 0 to CPUs 1: [ 410.455750][ C1] NMI backtrace for cpu 1 [ 410.455770][ C1] CPU: 1 UID: 0 PID: 2977 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.455793][ C1] Tainted: [L]=SOFTLOCKUP [ 410.455799][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 410.455809][ C1] Workqueue: iou_exit io_ring_exit_work [ 410.455835][ C1] RIP: 0010:unwind_next_frame+0x1847/0x23c0 [ 410.455863][ C1] Code: 8b 54 24 08 48 8d 5a 02 48 83 c2 03 48 89 d8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 49 0a 00 00 48 89 d0 48 c1 e8 03 0f b6 04 28 <84> c0 48 8b 74 24 18 0f 85 56 0a 00 00 48 0f bf 03 48 01 c6 49 8d [ 410.455877][ C1] RSP: 0018:ffffc9000ba67158 EFLAGS: 00000a07 [ 410.455890][ C1] RAX: 0000000000000000 RBX: ffffffff90867cce RCX: 0000000000000000 [ 410.455901][ C1] RDX: ffffffff90867ccf RSI: 0000000000000001 RDI: ffffc9000ba67288 [ 410.455911][ C1] RBP: dffffc0000000000 R08: ffffc9000ba67287 R09: 0000000000000000 [ 410.455922][ C1] R10: ffffc9000ba67278 R11: fffff5200174ce51 R12: ffffc9000ba67278 [ 410.455934][ C1] R13: 1ffff9200174ce47 R14: ffffc9000ba67228 R15: 1ffffffff210cf9a [ 410.455945][ C1] FS: 0000000000000000(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 410.455959][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 410.455970][ C1] CR2: 00007f689a1e0ad8 CR3: 0000000079e76000 CR4: 00000000003526f0 [ 410.455986][ C1] Call Trace: [ 410.455993][ C1] [ 410.456005][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 410.456026][ C1] ? call_rcu+0x43/0x890 [ 410.456043][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 410.456062][ C1] arch_stack_walk+0x11b/0x150 [ 410.456081][ C1] ? kmem_cache_free+0x481/0x610 [ 410.456099][ C1] stack_trace_save+0xa9/0x100 [ 410.456117][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 410.456136][ C1] ? stack_depot_save_flags+0x33/0x810 [ 410.456157][ C1] kasan_save_track+0x3e/0x80 [ 410.456171][ C1] ? kasan_save_track+0x3e/0x80 [ 410.456184][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 410.456198][ C1] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 410.456218][ C1] ? fill_pool+0x10f/0x5c0 [ 410.456234][ C1] ? debug_object_activate+0x4a3/0x580 [ 410.456249][ C1] ? call_rcu+0x43/0x890 [ 410.456283][ C1] __kasan_slab_alloc+0x6c/0x80 [ 410.456299][ C1] kmem_cache_alloc_noprof+0x370/0x6e0 [ 410.456319][ C1] ? __io_req_caches_free+0x1c1/0x270 [ 410.456336][ C1] ? io_req_caches_free+0x21/0x60 [ 410.456353][ C1] ? fill_pool+0x10f/0x5c0 [ 410.456371][ C1] fill_pool+0x10f/0x5c0 [ 410.456386][ C1] ? debug_object_activate+0x47a/0x580 [ 410.456405][ C1] ? __pfx_fill_pool+0x10/0x10 [ 410.456425][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 410.456442][ C1] ? debug_object_activate+0x47a/0x580 [ 410.456457][ C1] debug_object_activate+0x4a3/0x580 [ 410.456476][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 410.456493][ C1] call_rcu+0x43/0x890 [ 410.456509][ C1] ? __phys_addr+0xd3/0x180 [ 410.456528][ C1] kmem_cache_free+0x481/0x610 [ 410.456543][ C1] ? __io_req_caches_free+0x1c1/0x270 [ 410.456562][ C1] __io_req_caches_free+0x1c1/0x270 [ 410.456582][ C1] io_req_caches_free+0x21/0x60 [ 410.456600][ C1] io_ring_exit_work+0x41b/0x960 [ 410.456623][ C1] ? __pfx_io_ring_exit_work+0x10/0x10 [ 410.456648][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 410.456669][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 410.456689][ C1] process_scheduled_works+0xaec/0x17a0 [ 410.456721][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 410.456740][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 410.456758][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 410.456773][ C1] ? schedule+0x90/0x360 [ 410.456791][ C1] worker_thread+0xda6/0x1360 [ 410.456822][ C1] kthread+0x726/0x8b0 [ 410.456840][ C1] ? __pfx_worker_thread+0x10/0x10 [ 410.456867][ C1] ? __pfx_kthread+0x10/0x10 [ 410.456885][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 410.456906][ C1] ? __pfx_kthread+0x10/0x10 [ 410.456922][ C1] ret_from_fork+0x51b/0xa40 [ 410.456944][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 410.456964][ C1] ? __switch_to+0xc82/0x1410 [ 410.456985][ C1] ? __pfx_kthread+0x10/0x10 [ 410.457001][ C1] ret_from_fork_asm+0x1a/0x30 [ 410.457027][ C1] [ 410.883280][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 410.890218][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 410.901018][ T31] Tainted: [L]=SOFTLOCKUP [ 410.905382][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 410.915631][ T31] Call Trace: [ 410.918935][ T31] [ 410.921989][ T31] vpanic+0x1e0/0x670 [ 410.926180][ T31] panic+0xc5/0xd0 [ 410.929963][ T31] ? __pfx_panic+0x10/0x10 [ 410.934407][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 410.939819][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 410.946105][ T31] watchdog+0xfda/0xfe0 [ 410.950393][ T31] ? watchdog+0x209/0xfe0 [ 410.954867][ T31] kthread+0x726/0x8b0 [ 410.959059][ T31] ? __pfx_watchdog+0x10/0x10 [ 410.963771][ T31] ? __pfx_kthread+0x10/0x10 [ 410.968390][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 410.973707][ T31] ? __pfx_kthread+0x10/0x10 [ 410.978416][ T31] ret_from_fork+0x51b/0xa40 [ 410.983135][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 410.988444][ T31] ? __switch_to+0xc82/0x1410 [ 410.993156][ T31] ? __pfx_kthread+0x10/0x10 [ 410.997773][ T31] ret_from_fork_asm+0x1a/0x30 [ 411.002605][ T31] [ 411.005808][ T31] Kernel Offset: disabled [ 411.010138][ T31] Rebooting in 86400 seconds..