last executing test programs: 11m16.56646185s ago: executing program 32 (id=103): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x20042, 0x2, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000010000100"/20, @ANYRES32=r2, @ANYBLOB="c89904bd0000000008000d000000000034001680300001802c000c"], 0x5c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) (async) socket$tipc(0x1e, 0x5, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x20042, 0x2, 0x1}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000010000100"/20, @ANYRES32=r2, @ANYBLOB="c89904bd0000000008000d000000000034001680300001802c000c"], 0x5c}}, 0x0) (async) 11m3.639799701s ago: executing program 33 (id=158): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000200)={0x2, "d2c419ef00040000000000162da89e0000000000000000000200", 0xffffffffffffffff}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f01020301090212830e000000000000000000a058b7009860dc7e11cdf01c5ff27bf86338a73710d06e3e08c5ab84ab96b8350225338f72b33c42fc088e977aa82fd63e8ab875c389b073336d1d079eb59323bfa80dfa0a00f7b828026e2eb6898713aa590c923cf82e3145e67149b863f96e8f5f0957a30bc11177a9aa4029098e"], 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0x800e3, 0x0, 0x0, 0x11}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x40) readv(r3, &(0x7f0000001500)=[{&(0x7f0000000200)=""/126, 0x7e}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000000400)=""/158, 0x9e}], 0x3) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000040)={0x3, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"fd0d1af889b4ea07001900005e99e47ac49e4906eddf9edd00004000000029e9", r5, 0xffffffffffffffff}) r7 = syz_usb_connect(0x0, 0xffffffffffffffa6, &(0x7f0000003540)={{0x12, 0x1, 0x0, 0x9f, 0x3a, 0x2f, 0x20, 0x85a, 0x9, 0xa810, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0xcd, 0x9, 0x0, 0xe9, 0x3d, 0x9a, 0x25, [@cdc_ecm={{0x0, 0x24, 0x6, 0x0, 0x0, "8b55701416"}, {0x0, 0x24, 0x0, 0x6}, {0x0, 0x24, 0xf, 0x1, 0x0, 0x3, 0x2, 0x1}, [@acm, @mdlm_detail={0x0, 0x24, 0x13, 0x1, "6b8972d024214563b2498fe1a4ed5a0e76ea358858c58ad2d43ee9ba4cdc082582b5795acb54d0030f88aaf5d75c0f3b5988d7"}, @acm={0x0, 0x24, 0x2, 0x4}]}], [{{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x2, 0x3, 0x7f, [@uac_iso={0x0, 0x25, 0x1, 0x81, 0x8, 0x3}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x8, 0x6, 0x6}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x2, 0x1, 0x6, [@generic={0x0, 0x1, "1daa936a0646a35777d30c121069539889280af1804ec7179de15dfe7b411c900389e4b094145ce12e16667a55819682c05c5975122616aff8eb2a83b97c5ff501198fdbd35d23dafb886d73e75929c3dd45e7439ef8bf32a94eef528102f276449a3c5cd660ffcf13b514ae2f247fb9bc935c6036d82f0fa74cc47b610fc82f46cf62039ca87ee1253e879d7633e1d61433d2843c64b8a13536b93a139070bd26df3e0310aad1193408512032f4151216910db9725b0b577f36a35a20287d771800c57bb10e70"}, @generic={0x0, 0x30, "a14076020e67e089c158edfc45412d256eb7ed69b09bc469c6f7b2deef88ef87b212e8de12513f77acc36aaf4def0196e5d90793676addc21e9aba240699eb8ce97e244848fe29054c6571dd0d09c8925507b7de937894f92124301e562dac8703014c4148aa02a3bcea86b9713c67f83f2c00856203e82a5d671ddd196605ea318681046328bf70767dca94cb9000"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x69, 0x0, 0x47, [@generic={0x0, 0x31, "a15bc08d8bd2498239ab2edd07de7768de504bbbc6d77609e4892d86a5dd32f1ad25c4866194df6c43f04d9f8c75078f17c80a687d6dd8a063e1f75b165733875c26109a8349cbe903d4045c03487d84eaaadd96e45417f202dc083397e8fe146e1ec912f7973fe7401453a1032fefa74841da0381d5589de05d11924a277c04fc862c9ad434c7bb031777e9d7593bf1d20f74a946bdd94df983836e9c31af4ad78c21ab8f625fc4d8aa9906e473ef424acfd51913eb357ce54bbd32927ef88438790b19b16859eb3c8ce597ca6ebee4075572e16607db1aec0ba9cc17e7498adda435e3998a837765680a78a2"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x0, 0x7, 0x80, 0x26, [@uac_iso={0x0, 0x25, 0x1, 0x0, 0x1, 0xfb1a}, @uac_iso={0x0, 0x25, 0x1, 0x80, 0x9, 0x18}]}}]}}, {{0x9, 0x4, 0xc7, 0x5, 0x0, 0x23, 0x70, 0x55, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x6}, [@selector_unit={0x0, 0x24, 0x5, 0x6, 0x8}, @extension_unit={0x0, 0x24, 0x8, 0x6, 0x3ff, 0x1, "cd1fb84e82"}]}], [{{0x9, 0x5, 0x0, 0x10, 0x10, 0x4, 0x9, 0x6, [@uac_iso={0x0, 0x25, 0x1, 0x82, 0x1, 0x67}]}}, {{0x9, 0x5, 0x8, 0x3, 0x400, 0x81, 0x0, 0x9, [@generic={0x0, 0x23, "d3148f368a35df56e8a8d2277ba2fe8b70ed53a66aa7b66428e3eba041fecbe52c2462eb35af187d592798e66cc739a042610adefd0399c6d71ea2df950c80225b80342428a98b856d35445bb9788fe4ee0e0cc1e31de9649740668561c251090ef03b87cc79c835cdfbb16bc6abd0eb180519fd0e8b0aa6029865a4c0356d046dc10d3bd30ab1db442719f67d1ab67281e90277e73b9e8e5a46"}]}}, {{0x9, 0x5, 0xf, 0x20, 0x200, 0x2, 0x7, 0x9}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x2, 0xfd, 0x1, [@generic={0x0, 0x23, "37603b10293087d1f437232869ac617937b86394fbf52e098dca582bb1dd592e91ddc7157232bc836f0f0dd6413325c4b472a1c8d55d5b5be52ffec250d6c5"}, @generic={0x0, 0xe, "55fbf25f4a88bca43326a8e659d1e1c8c730b3b991fc2a99641b0ca3e4e277880921ed78f9a9f8b59f40ccf256bb28840aa5ae50746be1e9d02a9bf259ad8ba8499e96d867c8ca2d23fafbe553e46112bfaa9fe64f5f3653627d6e2476b0320af2b581ea21e144acf1e7e7130a6ff12dad637a994635083f1c3fe4f503e4b402da79a22be3ce4e96ebab5fe36d3487c89a6e2afee29a48b3414eeff5917e35c92a02fb07ca05b5fdcb54d4be855febc5dd0496f75c05ed5e243a650076198d191654787d4981fc0b0cc3d7ddbe4d52b68bf45615e19661354bf076f9246ac814e758107892fbcf55d61ae29decd0ab6bfe4bea45fdec"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x6, 0xef, 0x4, [@uac_iso={0x0, 0x25, 0x1, 0x1, 0x8, 0x200}, @uac_iso={0x0, 0x25, 0x1, 0x80, 0x3, 0x5}]}}, {{0x9, 0x5, 0xb, 0x4, 0x40, 0x0, 0x6, 0x7}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x60, 0x1, 0x6, [@uac_iso={0x0, 0x25, 0x1, 0x80, 0x2, 0x4}, @generic={0x0, 0xb, "daf0a9b38561b95b4cfe809b24376290a7bb3c370a23bfd890a8c8373a2fedf7fb131213786f4826b14d3b15a7e8606a17c43ef493485ee6de54622003e51be06272b9787963a2be953cdfc27387e1c56b188860ab59104453d2e8869372bb081dcef95bdb1166d16ab4fb34d0f076c32aba119bb21342b2b93952e2206000b6beb6e063f687273af21c07e8b9cf8e3eaf751fdd05720c40a0"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x3, 0xcb, 0x1, [@generic={0x0, 0x21, "7f93896192d7e11df96c3f01753429eaed112208d7226494c110404e9e98802b160d8dbfef56a4e1f91861cbe41aff051042339ff2bfea21e91a59759d9692ead91966ccb862fb57820b8610be4829fe6331294fe006e8df277fc3aeb2a516ede47ac89d80e3fb0aa6eb9a17ba64e893679042481a5395ae2c1bb532f01882610295fb928d8b7ff3bdc94c"}, @uac_iso={0x0, 0x25, 0x1, 0x84, 0x3, 0x2}]}}, {{0x9, 0x5, 0x9, 0x0, 0x28, 0x5, 0x5, 0x10, [@generic={0x0, 0x31, "a599ac5556cba04c429841789e331686d0fda0279eb74171ef33db8ceedd8c7699456b8ef6ab46b7c7a375af86678ff2cb410d28f93a8464b7d28bbbee049ff9d6a781033df64b1d6f825870a5055fc9c776a97f345c11ce4b52853d233cb7f10d3befbc1fc3e3548fbc21d3584f4096ddf546dcd23a34a69644960df2efb569885123c6"}, @uac_iso={0x0, 0x25, 0x1, 0x3, 0x4, 0x9d}]}}, {{0x9, 0x5, 0x3, 0x1c, 0x200, 0x9, 0x9, 0x7, [@uac_iso={0x0, 0x25, 0x1, 0x3, 0x9, 0xfff0}, @uac_iso={0x0, 0x25, 0x1, 0x80}]}}]}}, {{0x9, 0x4, 0xb0, 0x2, 0x0, 0xb6, 0x6a, 0x89, 0x52, [], [{{0x9, 0x5, 0xa, 0x2, 0x200, 0x9a, 0x5, 0x7, [@generic={0x0, 0x23, "0a471a3b63c3c2bcb8d053b44c2016ca153d752757811a37a737c2f3d7ae14f7aa9262c10d48829705e82faa7beed3bd5ec6dec92a915f50475505eab2ec3f233c5da4987bc5274beca2b862b4fcdfd40a71fa5237516cf001a25ab313826f5dcdaeef7cb416279b637093b277b6d5b3ed7d657ce2456ca7e7e4b80fba61bf4602093977"}, @uac_iso={0x0, 0x25, 0x1, 0x0, 0x73, 0xb}]}}]}}, {{0x9, 0x4, 0xea, 0xa, 0x0, 0xac, 0x95, 0x85, 0x0, [@hid_hid={0x0, 0x21, 0x5, 0xe9, 0x1, {0x22, 0xe0c}}], [{{0x9, 0x5, 0x8, 0x10, 0x10, 0xc0, 0x9, 0x4}}, {{0x9, 0x5, 0x1, 0x4, 0x400, 0x0, 0xbc, 0x9, [@uac_iso={0x0, 0x25, 0x1, 0x80, 0x51, 0x164b}]}}, {{0x9, 0x5, 0x6, 0x1, 0x7e7, 0x0, 0xff, 0x3, [@uac_iso={0x0, 0x25, 0x1, 0x82, 0xc, 0x3}, @uac_iso={0x0, 0x25, 0x1, 0x81, 0x0, 0x6}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x2, 0xf, 0x2f}}, {{0x9, 0x5, 0xd, 0x0, 0x18, 0xff, 0x7, 0xa}}, {{0x9, 0x5, 0x3, 0x0, 0x430, 0xf7, 0x2a, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f00000001c0)=0xe18) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000540)=0x9) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000100)={"eb030e339999f63630662a8e3bd958fea5c25bd1b08abfd57ed87c7e926eeced", r6}) flock(r9, 0x5) ioctl$AUTOFS_IOC_CATATONIC(r9, 0x9362, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r10, &(0x7f0000000280)=[{&(0x7f0000000380)=""/218, 0xda}], 0x1, 0xa3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r8, 0xd0009412, &(0x7f0000002540)={0x0, 0xffffffffffffff8f}) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r11, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) socket(0x200000100000011, 0x803, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000080)={{}, "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"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000010007e80e8defe37b31c3500"], 0x0, 0x1a, 0x0, 0x0, 0x20, 0x0, @void, @value}, 0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f00000000c0)) 10m27.966383154s ago: executing program 34 (id=305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}]}], {0x14}}, 0xb8}}, 0x0) unshare(0x500) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup(r1) rt_sigaction(0x1, &(0x7f0000000080)={0x0, 0x1, 0x0, {[0x808]}}, 0x0, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc0603d06, &(0x7f0000000040)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "03"}]}], {0x14}}, 0x74}}, 0x4048010) unshare(0x62020600) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000202505a8a44000010203010902"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0xc39, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x800) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000300)={{}, 0x8001, 0x62c, 0x25e4}) 10m21.158531285s ago: executing program 35 (id=317): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) (async) r1 = accept$alg(r0, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x24, 0x10, 0x401, 0x70bd27, 0x2, {0x0, 0x0, 0x0, r4, 0x10002, 0x6608}, [@IFLA_PORT_SELF={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000006100), 0x49f, 0xf0ff, 0x0) (async) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000002c0)=0x10000) (async, rerun: 32) r6 = dup(0xffffffffffffffff) (rerun: 32) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000040)={@my=0x0}) ioctl$IOCTL_VMCI_SET_NOTIFY(r6, 0x7cb, &(0x7f00000000c0)={0x1, 0x4, 0xffff}) (async, rerun: 64) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) (rerun: 64) r8 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r8, 0x80845663, &(0x7f0000000100)) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r10 = fanotify_init(0x200, 0x0) pselect6(0x40, &(0x7f0000000300)={0xe, 0x9, 0x9, 0x10020000, 0x6, 0x8, 0xc2db, 0x7ff}, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) fanotify_mark(r10, 0x1, 0x40000032, r9, 0x0) (async, rerun: 32) write$P9_RREADDIR(r9, &(0x7f0000000140)={0xb, 0x29, 0x2, {0x5}}, 0xb) (async) r11 = fsmount(r7, 0x0, 0x0) openat$cgroup_pressure(r11, &(0x7f00000001c0)='cpu.pressure\x00', 0x2, 0x0) (async) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r12, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) (async, rerun: 32) shutdown(r12, 0x1) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r12, 0x84, 0xa, &(0x7f0000000200)={0x8, 0x1, 0x4002, 0x80, 0x6, 0x1, 0x3, 0x80}, &(0x7f0000000240)=0x20) ioctl$UI_SET_RELBIT(r11, 0x40045566, 0x1) 9m45.528793316s ago: executing program 36 (id=340): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000000440)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) open_by_handle_at(0xffffffffffffffff, 0x0, 0x41a200) (async) socket$inet(0x2, 0x6, 0x0) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) (async) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x2, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000002680)={0xfffffffe, {{0xa, 0x0, 0x0, @private1}}, {{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100fffffffffcdbdf251200000008000300", @ANYRES32=r3, @ANYBLOB="0a000610080211000001000006008000000000000000bd00b2b8b7b0"], 0x38}}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000329bd7000fddbdf256500000008000300", @ANYRES32=r3, @ANYBLOB="1c0003800c000005000000b0240000000c00003ca5579900040000000800020000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4040050}, 0x1) (async) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000002080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xa, 0x40, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfffa}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x40, 0xfffe, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0xc}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x2, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x220, 0x3, 0x7, 0x7}}}}}}}]}}, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000021c0)=@lang_id={0x4, 0x3, 0x44f}}, {0xa8, &(0x7f00000023c0)=ANY=[@ANYBLOB="a803969d628b0f3c94425e00a77413689c3b019b9b94976cf1526dd1165167cef0672d2558f3f33f9dcd3145ac7fbee49cda70953e87881be39907d762a8aff1db75b46b8ea210471943d8e1d1da89b91eb2f60620875a16b4d1654778e59b56ab15a6583511d4222da7446acfdf3d188fa8a83aaee0f6c030a717c8c02b2fa38cc21f23bdc38819cc3e505a9627a01b45c0370962807e7a63bd2aba0f03bfde04db"]}]}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x1, 0x2, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, r9, 0x0, 0x0, 0x400000000000019e, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000180)={r7, r8, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000001c0)={r7, r10, r11, 0x6, 0x800, 0x4, 0x7, 0x4, 0x10, 0x0, 0x7fffffff, 0x60}) (async) r12 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="20000100", @ANYBLOB="b36accc446d8bf1b64cf1ebe2715b63149bfc2700366e140084ba991bc331cec45b25bad99720bc80af8e0c5ab054a0afc1e6e7cecdde6b008be3a843a0085c2a0410006da015b7f465092b5a6deef6d9870b26033585e692fb56a739026dffafc95d1e415f89e4b0409fe8ff71839b9c31314de4bce8efec79f10e1eca2158ca69d3479133fbc52f4f3fdd1acb5974d0ccb91fe5b44188d1d9752a9ce197e43b24514ed515ea9352247f13cd2e95fa8c76725382dd9bbaa8e3dcf48651f3bdf24b6c084b382"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40a000040000900000000000000000002"], 0xab4}}, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r12, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0xdebec89b, 0x0, 0x0, [{}, {0x40000000}], 0x0, 0x0, 0x0, 0x1}}) 9m38.190653478s ago: executing program 37 (id=343): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e21, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @encap={0x1c, 0x4, {0x2}}]}, 0x170}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f1, &(0x7f0000000900)={'ip6gretap0\x00', @random="060a0d2000"}) 9m34.846244643s ago: executing program 38 (id=351): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r0, 0x0, 0x0, 0x44001) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000280)={'geneve0\x00'}) 9m11.802551631s ago: executing program 39 (id=403): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) setresuid(0x0, 0x0, 0xffffffffffffffff) 7m8.137203527s ago: executing program 40 (id=1905): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x7) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000d40)={'syzkaller1\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}) syz_usb_disconnect(r2) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000403f5f201d0650c16fce0102030109021b00010000100509043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES64=r4]) syz_usb_connect(0x0, 0xb1, &(0x7f0000000700)={{0x12, 0x1, 0x700, 0xfe, 0xc4, 0x50, 0x40, 0x12d1, 0x9946, 0x4227, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x2, 0x7, 0x7, 0x60, 0x2, [{{0x9, 0x4, 0x53, 0x7, 0x0, 0xff, 0x3, 0x35, 0x3, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "0ac3d3"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x2, 0x8, 0x10}, [@ncm={0x6, 0x24, 0x1a, 0x200, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x8001, 0xf6, 0x413}, @country_functional={0xe, 0x24, 0x7, 0x6, 0x6, [0x3, 0xfff9, 0x9, 0x3]}, @mdlm={0x15, 0x24, 0x12, 0x9}]}]}}, {{0x9, 0x4, 0x6d, 0x1, 0x0, 0x59, 0xb9, 0x51, 0x8, [@uac_as={[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x5e, 0x2, 0x3, 0x10, '[?:'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x40, 0x4, 0x7, 0xb2, "db33c3"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x60, 0x4, 0xd, 0x5, "b4912ee26583"}]}]}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x310, 0xa5, 0x8, 0x6, 0x40, 0x1}, 0x3e, &(0x7f0000000800)={0x5, 0xf, 0x3e, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x10, 0xf4, 0xeca0}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "bb941476d367abf221becc4e5c3e033a"}, @ss_container_id={0x14, 0x10, 0x4, 0xac, "e20b22e0f6cf9c67c16f9344f3ec4a32"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x0, 0xa2}]}, 0xa, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x3c01}}, {0x98, &(0x7f0000000900)=@string={0x98, 0x3, "2e957ee1b9bec9a4e3fbc4e94c6cacee1cfdb4e58b2e80b95efba6bc74bc5f6af3207c8960518b71de3802ec7bc7c71a63e23e32b294576930651926eb200fd38f9d8183f320024f8c743781d09383cdad47b22ebf06e753a1bc03ecc062758823cf8243655a2f46c4d317c849eb9b9f4d0464d51f04893bb862141c3915c34d6dfe089052abb8abe25946f9708ab4bb134dca2bd869"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x827}}, {0x92, &(0x7f0000000a40)=@string={0x92, 0x3, "5efc110782b86b35742ae7b24cbe178fe7173d23a4b73906da6e4fb223e219f3d417abe9585af2c10c640b5438ff86f58fd4364972844356abd590e0dc6c36c8e6078735ed92c609b709480f21b22eb2ada9de660f6f0f12f3b66565cceb48f74814e776051fd55bc010a08b9ba12d42d51539bad7691f9885226e81818d101eb38b0bfdb415d76c60f3e2ddd6174574"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x2801}}, {0xc6, &(0x7f0000000b40)=@string={0xc6, 0x3, "45a7c0d957a3616a0c1a8f99b59e0e5b8bd1233e91b79dda852d802c1eeb5e1b699de08f9a811fdd7d9efc42def01f7f0ebdaede144c5ab775543f44d14eda6a617c2ea8e9417ed2c352e2b4732f28a1c217db50d742cf40fe89d20ee79df658ab3ae37eb0d644b20eb02af1956bccc18059254ab9e4ae4f384b3927778f2e7b54d62ab1ef9d5408a3cd1ba8e7b76b701cdded0b86219dec264973c7ed5aec57a8b503a91009e742a1dcdf7d8c46ddee52b95bc87edeb6044632042d121d66fef340fff1"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x448}}]}) syz_usb_control_io(r4, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x31, 0x1b, {0x1b, 0x23, "66ce8e5b1b1b13572241a1c2e525aa0ddddd3ce47faad50b83"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}, &(0x7f00000000c0)={0x0, 0xf, 0x72, {0x5, 0xf, 0x72, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "51225c7a06aa6a9f45a5f5c99ce32e88"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x6, 0x5, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "a17617745ec30bb645452e93f8cdf2dc"}, @ss_container_id={0x14, 0x10, 0x4, 0xa8, "2a5b24b345e399bca94f1a5ffdfcee26"}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x101, 0xf000, 0x2, [0x3fcf, 0xff0000, 0x3f00, 0x3fc0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x5, 0x71, 0xbb9}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9e, 0x1, 0x0, 0x5, "0e3fa98f", "35752ccc"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x8, 0x7, 0x2, 0x0, 0x7fff, 0xfffc}}}, &(0x7f0000000640)={0x84, &(0x7f0000000240)={0x40, 0x13, 0x30, "6f140520824b90f66bb181c41fbf71ff06ea8e004e8caba26c2006ea3dc4027fa283aed8cd4176f425279f6fd9b61800"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6b}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x2, 0x40, [0xf000]}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x19e5}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0x60}, &(0x7f0000000400)={0x40, 0xb, 0x2, '11'}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x400}, &(0x7f0000000480)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, &(0x7f00000004c0)={0x40, 0x17, 0x6, @random="2352e60d76d3"}, &(0x7f0000000500)={0x40, 0x19, 0x2, "e208"}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0x7c}, &(0x7f00000005c0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000600)={0x40, 0x21, 0x1, 0x1}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fcdbdf256c00000008000300", @ANYRES32=r7, @ANYBLOB="0500180139000008080026"], 0x3c}, 0x1, 0x0, 0x0, 0x40408c0}, 0xc000) 6m36.372172062s ago: executing program 41 (id=2131): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000500)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000140)={0x14, &(0x7f0000000340)={0x40, 0x322ac4cadf9630a, 0xa6, {0xa6, 0xb, "1b4e5baafba5d28bfc267a4dbeff8ebc4312dc0b825b1c567fde7d30a93da8cbd8e0478fef17750eb01638674331a417b0cdc305ace473e0e8d9e128cde14d1834038e5bf976b4c637f17c1d680ae371dbe46585e465de74024ce8011b6b269983630b263f6e9fb0891b00f623e737b10dbe537e5134baa212583b8cc860660e03511c0b20a087a925ce166123369b3fe3ed82aad8472ca76a7a5bf059066446222fdbd8"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000200)={0x20, 0x0, 0x3, "dc0858"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7d}, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x3, 0xe, 0x3, 0x9, 0xd, 0x4, 0x9, 0x9, 0x78f, 0x1, 0x7, 0x7f}}, &(0x7f0000000480)={0x20, 0x85, 0x4}, &(0x7f0000000500)={0x20, 0x83, 0x2}, &(0x7f0000000540)={0x20, 0x87, 0x2, 0xf892}, &(0x7f0000000580)={0x20, 0x89, 0x2, 0x1}}) syz_usb_connect(0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x2, 0x0, [@local]}}}], 0x28}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x96, 0x5d, 0x6, 0x40, 0x133e, 0x815, 0x7e66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x87, 0x28, 0x0, [], [{{0x9, 0x5, 0x5, 0x3}}]}}]}}]}}, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000307000000000000000000000005001a00ac1e0001000000000000000000000000e000000100000000000000000000000000000d9f"], 0x38}}, 0x40000) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00-\r'], 0x0, 0x0, 0x0, 0x0, 0x0}) 6m11.81631828s ago: executing program 42 (id=2189): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x8000001e}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81", @ANYRES32=r0], 0x30}}, 0x0) (fail_nth: 3) 6m5.681947118s ago: executing program 43 (id=2278): r0 = socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000200), &(0x7f0000000340)=0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ppoll(&(0x7f0000001880)=[{r3, 0xc457}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) io_uring_setup(0xc40, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, 0x0, &(0x7f00000002c0)) socket(0x80000000000000a, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$FBIO_WAITFORVSYNC(r6, 0x40044620, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getrandom(&(0x7f0000000240)=""/214, 0xd6, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) socket$rds(0x15, 0x5, 0x0) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_enable(r8, &(0x7f0000000140)='1', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000015, 0x1010, 0xffffffffffffffff, 0xc8926000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x282dc4, 0x0) 6m4.92382076s ago: executing program 44 (id=2281): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x2e45, 0x4) mmap$IORING_OFF_SQES(&(0x7f00002b0000/0x2000)=nil, 0x2000, 0x0, 0x10010, 0xffffffffffffffff, 0x10000000) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xfb}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r2, r3, 0x0, 0x8000fb00) 5m56.624286191s ago: executing program 45 (id=2290): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x2e45, 0x4) syz_io_uring_setup(0x239, 0x0, &(0x7f00000002c0), 0x0) mmap$IORING_OFF_SQES(&(0x7f00002b0000/0x2000)=nil, 0x2000, 0x0, 0x10010, 0xffffffffffffffff, 0x10000000) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) socket$kcm(0x10, 0x2, 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r2, r3, 0x0, 0x8000fb00) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000002c0)=0x80000) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000080)={&(0x7f0000000300)={{@host}, {@my=0x0}, 0x400, "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"}, 0x418}) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) write$6lowpan_enable(r1, &(0x7f0000000140)='1', 0x1) syz_open_dev$vcsu(&(0x7f00000000c0), 0x226, 0x204800) 4m43.922084083s ago: executing program 46 (id=2425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x7ffc0001}]}) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000001480)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974"], 0xdc}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x44, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x2}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000410}, 0x20000081) 4m15.403879597s ago: executing program 47 (id=2503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x48, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x48}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000180)="edad6c715402390000", 0x9, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffdf}, 0x1c) 4m9.684655072s ago: executing program 48 (id=2535): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f00000000c0)) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x92, 0x93, 0xdb, 0x40, 0x2013, 0x246, 0x6074, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1d, 0x0, 0x0, 0x1f, 0x88, 0x6c}}]}}]}}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x2a8200, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0xb0, 0x1b0, 0xb0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000006c00000000000100040500"}}}, {{@uncond, 0x287, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@unspec=@statistic={{0x38}, {0x0, 0xaa}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) statx(r3, &(0x7f0000000100)='./file0\x00', 0x1000, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x7, 0x3, 0x5}) r8 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {r7, r8}}, './file0\x00'}) 4m9.130625001s ago: executing program 49 (id=2538): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x1, 0x8, 0x8, 0x100, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="0400"/11, @ANYRES16=r1, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b", @ANYBLOB], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x80000000}, 0xc) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000020"], 0x0) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) writev(r3, &(0x7f0000000900)=[{&(0x7f0000003900)="1237b00b8b88aa", 0x7}], 0x1) 3m54.190743873s ago: executing program 7 (id=2574): unshare(0x20040600) inotify_rm_watch(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(r0, &(0x7f0000002680)=""/4096, 0x1000, 0x10101, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x70, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4e, 0x0, @wg=@data={0x4, 0x3, 0x0, "90150e6e22dd44d270e16ba37f71338f72c5a3edb24566e206497af91442629951034596e838c5afd7b78964fa6f5ab372be33b43318"}}}}}}, 0x0) 3m53.528711928s ago: executing program 50 (id=2576): syz_usb_connect(0x5, 0x3d, &(0x7f0000000500)=ANY=[@ANYBLOB="120100026a623210d90f3300099c0102030109022b0001350720800904040102db99cc0d0705c2cff4404309050f"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000000c0)={0x7, 0x2, {0x0}, {0xee00}, 0xd4d, 0x19}) tkill(r1, 0x3f) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f000035f000/0x4000)=nil, 0x4000, 0x12) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) sendto$inet(r2, &(0x7f0000000040)="0e00", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x4, 0x40, 0x10001, 0x81, 0xffffffff}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x7, 0x44, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x2, 0x44, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES32], 0x13c}, 0x1, 0x0, 0x0, 0x4885}, 0x0) syz_usb_connect(0x5, 0x3d, &(0x7f0000000500)=ANY=[@ANYBLOB="120100026a623210d90f3300099c0102030109022b0001350720800904040102db99cc0d0705c2cff4404309050f"], 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000000c0)={0x7, 0x2, {}, {0xee00}, 0xd4d, 0x19}) (async) tkill(r1, 0x3f) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f000035f000/0x4000)=nil, 0x4000, 0x12) (async) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) (async) sendto$inet(r2, &(0x7f0000000040)="0e00", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x4, 0x40, 0x10001, 0x81, 0xffffffff}) (async) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7) (async) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x7, 0x44, 0x0) (async) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x2, 0x44, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES32], 0x13c}, 0x1, 0x0, 0x0, 0x4885}, 0x0) (async) 3m53.26193687s ago: executing program 7 (id=2579): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r1, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4138ae84, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6576, 0x9}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x100000000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x13, 0x25, 0x99, 0x20, 0x1781, 0x938, 0x759e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xca, 0x46, 0x81, 0x0, [], [{{0x9, 0x5, 0x1, 0x3}}, {{0x9, 0x5, 0x8}}]}}]}}]}}, 0x0) syz_usb_connect(0x2, 0x46, &(0x7f0000000b80)={{0x12, 0x1, 0x250, 0xd, 0x48, 0x35, 0x20, 0xfff0, 0xfff0, 0x1e11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x6, 0xf7, 0x0, 0x6, [{{0x9, 0x4, 0x1e, 0x0, 0x3, 0xb0, 0x6, 0x71, 0x8, [], [{{0x9, 0x5, 0xb, 0x10, 0x40, 0x5, 0xff, 0x8, [@generic={0x7, 0x5, "475308a004"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x10, 0x6, 0xfd, 0xff}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0xd, 0x4, 0x1}}]}}]}}]}}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) keyctl$assume_authority(0x10, r0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r1, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4138ae84, 0x0) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6576, 0x9}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x13, 0x25, 0x99, 0x20, 0x1781, 0x938, 0x759e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xca, 0x46, 0x81, 0x0, [], [{{0x9, 0x5, 0x1, 0x3}}, {{0x9, 0x5, 0x8}}]}}]}}]}}, 0x0) (async) syz_usb_connect(0x2, 0x46, &(0x7f0000000b80)={{0x12, 0x1, 0x250, 0xd, 0x48, 0x35, 0x20, 0xfff0, 0xfff0, 0x1e11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x6, 0xf7, 0x0, 0x6, [{{0x9, 0x4, 0x1e, 0x0, 0x3, 0xb0, 0x6, 0x71, 0x8, [], [{{0x9, 0x5, 0xb, 0x10, 0x40, 0x5, 0xff, 0x8, [@generic={0x7, 0x5, "475308a004"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x10, 0x6, 0xfd, 0xff}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0xd, 0x4, 0x1}}]}}]}}]}}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0}) (async) 3m51.818420641s ago: executing program 51 (id=2584): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (rerun: 64) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="8020000000000000240012800b00010065727370616e000014000280060002002fffff00080007"], 0x44}}, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4048aecb, &(0x7f0000000400)=ANY=[@ANYBLOB="050000000000000002"]) (async) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x1) 3m51.326980039s ago: executing program 7 (id=2589): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/63, 0x3f}, {&(0x7f0000000100)=""/29, 0x1d}], 0x2, &(0x7f0000000200)=""/84, 0x54}, 0x2000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x82, &(0x7f0000000040)={0x0, 0x8}, 0x8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1, 0x3, 0x0, 0x0, r3}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) mq_notify(r4, &(0x7f0000000280)={0x0, 0x21, 0x4, @tid=r3}) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(r1, 0x6, &(0x7f0000000000)) 3m50.386959099s ago: executing program 7 (id=2592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000030801060000000000000000000000000900010073797a04800800014000c00000f1ff0140000000ff060002400019000005000300210000000539d831fa842554f67b9dc1c863e102de4387267425c484824ec47f5e6f6605406bca1b7db5164ca5cab574226d597ec70fc3a4beacab501f44ee940c6c5294a85141073d272518135cf0b09bd209a1b08710ce2924e084e96fca57b9e8135cfd6fe5087cab71cad616b6bd7fcc7a3a9d3149"], 0x4c}}, 0x10) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x10000a1, 0x0) unlink(&(0x7f0000000040)='./file0\x00') pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r2, 0x4068aea3, &(0x7f0000000000)) 3m50.354327796s ago: executing program 7 (id=2593): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_buf(r0, 0x1, 0x49, 0x0, &(0x7f0000000200)) r1 = eventfd2(0x0, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x48400) r4 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r2, 0x0, 0x7}, 0xfffffffffffffd9d) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000740)="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", 0x16d}, {&(0x7f0000000100)="628a16b6d7ba4817f9e7171f59f6ba02d142ac1df6b7ee697448e1d1df8e6f1bad0f1ef1889722dfbe78cc1a58a59f2d38818fae42158f7a78c8ef23bb280624e6690d1ff78b0d811ffacee725eb8c162416", 0x52}, {&(0x7f0000000400)="e66517c292", 0x5}, {&(0x7f0000000640)="50eab642bf632c5cde2c2827b6b0f95a7e02e4c01968105ea31a5397f228b4aeb94841e6689f44f65623f08281f6e880f1349f8926e11f238e91ce034152d363e018fa2d2176994818c3c7e6e78cab5bbba1f26c80457ceacf706c54e5b1f431a8df03f7376096b86b8ac804d9dde5f9eca2dc99bf2cb9c6ebf5a6c9db3db0d4a2e15002854bcb86bb89ea0e5511db578021e8cd35ff5d1f46a24dd14e248fc171e0d094a27510d418a5b467230f11b0a224362e6e9b3331f22ad5c10fc6e21c2297d9a21ce00af6ea39b66254f66189929b12973020c175bafd2d", 0xdb}], 0x4) r5 = accept4(r4, 0x0, 0x0, 0x0) sendfile(r5, r2, 0x0, 0xe47) read$eventfd(r1, &(0x7f0000000000), 0x8) syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902810003010060000904000000010100000a240100000002010205240506000904010000010200000904010101010200000e240201000000009290d2199a5a09050109000000040007250180000000090402000001020000090402010101021b00082402010000000007240100000000090582090002"], 0x0) 3m48.777716181s ago: executing program 7 (id=2596): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x1c, 0x22, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4, 0x3fff}, @nested={0x4, 0x1, 0x0, 0x1, [@generic]}]}, 0x1c}}, 0x0) 3m48.441515803s ago: executing program 52 (id=2596): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x1c, 0x22, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4, 0x3fff}, @nested={0x4, 0x1, 0x0, 0x1, [@generic]}]}, 0x1c}}, 0x0) 2m25.61096418s ago: executing program 3 (id=2735): syz_emit_ethernet(0x82, &(0x7f0000000280)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @empty, @multicast2]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="800000000b0601020000000000000000030000000900020073797a300000000005000100990000004c0008800c00078007001a00242e0000438000800c0018400000000000000009100007800c001b400000000000000010d7000000000000000000ffff100007800c00028008000140ac1414aa1c000780080002"], 0x80}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004"], 0x528}}, 0xc000) 2m25.409586632s ago: executing program 3 (id=2738): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000880)=0xe) 2m25.183362931s ago: executing program 3 (id=2740): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x38) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) 2m25.003744373s ago: executing program 3 (id=2742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000030801060000000000000000000000000900010073797a04800800014000c00000f1ff0140000000ff060002400019000005000300210000000539d831fa842554f67b9dc1c863e102de4387267425c484824ec47f5e6f6605406bca1b7db5164ca5cab574226d597ec70fc3a4beacab501f44ee940c6c5294a85141073d272518135cf0b09bd209a1b08710ce2924e084e96fca57b9e8135cfd6fe5087cab71cad616b6bd7fcc7a3a9d3149"], 0x4c}}, 0x10) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10000a1, 0x0) (fail_nth: 3) unlink(&(0x7f0000000040)='./file0\x00') pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r2, 0x4068aea3, &(0x7f0000000000)) 2m24.837759031s ago: executing program 4 (id=2744): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = getpid() syz_pidfd_open(r1, 0x0) ioprio_set$pid(0x3, r1, 0x2004) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) 2m24.61670992s ago: executing program 4 (id=2745): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x57e, 0x2009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffe, 0xfe, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="000c050000000504255766"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x2c}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) 2m24.499738742s ago: executing program 3 (id=2747): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000104995fa5ce3f0000000000000000000000002cf0856d7faf977e3fc6ce174e30bd7a5c407b1039cd25619d6ac06516b08483fbe183366fa2cf062315673af2577037580eb1b125273280f6eeb799f3fddd04ad43605e43c776014a93145c7ca82cad6581cfde64321f8c0b12ee219db65ab3e8dbb554e8cc9114f3e854f3d29dacaf04cf94caf0775300"/154, @ANYRES32=0x0, @ANYBLOB="03c2000000000400140012800b00010067656e6576650000040002800a000200ffffffffffff000008000d0000010000"], 0x48}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="6d616e676c65000000000000000000000d0000000000f9000000000000000055322a256fcaa419ff3f5180c00004000000d1a2d6e7"], &(0x7f0000000180)=0x2c) (async, rerun: 64) r4 = syz_io_uring_setup(0x690b, &(0x7f0000000480)={0x0, 0x3, 0x1}, &(0x7f0000000080)=0x0, &(0x7f00000005c0)) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015", 0x1f}], 0x1}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) (async, rerun: 32) r6 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6172f7881"], 0x33fe0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x5, &(0x7f0000000000)=0xfffffffd, 0x0, 0x4) (async) io_uring_enter(r4, 0x56d, 0x75d0, 0xb, 0x0, 0x0) (async) writev(r0, &(0x7f0000000040), 0x0) 2m23.370979431s ago: executing program 3 (id=2750): syz_clone(0x0, &(0x7f0000000140)="bc2a1bf0a7e89211f380aa8ae51db253e474755e69289366207fadf022a3cd11e2917b57e00d3aacfb1b5136289474e681b1d06ea108352739887d487fbf8ce4d005023993efd69ece520f5159b6469e745fbf444a83853e263fc91f6b75e485f47ee5624edd726afa17ac2741fff0b3888935f5f3cf867da3817bff449cd7d9a48d6b9a282e8162fcaa034045e138a6e8c8029bcfde5fada88393beb7e913c3432409ab0d07b792561211dfda8d459ca6d969659eb2b8df61e0724765e0fd60dbb80c350db1eea1e2812b17288b", 0xce, &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000280)="18814eb6c9ba6359b51ad314a2ac90f084fd5a60d5957e589bf4ea2015a4ae04e6075626d89954889eac3ffa31aada1263cc4117dc2e41f6bd40102d387341fd72cff813076b2efe25f5d601a97b48094d592d540c2c09f5eb8a3bbe57dfb7a47b4d1be808b8047b392391ae21291aa6d7b023fc5153071b4fda816fa76b9203ea0a8ee431dd2a2e8def46e63b") syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002b40000", 0xfe60) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033a0000001f030000ef000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m23.116785589s ago: executing program 53 (id=2750): syz_clone(0x0, &(0x7f0000000140)="bc2a1bf0a7e89211f380aa8ae51db253e474755e69289366207fadf022a3cd11e2917b57e00d3aacfb1b5136289474e681b1d06ea108352739887d487fbf8ce4d005023993efd69ece520f5159b6469e745fbf444a83853e263fc91f6b75e485f47ee5624edd726afa17ac2741fff0b3888935f5f3cf867da3817bff449cd7d9a48d6b9a282e8162fcaa034045e138a6e8c8029bcfde5fada88393beb7e913c3432409ab0d07b792561211dfda8d459ca6d969659eb2b8df61e0724765e0fd60dbb80c350db1eea1e2812b17288b", 0xce, &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000280)="18814eb6c9ba6359b51ad314a2ac90f084fd5a60d5957e589bf4ea2015a4ae04e6075626d89954889eac3ffa31aada1263cc4117dc2e41f6bd40102d387341fd72cff813076b2efe25f5d601a97b48094d592d540c2c09f5eb8a3bbe57dfb7a47b4d1be808b8047b392391ae21291aa6d7b023fc5153071b4fda816fa76b9203ea0a8ee431dd2a2e8def46e63b") syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002b40000", 0xfe60) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033a0000001f030000ef000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m22.711032591s ago: executing program 4 (id=2752): keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000039c0)=[{&(0x7f00000029c0)="0e40699c20f0a3cd7a53", 0xa}], 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200700003b00070100409f9041558c57486cd2aa08000000000000037c00000c0020800500030000000000"], 0x20}}, 0x0) dup2(r1, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000300)=0x2, 0x1ff, 0x3) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x64242, 0x0) unlink(&(0x7f00000001c0)='./file0\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010800f2303920422c02124085010203010902240001000010000904"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000f0f000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800b00070066696c"], 0xc4}, 0x1, 0x0, 0x0, 0x6bb4af2df9e4a68f}, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000279600"}) r5 = syz_open_pts(r3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r7 = eventfd2(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) write(r7, &(0x7f00000003c0)="103201f016b93a05", 0x8) r8 = dup(r5) read$FUSE(r8, &(0x7f0000000380)={0x2020}, 0x2020) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x480181, 0x0) openat$cgroup_ro(r9, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000004540)={0x2020}, 0x2020) 2m19.466125037s ago: executing program 4 (id=2757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000030801060000000000000000000000000900010073797a04800800014000c00000f1ff0140000000ff060002400019000005000300210000000539d831fa842554f67b9dc1c863e102de4387267425c484824ec47f5e6f6605406bca1b7db5164ca5cab574226d597ec70fc3a4beacab501f44ee940c6c5294a85141073d272518135cf0b09bd209a1b08710ce2924e084e96fca57b9e8135cfd6fe5087cab71cad616b6bd7fcc7a3a9d3149"], 0x4c}}, 0x10) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10000a1, 0x0) (fail_nth: 4) unlink(&(0x7f0000000040)='./file0\x00') pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r2, 0x4068aea3, &(0x7f0000000000)) 2m18.926867812s ago: executing program 4 (id=2758): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = accept(r0, &(0x7f0000000200)=@can, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r2, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f0000000340)=[{{&(0x7f00000001c0)={0xa, 0x4e25, 0x2, @empty}, 0x1c, 0x0}}], 0x1, 0x8000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90324fc600b0002400a000000053582c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000480), &(0x7f0000000140)=0x8) sendfile(r3, r2, 0x0, 0x84000e3a) r6 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r6, 0x40187013) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x80cc) fcntl$setstatus(r7, 0x4, 0x4000) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000000080)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x6], 0x1, 0x1}) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={0x0}}, 0x0) recvmmsg(r9, &(0x7f0000009600)=[{{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002bc0)=""/243, 0xf3}], 0x1}, 0x3}], 0x2, 0x10120, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x0, 0xe0ff, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x9}, 0x1c) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x3, &(0x7f00000000c0)=""/167, &(0x7f0000000180)=0xa7) 2m18.739282489s ago: executing program 4 (id=2759): syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="aa3d6a0427"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x2, 0xffffffffffffffca, 0x100, 0xfffffffffffffff6, 0x0, 0x401, 0x6, 0x2, 0x0, 0x8, 0x100000001, 0xba25, 0xffe, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x40080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m18.269957276s ago: executing program 54 (id=2759): syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="aa3d6a0427"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x2, 0xffffffffffffffca, 0x100, 0xfffffffffffffff6, 0x0, 0x401, 0x6, 0x2, 0x0, 0x8, 0x100000001, 0xba25, 0xffe, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x40080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m14.874423638s ago: executing program 1 (id=2770): r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r0, &(0x7f00000002c0)=""/199, 0xc7) (async) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffd]}, 0x0, 0x8) (async) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x20, 0xc0c) 2m13.931803343s ago: executing program 1 (id=2771): r0 = syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x80}, &(0x7f0000001340)=0x0, &(0x7f0000000140)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r3, 0x0, 0x21, &(0x7f00000002c0)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) ioctl$SCSI_IOCTL_STOP_UNIT(r5, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[], 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000180)=0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x54) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f0000000180)={r10, @in={{0x2, 0x0, @empty}}}, 0x90) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r12 = socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000069078e0000001ac1414aa00000000c7d91523c9fba4df528a427e29554346458c5c0249cee242ff712b7d8530e715c8a360da9c9500e50da8f30d6c5b55d61e49f0b89652b03936ea38f4246cfb4f22de3a49", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r11, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xffe) syz_usb_disconnect(r6) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 2m10.783040193s ago: executing program 1 (id=2775): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 2m10.17426835s ago: executing program 1 (id=2776): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef00090599"], 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380340000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef6cd8d8000080003400000000114"], 0xf0}}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000240)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x29, 0x3, 0x50810041, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40}}, 0x50) r4 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f00000000c0)={0x6, [0x80, 0x6, 0x4, 0x256, 0x8, 0xb90f, 0xd, 0x5d02, 0xaa6, 0x58b1, 0x81, 0x9, 0x7, 0x273, 0x7, 0x100, 0x8, 0x1ff, 0x3, 0x1, 0xfffd, 0x9, 0xcb11, 0x8, 0xfffe, 0x4, 0x2, 0x1000, 0xb, 0x1, 0x0, 0x4, 0x4, 0x8, 0xfffe, 0x380, 0x2, 0x8, 0x0, 0x7ff, 0x3, 0x80, 0x8, 0xfffe, 0xa5, 0xfffb, 0x3, 0x3], 0x6}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4140aecd, &(0x7f0000000040)) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r4, 0x0, 0x5) fstat(r8, &(0x7f0000000080)) splice(r0, 0x0, r2, 0x0, 0x50, 0xf) socket$packet(0x11, 0x0, 0x300) r9 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 2m6.97281895s ago: executing program 1 (id=2783): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000005480), r1, r0}}, 0x18) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4, @vifc_lcl_addr=@loopback, @loopback}, 0x87) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000003c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000280)=0x51, r6, 0x0, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r8, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36) setsockopt$inet_int(r8, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r8, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/25, 0x19}, 0xfffffc00}], 0x1, 0x45833af92e4b39ff, 0x0) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x9, 0x5}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000380)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r7, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r7, 0x4}}, 0x10) r9 = getpid() process_vm_readv(r9, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r10 = socket$netlink(0x10, 0x3, 0x4) write(r10, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket$kcm(0x29, 0x4, 0x0) 2m6.463167401s ago: executing program 1 (id=2785): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x0, 0x7fffffff}]}) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)) syz_usb_connect(0x2, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="1201500238e2aa08732b17000ea20102030109022d0002db0480e60904000400ff9e4d0509040002"], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x2, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="1201500238e2aa08732b17000ea20102030109022d0002db0480e60904000400ff9e4d0509040002"], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) 2m6.143480658s ago: executing program 55 (id=2785): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x0, 0x7fffffff}]}) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)) syz_usb_connect(0x2, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="1201500238e2aa08732b17000ea20102030109022d0002db0480e60904000400ff9e4d0509040002"], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x2, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="1201500238e2aa08732b17000ea20102030109022d0002db0480e60904000400ff9e4d0509040002"], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) 2m1.715091897s ago: executing program 8 (id=2788): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x1}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2m1.528482145s ago: executing program 8 (id=2789): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, 0x0) 2m1.352812388s ago: executing program 8 (id=2790): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x3) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) r2 = fsopen(&(0x7f0000000100)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4a23, 0x5c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40000}, 0x1c, 0x0}}], 0x1, 0x200040c5) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) recvmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000000000)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000001e40)=""/4102, 0x1006}, {&(0x7f0000000180)=""/83, 0x53}, {&(0x7f0000000580)=""/43, 0x2b}, {&(0x7f0000000240)=""/61, 0x3d}, {&(0x7f0000000280)=""/182, 0xb6}], 0x5, &(0x7f00000003c0)=""/43, 0x2b}, 0x6a82}], 0x1, 0x0, 0x0) 2m0.428877903s ago: executing program 8 (id=2791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000030801060000000000000000000000000900010073797a04800800014000c00000f1ff0140000000ff060002400019000005000300210000000539d831fa842554f67b9dc1c863e102de4387267425c484824ec47f5e6f6605406bca1b7db5164ca5cab574226d597ec70fc3a4beacab501f44ee940c6c5294a85141073d272518135cf0b09bd209a1b08710ce2924e084e96fca57b9e8135cfd6fe5087cab71cad616b6bd7fcc7a3a9d3149"], 0x4c}}, 0x10) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10000a1, 0x0) (fail_nth: 9) unlink(&(0x7f0000000040)='./file0\x00') pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r2, 0x4068aea3, &(0x7f0000000000)) 1m59.954909598s ago: executing program 8 (id=2793): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0xa702) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r1], 0x0) mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x0, 0x11, r0, 0x0) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000371000/0x2000)=nil], 0x0, &(0x7f0000000200), 0x2) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0xa702) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r1], 0x0) (async) mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x0, 0x11, r0, 0x0) (async) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000371000/0x2000)=nil], 0x0, &(0x7f0000000200), 0x2) (async) 1m59.434014368s ago: executing program 8 (id=2794): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) fsopen(&(0x7f0000000180)='cgroup2\x00', 0x1) r0 = memfd_secret(0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)) setsockopt(r1, 0x84, 0x81, &(0x7f0000000340)="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", 0x15a) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000280)={r4, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r4, 0xc00}, 0xc) (async, rerun: 32) r5 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x22, 0x96, 0xb6, 0x10, 0x1c40, 0x534, 0x706d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x27, 0x0, 0x0, 0x4b, 0xe2, 0x4e}}]}}]}}, 0x0) (rerun: 32) syz_usb_control_io$uac1(r5, 0x0, 0x0) 1m59.0135695s ago: executing program 56 (id=2794): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) fsopen(&(0x7f0000000180)='cgroup2\x00', 0x1) r0 = memfd_secret(0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)) setsockopt(r1, 0x84, 0x81, &(0x7f0000000340)="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", 0x15a) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000280)={r4, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r4, 0xc00}, 0xc) (async, rerun: 32) r5 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x22, 0x96, 0xb6, 0x10, 0x1c40, 0x534, 0x706d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x27, 0x0, 0x0, 0x4b, 0xe2, 0x4e}}]}}]}}, 0x0) (rerun: 32) syz_usb_control_io$uac1(r5, 0x0, 0x0) 36.383428617s ago: executing program 5 (id=3053): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000037000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000180)="3e2e2ef7f0633d3e0f01cf0f009e0000b896008ec00fc7b300000f01c866b8010000000f01c10f01c40f0fea0d", 0x2d}], 0x0, 0x4, 0x0, 0x51) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 23) 35.514968901s ago: executing program 5 (id=3057): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x2803) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)={0x0, 0x0, 0xa}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x13, 0x1, 0x40, 0x10000, 0x7, 0x9, "57e63472617ea0fff3c64e217f50465a820722"}}, 0x12b) 35.202765525s ago: executing program 5 (id=3059): syz_usb_connect(0x0, 0x48, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x56, 0x54, 0x48, 0x20, 0x5e1, 0x408, 0x2511, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x2e, 0xc2, 0x5d, 0x0, [], [{{0x9, 0x5, 0x2}}, {{0x9, 0x5, 0xc}}, {{0x9, 0x5, 0x3, 0x1}}, {{0x9, 0x5, 0x8, 0x0, 0x0, 0x4}}]}}]}}]}}, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="10000000074ad5"], 0x10}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="10010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090481"], 0x0) socket$nl_audit(0x10, 0x3, 0x9) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in6=@private1}}, {{@in=@multicast1}, 0x0, @in6=@private0}}, &(0x7f0000000000)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private0}}, &(0x7f0000000000)=0xe8) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, r1, &(0x7f00000001c0)={0xc, 0xe2, 0x8, 0xa40, 0xfffffffffffffffd, 0x0, 0xfffffffffffffff9}) (async) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, r1, &(0x7f00000001c0)={0xc, 0xe2, 0x8, 0xa40, 0xfffffffffffffffd, 0x0, 0xfffffffffffffff9}) 33.515125305s ago: executing program 5 (id=3066): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2, 0x7}}, 0x10) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000001340)={0x9, 0x108, 0xfa00, {r2, 0xe4, "386b1a", "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"}}, 0x110) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000380), r2}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000001280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x14, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, {0xa, 0x4e23, 0xcbe3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, r2, 0x5}}, 0x48) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) setsockopt$inet6_int(r3, 0x29, 0x31, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) fsmount(r6, 0x0, 0x71) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="294f0400000000001c00128009000100626f6e64000000000c0002800500010005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f00000002c0)={0xfff}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000008000300", @ANYRES32=r11, @ANYBLOB="050029"], 0x24}, 0x1, 0x0, 0x0, 0x30000080}, 0x0) socket$igmp(0x2, 0x3, 0x2) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r12, &(0x7f0000001980)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021740000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000004800038044000080080003400000000238e20a80346f01800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c0001400000000000000003140000001000010000000000000000000084000a17fa50fecd8f4803998dfd5a898e862f4cad6c086c96b4359883f7ff9e2d517b6c7531a374d58668063f010725f8be3e93642910be0fe19297bf9c0fa08280d9c4d6e095894f2bfe24ab00f67717da429897d7f23f1e5fc7575c9c09e9650388a14c01785f6ed71cca1836cc9bd9579b48dbc6f7102e4256e494298ce868da0540098c58cd0557f4e8"], 0xf8}}, 0x0) 32.621430871s ago: executing program 5 (id=3070): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x9, &(0x7f0000000480)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}}, 0x14) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x18088, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value, @void, @value=r1}, 0x50) 32.317260754s ago: executing program 5 (id=3072): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x40480, 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0xfffe, 0xfffc}, @timestamp, @mss={0x2, 0x5}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xa000000, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) io_setup(0x1000, &(0x7f0000000080)=0x0) io_getevents(r8, 0x1, 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000140)={0x0, 0x989680}) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) 30.985117735s ago: executing program 9 (id=3079): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000240)=0x2) 30.784011195s ago: executing program 9 (id=3080): connect$qrtr(0xffffffffffffffff, 0x0, 0x0) set_robust_list(&(0x7f0000000500)={0x0, 0x200000000000000}, 0x18) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x10, &(0x7f0000000000), &(0x7f0000000080)=0xc) 30.609286315s ago: executing program 9 (id=3082): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_audit(0x10, 0x3, 0x9) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x18088, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value, @void, @value=r0}, 0x50) 30.407213694s ago: executing program 9 (id=3083): syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="aa3d"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "df1d40", 0x14, 0x6, 0x0, @remote, @loopback, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x400, @private2={0xfc, 0x2, '\x00', 0x1}, 0x81, 0x1}, 0x20) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x5a3082, 0x0) write$tun(r2, &(0x7f00000006c0)={@void, @val={0x2, 0x1, 0x7fa, 0x8, 0xc3, 0x7}, @ipv6=@icmpv6={0x6, 0x6, "8a25a4", 0x228, 0x3a, 0x1, @mcast1, @local, {[@dstopts={0x89, 0x7, '\x00', [@ra={0x5, 0x2, 0x6}, @generic={0x36, 0x26, "9721dbb78e4f39520b55e6b71b1301f43b3b024430b79afbbc75b700927200e9fefdcc9274a0"}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @hopopts={0x3a}, @fragment={0x5c, 0x0, 0x1d, 0x0, 0x0, 0x1e, 0x64}, @routing={0x0, 0x0, 0x2, 0x6}, @routing={0xbc, 0x10, 0x1, 0x22, 0x0, [@mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x34}]}, @hopopts={0x33, 0x23, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0x4}, @ra, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7f}, @generic={0x6a, 0xda, "03787b0d8e1481615b989ace1b456c498684aebefd00ccde4daa89411ffdb850c8bfb13d3c29edea30303610f627a3814549c66abb4c88e1101b952fa6e5d2abda8039b0577788602ceb8fd63f7c805a00bf0956d76bfb69670e665534fad5c60a62dc52ad374c2f813f243105329f5d03fee02509a70df3e995ae90fa9c28951c21aa133851360ead57f48d982265786b82db49ee6bc7b57e1e10380d54d3e1b94ae289eee92d59f0d5d122b1790ab7ad25945545160c9b7e2eb393e02a74db916dadfcb1e8d4514967c69e6695e992a7e4eb3f16dff4fd5975"}, @calipso={0x7, 0x20, {0x8c8738dbb6c4dc94, 0x6, 0x9, 0x0, [0x3, 0x2, 0x8]}}, @ra={0x5, 0x2, 0x5}]}], @mld={0x0, 0x0, 0x0, 0x6, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}}}}, 0x25a) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r4, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r4, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r5, 0x0, 0x1fff, 0x4, &(0x7f0000000500)="0001f8aa", 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0) r6 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x33}}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000300)={[0x2, 0xffffffffffffffca, 0x100, 0xfffffffffffffff6, 0x0, 0x401, 0x6, 0x2, 0x0, 0x8, 0x100000001, 0xba25, 0xffe, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x40080}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 29.838272089s ago: executing program 9 (id=3085): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, 0x0) 29.631345465s ago: executing program 9 (id=3087): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) flistxattr(r1, &(0x7f0000000140)=""/98, 0x62) setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 16.854159413s ago: executing program 57 (id=3072): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x40480, 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0xfffe, 0xfffc}, @timestamp, @mss={0x2, 0x5}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xa000000, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) io_setup(0x1000, &(0x7f0000000080)=0x0) io_getevents(r8, 0x1, 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000140)={0x0, 0x989680}) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) 14.402202281s ago: executing program 58 (id=3087): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) flistxattr(r1, &(0x7f0000000140)=""/98, 0x62) setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 5.263719031s ago: executing program 0 (id=3166): socket$inet6_udplite(0xa, 0x2, 0x88) mbind(&(0x7f0000bda000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x9, 0xf21, 0x0) mbind(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000080)=0x103e, 0x5, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x2, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_BROADCAST={0xa}]}, 0x40}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4082) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r6, 0x24, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x65}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000440)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r8, @ANYBLOB="01002dbd7000fbdbdf2501000000780008806c00008024000100dbfffffffffffffffffffffffffffffffffffff7ffffffffffffffffff0400000000000000004e2100000003ff01000000000000000000000001030000002400df0015d044075c9c57fbe26a07c9503875bd2c0ae1cafe9a9cf167f8202ae7f61ffc08000080040009801400020077673200000000f92ddb58cdf064c600000000000000000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e0000"], 0xc4}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0xfffffffffffffffe, 0x1000000000000000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2000000000000000], 0x0, 0x28202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0xeffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x1000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 4.150830601s ago: executing program 0 (id=3170): r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0xfffffffe}) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = io_uring_setup(0x6bf, &(0x7f00000000c0)={0x0, 0xe556, 0x200, 0x2, 0x3c4}) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000007e40)=[{0x1, 0x1, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/156, 0x9c}], &(0x7f0000000200)=[0x1, 0x100000000, 0x81, 0x9, 0x9, 0x0]}, {0x2, 0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/206, 0xce}, {&(0x7f0000000380)=""/22, 0x16}], &(0x7f0000000400)=[0x7, 0xffffffffffff8001, 0x1]}, {0x4, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/71, 0x47}, {&(0x7f00000004c0)=""/70, 0x46}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/171, 0xab}], &(0x7f00000016c0)=[0xb, 0x9, 0x4, 0x2, 0x1, 0x4, 0x5]}, {0x4, 0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/134, 0x86}, {&(0x7f00000027c0)=""/45, 0x2d}, {&(0x7f0000002800)=""/181, 0xb5}], &(0x7f0000002900)=[0x1, 0x7b, 0x5, 0x7fffffffffffffff, 0x8, 0x4]}, {0x5, 0x1, 0x0, &(0x7f0000003c00)=[{&(0x7f0000002940)=""/59, 0x3b}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/230, 0xe6}, {&(0x7f0000003a80)=""/106, 0x6a}, {&(0x7f0000003b00)=""/233, 0xe9}], &(0x7f0000003c80)=[0x7, 0x800080000000000, 0x8]}, {0x1, 0x1, 0x0, &(0x7f0000003d00)=[{&(0x7f0000003cc0)=""/50, 0x32}], &(0x7f0000003d40)=[0x6a7]}, {0x5, 0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000003d80)=""/251, 0xfb}, {&(0x7f0000003e80)=""/42, 0x2a}, {&(0x7f0000003ec0)=""/160, 0xa0}, {&(0x7f0000003f80)=""/233, 0xe9}, {&(0x7f0000004080)=""/20, 0x14}], &(0x7f0000004140)=[0x9, 0x7f, 0x5, 0x2f891fe9, 0xa1, 0x4de, 0xffff, 0x3ff, 0x1000]}, {0x4, 0x0, 0x0, &(0x7f0000005380)=[{&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/165, 0xa5}, {&(0x7f0000005280)=""/175, 0xaf}, {&(0x7f0000005340)=""/49, 0x31}], &(0x7f00000053c0)=[0x60]}, {0x2, 0x1, 0x0, &(0x7f00000055c0)=[{&(0x7f0000005400)=""/164, 0xa4}, {&(0x7f00000054c0)=""/220, 0xdc}], &(0x7f0000005600)=[0x800, 0x2, 0x0, 0x4]}, {0xa, 0x0, 0x0, &(0x7f0000007d40)=[{&(0x7f0000005640)=""/92, 0x5c}, {&(0x7f00000056c0)=""/241, 0xf1}, {&(0x7f00000057c0)=""/196, 0xc4}, {&(0x7f00000058c0)=""/4096, 0x1000}, {&(0x7f00000068c0)=""/247, 0xf7}, {&(0x7f00000069c0)=""/255, 0xff}, {&(0x7f0000006ac0)=""/4096, 0x1000}, {&(0x7f0000007ac0)=""/222, 0xde}, {&(0x7f0000007bc0)=""/133, 0x85}, {&(0x7f0000007c80)=""/133, 0x85}], &(0x7f0000007e00)=[0x5, 0x6, 0x4, 0x61bc, 0x6, 0x7, 0x1]}], 0xa) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000007f80), 0x4, 0x400000) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001880)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x70, 0x3, {0x10, 0xd}}]}}]}, 0x44}}, 0x0) close(0x3) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES16=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRESDEC=r0], 0x0) 2.67863829s ago: executing program 2 (id=3179): r0 = socket$inet6(0xa, 0x802, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, &(0x7f00000004c0)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x30, 0x0, 0x0}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) r6 = syz_open_dev$radio(&(0x7f00000002c0), 0x3, 0x2) fallocate(r6, 0x40, 0x0, 0x8000) vmsplice(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r8 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ppoll(&(0x7f0000000000)=[{r8, 0x145f}], 0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'syztnl2\x00', r9, 0x4, 0x5b, 0x6, 0x6, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x20, 0x8000, 0x4cf, 0x1dd}}) syz_usb_control_io(r7, &(0x7f0000000540)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00000500fed5c3e982c4e8"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r7, &(0x7f0000001780)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0080c37557818c97ee0808000041000000000000"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r8], 0x0, 0x0}, 0x0) r10 = syz_usb_connect(0x2, 0xe5b, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0x22, 0xd3, 0xdc, 0x20, 0x17cc, 0x1000, 0x9f02, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe49, 0x4, 0x2, 0x7f, 0x30, 0x9, [{{0x9, 0x4, 0x3b, 0x2, 0x1, 0x1, 0xb8, 0x15, 0x46, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "86e37e"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x0, 0x9, 0x1}, {0x6, 0x24, 0x1a, 0x80, 0x34}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x7f, 0x3ff}]}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "03ec0c"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x0, 0x7f, 0x8}, {0x6, 0x24, 0x1a, 0x1, 0xc}, [@country_functional={0xc, 0x24, 0x7, 0xb, 0x1, [0x9, 0x6, 0x4b3]}]}], [{{0x9, 0x5, 0x0, 0x2, 0x20, 0x7, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x0, 0x2}]}}]}}, {{0x9, 0x4, 0x7b, 0x9, 0xf, 0x7c, 0x88, 0xfc, 0x6, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "3600a9d42d6c"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x1, 0xf9ed, 0x3}, {0x6, 0x24, 0x1a, 0x8, 0x10}, [@mbim={0xc, 0x24, 0x1b, 0x3, 0x4, 0x9, 0xe3, 0x40, 0x1}]}], [{{0x9, 0x5, 0x2, 0x12, 0x3ff, 0x5, 0x1, 0x9, [@generic={0xad, 0x6, "0a0c5666f8c65be8c627ad359cd3149384ca017e3a19dc65dbbac69df81b02cd4e88c4c3fe9c4679aae54d259795f2eec344d853abf787bc02bac5e271764f3b3f12e44141121261d58f173a7240936268bc92a5ae1bc677cf87b1030726da2edc6a89861eda111ad4cf6af33135ca81a8400c3172abc6eb725d349fa219f09de30d9100bad8fc54edf238f28ee7114cc36284ca1f2f83a7aaf15518e1e67593660eca824041ffa75ae98b"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x10, 0x9, 0x10, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x3}]}}, {{0x9, 0x5, 0x0, 0x1, 0x20, 0xff, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x10, 0xe}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x4, 0x0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x40, 0x8}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x0, 0x2c, 0x1, [@generic={0xe4, 0x31, "89fe459dd45d114446198ef614073c8c80345ab18c48f1e7868d6642acb398474ad685c2030e8921a52bfb9e965cc5e1d01b0c80d6a1d2897cabcc17a0b61b9893b440f6b385389f6b0aaefb26db23b7d3aecd96c04a345f6d234db81f30659e386aedacdd23ac6f6948e3b1edd4714390a01479914e8dbe9df77ed4de40298b0a36e15d5d13c36bb8c6c9516ef65a298761f2143f9bb829540e30e56d5bb6786b4a0aa1623f5b05ea31e7029cc97d89c8b89dcf6f138ebbe0362bd1d8663d1997ca5fe77a05c30e18f71256c81d36025b61b249f5f9287d4aeb93328b61e80b0883"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x0, 0x1, 0x80, [@generic={0x1f, 0x21, "3bebcf9507de1520b708b34ca4c4bd6c5b0f144b6df3bdd37e90c2aa5b"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x20, 0x7, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x8000}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x4, 0xe, 0x4, [@generic={0x5e, 0x30, "21cb0156410f7d11ab6b95dd3890dbd7cc44c414439cdd222cbcfa00e08141a6b00bbc02f046fb9e47390e0b737c32e81d3e86ec1fbfff76d28fb0d1a75b256a1f2ba623ccdbd655b0e4985bd7fa934c6ee0790fdc26f59b64179e4e"}]}}, {{0x9, 0x5, 0x5, 0x1b, 0x40, 0x7f, 0x13, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xe}, @generic={0xcc, 0x22, "d850892fbf031f4caedfa5b0aacde11b887684e6ec9e2a15820b9b306d2c9c93854d9a07c83ac431718f7c430eea22fd0fedeab575c33403eba110cb1bb98ee9a0c4e4fe5f0b46b2e9216a0f4993489ec027d951c53abde2915b18b6a67a5ae2cef4ae46dba667090dc16f71bf615e1b22df981e2c4137b0c20d86a3e4e57a30dc2f9162226f7f3980ed4b54ac319725a719aa6bddf95840d2e95536d55eb751bdf86a637e6cd37d17c46e4ed1197b950f6b766a2975e6e895978bca42beba3868302b7cc275b21175ef"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x3ff, 0x51, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xcf, 0x10}, @generic={0x1c, 0x22, "39e3352fca2690fa8c9c28dc2cca40f84536e1442890cad1f112"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x1ef, 0x66, 0x8c, 0x9, [@generic={0x82, 0x22, "4b9670c7aa17709e91671aac88ea4ab61007aa32d0818b0a42064de1bf89b07f9a0a1175da7044bcbfe8b51694f2c94ac3155a8a013fcb950e653ecb9f2e58e0cfa32dca224d23de20e5612a7e100dbcfe59efc18de5394f275a8a122117e20006ae77c36d64d08e570156158a5ce877c35533531ca0330109a4693521d14d9d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x6}]}}, {{0x9, 0x5, 0xf, 0x3, 0x8, 0xdf, 0xc, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0xfc00}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0xe, 0x62, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x77, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x10}]}}, {{0x9, 0x5, 0xb, 0x2, 0x420, 0x1, 0xb, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x4}, @generic={0x1a, 0x22, "9eb23589e3d8f39e3802b456d8c4ebb3240866b130fea59b"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x8, 0x3, 0x6, 0x8, [@generic={0x2d, 0x11a5bc6530c7f637, "df8daf47f575f755c1b7e7a1f4645c8e9ac1cb00cc9f6449d525bc6c5225747a55e4cc5a94cf23faa83490"}]}}]}}, {{0x9, 0x4, 0xc, 0x2, 0xa, 0x1d, 0x68, 0x30, 0x0, [@generic={0x76, 0xf, "71d67e34bc8f41075f5c898c8cb888ab8ee19fc3fe874943178ce2c89f62701e14cdae951e717e734250828137603d9bfc024e121c873681880571aa867d9a6395ddaa22e20e01a5c96f5a785e2b4972ee979a1e2c5974a81267e162b5b73938a1501958516a8ecf132c40bdf9d138eda31573d4"}], [{{0x9, 0x5, 0xe, 0x0, 0x20, 0xa0, 0x1, 0xe, [@generic={0x25, 0x3, "3d41237bfcbacf3a3632bc08e8a1fb253cf35bbfdd2d492c4bf58fce089ebf9e727970"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x0, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x3}]}}, {{0x9, 0x5, 0xa, 0x0, 0x600, 0x8, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xff}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x3, 0x1, 0xfa, [@generic={0x3c, 0x23, "c3dcc9c6bef39001465f3347de59251498fcc16a86e9702857403f036957d3e250d3be3f517eae50abeafd9c74edb50a89bf7339fb2163a82a03"}, @generic={0xc1, 0x1, "6e910c522a36511ca918447d8cdc0c06f4e35682aaa1428bddbc26f0b1a9f3baf6ccf4a9f63d330ae94ac1323527b736f2b1f1cf737a23fcb2f1818d19b227399905cb45c9b96bcd7be9e7cae407f13da1dda5cb0b3021ac23f39683ce0a3cac679f8a5ba2d3c06c92f0d4aa23274346e3d5d55b1b8a7990dda2a62ecc6f6ad915279841e0fdf4c5e64d2c77e5c8f11bdd9d5cdc651cf33f61f6882639d758ad56acd11d6f50926dfffc2e086dcc656cfcfcd2af60cb7d0a5bbd50d5afb947"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x80, 0xdb, 0x5, [@generic={0xb5, 0x23, "27df8a831bf63a9c81b343dd531f2d446e1d6970dec4703641e9fc0e35fe7076c5b23992d854075a2e3664d227eafd4c195f1d4ee2b4d8043a375066d2ee1dc8cd9b0086ce8dd1135fabf32f6e45c24f8f9e98b85dee72f320886edf55074348eb995827784afcfbf99d1e3e54e981aff69ed9cdc78c3c9b1582246696e6f41bab024d766a1b8921b979ed8a1b8616710df69e4ef8bc4c1f4d80393e94b28864b7c4856c70afcd8b0ddd52865fdbae3184cc25"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x200, 0x3, 0x8, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x4}]}}, {{0x9, 0x5, 0x9, 0x0, 0x7ff, 0x10, 0xa4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x4}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x8, 0x2, 0x8, [@generic={0xd2, 0x5, "7be9408736a688be73671bc57ddbb046e23412c4497bf64160802ee403553f312b0e082dab616ab607fa8961f5c5a6e21dcb289519ff00b50c1b378f33fa65ba72e1160be935800179ca5a99ea3bcdd3d659cc6e3798437470b995391290e7d0d38ffc3130fd3cb00f024da7ccda3da97a8268186b370037ea309ffe1972bc0da99371fc849ac5f2004cb8f18eafc33727bf7ff929195df97f300b8e4d9840968c470a1af74852b52d88d3faa247e50edfe636e759eee5555e3fdecf266a5a9334b7367caa1a4c884e378ab969c28668"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x10, 0x3, 0x5, 0x6, [@generic={0x23, 0x5, "741f848ec1fbc58421ed293a55158ecb3a31eaee99d22358a37ff370386a060855"}, @generic={0x83, 0x23, "29cfdfb528f66153e714af9e4ff221058cc31e863251511945b9912e52f6845b92e4e537074dd88bb8d8ce7c9957d3a5b61fcb5159d531b6eb82f76c94547b53642858ee5d703d7c2e37926d2d05b48793ca2665861861e8f582a920bfd0d9b5a92cc40855309a9d385c518b72725cc2f73fd218845bf959927c0c7e90fb4758c2"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0x8, 0x2, 0xb, [@generic={0xd3, 0x21, "fa5da80144ac9f0e946735ad97b8129e144892e0a7927208696d8c27f418287844d685d33ba4bb2f7c4744828b8fc2a58edd1958fc685722592c93d7a9aa3c0c0db3806d5ce041aeb1c190bb19ea4cff0d00d27687d8e696a19a94599f21cac17a817a1263720fee30715b164214148ed2be649ce0222054b247eed4994e2d1f3ee2bf9c152f604f5745ad49c3c10f77b5281fa52b70f619d0029f76af1c9ab591e00cd83faaf65e8759d15703aa0a8c0122b9b9736f97129b11080ac7c4f5346eb4c4c352ab8aa3aa20c59f5c8c4a8f31"}, @generic={0xd7, 0x24, "01a55627b2b2b32f90452fd994f5d6d82ae5822595d21b2e326f43ee21262500cb12e679186a0474633074b6b6c128840eb6af5fcda4a8ff13c9df017c97cfae9281a869a561a50f10cd2ca69993bfc15bfc3ceb2c40e8f83e009f303524ec3b0b94ddc3221c0aafa8d562aab295e0f654cfdbbdb78a2242f40d6e53b23e808d81e8fb15ac1e043689abedc30f271d215b0356df07bc0a9af0c0cea6f42c6f066e6232403e52796934c4ef3fde3bf16afc82d3833c4794916d57df21a3f15b15db679a73fd1624068062518f190ac83c29a51f691f"}]}}]}}, {{0x9, 0x4, 0xf2, 0x4, 0x7, 0xb2, 0x35, 0xd6, 0x6, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "328363"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x7, 0x2, 0x7}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xfc}, @dmm={0x7, 0x24, 0x14, 0xfd76, 0xfffb}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x8, 0x8, 0xd0}, @acm={0x4, 0x24, 0x2, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x5d4, 0x9d, 0x1}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x1, 0xb65, 0x6b}, [@mbim={0xc, 0x24, 0x1b, 0x2, 0x8001, 0x6, 0x6, 0x81, 0x6c}, @mdlm_detail={0x19, 0x24, 0x13, 0x7, "e057828cc0579700951efed42c7ebf48544812dab3"}, @country_functional={0x10, 0x24, 0x7, 0xc, 0x6d, [0x5, 0x1, 0x77, 0xc5f, 0x400]}, @acm={0x4, 0x24, 0x2, 0x8}, @country_functional={0xa, 0x24, 0x7, 0xf7, 0x9, [0xd, 0x0]}]}], [{{0x9, 0x5, 0xc, 0x0, 0x8, 0x0, 0x77, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xaed}]}}, {{0x9, 0x5, 0x83, 0x10, 0x0, 0x3, 0x1, 0x21, [@generic={0x73, 0x6, "5409c8bd368fe7d8cf7bc1a082ff7817f5de3c0fb23a9cd991d5f96c0a807ad6c1a98c4e9749caf7cdb3c16f656a6a982515cd5b431af410ec13f5d9eb87e96d25b0f0783ee1bff331974e5eb54a28b410de0d92892ce43773ed77f6eaeed991e308e28b4855812e66fee3df2406a2ac2d"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0x7, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x400}]}}, {{0x9, 0x5, 0x0, 0x13, 0x8, 0x2, 0x23, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd8, 0x2}]}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0x2, 0x0, 0x0, [@generic={0xa4, 0x22, "29b346cbea3757d8395429e52e61595ecfec55d5a429b673d058e6fe6094396856f2cacee057fa98a364e7484b074ad5bc0379bae452d4e3fccf65ac7a9ec30437afe19e46211ab4b4101c288e158fd14e3af052279cecaa2c18baac07f8085be941c261e3df75328c63763ea69c2027d1cca2528656d479d610fb182246f111e11d7f895f9669cdfe209b834377b5b127b390c9b9e710e2420c5df3762ed63595ff"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x3ff, 0x40, 0x5, 0xe, [@generic={0xdb, 0x4, "9c99dbbcc545147d07ba0c24050fd687da76e91eabe1bbdd288d7a2bac88063edaa1075722f4b7dd81e6285c31141a28f48ec2fd980b4094aee86f07bbe717c4930d87465391457e0eaff24ce0ed635e8a994f073b74ed89341f14f00fd18b607638809d31163de9f7b0c7eecc7eaea088871a973aad0aa0c7ebda370fedc3d073169df06f3d4cf684506d779b2ae371eb9f03005e915172d039686a1c7b28badf52568598ce01c7f4c23c37a589018023ad4035744fe29637370cebac6ca1d4192bef290f5ae6ebcda568f7844659463d015a77740e030fdd"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x3}]}}, {{0x9, 0x5, 0x5, 0x18, 0x40, 0x1, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x4}]}}]}}]}}]}}, &(0x7f00000015c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x300, 0xc, 0x0, 0x4e, 0x20, 0x5c}, 0x48, &(0x7f00000004c0)={0x5, 0xf, 0x48, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x9, 0xf0f, 0x40, [0xff3fc0, 0x1fe0, 0x0, 0x3fc0, 0x0]}, @ssp_cap={0x18, 0x10, 0xa, 0x7f, 0x3, 0x6, 0xf, 0x5, [0xff00, 0x3ff0, 0x2080]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0xf, 0x0, 0xf, 0x5f}]}, 0x3, [{0x98, &(0x7f0000001400)=@string={0x98, 0x3, "7b2bb89b654c57f0460650ac64b61885f28f152fbfd2b6a873149b53b5253ece95e04a3291d3259915ce72478432e538c7ca96acd589bdb16931712c2307359615ecda9429f7027b881442448bd8baf7c2c172f95d6aa4edcd75e045ca922906777180ea98be032748a57ae1194ae376af2f9c1a9233d2eed0ead809d94746945ddc96ed63acf0c3b9207be401fbea1ba459b16f12e1"}}, {0xc9, &(0x7f00000014c0)=@string={0xc9, 0x3, "0233f589ead4d2ea292b4d8360dc86d7b715cc390a16e63ae486b4f5a9e6096666ee0158b92d78689a41d1922ed18986fed909350cfa512b1976219a74ffc8763c48160339ecc6672e9055c786f9ab5745df0085bf770925b1dd970c50ff0cc8579b24e60a48f4a19c568d487b7709520cf0974db6c1ae344e7aea1d0c201d7106cc8f276f08e284e04d382f3eb956d2c15d1cfc626ec7502987f67ba5837cb3fdbb8bc78a3b0ba7e4ba149a3bab41b75ac5d7e4a3cf716a7cf26c429537b64f992091b9daa502"}}, {0x3, &(0x7f0000000400)=@string={0x3, 0x3, ')'}}]}) syz_usb_control_io$printer(r10, &(0x7f0000001740)={0x14, &(0x7f0000001600)={0x0, 0xd, 0xbc, {0xbc, 0x23, "dccae498494a57a1e755f54f5069261b41512c246247cfb844457e87b10493fdaedbb79cc177d784316ca301ea0a2190999b4155c74c18ec4d009bcf6ae1be7f0f145fbc7a3339466621dfb4fa182d44b7d7cbc1ab619581d356fabbd11d12ceae3c70bdda2d299dbdf4c04bb34e01dc6bc1bebb9223ea49dfe2c7ee1fbd38c0c051e532f3921c8ce3f5afc3159276b3669c385ee281250a7819f706ca7f7fabf0498e40349cdda5a380cde76ec5384327f138276f44b7c94cc6"}}, &(0x7f0000001700)={0x0, 0x3, 0x1a, @string={0x1a, 0x3, "a5d526786032c6601f2820a0db91b8861363a3c8e0b6f6bd"}}}, &(0x7f0000001a00)={0x34, &(0x7f00000017c0)={0x20, 0x13, 0x21, "4f19a51ffa2a06e23fc332dc3e07fbfed6a93ecc3418ba95dd11d2b8db5bfd2dbe"}, &(0x7f0000001800)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000001840)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001880)={0x20, 0x0, 0xd3, {0xd1, "1e6b7e02cbd80d1a8f4cb37d4f2b97dee4a51fdaa87fb47f1b11f02043757c6e9a45a366016b8ff7ee0679e00ce7f052905dceea338e6d08072589f679075eaae975033c71e7cd06fd2e8fe1a509f1f5f35e6a445e67c2e1cbef2a2172b9c549cef76e63d22d9003ef5f6ef4b4457df7bc33080d14728099bf977866b16cfda803c6c87b64b9bf787f1acc8b39b79bae9d73125bc998f9500831ee22977541962fd1bcf6ee81e2c401ba633a4f2ba8317e317a56c3cc85125bfc1a0579e5f13e6a45dafd38e7e2b892dbbb3fedc7c13fb2"}}, &(0x7f0000001980)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000019c0)={0x20, 0x0, 0x1, 0x4}}) 2.377450257s ago: executing program 6 (id=3181): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f00000000c0)={0x0, 0x0, "1ec4618f6538ecc26693065a2dcc26d92bb4f1030cd2c1011cdbf894a0839dc2"}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000060c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {}, {0x7}}}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) read$FUSE(r8, &(0x7f0000001300)={0x2020}, 0x2020) 1.939037071s ago: executing program 6 (id=3182): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x1, 0x5, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, 0x80, 0x20, 0x6, 0x200}}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x3, '\x00', r0, 0xffffffffffffffff, 0x2, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xb3, 0x7, 0x1, 0x100, r1, 0x8, '\x00', r0, 0xffffffffffffffff, 0x0, 0x1, 0x4, 0x8, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.916563587s ago: executing program 6 (id=3183): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="40184900"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000080)=[{r2, 0x1}], 0x1, 0x4) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004e9fe610e8040c8b031915be50ba4ed08289685e9b010203010000"], 0x0) 1.115889711s ago: executing program 0 (id=3184): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004084) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7cb, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-arm64-ce\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept(r1, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0xffffffffffffff3a, &(0x7f00000002c0)=[{&(0x7f0000000300)="a9d209f9", 0x4}, {&(0x7f0000000180)="d02809", 0x3}], 0x2}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001300)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix_mp={0x0, 0x0, 0x47524247, 0x0, 0x0, [{0x0, 0xffffffff}, {}, {}, {}, {}, {0x80000}, {0x0, 0x802}], 0xcd, 0x0, 0x7}}) r6 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x0, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10001}, 0x1c) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') preadv(r0, &(0x7f0000000000), 0x0, 0x8, 0x6) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f00000000c0)={0x5, r3, 0x80000}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='*\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000f7dbdf250c0000001800018014000200736974300000000000000000000000000c0003800400010004000500"], 0x38}, 0x1, 0x0, 0x0, 0x4000081}, 0x4040010) r11 = epoll_create1(0x0) r12 = socket$unix(0x1, 0x1, 0x0) close(r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) setsockopt$sock_int(r12, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r12, &(0x7f0000000100)={0xa0028000}) write$UHID_INPUT(r8, &(0x7f0000002080)={0xfc, {"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", 0xffffff96}}, 0x1006) 897.241259ms ago: executing program 2 (id=3185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000010c0)={&(0x7f0000000000), 0xc, &(0x7f0000001080)={&(0x7f0000000040)={0x24, r1, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xedd}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8001) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="f73400000000000000000100080000000041000000fdf517000000007564703a73797a30000000000000"], 0x30}}, 0x0) 896.190538ms ago: executing program 6 (id=3186): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xfb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x20008010) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000018c0)={0x124, r1, 0xacf5e67dd0b583a1, 0x500, 0x0, {{0x5}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x108, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x104, 0x2, "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"}]}]]}, 0x124}}, 0x0) 749.769652ms ago: executing program 2 (id=3187): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x8}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x5dd, 0x4, 0x9]}}]}]}, 0x64}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00'/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000280012800b00010065727370616e0000180002800400120006001800900000000500160002000000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40000) syz_open_dev$vcsn(&(0x7f0000000080), 0x7, 0x300) 704.885839ms ago: executing program 6 (id=3188): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf2501000000000000000c41000000140014"], 0x30}, 0x1, 0x0, 0x0, 0x884}, 0x810) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x3, 0x80000}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)={0x4}) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x19a}, {}, {r4}], 0x3, 0xb) r5 = shmget$private(0x0, 0x2000, 0xb23f191a73c3f3af, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r5, 0xb) shmctl$SHM_LOCK(r5, 0xb) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000005200010000000000000000001c"], 0x14}}, 0x0) 518.796339ms ago: executing program 6 (id=3189): r0 = socket$can_j1939(0x1d, 0x2, 0x7) writev(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)="991b64b51c09d578735ac54f2e1300d857ff62a1b6dc661545fc449f55f5a51cc4fea6d12356480bcf984d5bb161f7360754431dc33bf640d857f101f10c44378bee31d3b53b4fa3272fa93ff2fc3fd11833f1693ca0858a", 0x58}, {&(0x7f0000000080)="c1cc2e0ed6433668656a962c0aecf025", 0x10}, {&(0x7f0000001100)="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", 0x1000}, {&(0x7f0000000240)="bda4919b9b8bc14ffa33d5815441346aed5716a81267a31db5d2b880b0c18b510c36516a26259be8e10124ac27174990c7eba6002029e25629a176a01241f3c3e77dadf82fbd98d5c690d066cf9302b317c5682042aada3e5e619e141b4cdb134ebd69061af73aded215754de0f5f137d546e932a9399e624f79ea4f10b4aa1a8ec9dd44c012cdbf14d3978218ca45dd333dfc", 0x93}, {&(0x7f0000000300)="80f464f35ae944374c5c81c7f06012cfc0e35504f4b8886c728b2393373b586f103dbcfbb3f821095a34b9d8785bbd7ce6a2e503d46dfc7c06f8e9c1fd8635eeb561fde785eeb22f38b3e42c8061a3e67211b2ea7cea467319c22c550a8635f106ea5b4cb7c50fc052243e2889bc0c7413c631d7563b5bfb3718496967523c35f9a4729023ed07a97d24767f7696db6ea89a697e602c1f9251827cf8e8edc2a303affc", 0xa3}, {&(0x7f00000003c0)="cd3c0e2ae7128bc7e0a061a07ddb0fce1d71b09636bcebec85f4817e75818170011a486dcd164a14d0731639cb840e40d8e5d731cf6cbcef40af63219969c3e098d484b2", 0x44}], 0x6) (async) writev(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)="991b64b51c09d578735ac54f2e1300d857ff62a1b6dc661545fc449f55f5a51cc4fea6d12356480bcf984d5bb161f7360754431dc33bf640d857f101f10c44378bee31d3b53b4fa3272fa93ff2fc3fd11833f1693ca0858a", 0x58}, {&(0x7f0000000080)="c1cc2e0ed6433668656a962c0aecf025", 0x10}, {&(0x7f0000001100)="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", 0x1000}, {&(0x7f0000000240)="bda4919b9b8bc14ffa33d5815441346aed5716a81267a31db5d2b880b0c18b510c36516a26259be8e10124ac27174990c7eba6002029e25629a176a01241f3c3e77dadf82fbd98d5c690d066cf9302b317c5682042aada3e5e619e141b4cdb134ebd69061af73aded215754de0f5f137d546e932a9399e624f79ea4f10b4aa1a8ec9dd44c012cdbf14d3978218ca45dd333dfc", 0x93}, {&(0x7f0000000300)="80f464f35ae944374c5c81c7f06012cfc0e35504f4b8886c728b2393373b586f103dbcfbb3f821095a34b9d8785bbd7ce6a2e503d46dfc7c06f8e9c1fd8635eeb561fde785eeb22f38b3e42c8061a3e67211b2ea7cea467319c22c550a8635f106ea5b4cb7c50fc052243e2889bc0c7413c631d7563b5bfb3718496967523c35f9a4729023ed07a97d24767f7696db6ea89a697e602c1f9251827cf8e8edc2a303affc", 0xa3}, {&(0x7f00000003c0)="cd3c0e2ae7128bc7e0a061a07ddb0fce1d71b09636bcebec85f4817e75818170011a486dcd164a14d0731639cb840e40d8e5d731cf6cbcef40af63219969c3e098d484b2", 0x44}], 0x6) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040d90455a000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205000000a707"], 0x0}, 0x0) syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) (async) r2 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) (async) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) (async) syz_usb_disconnect(r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1000}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000540)={0x2, 0x100, 0x7, {0x9, 0x5, 0x8000, 0x4}}) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @output_terminal={0x9}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x0, "f8431cfd"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x305, 0x0, 0x4}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x0, "fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 518.001618ms ago: executing program 2 (id=3190): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000ffff"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30"], 0x7c}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000080)) syz_clone3(&(0x7f0000000740)={0x8100080, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) 500.415233ms ago: executing program 0 (id=3191): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000400)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0xb5948a, 0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002080)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x5, 0x0, 0x0, {0x804, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x3, 0x8000, 0x7, 0x0, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000004f467ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x64000600) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = accept(r1, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000b6c0)=@newtaction={0x114, 0x30, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{0x100, 0x1, [@m_ipt={0xd0, 0xf, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x80}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x4d, 0x6, "63751654e9b474b1183b75e7617d06046f9500768c9cc003b79d7ea2d7e20b36ded7577cab5a20ede33101e4fb72ee07503ee12cd5b50a06c32883f4674ca662fe36f9e6e5f6a128c7"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ipt={0x2c, 0xb, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x2004c095}, 0x1) recvmsg$can_raw(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/70, 0x46}, {&(0x7f0000000280)=""/204, 0xcc}], 0x2}, 0x40012002) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001800dd8d00000000000000000200000400000006"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r5, @ANYBLOB="0000000000a27f3910b97f3c7269c1de00bb0000000000000000007ba86c585700000000a200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x5c) 338.148527ms ago: executing program 2 (id=3192): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x6}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x10, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) socket$rxrpc(0x21, 0x2, 0x2) 186.944401ms ago: executing program 2 (id=3193): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r2, 0x721}], 0x1, 0x7f73) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = syz_io_uring_setup(0x40e7, &(0x7f00000001c0)={0x0, 0x34c, 0x40, 0x2, 0xbf}, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f00000002c0), 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff00000000", @ANYRES32=r4, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r4], 0x3c}}, 0x0) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xe0f01a, 0x2}) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/29, 0x1d) 154.593951ms ago: executing program 0 (id=3194): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text32={0x20, &(0x7f0000000180)="b8550000000f23d00f21f835100000090f23f80f22c70f3066baf80cb8900f5f86ef66bafc0cb800000000ef0f30c4e3557c86b2dac3da002ef083a20d000000dc66c200482e660f7634440f09", 0x4d}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0 (id=3195): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9f72b44dffb1bc11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f00000000c0)) (async) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000001c0)=0x14, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001e80)=@newlink={0x3c, 0x10, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf}]}}}]}, 0x3c}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=@fuse_with_parent={0x18, 0x82, {{0x2, 0x1ff, 0xa9ea}, {0x5, 0x1000, 0x1}}}, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) (async) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xb, 0xb, 0x5, 0x0, 0xa, 0xffffff67, 0x1}}, {0x6, 0x2, [0x92d3]}}]}]}, 0x88}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000014000580080001"], 0x5c}}, 0x0) kernel console output (not intermixed with test programs): 653.430524][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.453946][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 653.475729][ T25] usb 3-1: config 1 has no interface number 0 [ 653.486502][ T25] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 653.510446][ T25] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 653.557484][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 653.576700][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.585847][ T25] usb 3-1: Product: syz [ 653.590605][ T25] usb 3-1: Manufacturer: syz [ 653.605745][ T25] usb 3-1: SerialNumber: syz [ 653.932895][T13241] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 654.033407][ T974] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 654.141283][T13241] usb 7-1: device descriptor read/64, error -71 [ 654.193030][ T974] usb 1-1: Using ep0 maxpacket: 8 [ 654.200609][ T974] usb 1-1: unable to get BOS descriptor or descriptor too short [ 654.211664][ T974] usb 1-1: config 1 has an invalid descriptor of length 182, skipping remainder of the config [ 654.230344][ T974] usb 1-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 654.258045][ T974] usb 1-1: config 1 interface 0 has no altsetting 0 [ 654.279998][ T974] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 654.294909][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.312607][ T974] usb 1-1: Product: syz [ 654.321495][ T974] usb 1-1: Manufacturer: syz [ 654.333045][ T974] usb 1-1: SerialNumber: syz [ 654.392450][ T7069] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 654.392559][T13241] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 654.470744][ T5880] usbhid 10-1:0.0: can't add hid device: -71 [ 654.487534][ T5880] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 654.516694][ T5880] usb 10-1: USB disconnect, device number 23 [ 654.532875][T13241] usb 7-1: device descriptor read/64, error -71 [ 654.545315][ T7069] usb 6-1: unable to get BOS descriptor or descriptor too short [ 654.566380][ T974] usb 1-1: bad CDC descriptors [ 654.580573][ T7069] usb 6-1: config 129 has an invalid interface number: 135 but max is 0 [ 654.607412][ T974] usb 1-1: USB disconnect, device number 29 [ 654.618453][ T7069] usb 6-1: config 129 has an invalid interface number: 5 but max is 0 [ 654.652769][ T7069] usb 6-1: config 129 descriptor has 1 excess byte, ignoring [ 654.653159][T13241] usb usb7-port1: attempt power cycle [ 654.661178][ T7069] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 654.677590][ T7069] usb 6-1: config 129 has no interface number 0 [ 654.684488][ T7069] usb 6-1: config 129 has no interface number 1 [ 654.690865][ T7069] usb 6-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 654.715607][ T7069] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 654.758352][ T7069] usb 6-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 654.788143][ T7069] usb 6-1: config 129 interface 135 has no altsetting 0 [ 654.796305][ T7069] usb 6-1: config 129 interface 5 has no altsetting 0 [ 654.806455][ T7069] usb 6-1: string descriptor 0 read error: -22 [ 654.813936][ T7069] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 654.824088][ T7069] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.850857][ T7069] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 654.858529][ T7069] usb 6-1: MIDIStreaming interface descriptor not found [ 655.056225][T13241] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 655.059814][ T974] usb 6-1: USB disconnect, device number 59 [ 655.103854][T13241] usb 7-1: device descriptor read/8, error -71 [ 655.372569][T13241] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 655.404416][T13241] usb 7-1: device descriptor read/8, error -71 [ 655.523465][T13241] usb usb7-port1: unable to enumerate USB device [ 655.540225][ T5879] usb 3-1: USB disconnect, device number 34 [ 655.547246][ T5880] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 655.662738][ T7069] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 655.715816][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 655.726975][ T5880] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 655.760532][ T5880] usb 1-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 655.770204][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.793203][ T5880] usb 1-1: Product: syz [ 655.797397][ T5880] usb 1-1: Manufacturer: syz [ 655.807787][ T5880] usb 1-1: SerialNumber: syz [ 655.824366][ T5880] usb 1-1: config 0 descriptor?? [ 655.832653][ T7069] usb 10-1: Using ep0 maxpacket: 32 [ 655.849810][ T7069] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.881048][ T7069] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.886152][T19978] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 655.900269][ T7069] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 655.909866][ T7069] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.927441][ T7069] usb 10-1: config 0 descriptor?? [ 656.043223][ T5880] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 656.126073][ T5880] usb 1-1: USB disconnect, device number 30 [ 656.403734][T18643] udevd[18643]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 656.724094][T20004] netlink: 'syz.0.2856': attribute type 49 has an invalid length. [ 657.025709][ T5880] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 657.143438][ T974] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 657.192912][ T5880] usb 6-1: Using ep0 maxpacket: 16 [ 657.200539][ T5880] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.232018][ T5880] usb 6-1: config 0 interface 0 has no altsetting 0 [ 657.257548][ T5880] usb 6-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 657.279050][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.303643][ T5880] usb 6-1: config 0 descriptor?? [ 657.305995][ T974] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 657.342007][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.365878][ T974] usb 1-1: config 0 descriptor?? [ 657.418303][ T974] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 657.692545][T16301] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 657.719643][ T5880] logitech-djreceiver 0003:046D:C517.003C: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.5-1/input0 [ 657.854677][T16301] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 657.880249][T16301] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 657.913282][T16301] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 657.933746][T16301] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 657.972786][T16301] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 658.004654][T16301] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 658.024958][T16301] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 658.054767][T16301] usb 3-1: Product: syz [ 658.062510][T16301] usb 3-1: Manufacturer: syz [ 658.087455][T16301] cdc_wdm 3-1:1.0: skipping garbage [ 658.096775][T20003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.102509][T16301] cdc_wdm 3-1:1.0: skipping garbage [ 658.119735][T16301] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 658.136275][T16301] cdc_wdm 3-1:1.0: Unknown control protocol [ 658.167107][T20003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.264862][ T7069] usbhid 10-1:0.0: can't add hid device: -71 [ 658.290744][ T7069] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 658.348673][ T7069] usb 10-1: USB disconnect, device number 24 [ 658.534374][T16301] usb 6-1: USB disconnect, device number 60 [ 658.618724][T20014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.632908][T20014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.894160][T13241] usb 3-1: USB disconnect, device number 35 [ 659.097889][T20082] program syz.6.2868 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 659.314717][T20014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.327058][T20014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.343509][T13241] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 659.427752][ T974] usb 1-1: USB disconnect, device number 31 [ 659.535300][T13241] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 659.565585][T13241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.624487][T13241] usb 3-1: config 0 descriptor?? [ 659.643170][T13241] ums-usbat 3-1:0.0: USB Mass Storage device detected [ 659.673975][T13241] ums-usbat 3-1:0.0: Quirks match for vid 0781 pid 0005: 1 [ 659.692582][T13241] ums-usbat 3-1:0.0: This device (0781,0005,0005 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.13.0-rc3-syzkaller) [ 659.692582][T13241] Please send a copy of this message to and [ 659.885668][T20080] loop7: detected capacity change from 0 to 1036 [ 659.993332][T20122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.036052][T20122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.094864][T13241] usb 3-1: USB disconnect, device number 36 [ 660.270675][T20134] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2879'. [ 660.298275][T20136] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2880'. [ 660.398865][T20141] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 660.438043][T20141] netlink: 'syz.0.2881': attribute type 3 has an invalid length. [ 660.474663][T20141] netlink: 9814 bytes leftover after parsing attributes in process `syz.0.2881'. [ 661.214063][ T7069] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 661.374701][ T7069] usb 1-1: config 7 has an invalid interface number: 109 but max is 0 [ 661.399853][ T7069] usb 1-1: config 7 has no interface number 0 [ 661.424481][ T7069] usb 1-1: config 7 interface 109 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 661.465862][ T7069] usb 1-1: config 7 interface 109 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 661.481998][ T7069] usb 1-1: config 7 interface 109 altsetting 4 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 661.493308][ T7069] usb 1-1: config 7 interface 109 altsetting 4 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 661.504583][ T7069] usb 1-1: config 7 interface 109 altsetting 4 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 661.515835][ T7069] usb 1-1: config 7 interface 109 has no altsetting 0 [ 661.652415][ T7069] usb 1-1: New USB device found, idVendor=1965, idProduct=0018, bcdDevice=d9.4d [ 661.652450][ T7069] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.652472][ T7069] usb 1-1: Product: syz [ 661.652488][ T7069] usb 1-1: Manufacturer: syz [ 661.652504][ T7069] usb 1-1: SerialNumber: syz [ 661.698504][T20160] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 661.698682][T20160] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 661.944708][ T7069] usbhid 1-1:7.109: couldn't find an input interrupt endpoint [ 661.958565][ T7069] usb 1-1: USB disconnect, device number 32 [ 662.192960][ T5880] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 662.269940][T20213] loop9: detected capacity change from 0 to 7 [ 662.321624][T20213] Dev loop9: unable to read RDB block 7 [ 662.334219][T20213] loop9: unable to read partition table [ 662.372648][T20213] loop9: partition table beyond EOD, truncated [ 662.395983][T20213] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 662.405637][ T5880] usb 7-1: unable to get BOS descriptor or descriptor too short [ 662.431641][ T5880] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 662.452661][ T5880] usb 7-1: can't read configurations, error -71 [ 663.998766][T20290] sctp: [Deprecated]: syz.9.2916 (pid 20290) Use of struct sctp_assoc_value in delayed_ack socket option. [ 663.998766][T20290] Use struct sctp_sack_info instead [ 664.813388][ T974] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 665.022781][ T974] usb 3-1: Using ep0 maxpacket: 8 [ 665.048924][ T974] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 665.072907][ T974] usb 3-1: can't read configurations, error -61 [ 665.212768][ T5879] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 665.222429][ T974] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 665.393991][ T5879] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 665.403131][ T974] usb 3-1: Using ep0 maxpacket: 8 [ 665.404819][ T5879] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 665.429324][ T974] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 665.442390][ T974] usb 3-1: can't read configurations, error -61 [ 665.463879][ T974] usb usb3-port1: attempt power cycle [ 665.493678][ T5879] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 665.504146][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 665.512176][ T5879] usb 6-1: SerialNumber: syz [ 665.773369][T20370] dvmrp0: entered allmulticast mode [ 665.780641][T20370] dvmrp0: left allmulticast mode [ 665.851458][T20328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.863663][ T974] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 665.874106][T20328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.887983][ T974] usb 3-1: Using ep0 maxpacket: 8 [ 665.898554][ T974] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 665.916952][ T5879] usb 6-1: 0:2 : does not exist [ 665.917565][ T974] usb 3-1: can't read configurations, error -61 [ 665.970389][ T5879] usb 6-1: USB disconnect, device number 61 [ 665.992341][T16301] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 666.035515][T18632] udevd[18632]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 666.064428][ T974] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 666.093085][ T974] usb 3-1: Using ep0 maxpacket: 8 [ 666.101266][ T974] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 666.121688][ T974] usb 3-1: can't read configurations, error -61 [ 666.123206][T20380] FAULT_INJECTION: forcing a failure. [ 666.123206][T20380] name failslab, interval 1, probability 0, space 0, times 0 [ 666.129686][T16301] usb 10-1: device descriptor read/64, error -71 [ 666.148366][T20380] CPU: 0 UID: 0 PID: 20380 Comm: syz.0.2937 Not tainted 6.13.0-rc3-syzkaller #0 [ 666.157423][T20380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 666.167491][T20380] Call Trace: [ 666.170773][T20380] [ 666.173705][T20380] dump_stack_lvl+0x241/0x360 [ 666.178473][T20380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 666.183673][T20380] ? __pfx__printk+0x10/0x10 [ 666.188271][T20380] ? kmem_cache_alloc_noprof+0x48/0x380 [ 666.193821][T20380] ? __pfx___might_resched+0x10/0x10 [ 666.199126][T20380] should_fail_ex+0x3b0/0x4e0 [ 666.203806][T20380] should_failslab+0xac/0x100 [ 666.208483][T20380] ? __kvm_mmu_topup_memory_cache+0x1e3/0x6b0 [ 666.214548][T20380] kmem_cache_alloc_noprof+0x70/0x380 [ 666.219923][T20380] __kvm_mmu_topup_memory_cache+0x1e3/0x6b0 [ 666.225825][T20380] kvm_mmu_load+0x115/0x2820 [ 666.230430][T20380] ? __mutex_unlock_slowpath+0x21e/0x790 [ 666.236084][T20380] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 666.242079][T20380] ? __pfx_kvm_mmu_load+0x10/0x10 [ 666.247110][T20380] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 666.253095][T20380] ? vmx_flush_tlb_guest+0x331/0x5a0 [ 666.258383][T20380] ? vmx_flush_tlb_all+0xc6/0x3b0 [ 666.263407][T20380] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 666.269043][T20380] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 666.275027][T20380] ? kvm_apic_has_interrupt+0x9d4/0xa70 [ 666.280573][T20380] vcpu_run+0x5c40/0x8a90 [ 666.284964][T20380] ? __pfx_vcpu_run+0x10/0x10 [ 666.289643][T20380] ? __local_bh_enable_ip+0x168/0x200 [ 666.295037][T20380] ? lockdep_hardirqs_on+0x99/0x150 [ 666.300240][T20380] ? __pfx_lock_acquire+0x10/0x10 [ 666.305271][T20380] ? fpu_swap_kvm_fpstate+0x82/0x460 [ 666.310559][T20380] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 666.316288][T20380] ? xfd_validate_state+0x6e/0x150 [ 666.321397][T20380] ? rcu_is_watching+0x15/0xb0 [ 666.326168][T20380] ? rcu_is_watching+0x15/0xb0 [ 666.330932][T20380] kvm_arch_vcpu_ioctl_run+0xa76/0x19d0 [ 666.336485][T20380] ? mark_lock+0x9a/0x360 [ 666.340828][T20380] ? kvm_arch_vcpu_ioctl_run+0x1cc/0x19d0 [ 666.346550][T20380] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 666.352548][T20380] ? __pfx_lock_acquire+0x10/0x10 [ 666.357571][T20380] ? kvm_vcpu_ioctl+0xd71/0xea0 [ 666.362424][T20380] ? __pfx_lock_release+0x10/0x10 [ 666.367443][T20380] ? do_raw_write_lock+0x148/0x4f0 [ 666.372554][T20380] ? __pfx_do_raw_write_lock+0x10/0x10 [ 666.378015][T20380] kvm_vcpu_ioctl+0x920/0xea0 [ 666.382708][T20380] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 666.387919][T20380] ? __fget_files+0x2a/0x410 [ 666.392509][T20380] ? __fget_files+0x2a/0x410 [ 666.397097][T20380] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 666.402293][T20380] __se_sys_ioctl+0xf5/0x170 [ 666.406879][T20380] do_syscall_64+0xf3/0x230 [ 666.411381][T20380] ? clear_bhb_loop+0x35/0x90 [ 666.416053][T20380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.421968][T20380] RIP: 0033:0x7f8bcbd85d19 [ 666.426380][T20380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.445984][T20380] RSP: 002b:00007f8bccc78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 666.454399][T20380] RAX: ffffffffffffffda RBX: 00007f8bcbf75fa0 RCX: 00007f8bcbd85d19 [ 666.462364][T20380] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 666.470328][T20380] RBP: 00007f8bccc78090 R08: 0000000000000000 R09: 0000000000000000 [ 666.478376][T20380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 666.486357][T20380] R13: 0000000000000000 R14: 00007f8bcbf75fa0 R15: 00007f8bcc09fa28 [ 666.494335][T20380] [ 666.508629][ T974] usb usb3-port1: unable to enumerate USB device [ 666.750809][T20388] x_tables: duplicate underflow at hook 2 [ 666.763448][T16301] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 666.911951][T16301] usb 10-1: device descriptor read/64, error -71 [ 667.028910][T16301] usb usb10-port1: attempt power cycle [ 667.071662][T19628] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 667.084005][T19628] Bluetooth: hci0: Injecting HCI hardware error event [ 667.093954][ T5829] Bluetooth: hci0: hardware error 0x00 [ 667.234014][T20414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2943'. [ 667.320759][T20419] pim6reg9: entered allmulticast mode [ 667.402635][T16301] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 667.452580][T16301] usb 10-1: device descriptor read/8, error -71 [ 667.683079][T20429] FAULT_INJECTION: forcing a failure. [ 667.683079][T20429] name failslab, interval 1, probability 0, space 0, times 0 [ 667.722672][T16301] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 667.746675][T20429] CPU: 1 UID: 0 PID: 20429 Comm: syz.5.2949 Not tainted 6.13.0-rc3-syzkaller #0 [ 667.755754][T20429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 667.765846][T20429] Call Trace: [ 667.769145][T20429] [ 667.772097][T20429] dump_stack_lvl+0x241/0x360 [ 667.776813][T20429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 667.782044][T20429] ? __pfx__printk+0x10/0x10 [ 667.786666][T20429] ? kmem_cache_alloc_noprof+0x48/0x380 [ 667.792242][T20429] ? __pfx___might_resched+0x10/0x10 [ 667.797645][T20429] should_fail_ex+0x3b0/0x4e0 [ 667.802351][T20429] should_failslab+0xac/0x100 [ 667.807155][T20429] ? __kvm_mmu_topup_memory_cache+0x1e3/0x6b0 [ 667.813256][T20429] kmem_cache_alloc_noprof+0x70/0x380 [ 667.818665][T20429] __kvm_mmu_topup_memory_cache+0x1e3/0x6b0 [ 667.824610][T20429] kvm_mmu_load+0x115/0x2820 [ 667.829213][T20429] ? __mutex_unlock_slowpath+0x21e/0x790 [ 667.834855][T20429] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 667.840844][T20429] ? __pfx_kvm_mmu_load+0x10/0x10 [ 667.845896][T20429] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 667.851891][T20429] ? vmx_flush_tlb_guest+0x331/0x5a0 [ 667.857190][T20429] ? vmx_flush_tlb_all+0xc6/0x3b0 [ 667.862239][T20429] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 667.867906][T20429] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 667.873917][T20429] ? kvm_apic_has_interrupt+0x9d4/0xa70 [ 667.879503][T20429] vcpu_run+0x5c40/0x8a90 [ 667.883925][T20429] ? __pfx_vcpu_run+0x10/0x10 [ 667.888699][T20429] ? __local_bh_enable_ip+0x168/0x200 [ 667.894064][T20429] ? lockdep_hardirqs_on+0x99/0x150 [ 667.899258][T20429] ? __pfx_lock_acquire+0x10/0x10 [ 667.904291][T20429] ? fpu_swap_kvm_fpstate+0x82/0x460 [ 667.909604][T20429] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 667.915352][T20429] ? xfd_validate_state+0x6e/0x150 [ 667.920498][T20429] ? rcu_is_watching+0x15/0xb0 [ 667.925294][T20429] ? rcu_is_watching+0x15/0xb0 [ 667.930091][T20429] kvm_arch_vcpu_ioctl_run+0xa76/0x19d0 [ 667.935658][T20429] ? mark_lock+0x9a/0x360 [ 667.939980][T20429] ? kvm_arch_vcpu_ioctl_run+0x1cc/0x19d0 [ 667.945693][T20429] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 667.951682][T20429] ? __pfx_lock_acquire+0x10/0x10 [ 667.956709][T20429] ? kvm_vcpu_ioctl+0xd71/0xea0 [ 667.961585][T20429] ? __pfx_lock_release+0x10/0x10 [ 667.966631][T20429] ? do_raw_write_lock+0x148/0x4f0 [ 667.971777][T20429] ? __pfx_do_raw_write_lock+0x10/0x10 [ 667.977267][T20429] kvm_vcpu_ioctl+0x920/0xea0 [ 667.981979][T20429] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 667.987223][T20429] ? __fget_files+0x2a/0x410 [ 667.991845][T20429] ? __fget_files+0x2a/0x410 [ 667.996458][T20429] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 668.001667][T20429] __se_sys_ioctl+0xf5/0x170 [ 668.006265][T20429] do_syscall_64+0xf3/0x230 [ 668.010810][T20429] ? clear_bhb_loop+0x35/0x90 [ 668.015498][T20429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.021412][T20429] RIP: 0033:0x7f87b9185d19 [ 668.025852][T20429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.045458][T20429] RSP: 002b:00007f87b9f31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 668.053888][T20429] RAX: ffffffffffffffda RBX: 00007f87b9375fa0 RCX: 00007f87b9185d19 [ 668.061882][T20429] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 668.069881][T20429] RBP: 00007f87b9f31090 R08: 0000000000000000 R09: 0000000000000000 [ 668.077865][T20429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 668.085845][T20429] R13: 0000000000000000 R14: 00007f87b9375fa0 R15: 00007f87b949fa28 [ 668.093852][T20429] [ 668.096886][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.116486][T16301] usb 10-1: device descriptor read/8, error -71 [ 668.233909][T16301] usb usb10-port1: unable to enumerate USB device [ 668.660209][ T5879] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 668.695971][T20476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2961'. [ 668.752579][T20476] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 668.805650][T20476] net veth1_virt_wifi virt_wifi0 (unregistering): left promiscuous mode [ 668.833676][ T5879] usb 7-1: device descriptor read/64, error -71 [ 669.092837][ T5879] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 669.224939][ T5829] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 669.252872][ T5879] usb 7-1: device descriptor read/64, error -71 [ 669.378233][T20497] netlink: 'syz.2.2967': attribute type 2 has an invalid length. [ 669.386482][ T5879] usb usb7-port1: attempt power cycle [ 669.465663][T20497] Tq!7: entered promiscuous mode [ 669.532406][T13241] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 669.699979][T20509] FAULT_INJECTION: forcing a failure. [ 669.699979][T20509] name failslab, interval 1, probability 0, space 0, times 0 [ 669.730702][T13241] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.741073][ T5879] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 669.749423][T13241] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 669.761853][T20509] CPU: 1 UID: 0 PID: 20509 Comm: syz.2.2969 Not tainted 6.13.0-rc3-syzkaller #0 [ 669.770920][T20509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 669.772266][T13241] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.780972][T20509] Call Trace: [ 669.780985][T20509] [ 669.795257][T20509] dump_stack_lvl+0x241/0x360 [ 669.799967][T20509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 669.803841][ T5879] usb 7-1: device descriptor read/8, error -71 [ 669.805175][T20509] ? __pfx__printk+0x10/0x10 [ 669.815918][T20509] ? kmem_cache_alloc_noprof+0x48/0x380 [ 669.821199][T13241] usb 10-1: config 0 descriptor?? [ 669.821477][T20509] ? __pfx___might_resched+0x10/0x10 [ 669.831791][T20509] should_fail_ex+0x3b0/0x4e0 [ 669.835198][T13241] pwc: Askey VC010 type 2 USB webcam detected. [ 669.836484][T20509] should_failslab+0xac/0x100 [ 669.847318][T20509] ? __kvm_mmu_topup_memory_cache+0x1e3/0x6b0 [ 669.853413][T20509] kmem_cache_alloc_noprof+0x70/0x380 [ 669.858821][T20509] __kvm_mmu_topup_memory_cache+0x1e3/0x6b0 [ 669.864750][T20509] kvm_mmu_load+0x115/0x2820 [ 669.869371][T20509] ? __mutex_unlock_slowpath+0x21e/0x790 [ 669.875046][T20509] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 669.881059][T20509] ? __pfx_kvm_mmu_load+0x10/0x10 [ 669.886109][T20509] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 669.892121][T20509] ? vmx_flush_tlb_guest+0x331/0x5a0 [ 669.897435][T20509] ? vmx_flush_tlb_all+0xc6/0x3b0 [ 669.902482][T20509] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 669.908142][T20509] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 669.914155][T20509] ? kvm_apic_has_interrupt+0x9d4/0xa70 [ 669.919739][T20509] vcpu_run+0x5c40/0x8a90 [ 669.924181][T20509] ? __pfx_vcpu_run+0x10/0x10 [ 669.928893][T20509] ? __local_bh_enable_ip+0x168/0x200 [ 669.934294][T20509] ? lockdep_hardirqs_on+0x99/0x150 [ 669.939523][T20509] ? __pfx_lock_acquire+0x10/0x10 [ 669.944572][T20509] ? fpu_swap_kvm_fpstate+0x82/0x460 [ 669.949888][T20509] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 669.955641][T20509] ? xfd_validate_state+0x6e/0x150 [ 669.960778][T20509] ? rcu_is_watching+0x15/0xb0 [ 669.965575][T20509] ? rcu_is_watching+0x15/0xb0 [ 669.970366][T20509] kvm_arch_vcpu_ioctl_run+0xa76/0x19d0 [ 669.975946][T20509] ? mark_lock+0x9a/0x360 [ 669.980302][T20509] ? kvm_arch_vcpu_ioctl_run+0x1cc/0x19d0 [ 669.986051][T20509] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 669.992083][T20509] ? __pfx_lock_acquire+0x10/0x10 [ 669.997131][T20509] ? kvm_vcpu_ioctl+0xd71/0xea0 [ 670.002009][T20509] ? __pfx_lock_release+0x10/0x10 [ 670.007067][T20509] ? do_raw_write_lock+0x148/0x4f0 [ 670.012211][T20509] ? __pfx_do_raw_write_lock+0x10/0x10 [ 670.017708][T20509] kvm_vcpu_ioctl+0x920/0xea0 [ 670.022421][T20509] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 670.027745][T20509] ? __fget_files+0x2a/0x410 [ 670.032369][T20509] ? __fget_files+0x2a/0x410 [ 670.036999][T20509] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 670.042235][T20509] __se_sys_ioctl+0xf5/0x170 [ 670.046855][T20509] do_syscall_64+0xf3/0x230 [ 670.051397][T20509] ? clear_bhb_loop+0x35/0x90 [ 670.056102][T20509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.062021][T20509] RIP: 0033:0x7fe807f85d19 [ 670.066457][T20509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.086086][T20509] RSP: 002b:00007fe808cd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 670.094532][T20509] RAX: ffffffffffffffda RBX: 00007fe808175fa0 RCX: 00007fe807f85d19 [ 670.102535][T20509] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 670.110524][T20509] RBP: 00007fe808cd1090 R08: 0000000000000000 R09: 0000000000000000 [ 670.118517][T20509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 670.126518][T20509] R13: 0000000000000000 R14: 00007fe808175fa0 R15: 00007fe80829fa28 [ 670.134533][T20509] [ 670.137714][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.149631][ T5879] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 670.212338][T16301] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 670.213813][ T5879] usb 7-1: device descriptor read/8, error -71 [ 670.235539][T13241] pwc: recv_control_msg error -32 req 02 val 2b00 [ 670.264879][T13241] pwc: recv_control_msg error -32 req 02 val 2700 [ 670.292467][T13241] pwc: recv_control_msg error -32 req 02 val 2c00 [ 670.299616][T13241] pwc: recv_control_msg error -32 req 04 val 1000 [ 670.325290][T13241] pwc: recv_control_msg error -32 req 04 val 1300 [ 670.362633][T16301] usb 6-1: Using ep0 maxpacket: 8 [ 670.366952][T13241] pwc: recv_control_msg error -32 req 04 val 1400 [ 670.371164][T16301] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 670.375236][ T5879] usb usb7-port1: unable to enumerate USB device [ 670.384049][T16301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.402170][T20492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.410676][T13241] pwc: recv_control_msg error -32 req 02 val 2000 [ 670.423932][T20492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.438797][T16301] usb 6-1: Product: syz [ 670.450303][T13241] pwc: recv_control_msg error -32 req 02 val 2100 [ 670.451336][T16301] usb 6-1: Manufacturer: syz [ 670.472566][T16301] usb 6-1: SerialNumber: syz [ 670.480409][T13241] pwc: recv_control_msg error -32 req 04 val 1500 [ 670.494581][T16301] usb 6-1: config 0 descriptor?? [ 670.503501][T16301] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 670.516483][T13241] pwc: recv_control_msg error -71 req 02 val 2500 [ 670.529557][ T29] audit: type=1326 audit(1734392204.368:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.0.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcbd85d19 code=0x7fc00000 [ 670.562484][T13241] pwc: recv_control_msg error -71 req 02 val 2400 [ 670.575279][T13241] pwc: recv_control_msg error -71 req 02 val 2600 [ 670.582102][T13241] pwc: recv_control_msg error -71 req 02 val 2900 [ 670.613991][T13241] pwc: recv_control_msg error -71 req 02 val 2800 [ 670.626187][T13241] pwc: recv_control_msg error -71 req 04 val 1100 [ 670.633887][T13241] pwc: recv_control_msg error -71 req 04 val 1200 [ 670.641389][T13241] pwc: Registered as video103. [ 670.674520][T13241] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input49 [ 670.715553][T13241] usb 10-1: USB disconnect, device number 29 [ 671.372349][ T25] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 671.531790][T16301] gspca_sonixj: reg_w1 err -71 [ 671.540159][ T25] usb 10-1: Using ep0 maxpacket: 8 [ 671.547610][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.572539][T16301] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 671.580556][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.594127][T20585] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2980'. [ 671.614999][T16301] usb 6-1: USB disconnect, device number 62 [ 671.622080][ T25] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 671.682752][ T25] usb 10-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 671.714948][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.736100][ T25] usb 10-1: config 0 descriptor?? [ 671.840136][T20589] FAULT_INJECTION: forcing a failure. [ 671.840136][T20589] name failslab, interval 1, probability 0, space 0, times 0 [ 671.878348][T20589] CPU: 0 UID: 0 PID: 20589 Comm: syz.6.2981 Not tainted 6.13.0-rc3-syzkaller #0 [ 671.887454][T20589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 671.897538][T20589] Call Trace: [ 671.900833][T20589] [ 671.903780][T20589] dump_stack_lvl+0x241/0x360 [ 671.908484][T20589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 671.913709][T20589] ? __pfx__printk+0x10/0x10 [ 671.918319][T20589] ? kmem_cache_alloc_noprof+0x48/0x380 [ 671.923884][T20589] ? __pfx___might_resched+0x10/0x10 [ 671.929190][T20589] should_fail_ex+0x3b0/0x4e0 [ 671.933888][T20589] should_failslab+0xac/0x100 [ 671.938584][T20589] ? __kvm_mmu_topup_memory_cache+0x1e3/0x6b0 [ 671.944671][T20589] kmem_cache_alloc_noprof+0x70/0x380 [ 671.950138][T20589] __kvm_mmu_topup_memory_cache+0x1e3/0x6b0 [ 671.956039][T20589] kvm_mmu_load+0x115/0x2820 [ 671.960629][T20589] ? __mutex_unlock_slowpath+0x21e/0x790 [ 671.966267][T20589] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 671.972262][T20589] ? __pfx_kvm_mmu_load+0x10/0x10 [ 671.977291][T20589] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 671.983271][T20589] ? vmx_flush_tlb_guest+0x331/0x5a0 [ 671.988558][T20589] ? vmx_flush_tlb_all+0xc6/0x3b0 [ 671.993582][T20589] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 671.999213][T20589] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 672.005216][T20589] ? kvm_apic_has_interrupt+0x9d4/0xa70 [ 672.010767][T20589] vcpu_run+0x5c40/0x8a90 [ 672.015154][T20589] ? __pfx_vcpu_run+0x10/0x10 [ 672.019920][T20589] ? __local_bh_enable_ip+0x168/0x200 [ 672.025302][T20589] ? lockdep_hardirqs_on+0x99/0x150 [ 672.030514][T20589] ? __pfx_lock_acquire+0x10/0x10 [ 672.035534][T20589] ? fpu_swap_kvm_fpstate+0x82/0x460 [ 672.040819][T20589] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 672.046543][T20589] ? xfd_validate_state+0x6e/0x150 [ 672.051655][T20589] ? rcu_is_watching+0x15/0xb0 [ 672.056450][T20589] ? rcu_is_watching+0x15/0xb0 [ 672.061225][T20589] kvm_arch_vcpu_ioctl_run+0xa76/0x19d0 [ 672.066796][T20589] ? mark_lock+0x9a/0x360 [ 672.071147][T20589] ? kvm_arch_vcpu_ioctl_run+0x1cc/0x19d0 [ 672.076881][T20589] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 672.082892][T20589] ? __pfx_lock_acquire+0x10/0x10 [ 672.087918][T20589] ? kvm_vcpu_ioctl+0xd71/0xea0 [ 672.092773][T20589] ? __pfx_lock_release+0x10/0x10 [ 672.097795][T20589] ? do_raw_write_lock+0x148/0x4f0 [ 672.102912][T20589] ? __pfx_do_raw_write_lock+0x10/0x10 [ 672.108374][T20589] kvm_vcpu_ioctl+0x920/0xea0 [ 672.113057][T20589] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 672.118362][T20589] ? __fget_files+0x2a/0x410 [ 672.122954][T20589] ? __fget_files+0x2a/0x410 [ 672.127545][T20589] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 672.132744][T20589] __se_sys_ioctl+0xf5/0x170 [ 672.137345][T20589] do_syscall_64+0xf3/0x230 [ 672.141852][T20589] ? clear_bhb_loop+0x35/0x90 [ 672.146530][T20589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.152424][T20589] RIP: 0033:0x7f22ccb85d19 [ 672.156837][T20589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 672.176444][T20589] RSP: 002b:00007f22cd915038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 672.184879][T20589] RAX: ffffffffffffffda RBX: 00007f22ccd75fa0 RCX: 00007f22ccb85d19 [ 672.192858][T20589] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 672.200833][T20589] RBP: 00007f22cd915090 R08: 0000000000000000 R09: 0000000000000000 [ 672.209066][T20589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 672.217047][T20589] R13: 0000000000000000 R14: 00007f22ccd75fa0 R15: 00007f22cce9fa28 [ 672.225036][T20589] [ 672.486868][ T25] hid-picolcd 0003:04D8:C002.003D: unknown main item tag 0x0 [ 672.522846][ T25] hid-picolcd 0003:04D8:C002.003D: unknown main item tag 0x0 [ 672.582681][ T25] hid-picolcd 0003:04D8:C002.003D: No report with id 0x11 found [ 672.722439][T20562] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2976'. [ 672.877730][T16301] usb 10-1: USB disconnect, device number 30 [ 685.946375][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.953056][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 712.084840][T22509] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2986'. [ 712.219813][T22522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2990'. [ 712.346863][T22525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2987'. [ 712.438278][T22525] ip6gretap2: entered allmulticast mode [ 713.969240][T22558] sctp: [Deprecated]: syz.9.2993 (pid 22558) Use of struct sctp_assoc_value in delayed_ack socket option. [ 713.969240][T22558] Use struct sctp_sack_info instead [ 714.686219][T22574] netlink: 'syz.5.2995': attribute type 10 has an invalid length. [ 714.700519][T22574] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2995'. [ 714.738496][T22574] bridge0: port 3(syz_tun) entered blocking state [ 714.804168][T22574] bridge0: port 3(syz_tun) entered disabled state [ 714.811251][T22574] syz_tun: entered allmulticast mode [ 714.833580][T22574] syz_tun: entered promiscuous mode [ 714.839481][T22574] bridge0: port 3(syz_tun) entered blocking state [ 714.847604][T22574] bridge0: port 3(syz_tun) entered forwarding state [ 715.159113][T22595] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2998'. [ 715.292419][T16301] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 715.305252][T22595] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.314386][T22595] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.355334][T22603] loop9: detected capacity change from 0 to 7 [ 715.401128][T22603] Dev loop9: unable to read RDB block 7 [ 715.422847][T22603] loop9: unable to read partition table [ 715.428667][T22603] loop9: partition table beyond EOD, truncated [ 715.446858][T16301] usb 6-1: Using ep0 maxpacket: 32 [ 715.468755][T16301] usb 6-1: config 0 has an invalid interface number: 3 but max is 0 [ 715.487527][T16301] usb 6-1: config 0 has no interface number 0 [ 715.492622][T22603] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 715.492622][T22603] ) failed (rc=-5) [ 715.512985][T16301] usb 6-1: config 0 interface 3 has no altsetting 0 [ 715.570284][T16301] usb 6-1: New USB device found, idVendor=04e8, idProduct=8001, bcdDevice=34.a4 [ 715.589755][T16301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.647484][T22613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.656546][T16301] usb 6-1: Product: syz [ 715.660751][T16301] usb 6-1: Manufacturer: syz [ 715.673012][T22613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.705201][T16301] usb 6-1: SerialNumber: syz [ 715.724540][T16301] usb 6-1: config 0 descriptor?? [ 715.734571][T22613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.741737][T22558] geneve0: entered promiscuous mode [ 715.769390][T22558] geneve0: entered allmulticast mode [ 715.800521][T22613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.882954][ T5827] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 716.121046][T22632] loop6: detected capacity change from 0 to 524287999 [ 716.122048][ T5827] usb 7-1: Using ep0 maxpacket: 8 [ 716.141389][ T5827] usb 7-1: config 8 has an invalid interface number: 15 but max is 2 [ 716.151797][ T5827] usb 7-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 716.152580][ T5879] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 716.161130][ T5827] usb 7-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 716.183597][ T5827] usb 7-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 716.193239][ T5827] usb 7-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 716.204603][ T5827] usb 7-1: config 8 has an invalid interface number: 6 but max is 2 [ 716.227046][ T5827] usb 7-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 716.237672][ T974] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 716.246707][T22632] Invalid logical block size (5) [ 716.270146][ T5827] usb 7-1: config 8 has no interface number 1 [ 716.276829][ T5827] usb 7-1: config 8 has no interface number 2 [ 716.283389][ T5827] usb 7-1: config 8 interface 15 altsetting 16 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 716.294973][ T5827] usb 7-1: config 8 interface 15 altsetting 16 bulk endpoint 0xC has invalid maxpacket 16 [ 716.337242][ T5879] usb 1-1: Using ep0 maxpacket: 16 [ 716.348761][ T5879] usb 1-1: config 8 has an invalid interface number: 206 but max is 0 [ 716.381591][ T5879] usb 1-1: config 8 has no interface number 0 [ 716.396396][ T5827] usb 7-1: config 8 interface 15 altsetting 16 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 716.410974][ T5879] usb 1-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 716.417255][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.458317][ T5879] usb 1-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 716.465737][ T5827] usb 7-1: config 8 interface 15 altsetting 16 bulk endpoint 0x3 has invalid maxpacket 1024 [ 716.482862][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.504546][ T974] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 716.517853][ T5879] usb 1-1: config 8 interface 206 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 716.517883][ T5879] usb 1-1: config 8 interface 206 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 716.517911][ T5879] usb 1-1: config 8 interface 206 has no altsetting 0 [ 716.520006][ T5879] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 716.540692][ T5827] usb 7-1: config 8 interface 15 altsetting 16 bulk endpoint 0xB has invalid maxpacket 16 [ 716.570728][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.601118][ T5879] usb 1-1: Product: syz [ 716.611820][ T974] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 716.615457][ T5879] usb 1-1: Manufacturer: syz [ 716.627964][ T5827] usb 7-1: config 8 interface 15 altsetting 16 bulk endpoint 0xE has invalid maxpacket 8 [ 716.642358][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.655110][ T5827] usb 7-1: config 8 interface 15 altsetting 16 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 716.680244][ T974] usb 3-1: config 0 descriptor?? [ 716.683614][ T5879] usb 1-1: SerialNumber: syz [ 716.707375][ T5827] usb 7-1: config 8 interface 15 altsetting 16 endpoint 0x84 has invalid maxpacket 26751, setting to 64 [ 716.757615][ T5827] usb 7-1: config 8 interface 15 altsetting 16 has a duplicate endpoint with address 0xA, skipping [ 716.787289][ T5827] usb 7-1: config 8 interface 15 altsetting 16 has a duplicate endpoint with address 0x3, skipping [ 716.804620][ T5827] usb 7-1: config 8 interface 15 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 716.817670][ T5827] usb 7-1: config 8 interface 15 altsetting 16 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 716.840872][ T5827] usb 7-1: config 8 interface 6 altsetting 14 has a duplicate endpoint with address 0x3, skipping [ 716.862169][ T5827] usb 7-1: config 8 interface 6 altsetting 14 has a duplicate endpoint with address 0xF, skipping [ 716.888179][ T5827] usb 7-1: config 8 interface 6 altsetting 14 endpoint 0x7 has an invalid bInterval 221, changing to 7 [ 716.899775][ T5827] usb 7-1: config 8 interface 6 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 716.919412][ T5827] usb 7-1: config 8 interface 6 altsetting 14 has a duplicate endpoint with address 0xF, skipping [ 716.927858][ C0] raw-gadget.4 gadget.0: ignoring, device is not running [ 716.931005][ T5827] usb 7-1: config 8 interface 0 altsetting 64 has a duplicate endpoint with address 0x7, skipping [ 716.938508][ C0] raw-gadget.4 gadget.0: ignoring, device is not running [ 716.948531][ T5827] usb 7-1: config 8 interface 0 altsetting 64 has a duplicate endpoint with address 0x7, skipping [ 716.956158][ C0] raw-gadget.4 gadget.0: ignoring, device is not running [ 716.966716][ T5827] usb 7-1: config 8 interface 0 altsetting 64 has a duplicate endpoint with address 0x2, skipping [ 716.973642][ C0] raw-gadget.4 gadget.0: ignoring, device is not running [ 716.984638][ T5827] usb 7-1: config 8 interface 0 altsetting 64 has a duplicate endpoint with address 0x7, skipping [ 716.992819][ T5879] garmin_gps 1-1:8.206: Garmin GPS usb/tty converter detected [ 717.015631][ T5879] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 717.028045][ T5827] usb 7-1: config 8 interface 0 altsetting 64 has a duplicate endpoint with address 0x4, skipping [ 717.045513][ T5879] usb 1-1: USB disconnect, device number 33 [ 717.060828][ T5879] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 717.065667][ T5827] usb 7-1: config 8 interface 0 altsetting 64 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 717.072383][ T5879] garmin_gps 1-1:8.206: device disconnected [ 717.088075][ T5880] usb 10-1: new full-speed USB device number 31 using dummy_hcd [ 717.127655][ T974] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 717.139085][ T5827] usb 7-1: config 8 interface 0 altsetting 64 has a duplicate endpoint with address 0x8A, skipping [ 717.161950][ T974] plantronics 0003:047F:FFFF.003E: No inputs registered, leaving [ 717.170204][ T5827] usb 7-1: config 8 interface 0 altsetting 64 has a duplicate endpoint with address 0x6, skipping [ 717.183544][ T5827] usb 7-1: config 8 interface 0 altsetting 64 has a duplicate endpoint with address 0xF, skipping [ 717.203253][ T974] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 717.243903][ T5827] usb 7-1: config 8 interface 0 altsetting 64 has a duplicate endpoint with address 0x8, skipping [ 717.282462][ T5827] usb 7-1: config 8 interface 0 altsetting 64 endpoint 0x1 has invalid wMaxPacketSize 0 [ 717.302801][ T5827] usb 7-1: config 8 interface 0 altsetting 64 has a duplicate endpoint with address 0xD, skipping [ 717.345251][ T5827] usb 7-1: config 8 interface 0 altsetting 64 has a duplicate endpoint with address 0x2, skipping [ 717.356213][ T5827] usb 7-1: config 8 interface 0 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 717.367508][ T5827] usb 7-1: config 8 interface 0 altsetting 64 has a duplicate endpoint with address 0x7, skipping [ 717.378553][ T5827] usb 7-1: config 8 interface 0 altsetting 64 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 717.410272][ T5827] usb 7-1: config 8 interface 15 has no altsetting 0 [ 717.438446][ T5827] usb 7-1: config 8 interface 6 has no altsetting 0 [ 717.452174][ T5827] usb 7-1: config 8 interface 0 has no altsetting 0 [ 717.468470][ T5827] usb 7-1: New USB device found, idVendor=0499, idProduct=1004, bcdDevice=16.3c [ 717.474914][T22629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3003'. [ 717.478170][ T5827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.507322][ T5827] usb 7-1: Product: ࠖ [ 717.511664][ T5827] usb 7-1: Manufacturer: ࠠ [ 717.517045][ T5827] usb 7-1: SerialNumber: 솄ឲ螁⍼ÿ邎읜牱잘﷠썈▅寮ྀᝀ屢芵ῡ䈑讦 [ 717.572734][T22612] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 717.580146][T22612] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 717.587803][ T974] usb 3-1: USB disconnect, device number 41 [ 717.607366][T22612] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 717.616141][T22612] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 717.747760][T16301] usb 6-1: active config #0 != 1 ?? [ 717.867997][T16301] usb 6-1: USB disconnect, device number 63 [ 717.887639][ T5827] usb 7-1: USB disconnect, device number 26 [ 718.892423][ T5827] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 719.053270][ T5827] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 719.103370][ T5827] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.123962][ T5827] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 719.172654][ T5827] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.202626][ T5827] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 719.228198][ T5827] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.256913][ T5827] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 719.287887][ T5827] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.314565][ T5827] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 719.344050][ T5827] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.394972][ T5827] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 719.519359][ T5827] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.530031][ T5827] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 719.564443][ T5827] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.574810][ T5827] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 719.652591][ T5827] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.663159][ T5827] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 719.713935][ T5827] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 719.750771][ T5827] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 719.772364][ T5827] usb 6-1: Product: syz [ 719.776570][ T5827] usb 6-1: Manufacturer: syz [ 719.781183][ T5827] usb 6-1: SerialNumber: syz [ 719.853770][ T5827] usb 6-1: config 0 descriptor?? [ 719.902773][T22713] netlink: 'syz.6.3017': attribute type 1 has an invalid length. [ 719.910788][T22713] netlink: 'syz.6.3017': attribute type 2 has an invalid length. [ 720.009116][T22722] kvm: Disabled LAPIC found during irq injection [ 720.539174][ T5879] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 720.893197][T22691] @: renamed from bridge_slave_0 (while UP) [ 720.905172][ T5879] usb 3-1: unable to get BOS descriptor or descriptor too short [ 720.915461][ T5879] usb 3-1: config 0 has an invalid descriptor of length 235, skipping remainder of the config [ 720.926015][ T5879] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 9 [ 720.945732][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 65332, setting to 1024 [ 720.982000][ T5879] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 721.007428][ T974] usb 6-1: USB disconnect, device number 64 [ 721.011062][ T5879] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 721.024254][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.059028][ T5879] usb 3-1: Product: syz [ 721.070371][ T5879] usb 3-1: Manufacturer: syz [ 721.085964][ T5879] usb 3-1: SerialNumber: syz [ 721.092574][ T5880] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 721.122125][ T5879] usb 3-1: config 0 descriptor?? [ 721.143128][T22722] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 721.150547][T22722] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 721.161888][ T5879] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 721.251458][ T5880] usb 1-1: unable to get BOS descriptor or descriptor too short [ 721.264284][ T5880] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 721.282305][ T5880] usb 1-1: can't read configurations, error -71 [ 721.366374][ T5879] usb 3-1: USB disconnect, device number 42 [ 722.050139][T22805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3031'. [ 722.091206][T22805] netlink: 'syz.0.3031': attribute type 2 has an invalid length. [ 722.115153][T22805] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 722.812959][ T5879] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 722.941548][ T5880] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 722.962859][ T5879] usb 3-1: device descriptor read/64, error -71 [ 723.135035][ T5880] usb 10-1: New USB device found, idVendor=0b57, idProduct=d863, bcdDevice=2e.bb [ 723.152565][ T5880] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.192458][ T5880] usb 10-1: config 0 descriptor?? [ 723.203758][ T5879] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 723.230952][ T5880] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 723.312686][T13241] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 723.372555][ T5879] usb 3-1: device descriptor read/64, error -71 [ 723.404781][T22831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.428251][T22831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.448195][ T974] usb 10-1: USB disconnect, device number 32 [ 723.483274][ T5879] usb usb3-port1: attempt power cycle [ 723.496881][T13241] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 723.517976][T13241] usb 6-1: can't read configurations, error -61 [ 723.672661][T13241] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 723.848145][T13241] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 723.855958][ T5879] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 723.869289][T13241] usb 6-1: can't read configurations, error -61 [ 723.883852][ T5879] usb 3-1: device descriptor read/8, error -71 [ 723.894173][T13241] usb usb6-port1: attempt power cycle [ 724.132339][ T5879] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 724.164109][ T5879] usb 3-1: device descriptor read/8, error -71 [ 724.253532][T13241] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 724.283851][ T5879] usb usb3-port1: unable to enumerate USB device [ 724.294040][T13241] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 724.301638][T13241] usb 6-1: can't read configurations, error -61 [ 724.313418][ T5881] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 724.462534][T13241] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 724.493429][T13239] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 724.505122][ T5881] usb 10-1: config 0 has an invalid interface number: 44 but max is 0 [ 724.515039][T13241] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 724.532403][ T5881] usb 10-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 724.552652][T13241] usb 6-1: can't read configurations, error -61 [ 724.569725][T13241] usb usb6-port1: unable to enumerate USB device [ 724.576705][ T5881] usb 10-1: config 0 has no interface number 0 [ 724.583896][ T5881] usb 10-1: config 0 interface 44 has no altsetting 0 [ 724.593689][ T5881] usb 10-1: New USB device found, idVendor=12d1, idProduct=140d, bcdDevice= 0.00 [ 724.608734][ T5881] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.624073][ T5881] usb 10-1: Product: syz [ 724.628515][ T5881] usb 10-1: Manufacturer: syz [ 724.638670][ T5881] usb 10-1: SerialNumber: syz [ 724.652066][ T5881] usb 10-1: config 0 descriptor?? [ 724.669473][ T5881] usb-storage 10-1:0.44: USB Mass Storage device detected [ 724.704709][T13239] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 724.715334][T13239] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 724.728532][T13239] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 724.738273][T13239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.751509][T13239] usb 1-1: Product: syz [ 724.756050][T13239] usb 1-1: Manufacturer: syz [ 724.761018][T13239] usb 1-1: SerialNumber: syz [ 724.893676][T22864] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3042'. [ 724.989117][T22868] veth0_to_hsr: entered promiscuous mode [ 725.170147][T22868] hsr_slave_0 (unregistering): left promiscuous mode [ 725.252324][T13239] usb 1-1: 0:2 : does not exist [ 725.273172][T13239] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 725.329146][T13239] usb 1-1: USB disconnect, device number 36 [ 725.533747][T22585] udevd[22585]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 726.173392][T22915] trusted_key: syz.5.3049 sent an empty control message without MSG_MORE. [ 726.632914][ T5879] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 726.678704][T22935] FAULT_INJECTION: forcing a failure. [ 726.678704][T22935] name failslab, interval 1, probability 0, space 0, times 0 [ 726.766540][T22935] CPU: 1 UID: 0 PID: 22935 Comm: syz.5.3053 Not tainted 6.13.0-rc3-syzkaller #0 [ 726.775635][T22935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 726.785733][T22935] Call Trace: [ 726.789037][T22935] [ 726.791988][T22935] dump_stack_lvl+0x241/0x360 [ 726.796699][T22935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 726.801926][T22935] ? __pfx__printk+0x10/0x10 [ 726.806550][T22935] ? kmem_cache_alloc_noprof+0x48/0x380 [ 726.812125][T22935] ? __pfx___might_resched+0x10/0x10 [ 726.817438][T22935] should_fail_ex+0x3b0/0x4e0 [ 726.822140][T22935] should_failslab+0xac/0x100 [ 726.826417][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 726.826821][T22935] ? __kvm_mmu_topup_memory_cache+0x1e3/0x6b0 [ 726.837914][T22935] kmem_cache_alloc_noprof+0x70/0x380 [ 726.843318][T22935] __kvm_mmu_topup_memory_cache+0x1e3/0x6b0 [ 726.847747][ T5879] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 726.849225][T22935] kvm_mmu_load+0x115/0x2820 [ 726.862855][T22935] ? __mutex_unlock_slowpath+0x21e/0x790 [ 726.865931][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.868499][T22935] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 726.882472][T22935] ? __pfx_kvm_mmu_load+0x10/0x10 [ 726.887512][T22935] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 726.891100][ T5879] usb 3-1: Product: syz [ 726.893500][T22935] ? vmx_flush_tlb_guest+0x331/0x5a0 [ 726.893531][T22935] ? vmx_flush_tlb_all+0xc6/0x3b0 [ 726.893562][T22935] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 726.898177][ T5879] usb 3-1: Manufacturer: syz [ 726.902961][T22935] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 726.902993][T22935] ? kvm_apic_has_interrupt+0x9d4/0xa70 [ 726.903023][T22935] vcpu_run+0x5c40/0x8a90 [ 726.903123][T22935] ? __pfx_vcpu_run+0x10/0x10 [ 726.908721][ T5879] usb 3-1: SerialNumber: syz [ 726.913677][T22935] ? __local_bh_enable_ip+0x168/0x200 [ 726.913713][T22935] ? lockdep_hardirqs_on+0x99/0x150 [ 726.913742][T22935] ? __pfx_lock_acquire+0x10/0x10 [ 726.928602][ T5881] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 726.929811][T22935] ? fpu_swap_kvm_fpstate+0x82/0x460 [ 726.929842][T22935] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 726.975217][ T5879] usb 3-1: config 0 descriptor?? [ 726.977406][T22935] ? xfd_validate_state+0x6e/0x150 [ 726.987553][T22935] ? rcu_is_watching+0x15/0xb0 [ 726.992353][T22935] ? rcu_is_watching+0x15/0xb0 [ 726.993290][ T5879] gspca_main: se401-2.14.0 probing 047d:5003 [ 726.997129][T22935] kvm_arch_vcpu_ioctl_run+0xa76/0x19d0 [ 726.997169][T22935] ? mark_lock+0x9a/0x360 [ 726.997197][T22935] ? kvm_arch_vcpu_ioctl_run+0x1cc/0x19d0 [ 727.018792][T22935] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 727.024810][T22935] ? __pfx_lock_acquire+0x10/0x10 [ 727.029859][T22935] ? kvm_vcpu_ioctl+0xd71/0xea0 [ 727.034734][T22935] ? __pfx_lock_release+0x10/0x10 [ 727.039779][T22935] ? do_raw_write_lock+0x148/0x4f0 [ 727.044912][T22935] ? __pfx_do_raw_write_lock+0x10/0x10 [ 727.050387][T22935] kvm_vcpu_ioctl+0x920/0xea0 [ 727.055078][T22935] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 727.060301][T22935] ? __fget_files+0x2a/0x410 [ 727.064910][T22935] ? __fget_files+0x2a/0x410 [ 727.069533][T22935] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 727.074754][T22935] __se_sys_ioctl+0xf5/0x170 [ 727.079375][T22935] do_syscall_64+0xf3/0x230 [ 727.083912][T22935] ? clear_bhb_loop+0x35/0x90 [ 727.088614][T22935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.094541][T22935] RIP: 0033:0x7f87b9185d19 [ 727.098977][T22935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 727.118601][T22935] RSP: 002b:00007f87b9f31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 727.127043][T22935] RAX: ffffffffffffffda RBX: 00007f87b9375fa0 RCX: 00007f87b9185d19 [ 727.135036][T22935] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 727.139163][ T5880] usb 10-1: USB disconnect, device number 33 [ 727.143009][T22935] RBP: 00007f87b9f31090 R08: 0000000000000000 R09: 0000000000000000 [ 727.143028][T22935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 727.143041][T22935] R13: 0000000000000000 R14: 00007f87b9375fa0 R15: 00007f87b949fa28 [ 727.143071][T22935] [ 727.211328][ T5881] usb 7-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 727.241688][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.264214][ T5881] usb 7-1: config 0 descriptor?? [ 727.281829][ T5881] pwc: Philips SPC 900NC USB webcam detected. [ 727.423999][ T5879] gspca_se401: Bayer format not supported! [ 727.489189][T22950] program syz.5.3057 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 727.620786][ T5881] pwc: Failed to set LED on/off time (-71) [ 727.641662][ T5881] pwc: send_video_command error -71 [ 727.647370][ T5881] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 727.656336][ T5881] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 727.673908][ T5881] usb 7-1: USB disconnect, device number 27 [ 727.840043][T16301] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 727.992907][T16301] usb 10-1: Using ep0 maxpacket: 16 [ 727.993483][ T5879] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 728.008814][T16301] usb 10-1: config 0 interface 0 has no altsetting 0 [ 728.039386][T16301] usb 10-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 728.072749][T16301] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.092910][T16301] usb 10-1: config 0 descriptor?? [ 728.154376][ T5879] usb 6-1: Using ep0 maxpacket: 32 [ 728.174240][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 728.204494][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 728.255843][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 728.304608][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 728.313296][T22955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.327363][ T5879] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 728.347935][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.348288][T22955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.362244][ T5879] usb 6-1: Product: syz [ 728.378097][ T5879] usb 6-1: Manufacturer: syz [ 728.389839][ T5879] usb 6-1: SerialNumber: syz [ 728.411953][T16301] hid (null): bogus close delimiter [ 728.415699][ T5879] usb 6-1: config 0 descriptor?? [ 728.433454][T16301] hid (null): invalid report_size 812540268 [ 728.447007][ T5879] usb 6-1: no audio or video endpoints found [ 728.476267][T16301] input: HID 0458:5013 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5013.003F/input/input50 [ 728.532548][T13239] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 728.569078][T16301] input: HID 0458:5013 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5013.003F/input/input51 [ 728.643394][T22959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.664142][T16301] kye 0003:0458:5013.003F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.9-1/input0 [ 728.683945][T22959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.705126][T13239] usb 1-1: Using ep0 maxpacket: 32 [ 728.710069][ T5827] usb 6-1: USB disconnect, device number 69 [ 728.716084][T13239] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.735979][T13239] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.760660][T16301] usb 10-1: USB disconnect, device number 34 [ 728.762914][T22996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 728.779942][T13239] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 728.818403][T13239] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.841311][T13239] usb 1-1: config 0 descriptor?? [ 728.857871][T13239] hub 1-1:0.0: USB hub found [ 729.053280][T13239] hub 1-1:0.0: 1 port detected [ 729.254522][T13239] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 729.267006][T13239] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 729.304595][T13239] usbhid 1-1:0.0: can't add hid device: -71 [ 729.316231][T13239] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 729.345322][ T8] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 729.418232][T13239] usb 1-1: USB disconnect, device number 37 [ 729.474628][ T5880] usb 3-1: USB disconnect, device number 47 [ 729.523080][T23019] bond1: entered promiscuous mode [ 729.528156][T23019] bond1: entered allmulticast mode [ 729.561256][T23019] 8021q: adding VLAN 0 to HW filter on device bond1 [ 729.600497][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 729.639321][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 161, changing to 11 [ 729.659872][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1857, setting to 1024 [ 729.672835][ T974] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 729.684719][T23019] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3066'. [ 729.687162][T23024] FAULT_INJECTION: forcing a failure. [ 729.687162][T23024] name failslab, interval 1, probability 0, space 0, times 0 [ 729.694275][ T8] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 729.712777][T23024] CPU: 1 UID: 0 PID: 23024 Comm: syz.2.3067 Not tainted 6.13.0-rc3-syzkaller #0 [ 729.728644][T23024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 729.733857][T23019] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3066'. [ 729.738698][T23024] Call Trace: [ 729.738712][T23024] [ 729.738722][T23024] dump_stack_lvl+0x241/0x360 [ 729.738757][T23024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 729.738783][T23024] ? __pfx__printk+0x10/0x10 [ 729.738809][T23024] ? kmem_cache_alloc_noprof+0x48/0x380 [ 729.753087][ T8] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 729.753916][T23024] ? __pfx___might_resched+0x10/0x10 [ 729.753948][T23024] should_fail_ex+0x3b0/0x4e0 [ 729.758721][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.763795][T23024] should_failslab+0xac/0x100 [ 729.763829][T23024] ? __kvm_mmu_topup_memory_cache+0x1e3/0x6b0 [ 729.763854][T23024] kmem_cache_alloc_noprof+0x70/0x380 [ 729.763884][T23024] __kvm_mmu_topup_memory_cache+0x1e3/0x6b0 [ 729.763920][T23024] kvm_mmu_load+0x115/0x2820 [ 729.763946][T23024] ? __mutex_unlock_slowpath+0x21e/0x790 [ 729.763980][T23024] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 729.764018][T23024] ? __pfx_kvm_mmu_load+0x10/0x10 [ 729.764041][T23024] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 729.764072][T23024] ? vmx_flush_tlb_guest+0x331/0x5a0 [ 729.764100][T23024] ? vmx_flush_tlb_all+0xc6/0x3b0 [ 729.764126][T23024] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 729.764155][T23024] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 729.764182][T23024] ? kvm_apic_has_interrupt+0x9d4/0xa70 [ 729.764211][T23024] vcpu_run+0x5c40/0x8a90 [ 729.764301][T23024] ? __pfx_vcpu_run+0x10/0x10 [ 729.764325][T23024] ? __local_bh_enable_ip+0x168/0x200 [ 729.764347][T23024] ? lockdep_hardirqs_on+0x99/0x150 [ 729.764371][T23024] ? __pfx_lock_acquire+0x10/0x10 [ 729.764388][T23024] ? fpu_swap_kvm_fpstate+0x82/0x460 [ 729.764409][T23024] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 729.764432][T23024] ? xfd_validate_state+0x6e/0x150 [ 729.764451][T23024] ? rcu_is_watching+0x15/0xb0 [ 729.764478][T23024] ? rcu_is_watching+0x15/0xb0 [ 729.764500][T23024] kvm_arch_vcpu_ioctl_run+0xa76/0x19d0 [ 729.764526][T23024] ? mark_lock+0x9a/0x360 [ 729.764549][T23024] ? kvm_arch_vcpu_ioctl_run+0x1cc/0x19d0 [ 729.764570][T23024] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 729.764611][T23024] ? __pfx_lock_acquire+0x10/0x10 [ 729.764630][T23024] ? kvm_vcpu_ioctl+0xd71/0xea0 [ 729.764651][T23024] ? __pfx_lock_release+0x10/0x10 [ 729.764669][T23024] ? do_raw_write_lock+0x148/0x4f0 [ 729.764690][T23024] ? __pfx_do_raw_write_lock+0x10/0x10 [ 729.764714][T23024] kvm_vcpu_ioctl+0x920/0xea0 [ 729.764740][T23024] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 729.764778][T23024] ? __fget_files+0x2a/0x410 [ 729.764803][T23024] ? __fget_files+0x2a/0x410 [ 729.764828][T23024] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 729.764850][T23024] __se_sys_ioctl+0xf5/0x170 [ 729.764870][T23024] do_syscall_64+0xf3/0x230 [ 729.764893][T23024] ? clear_bhb_loop+0x35/0x90 [ 729.764913][T23024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.764936][T23024] RIP: 0033:0x7fe807f85d19 [ 729.764954][T23024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 729.764969][T23024] RSP: 002b:00007fe808cd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 729.764998][T23024] RAX: ffffffffffffffda RBX: 00007fe808175fa0 RCX: 00007fe807f85d19 [ 729.765012][T23024] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 729.765026][T23024] RBP: 00007fe808cd1090 R08: 0000000000000000 R09: 0000000000000000 [ 729.765038][T23024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 729.765050][T23024] R13: 0000000000000000 R14: 00007fe808175fa0 R15: 00007fe80829fa28 [ 729.765076][T23024] [ 729.765197][ C1] vkms_vblank_simulate: vblank timer overrun [ 729.842653][ T974] usb 10-1: Using ep0 maxpacket: 8 [ 730.011295][ T8] usb 7-1: config 0 descriptor?? [ 730.079628][ T974] usb 10-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 730.141255][ T974] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.149657][ T974] usb 10-1: Product: syz [ 730.154058][ T974] usb 10-1: Manufacturer: syz [ 730.158762][ T974] usb 10-1: SerialNumber: syz [ 730.171579][ T974] usb 10-1: config 0 descriptor?? [ 730.226473][ T974] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 730.337090][T23005] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 730.352339][ T8] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input52 [ 730.458113][T23045] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3071'. [ 730.621968][ T8] usb 7-1: USB disconnect, device number 28 [ 730.622056][ C1] pxrc 7-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 730.783926][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 731.259725][T16299] usb 10-1: USB disconnect, device number 35 [ 731.592479][T13241] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 731.774094][T13241] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.802293][T13241] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.848514][T13241] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 731.912586][T13241] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 731.921678][T13241] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.938372][T23097] netdevsim netdevsim0: Direct firmware load for /timer failed with error -2 [ 731.982370][T23097] netdevsim netdevsim0: Falling back to sysfs fallback for: /timer [ 731.987260][T13241] usb 7-1: config 0 descriptor?? [ 732.305049][T23107] FAULT_INJECTION: forcing a failure. [ 732.305049][T23107] name failslab, interval 1, probability 0, space 0, times 0 [ 732.343377][T23107] CPU: 0 UID: 0 PID: 23107 Comm: syz.2.3081 Not tainted 6.13.0-rc3-syzkaller #0 [ 732.352453][T23107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 732.362531][T23107] Call Trace: [ 732.365841][T23107] [ 732.368798][T23107] dump_stack_lvl+0x241/0x360 [ 732.373511][T23107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 732.378739][T23107] ? __pfx__printk+0x10/0x10 [ 732.383386][T23107] ? kmem_cache_alloc_noprof+0x48/0x380 [ 732.388959][T23107] ? __pfx___might_resched+0x10/0x10 [ 732.394270][T23107] should_fail_ex+0x3b0/0x4e0 [ 732.398975][T23107] should_failslab+0xac/0x100 [ 732.403678][T23107] ? __kvm_mmu_topup_memory_cache+0x1e3/0x6b0 [ 732.409777][T23107] kmem_cache_alloc_noprof+0x70/0x380 [ 732.415179][T23107] __kvm_mmu_topup_memory_cache+0x1e3/0x6b0 [ 732.421111][T23107] kvm_mmu_load+0x115/0x2820 [ 732.425729][T23107] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 732.432094][T23107] ? irqentry_exit+0x63/0x90 [ 732.436720][T23107] ? __pfx_kvm_mmu_load+0x10/0x10 [ 732.441776][T23107] ? kvm_vcpu_flush_tlb_guest+0x62/0x220 [ 732.447447][T23107] ? __pfx___sanitizer_cov_trace_const_cmp4+0x10/0x10 [ 732.454239][T23107] ? vmx_flush_tlb_guest+0x331/0x5a0 [ 732.459556][T23107] ? vmx_flush_tlb_all+0xc6/0x3b0 [ 732.464607][T23107] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 732.470270][T23107] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 732.476282][T23107] ? kvm_apic_has_interrupt+0x9d4/0xa70 [ 732.481860][T23107] vcpu_run+0x5c40/0x8a90 [ 732.486307][T23107] ? __pfx_vcpu_run+0x10/0x10 [ 732.491015][T23107] ? __local_bh_enable_ip+0x168/0x200 [ 732.496420][T23107] ? lockdep_hardirqs_on+0x99/0x150 [ 732.501638][T23107] ? __pfx_lock_acquire+0x10/0x10 [ 732.506682][T23107] ? fpu_swap_kvm_fpstate+0x82/0x460 [ 732.511995][T23107] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 732.517743][T23107] ? xfd_validate_state+0x6e/0x150 [ 732.522886][T23107] ? rcu_is_watching+0x15/0xb0 [ 732.527688][T23107] ? rcu_is_watching+0x15/0xb0 [ 732.532481][T23107] kvm_arch_vcpu_ioctl_run+0xa76/0x19d0 [ 732.538062][T23107] ? mark_lock+0x9a/0x360 [ 732.542422][T23107] ? kvm_arch_vcpu_ioctl_run+0x1cc/0x19d0 [ 732.548171][T23107] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 732.554898][T23107] ? __pfx_lock_acquire+0x10/0x10 [ 732.559952][T23107] ? kvm_vcpu_ioctl+0xd71/0xea0 [ 732.564834][T23107] ? __pfx_lock_release+0x10/0x10 [ 732.569880][T23107] ? do_raw_write_lock+0x148/0x4f0 [ 732.575036][T23107] ? __pfx_do_raw_write_lock+0x10/0x10 [ 732.580522][T23107] kvm_vcpu_ioctl+0x920/0xea0 [ 732.585229][T23107] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 732.590475][T23107] ? __fget_files+0x2a/0x410 [ 732.595090][T23107] ? __fget_files+0x2a/0x410 [ 732.599713][T23107] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 732.604948][T23107] __se_sys_ioctl+0xf5/0x170 [ 732.609562][T23107] do_syscall_64+0xf3/0x230 [ 732.614090][T23107] ? clear_bhb_loop+0x35/0x90 [ 732.618812][T23107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.624729][T23107] RIP: 0033:0x7fe807f85d19 [ 732.629170][T23107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.648803][T23107] RSP: 002b:00007fe808cd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 732.657257][T23107] RAX: ffffffffffffffda RBX: 00007fe808175fa0 RCX: 00007fe807f85d19 [ 732.665257][T23107] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 732.673256][T23107] RBP: 00007fe808cd1090 R08: 0000000000000000 R09: 0000000000000000 [ 732.681252][T23107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 732.689244][T23107] R13: 0000000000000000 R14: 00007fe808175fa0 R15: 00007fe80829fa28 [ 732.697251][T23107] [ 732.735105][T13241] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 732.746018][T13241] plantronics 0003:047F:FFFF.0040: No inputs registered, leaving [ 732.760256][T13241] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 732.930098][T23085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.944417][T23085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.971681][T23085] fuse: Bad value for 'fd' [ 733.192480][ T5878] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 733.368685][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.417775][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.449798][ T5878] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 733.538804][ T5878] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 733.578984][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.618347][ T5878] usb 1-1: config 0 descriptor?? [ 733.792632][T13241] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 733.949966][T13241] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 733.973137][T13241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.992724][T13241] usb 3-1: Product: syz [ 733.998305][T13241] usb 3-1: Manufacturer: syz [ 734.010384][T13241] usb 3-1: SerialNumber: syz [ 734.022471][T13241] usb 3-1: config 0 descriptor?? [ 734.042146][T13241] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 734.057320][ T5878] plantronics 0003:047F:FFFF.0041: No inputs registered, leaving [ 734.092733][ T5878] plantronics 0003:047F:FFFF.0041: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 734.167070][T23134] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 734.175076][T23134] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 734.216554][T23134] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 734.226053][T23134] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 734.267316][T23134] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 734.286973][T23134] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 734.454301][T23136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.475482][T23136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.550249][T23134] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 734.567203][T23134] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 734.690761][T13241] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 734.721461][T13241] sq905c 3-1:0.0: probe with driver sq905c failed with error -71 [ 734.751423][T13241] usb 3-1: USB disconnect, device number 48 [ 734.863305][ T5881] usb 7-1: USB disconnect, device number 29 [ 735.033530][T23165] No such timeout policy "syz0" [ 735.342484][T13241] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 735.522743][T13241] usb 7-1: Using ep0 maxpacket: 8 [ 735.540273][T13241] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 735.565395][T13241] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 735.586001][T13241] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.601368][T13241] usb 7-1: Product: syz [ 735.605797][T13241] usb 7-1: Manufacturer: syz [ 735.610445][T13241] usb 7-1: SerialNumber: syz [ 735.626353][T13241] usb 7-1: config 0 descriptor?? [ 735.635167][T13241] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 735.934509][ T5878] usb 1-1: USB disconnect, device number 38 [ 736.158746][T13241] gspca_zc3xx: reg_w_i err -110 [ 736.430930][T23214] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 736.452606][ T8] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 736.616313][ T5878] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 736.644336][ T8] usb 3-1: not running at top speed; connect to a high speed hub [ 736.659517][ T8] usb 3-1: config 129 has an invalid interface number: 218 but max is 3 [ 736.668419][ T8] usb 3-1: config 129 has an invalid interface number: 102 but max is 3 [ 736.677291][ T8] usb 3-1: config 129 contains an unexpected descriptor of type 0x2, skipping [ 736.686739][ T8] usb 3-1: config 129 has an invalid interface number: 132 but max is 3 [ 736.695748][ T8] usb 3-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 736.706989][ T8] usb 3-1: config 129 has no interface number 0 [ 736.714183][ T8] usb 3-1: config 129 has no interface number 1 [ 736.721101][ T8] usb 3-1: config 129 has no interface number 3 [ 736.728736][ T8] usb 3-1: config 129 interface 218 altsetting 6 endpoint 0xC has invalid maxpacket 293, setting to 64 [ 736.752235][ T8] usb 3-1: config 129 interface 218 altsetting 6 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 736.775628][ T8] usb 3-1: config 129 interface 218 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 736.783801][ T5878] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.786987][T13241] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 736.812318][ T5878] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 736.817957][T13241] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 736.821372][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.841805][ T8] usb 3-1: config 129 interface 218 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 736.853353][ T5878] usb 1-1: config 0 descriptor?? [ 736.854822][ T8] usb 3-1: config 129 interface 218 altsetting 6 has 4 endpoint descriptors, different from the interface descriptor's value: 14 [ 736.867340][ T5878] pwc: Askey VC010 type 2 USB webcam detected. [ 736.874229][T13241] usb 7-1: USB disconnect, device number 30 [ 736.892651][ T8] usb 3-1: config 129 interface 102 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 736.909573][ T8] usb 3-1: config 129 interface 102 altsetting 3 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 736.948893][ T8] usb 3-1: config 129 interface 102 altsetting 3 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 736.977554][ T8] usb 3-1: config 129 interface 132 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 736.991691][ T8] usb 3-1: too many endpoints for config 129 interface 2 altsetting 4: 39, using maximum allowed: 30 [ 737.007093][ T8] usb 3-1: config 129 interface 2 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 39 [ 737.020460][ T8] usb 3-1: config 129 interface 218 has no altsetting 0 [ 737.027825][ T8] usb 3-1: config 129 interface 102 has no altsetting 0 [ 737.035204][ T8] usb 3-1: config 129 interface 132 has no altsetting 0 [ 737.042170][ T8] usb 3-1: config 129 interface 2 has no altsetting 0 [ 737.051468][ T8] usb 3-1: Dual-Role OTG device on HNP port [ 737.059491][ T8] usb 3-1: New USB device found, idVendor=13d3, idProduct=3202, bcdDevice=95.c9 [ 737.065135][ T5878] pwc: send_video_command error -71 [ 737.069611][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.081328][ T5878] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 737.083455][ T8] usb 3-1: Product: Њ [ 737.094989][ T8] usb 3-1: Manufacturer: Џ [ 737.099516][ T8] usb 3-1: SerialNumber: ꌹ㕈硞╌₹╽腷疒훚Ừ⊇深㊧刱借ڃ [ 737.102476][ T5878] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 737.113893][T23206] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 737.137339][ T5878] usb 1-1: USB disconnect, device number 39 [ 737.292542][T13241] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 737.462926][T13241] usb 7-1: Using ep0 maxpacket: 32 [ 737.469759][T13241] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.483806][T13241] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.494334][T13241] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 737.509336][T13241] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 737.518947][T13241] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 737.527793][T13241] usb 7-1: Product: syz [ 737.532076][T13241] usb 7-1: Manufacturer: syz [ 737.538646][T13241] usb 7-1: SerialNumber: syz [ 737.551743][T13241] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input54 [ 737.572447][ T5878] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 737.744337][ T5878] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.772924][ T5878] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 737.782044][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.794195][ T5878] usb 1-1: config 0 descriptor?? [ 737.801813][T16301] usb 7-1: USB disconnect, device number 31 [ 737.817140][ T5878] pwc: Askey VC010 type 2 USB webcam detected. [ 737.833187][T16301] appletouch 7-1:1.0: input: appletouch disconnected [ 738.216016][ T5878] pwc: recv_control_msg error -32 req 02 val 2b00 [ 738.223617][ T5878] pwc: recv_control_msg error -32 req 02 val 2700 [ 738.232042][ T5878] pwc: recv_control_msg error -32 req 02 val 2c00 [ 738.246329][ T5878] pwc: recv_control_msg error -32 req 04 val 1000 [ 738.264607][ T5878] pwc: recv_control_msg error -32 req 04 val 1300 [ 738.276026][ T5878] pwc: recv_control_msg error -32 req 04 val 1400 [ 738.290950][ T5878] pwc: recv_control_msg error -32 req 02 val 2000 [ 738.308412][ T5878] pwc: recv_control_msg error -32 req 02 val 2100 [ 738.331364][ T5878] pwc: recv_control_msg error -32 req 04 val 1500 [ 738.544538][T23212] loop2: detected capacity change from 0 to 7 [ 738.551974][T23212] Dev loop2: unable to read RDB block 7 [ 738.557889][T23212] loop2: unable to read partition table [ 738.564047][T23212] loop2: partition table beyond EOD, truncated [ 738.570395][T23212] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 738.581414][ T5878] pwc: recv_control_msg error -71 req 02 val 2400 [ 738.594959][ T5878] pwc: recv_control_msg error -71 req 02 val 2600 [ 738.601846][ T5878] pwc: recv_control_msg error -71 req 02 val 2900 [ 738.620845][ T5878] pwc: recv_control_msg error -71 req 02 val 2800 [ 738.647587][ T5878] pwc: recv_control_msg error -71 req 04 val 1100 [ 738.663557][ T5878] pwc: recv_control_msg error -71 req 04 val 1200 [ 738.677365][ T5878] pwc: Registered as video103. [ 738.680238][ T5879] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 738.683791][ T5878] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input55 [ 738.713179][ T5878] usb 1-1: USB disconnect, device number 40 [ 738.877916][ T5879] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 738.888130][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.911009][ T5879] usb 7-1: config 0 descriptor?? [ 739.298508][ T8] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 739.331842][ T5879] pegasus 7-1:0.0: probe with driver pegasus failed with error -71 [ 739.347347][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 739.365452][ T5879] usb 7-1: USB disconnect, device number 32 [ 739.404842][ T8] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 739.422067][ T8] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 739.434695][ T8] usb 3-1: media controller created [ 739.441088][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 739.458462][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 739.470416][ T8] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 739.494373][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input56 [ 739.516288][ T8] dvb-usb: schedule remote query interval to 150 msecs. [ 739.524167][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 739.575158][ T8] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 739.592332][T16301] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 739.643268][ T8] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 739.655322][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 739.686696][T13239] dvb-usb: bulk message failed: -22 (1/0) [ 739.696125][T13239] dvb-usb: error while querying for an remote control event. [ 739.731463][ T8] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 739.750838][ T8] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 739.762726][ T8] usb 3-1: media controller created [ 739.765566][T16301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 182, changing to 11 [ 739.768899][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 739.792393][T16301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 739.802838][T16301] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 739.811901][T16301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.827623][T16301] usb 1-1: config 0 descriptor?? [ 739.846925][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 739.853672][ T8] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 739.869100][T13239] dvb-usb: bulk message failed: -22 (1/0) [ 739.875389][T13239] dvb-usb: error while querying for an remote control event. [ 739.887853][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input57 [ 739.906071][ T8] dvb-usb: schedule remote query interval to 150 msecs. [ 739.913732][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 739.932413][ T8] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 740.021742][ T8] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 740.044003][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 740.052531][ T5879] dvb-usb: bulk message failed: -22 (1/0) [ 740.058312][ T5879] dvb-usb: error while querying for an remote control event. [ 740.071078][T23266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.080028][ T5879] dvb-usb: bulk message failed: -22 (1/0) [ 740.090936][ T8] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 740.100285][ T5879] dvb-usb: error while querying for an remote control event. [ 740.102762][T23266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.109440][ T8] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 740.127361][ T8] usb 3-1: media controller created [ 740.134558][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 740.147892][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 740.154116][ T8] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 740.171599][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input58 [ 740.187670][ T8] dvb-usb: schedule remote query interval to 150 msecs. [ 740.195546][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 740.212723][ T8] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 740.225228][ T5879] dvb-usb: bulk message failed: -22 (1/0) [ 740.230987][ T5879] dvb-usb: error while querying for an remote control event. [ 740.243876][ T8] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 740.255533][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 740.262615][ T5879] dvb-usb: bulk message failed: -22 (1/0) [ 740.268569][ T5879] dvb-usb: error while querying for an remote control event. [ 740.287148][ T8] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 740.307966][ T8] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 740.329806][ T8] usb 3-1: media controller created [ 740.336904][T23266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.343274][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 740.355629][ T5879] dvb-usb: bulk message failed: -22 (1/0) [ 740.358783][T23266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.361382][ T5879] dvb-usb: error while querying for an remote control event. [ 740.391543][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 740.397523][T13241] dvb-usb: bulk message failed: -22 (1/0) [ 740.406552][T13241] dvb-usb: error while querying for an remote control event. [ 740.428379][ T8] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 740.450450][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input59 [ 740.462429][T13241] dvb-usb: bulk message failed: -22 (1/0) [ 740.468195][T13241] dvb-usb: error while querying for an remote control event. [ 740.478933][ T8] dvb-usb: schedule remote query interval to 150 msecs. [ 740.485815][T16301] usbhid 1-1:0.0: can't add hid device: -71 [ 740.487655][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 740.509791][T16301] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 740.522838][ T8] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 740.538607][ T8] usb 3-1: USB disconnect, device number 49 [ 740.546893][T16301] usb 1-1: USB disconnect, device number 41 [ 740.582450][T13241] dvb-usb: bulk message failed: -22 (1/0) [ 740.593803][T13241] dvb-usb: error while querying for an remote control event. [ 740.648896][ T5879] dvb-usb: bulk message failed: -22 (1/0) [ 740.654995][ T5879] dvb-usb: error while querying for an remote control event. [ 740.662498][ T5879] dvb-usb: bulk message failed: -22 (1/0) [ 740.668247][ T5879] dvb-usb: error while querying for an remote control event. [ 740.764458][ T8] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 740.775038][T13241] dvb-usb: bulk message failed: -22 (1/0) [ 740.780795][T13241] dvb-usb: error while querying for an remote control event. [ 740.830491][ T8] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 740.843244][T13241] dvb-usb: bulk message failed: -22 (1/0) [ 740.849042][T13241] dvb-usb: error while querying for an remote control event. [ 740.903091][ T8] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 740.953303][ T8] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 741.172318][T16301] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 741.282687][ T8] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 741.304930][T23307] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3114'. [ 741.327142][T16301] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 741.351245][T16301] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 741.372779][T16301] usb 7-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 741.382004][T16301] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.403356][T16301] usb 7-1: config 0 descriptor?? [ 741.452508][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 741.463323][ T8] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 741.482587][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 741.504733][ T8] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 741.530444][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.17 [ 741.540001][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.560025][ T8] usb 3-1: Product: syz [ 741.570135][ T8] usb 3-1: Manufacturer: syz [ 741.580269][ T8] usb 3-1: SerialNumber: syz [ 741.824328][T16301] monterey 0003:0566:3004.0042: unknown main item tag 0x6 [ 741.852480][T16301] monterey 0003:0566:3004.0042: report_id 29495 is invalid [ 741.853260][T23281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.859716][T16301] monterey 0003:0566:3004.0042: item 0 2 1 8 parsing failed [ 741.879279][T23281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.902041][T13241] usb 3-1: USB disconnect, device number 50 [ 741.944783][T16301] monterey 0003:0566:3004.0042: probe with driver monterey failed with error -22 [ 742.482651][T23332] netlink: 'syz.2.3117': attribute type 7 has an invalid length. [ 742.512708][ T8] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 742.570262][T23337] [U]  [ 742.574193][T23337] [U] K{ [ 742.577481][T23337] [U] T 1ŠFFˊ`GJǘGO/MC [ 742.586120][T23337] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 742.602146][T23337] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 742.614220][T23337] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 742.651797][T23337] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 742.676440][T23337] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 742.688446][T23337] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 742.701121][T23337] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 742.757891][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.805598][T23337] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 742.822063][T23337] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 742.837470][T23337] [U] 22Ʃ۩X?0;3U [ 742.837989][ T8] usb 1-1: Product: syz [ 742.842886][T23337] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 742.857379][ T8] usb 1-1: Manufacturer: syz [ 742.876117][ T8] usb 1-1: SerialNumber: syz [ 742.882752][T23337] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 742.883578][ T8] usb 1-1: config 0 descriptor?? [ 742.900785][ T8] gspca_main: se401-2.14.0 probing 047d:5003 [ 742.909654][T23337] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 742.937979][T23337] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 742.949998][T23337] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 742.974350][T23337] [U] EC [ 742.977951][T23337] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 743.008291][T23336] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 743.173521][ T5827] usb 7-1: USB disconnect, device number 33 [ 743.304365][ T8] gspca_se401: Frame size: 0x0 1/16th janggu [ 743.310440][ T8] gspca_se401: Frame size: 0x0 1/16th janggu [ 743.332287][ T8] gspca_se401: Frame size: 0x0 1/16th janggu [ 743.338463][ T8] gspca_se401: Frame size: 17x0 bayer [ 743.348598][ T8] gspca_se401: Frame size: 0x0 1/16th janggu [ 743.362237][ T8] gspca_se401: Frame size: 0x0 1/16th janggu [ 743.368254][ T8] gspca_se401: Frame size: 0x0 1/16th janggu [ 743.378804][ T8] gspca_se401: Frame size: 0x0 1/16th janggu [ 743.508021][ T8] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input60 [ 743.602805][ T8] usb 1-1: USB disconnect, device number 42 [ 744.083762][T23360] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3121'. [ 744.132589][T13239] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 744.276155][T13239] usb 7-1: device descriptor read/64, error -71 [ 744.532553][T13239] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 744.638023][T23365] ALSA: mixer_oss: invalid OSS volume 'j& ' [ 744.663410][T13239] usb 7-1: device descriptor read/64, error -71 [ 744.773604][T13239] usb usb7-port1: attempt power cycle [ 745.124427][T13239] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 745.162657][T13239] usb 7-1: device descriptor read/8, error -71 [ 745.424604][T13239] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 745.457512][T13239] usb 7-1: device descriptor read/8, error -71 [ 745.502432][ T5878] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 745.572965][T13239] usb usb7-port1: unable to enumerate USB device [ 745.632338][ T5878] usb 3-1: device descriptor read/64, error -71 [ 745.882382][ T5878] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 746.023211][ T5878] usb 3-1: device descriptor read/64, error -71 [ 746.153300][ T5878] usb usb3-port1: attempt power cycle [ 746.312326][ T5827] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 746.484373][ T5827] usb 1-1: Using ep0 maxpacket: 16 [ 746.495697][ T5827] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 746.503987][ T5878] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 746.521960][ T5827] usb 1-1: config 0 has no interface number 0 [ 746.542368][ T5827] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 746.553619][ T5878] usb 3-1: device descriptor read/8, error -71 [ 746.564842][ T5827] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 746.583703][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 746.602369][ T5827] usb 1-1: Product: syz [ 746.606578][ T5827] usb 1-1: SerialNumber: syz [ 746.619825][ T5827] usb 1-1: config 0 descriptor?? [ 746.792514][ T5878] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 746.813020][ T5878] usb 3-1: device descriptor read/8, error -71 [ 746.829905][ T5827] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 746.850247][ T5827] snd-usb-audio 1-1:0.2: probe with driver snd-usb-audio failed with error -2 [ 746.861160][ T5827] usb 1-1: USB disconnect, device number 43 [ 746.922662][ T5878] usb usb3-port1: unable to enumerate USB device [ 747.033475][T22653] udevd[22653]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 747.396813][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.403296][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.601384][T10427] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.681667][T10427] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.816790][T10427] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.872420][ T8] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 747.899720][T10427] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.045934][ T8] usb 1-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 748.071449][T10427] bridge_slave_1: left allmulticast mode [ 748.077862][T10427] bridge_slave_1: left promiscuous mode [ 748.081319][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.093348][T10427] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.112447][ T8] usb 1-1: Product: syz [ 748.116650][ T8] usb 1-1: Manufacturer: syz [ 748.121268][ T8] usb 1-1: SerialNumber: syz [ 748.127729][T10427] bridge_slave_0: left allmulticast mode [ 748.145069][ T8] usb 1-1: config 0 descriptor?? [ 748.155720][T10427] bridge_slave_0: left promiscuous mode [ 748.161476][T10427] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.462429][ T5827] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 748.612922][ T5827] usb 7-1: device descriptor read/64, error -71 [ 748.722369][T16301] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 748.872339][ T5827] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 748.902698][T16301] usb 3-1: Using ep0 maxpacket: 16 [ 748.916744][T16301] usb 3-1: unable to get BOS descriptor or descriptor too short [ 748.938354][T16301] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 748.973794][T16301] usb 3-1: can't read configurations, error -71 [ 749.032319][ T5827] usb 7-1: device descriptor read/64, error -71 [ 749.094940][T23544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.107886][T23544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.160207][ T5827] usb usb7-port1: attempt power cycle [ 749.540075][ T5827] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 749.596172][ T5827] usb 7-1: device descriptor read/8, error -71 [ 749.679751][T10427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 749.708003][T10427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.734033][T10427] bond0 (unregistering): Released all slaves [ 749.851772][ T5827] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 749.872905][ T5827] usb 7-1: device descriptor read/8, error -71 [ 750.005864][ T5827] usb usb7-port1: unable to enumerate USB device [ 750.633804][ T5881] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 750.812824][ T5881] usb 3-1: device descriptor read/64, error -71 [ 751.062737][ T5881] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 751.202414][ T8] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 751.232478][ T5881] usb 3-1: device descriptor read/64, error -71 [ 751.239005][ T8] asix 1-1:0.0: probe with driver asix failed with error -71 [ 751.267382][ T8] usb 1-1: USB disconnect, device number 44 [ 751.329539][T23587] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3142'. [ 751.363713][ T5881] usb usb3-port1: attempt power cycle [ 751.712373][ T5881] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 751.733662][ T5827] usb 7-1: new low-speed USB device number 42 using dummy_hcd [ 751.754880][ T5881] usb 3-1: device descriptor read/8, error -71 [ 751.905169][ T5827] usb 7-1: config 0 has no interfaces? [ 751.925433][ T5827] usb 7-1: string descriptor 0 read error: -22 [ 751.931710][ T5827] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 751.972299][ T5827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.003345][ T5827] usb 7-1: config 0 descriptor?? [ 752.022626][ T5881] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 752.063446][ T5881] usb 3-1: device descriptor read/8, error -71 [ 752.192815][ T5881] usb usb3-port1: unable to enumerate USB device [ 752.265900][ T5881] usb 7-1: USB disconnect, device number 42 [ 753.122355][T16301] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 753.273837][T16301] usb 7-1: device descriptor read/64, error -71 [ 753.474737][T23657] sctp: [Deprecated]: syz.2.3147 (pid 23657) Use of struct sctp_assoc_value in delayed_ack socket option. [ 753.474737][T23657] Use struct sctp_sack_info instead [ 753.512358][T16301] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 753.663007][T16301] usb 7-1: device descriptor read/64, error -71 [ 753.797248][T16301] usb usb7-port1: attempt power cycle [ 753.902395][ T25] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 754.062619][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 754.073629][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 754.092873][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 754.110513][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 754.141218][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 754.153233][T16301] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 754.171296][ T25] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 754.191709][T16301] usb 7-1: device descriptor read/8, error -71 [ 754.198093][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.234929][ T25] hub 3-1:1.0: bad descriptor, ignoring hub [ 754.252649][ T25] hub 3-1:1.0: probe with driver hub failed with error -5 [ 754.260261][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 754.276549][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 754.297889][ T25] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 754.318705][ T25] cdc_wdm 3-1:1.0: Unknown control protocol [ 754.433832][T16301] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 754.482869][T16301] usb 7-1: device descriptor read/8, error -71 [ 754.603999][T16301] usb usb7-port1: unable to enumerate USB device [ 754.682965][ T5878] usb 3-1: USB disconnect, device number 61 [ 754.763323][ T29] audit: type=1400 audit(1734392288.608:2796): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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starting estimator thread 0... [ 754.932307][ T25] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 754.998715][T23702] IPVS: using max 24 ests per chain, 57600 per kthread [ 755.039004][T23710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3153'. [ 755.048437][T23710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3153'. [ 755.085417][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 755.091174][T23710] team0: entered promiscuous mode [ 755.096913][T23710] team_slave_0: entered promiscuous mode [ 755.104059][T23710] team_slave_1: entered promiscuous mode [ 755.113413][T23710] team0: left promiscuous mode [ 755.118284][T23710] team_slave_0: left promiscuous mode [ 755.124069][T23710] team_slave_1: left promiscuous mode [ 755.130593][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 755.144181][ T25] usb 1-1: New USB device found, idVendor=05ac, idProduct=abdf, bcdDevice=3d.49 [ 755.153895][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.162509][ T25] usb 1-1: Product: syz [ 755.166973][ T25] usb 1-1: Manufacturer: syz [ 755.171594][ T25] usb 1-1: SerialNumber: syz [ 755.179076][ T25] usb 1-1: config 0 descriptor?? [ 755.186331][ T25] ipheth 1-1:0.0: Unable to find endpoints [ 755.389158][ T5878] usb 1-1: USB disconnect, device number 45 [ 756.752877][ T5878] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 756.913851][ T5878] usb 7-1: Using ep0 maxpacket: 16 [ 756.921203][ T5878] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 756.945003][ T5878] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 756.962276][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.973677][ T5878] usb 7-1: Product: syz [ 756.992803][ T5878] usb 7-1: Manufacturer: syz [ 756.997441][ T5878] usb 7-1: SerialNumber: syz [ 757.012718][ T25] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 757.030083][ T5878] usb 7-1: bad CDC descriptors [ 757.169321][ T25] usb 3-1: device descriptor read/64, error -71 [ 757.264548][ T5881] usb 7-1: USB disconnect, device number 47 [ 757.344937][T23800] netlink: 'syz.0.3164': attribute type 4 has an invalid length. [ 757.353341][T23800] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3164'. [ 757.413246][ T25] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 757.430197][T23805] IPVS: length: 110 != 8 [ 757.564555][ T25] usb 3-1: device descriptor read/64, error -71 [ 757.673287][ T25] usb usb3-port1: attempt power cycle [ 757.803259][T23810] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3166'. [ 757.836216][T23810] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 758.222341][ T25] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 758.242993][ T25] usb 3-1: device descriptor read/8, error -71 [ 758.297834][T23822] binder: 23821:23822 unknown command 0 [ 758.308766][T23822] binder: 23821:23822 ioctl c0306201 20000500 returned -22 [ 758.483474][ T25] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 758.555384][ T25] usb 3-1: device descriptor read/8, error -71 [ 758.664584][ T25] usb usb3-port1: unable to enumerate USB device [ 758.724247][T23828] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3170'. [ 758.955255][T23836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.964749][T23836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.982849][ T8] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 759.132398][ T8] usb 1-1: device descriptor read/64, error -71 [ 759.393267][ T8] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 759.443638][ T974] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 759.532383][ T8] usb 1-1: device descriptor read/64, error -71 [ 759.595346][ T974] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 759.605638][ T974] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 759.615499][ T974] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 759.631979][ T974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 759.640168][ T974] usb 7-1: SerialNumber: syz [ 759.652708][ T8] usb usb1-port1: attempt power cycle [ 759.865513][ T974] usb 7-1: 0:2 : does not exist [ 759.870477][ T974] usb 7-1: unit 5: unexpected type 0x09 [ 759.912603][ T974] usb 7-1: USB disconnect, device number 48 [ 760.002823][ T8] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 760.048830][ T8] usb 1-1: device descriptor read/8, error -71 [ 760.093913][T22653] udevd[22653]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 760.312562][ T8] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 760.333015][ T8] usb 1-1: device descriptor read/8, error -71 [ 760.443069][ T8] usb usb1-port1: unable to enumerate USB device [ 760.502798][ T5879] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 760.540493][T23866] bridge_slave_0: left allmulticast mode [ 760.546630][T23866] bridge_slave_0: left promiscuous mode [ 760.553601][T23866] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.569599][T23866] bridge_slave_1: left allmulticast mode [ 760.575816][T23866] bridge_slave_1: left promiscuous mode [ 760.581520][T23866] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.598601][T23866] bond0: (slave bond_slave_0): Releasing backup interface [ 760.609114][T23866] bond0: (slave bond_slave_1): Releasing backup interface [ 760.638429][T23866] team0: Port device team_slave_0 removed [ 760.651361][T23866] team0: Port device team_slave_1 removed [ 760.658742][T23866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 760.666678][T23866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 760.677208][T23866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 760.685900][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.697670][T23866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 760.705570][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.715636][ T5879] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 760.725174][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.735490][ T5879] usb 3-1: config 0 descriptor?? [ 761.222405][T13241] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 761.348139][T23860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.360246][T23860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.371546][ T5879] usbhid 3-1:0.0: can't add hid device: -71 [ 761.381989][T13241] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 761.392096][ T5879] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 761.399948][T13241] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.412940][ T5879] usb 3-1: USB disconnect, device number 66 [ 761.423298][T13241] usb 7-1: config 0 descriptor?? [ 761.431297][T13241] cp210x 7-1:0.0: cp210x converter detected [ 761.631955][T13241] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 761.642850][T13241] usb 7-1: cp210x converter now attached to ttyUSB0 [ 761.852591][T23874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.862938][T23874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.873718][T23876] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 761.888860][T23876] netlink: 22 bytes leftover after parsing attributes in process `syz.0.3184'. [ 761.954334][T13241] usb 7-1: USB disconnect, device number 49 [ 761.969191][T13241] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 761.970493][T13241] cp210x 7-1:0.0: device disconnected [ 762.441232][T23897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3190'. [ 762.622355][T13241] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 762.735386][T23907] ip6gre1: entered allmulticast mode [ 762.805150][T13241] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58786, setting to 1024 [ 762.817936][T13241] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 762.827525][T13241] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.851841][T13241] usb 7-1: config 0 descriptor?? [ 762.858090][T23895] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 763.291206][T13241] holtek_kbd 0003:04D9:A055.0043: hidraw0: USB HID v0.00 Device [HID 04d9:a055] on usb-dummy_hcd.6-1/input0 [ 763.489214][T23895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.501629][T23916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.510387][T23895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.512918][T23916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.728759][ T5879] usb 7-1: USB disconnect, device number 50 [ 764.042508][ T5879] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 764.202571][ T5879] usb 7-1: Using ep0 maxpacket: 16 [ 764.210544][ T5879] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 764.221974][ T5879] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 764.231666][ T5879] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 764.243077][ T5879] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 764.256043][ T5879] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 764.265653][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.273921][ T5879] usb 7-1: Product: syz [ 764.278107][ T5879] usb 7-1: Manufacturer: syz [ 764.282835][ T5879] usb 7-1: SerialNumber: syz [ 765.046769][ T5879] usb 7-1: USB disconnect, device number 51 [ 765.246911][T22653] udevd[22653]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 808.824629][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.830997][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.279405][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.286060][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 895.866920][ T30] INFO: task kworker/u8:11:10427 blocked for more than 143 seconds. [ 895.879386][ T30] Not tainted 6.13.0-rc3-syzkaller #0 [ 895.890694][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 895.902420][ T30] task:kworker/u8:11 state:D stack:20272 pid:10427 tgid:10427 ppid:2 flags:0x00004000 [ 895.912935][ T30] Workqueue: netns cleanup_net [ 895.917742][ T30] Call Trace: [ 895.921014][ T30] [ 895.924167][ T30] __schedule+0x1850/0x4c30 [ 895.928724][ T30] ? __pfx___schedule+0x10/0x10 [ 895.933783][ T30] ? __pfx_lock_release+0x10/0x10 [ 895.938841][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 895.945922][ T30] ? kthread_data+0x52/0xd0 [ 895.950451][ T30] ? schedule+0x90/0x320 [ 895.954797][ T30] ? wq_worker_sleeping+0x66/0x240 [ 895.959925][ T30] ? schedule+0x90/0x320 [ 895.964373][ T30] schedule+0x14b/0x320 [ 895.968574][ T30] schedule_preempt_disabled+0x13/0x30 [ 895.975154][ T30] __mutex_lock+0x7e7/0xee0 [ 895.979711][ T30] ? __mutex_lock+0x5ef/0xee0 [ 895.984532][ T30] ? rfkill_unregister+0xd0/0x230 [ 895.989577][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 895.994690][ T30] ? __pfx_device_del+0x10/0x10 [ 895.999572][ T30] rfkill_unregister+0xd0/0x230 [ 896.004819][ T30] wiphy_unregister+0x22a/0xb00 [ 896.009686][ T30] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 896.015742][ T30] ? __pfx_wiphy_unregister+0x10/0x10 [ 896.021131][ T30] ? ieee80211_unregister_hw+0x144/0x2c0 [ 896.027606][ T30] ? kfree+0x196/0x430 [ 896.031699][ T30] ? ieee80211_unregister_hw+0x144/0x2c0 [ 896.037804][ T30] ieee80211_unregister_hw+0x1e2/0x2c0 [ 896.043566][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 896.049158][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 896.056006][ T30] hwsim_exit_net+0x5c1/0x670 [ 896.060724][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 896.066322][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 896.072228][ T30] cleanup_net+0x802/0xd50 [ 896.076833][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 896.081808][ T30] ? process_scheduled_works+0x976/0x1840 [ 896.087754][ T30] process_scheduled_works+0xa66/0x1840 [ 896.093796][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 896.099798][ T30] ? assign_work+0x364/0x3d0 [ 896.104524][ T30] worker_thread+0x870/0xd30 [ 896.109157][ T30] ? __kthread_parkme+0x169/0x1d0 [ 896.114330][ T30] ? __pfx_worker_thread+0x10/0x10 [ 896.119437][ T30] kthread+0x2f0/0x390 [ 896.123893][ T30] ? __pfx_worker_thread+0x10/0x10 [ 896.129032][ T30] ? __pfx_kthread+0x10/0x10 [ 896.133804][ T30] ret_from_fork+0x4b/0x80 [ 896.138241][ T30] ? __pfx_kthread+0x10/0x10 [ 896.142974][ T30] ret_from_fork_asm+0x1a/0x30 [ 896.147765][ T30] [ 896.150791][ T30] INFO: task kworker/1:5:16299 blocked for more than 143 seconds. [ 896.159278][ T30] Not tainted 6.13.0-rc3-syzkaller #0 [ 896.165347][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 896.174203][ T30] task:kworker/1:5 state:D stack:19952 pid:16299 tgid:16299 ppid:2 flags:0x00004000 [ 896.184824][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 896.191538][ T30] Call Trace: [ 896.194965][ T30] [ 896.197919][ T30] __schedule+0x1850/0x4c30 [ 896.202560][ T30] ? schedule+0x90/0x320 [ 896.206839][ T30] ? __pfx___schedule+0x10/0x10 [ 896.211708][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 896.218048][ T30] ? __pfx_lock_release+0x10/0x10 [ 896.223165][ T30] ? kick_pool+0x1bd/0x620 [ 896.227604][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 896.233130][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 896.238370][ T30] ? schedule+0x90/0x320 [ 896.243013][ T30] schedule+0x14b/0x320 [ 896.247190][ T30] schedule_preempt_disabled+0x13/0x30 [ 896.252798][ T30] __mutex_lock+0x7e7/0xee0 [ 896.257326][ T30] ? __mutex_lock+0x5ef/0xee0 [ 896.261997][ T30] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 896.271997][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 896.279160][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 896.285491][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 896.291845][ T30] ? process_scheduled_works+0x976/0x1840 [ 896.297778][ T30] rfkill_global_led_trigger_worker+0x27/0xd0 [ 896.304193][ T30] process_scheduled_works+0xa66/0x1840 [ 896.309764][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 896.315850][ T30] ? assign_work+0x364/0x3d0 [ 896.320456][ T30] worker_thread+0x870/0xd30 [ 896.325326][ T30] ? __kthread_parkme+0x169/0x1d0 [ 896.330382][ T30] ? __pfx_worker_thread+0x10/0x10 [ 896.335917][ T30] kthread+0x2f0/0x390 [ 896.340006][ T30] ? __pfx_worker_thread+0x10/0x10 [ 896.345553][ T30] ? __pfx_kthread+0x10/0x10 [ 896.350235][ T30] ret_from_fork+0x4b/0x80 [ 896.354794][ T30] ? __pfx_kthread+0x10/0x10 [ 896.359403][ T30] ret_from_fork_asm+0x1a/0x30 [ 896.364505][ T30] [ 896.367620][ T30] INFO: task syz.5.3072:23050 blocked for more than 143 seconds. [ 896.375510][ T30] Not tainted 6.13.0-rc3-syzkaller #0 [ 896.381409][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 896.390190][ T30] task:syz.5.3072 state:D stack:23840 pid:23050 tgid:23050 ppid:19469 flags:0x00004004 [ 896.400710][ T30] Call Trace: [ 896.404329][ T30] [ 896.407285][ T30] __schedule+0x1850/0x4c30 [ 896.411800][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 896.418312][ T30] ? __pfx___schedule+0x10/0x10 [ 896.423576][ T30] ? __pfx_lock_release+0x10/0x10 [ 896.428633][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 896.434667][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 896.441017][ T30] ? schedule+0x90/0x320 [ 896.445324][ T30] schedule+0x14b/0x320 [ 896.449469][ T30] schedule_preempt_disabled+0x13/0x30 [ 896.455444][ T30] __mutex_lock+0x7e7/0xee0 [ 896.459984][ T30] ? __mutex_lock+0x5ef/0xee0 [ 896.464917][ T30] ? rfkill_unregister+0xd0/0x230 [ 896.469961][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 896.475240][ T30] ? __pfx_device_del+0x10/0x10 [ 896.480196][ T30] rfkill_unregister+0xd0/0x230 [ 896.485156][ T30] nfc_unregister_device+0x96/0x2a0 [ 896.490363][ T30] virtual_ncidev_close+0x56/0x90 [ 896.495593][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 896.501362][ T30] __fput+0x23c/0xa50 [ 896.505570][ T30] task_work_run+0x24f/0x310 [ 896.510282][ T30] ? _raw_spin_unlock+0x28/0x50 [ 896.515335][ T30] ? __pfx_task_work_run+0x10/0x10 [ 896.520469][ T30] ? syscall_exit_to_user_mode+0xa3/0x340 [ 896.526286][ T30] syscall_exit_to_user_mode+0x13f/0x340 [ 896.531934][ T30] do_syscall_64+0x100/0x230 [ 896.536703][ T30] ? clear_bhb_loop+0x35/0x90 [ 896.541407][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.547426][ T30] RIP: 0033:0x7f87b9185d19 [ 896.551849][ T30] RSP: 002b:00007f87b949fb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 896.560388][ T30] RAX: 0000000000000000 RBX: 00007f87b9377ba0 RCX: 00007f87b9185d19 [ 896.568463][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 896.576549][ T30] RBP: 00007f87b9377ba0 R08: 000000000001e91c R09: 00007f87b949fe7f [ 896.585008][ T30] R10: 00007f87b9377ac0 R11: 0000000000000246 R12: 00000000000b29b2 [ 896.594164][ T30] R13: 00007f87b9376320 R14: 0000000000000032 R15: ffffffffffffffff [ 896.602328][ T30] [ 896.605421][ T30] INFO: task syz.9.3087:23134 blocked for more than 144 seconds. [ 896.613576][ T30] Not tainted 6.13.0-rc3-syzkaller #0 [ 896.619477][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 896.628489][ T30] task:syz.9.3087 state:D stack:23928 pid:23134 tgid:23133 ppid:19312 flags:0x00004006 [ 896.638803][ T30] Call Trace: [ 896.642164][ T30] [ 896.645124][ T30] __schedule+0x1850/0x4c30 [ 896.649678][ T30] ? __pfx___schedule+0x10/0x10 [ 896.654979][ T30] ? __pfx_lock_release+0x10/0x10 [ 896.660032][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 896.666804][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 896.672857][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 896.679243][ T30] ? schedule+0x90/0x320 [ 896.683557][ T30] schedule+0x14b/0x320 [ 896.687749][ T30] schedule_preempt_disabled+0x13/0x30 [ 896.693612][ T30] __mutex_lock+0x7e7/0xee0 [ 896.698161][ T30] ? __mutex_lock+0x5ef/0xee0 [ 896.702950][ T30] ? nfc_rfkill_set_block+0x50/0x310 [ 896.708263][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 896.713726][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 896.718968][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 896.725310][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 896.731681][ T30] nfc_rfkill_set_block+0x50/0x310 [ 896.737369][ T30] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 896.743558][ T30] rfkill_set_block+0x1f1/0x440 [ 896.748446][ T30] rfkill_fop_write+0x5b8/0x790 [ 896.755018][ T30] ? end_current_label_crit_section+0x151/0x180 [ 896.761292][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 896.766963][ T30] ? bpf_lsm_file_permission+0x9/0x10 [ 896.772397][ T30] ? security_file_permission+0x74/0x280 [ 896.778054][ T30] ? rw_verify_area+0x1c3/0x6f0 [ 896.783039][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 896.788453][ T30] vfs_write+0x2a3/0xd30 [ 896.792775][ T30] ? __pfx_vfs_write+0x10/0x10 [ 896.797562][ T30] ? __fget_files+0x2a/0x410 [ 896.802519][ T30] ? __fget_files+0x395/0x410 [ 896.807228][ T30] ? __fget_files+0x2a/0x410 [ 896.811884][ T30] ksys_write+0x18f/0x2b0 [ 896.816284][ T30] ? __pfx_ksys_write+0x10/0x10 [ 896.821152][ T30] ? do_syscall_64+0x100/0x230 [ 896.826591][ T30] ? do_syscall_64+0xb6/0x230 [ 896.831303][ T30] do_syscall_64+0xf3/0x230 [ 896.835895][ T30] ? clear_bhb_loop+0x35/0x90 [ 896.840594][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.846634][ T30] RIP: 0033:0x7f0e33b85d19 [ 896.851069][ T30] RSP: 002b:00007f0e319f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 896.859578][ T30] RAX: ffffffffffffffda RBX: 00007f0e33d75fa0 RCX: 00007f0e33b85d19 [ 896.868334][ T30] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000003 [ 896.876935][ T30] RBP: 00007f0e33c01a20 R08: 0000000000000000 R09: 0000000000000000 [ 896.885256][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 896.893605][ T30] R13: 0000000000000000 R14: 00007f0e33d75fa0 R15: 00007f0e33e9fa28 [ 896.901607][ T30] [ 896.905155][ T30] INFO: task syz-executor:23451 blocked for more than 144 seconds. [ 896.913754][ T30] Not tainted 6.13.0-rc3-syzkaller #0 [ 896.919678][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 896.928512][ T30] task:syz-executor state:D stack:22784 pid:23451 tgid:23451 ppid:5816 flags:0x00004000 [ 896.940490][ T30] Call Trace: [ 896.944611][ T30] [ 896.947581][ T30] __schedule+0x1850/0x4c30 [ 896.952216][ T30] ? __pfx___schedule+0x10/0x10 [ 896.957130][ T30] ? __pfx_lock_release+0x10/0x10 [ 896.962534][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 896.968447][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 896.976447][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 896.983444][ T30] ? schedule+0x90/0x320 [ 896.987725][ T30] schedule+0x14b/0x320 [ 896.991909][ T30] schedule_preempt_disabled+0x13/0x30 [ 896.997547][ T30] __mutex_lock+0x7e7/0xee0 [ 897.002092][ T30] ? __mutex_lock+0x5ef/0xee0 [ 897.006936][ T30] ? rfkill_register+0x34/0x8c0 [ 897.011815][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 897.017573][ T30] ? __init_waitqueue_head+0xae/0x150 [ 897.023401][ T30] ? device_initialize+0x266/0x460 [ 897.028545][ T30] rfkill_register+0x34/0x8c0 [ 897.033339][ T30] hci_register_dev+0x407/0x8b0 [ 897.038220][ T30] vhci_create_device+0x35b/0x6a0 [ 897.043434][ T30] vhci_write+0x3cf/0x490 [ 897.047885][ T30] vfs_write+0xaeb/0xd30 [ 897.052222][ T30] ? __pfx_vhci_write+0x10/0x10 [ 897.057161][ T30] ? __pfx_vfs_write+0x10/0x10 [ 897.061949][ T30] ? file_close_fd+0x67/0x80 [ 897.067291][ T30] ksys_write+0x18f/0x2b0 [ 897.071654][ T30] ? __pfx_ksys_write+0x10/0x10 [ 897.076584][ T30] ? do_syscall_64+0x100/0x230 [ 897.081395][ T30] ? do_syscall_64+0xb6/0x230 [ 897.086869][ T30] do_syscall_64+0xf3/0x230 [ 897.091432][ T30] ? clear_bhb_loop+0x35/0x90 [ 897.096206][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.102164][ T30] RIP: 0033:0x7f2aebf84790 [ 897.106598][ T30] RSP: 002b:00007fff1c1cdd68 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 897.115799][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f2aebf84790 [ 897.124613][ T30] RDX: 0000000000000002 RSI: 00007fff1c1cdd7a RDI: 00000000000000ca [ 897.133772][ T30] RBP: 00007f2aec176738 R08: 00000000000000d7 R09: 0000000000000000 [ 897.141770][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 897.150230][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 897.158394][ T30] [ 897.161476][ T30] INFO: task syz-executor:23533 blocked for more than 144 seconds. [ 897.169460][ T30] Not tainted 6.13.0-rc3-syzkaller #0 [ 897.175479][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 897.184216][ T30] task:syz-executor state:D stack:22784 pid:23533 tgid:23533 ppid:5816 flags:0x00004000 [ 897.195680][ T30] Call Trace: [ 897.198983][ T30] [ 897.201928][ T30] __schedule+0x1850/0x4c30 [ 897.207616][ T30] ? __pfx___schedule+0x10/0x10 [ 897.212662][ T30] ? __pfx_lock_release+0x10/0x10 [ 897.217716][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 897.223700][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 897.229605][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 897.236230][ T30] ? schedule+0x90/0x320 [ 897.240510][ T30] schedule+0x14b/0x320 [ 897.245192][ T30] schedule_preempt_disabled+0x13/0x30 [ 897.250690][ T30] __mutex_lock+0x7e7/0xee0 [ 897.255343][ T30] ? __mutex_lock+0x5ef/0xee0 [ 897.260046][ T30] ? rfkill_register+0x34/0x8c0 [ 897.265952][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 897.271014][ T30] ? __init_waitqueue_head+0xae/0x150 [ 897.276522][ T30] ? device_initialize+0x266/0x460 [ 897.281655][ T30] rfkill_register+0x34/0x8c0 [ 897.286500][ T30] hci_register_dev+0x407/0x8b0 [ 897.291390][ T30] vhci_create_device+0x35b/0x6a0 [ 897.296823][ T30] vhci_write+0x3cf/0x490 [ 897.301180][ T30] vfs_write+0xaeb/0xd30 [ 897.312214][ T30] ? __pfx_vhci_write+0x10/0x10 [ 897.317116][ T30] ? __pfx_vfs_write+0x10/0x10 [ 897.321919][ T30] ? file_close_fd+0x67/0x80 [ 897.327149][ T30] ksys_write+0x18f/0x2b0 [ 897.331514][ T30] ? __pfx_ksys_write+0x10/0x10 [ 897.336847][ T30] ? do_syscall_64+0x100/0x230 [ 897.341657][ T30] ? do_syscall_64+0xb6/0x230 [ 897.346672][ T30] do_syscall_64+0xf3/0x230 [ 897.351203][ T30] ? clear_bhb_loop+0x35/0x90 [ 897.356190][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.362285][ T30] RIP: 0033:0x7fdb7af84790 [ 897.366729][ T30] RSP: 002b:00007ffd208d6e58 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 897.375368][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fdb7af84790 [ 897.383694][ T30] RDX: 0000000000000002 RSI: 00007ffd208d6e6a RDI: 00000000000000ca [ 897.391691][ T30] RBP: 00007fdb7b176738 R08: 00000000000000d7 R09: 0000000000000000 [ 897.399869][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 897.407947][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 897.416340][ T30] [ 897.419425][ T30] [ 897.419425][ T30] Showing all locks held in the system: [ 897.427234][ T30] 1 lock held by khungtaskd/30: [ 897.432092][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 897.442080][ T30] 2 locks held by getty/5581: [ 897.447079][ T30] #0: ffff8880311e90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 897.456977][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 897.467270][ T30] 4 locks held by kworker/u8:11/10427: [ 897.473040][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 897.484048][ T30] #1: ffffc900120bfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 897.494774][ T30] #2: ffffffff8fca6390 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x16a/0xd50 [ 897.504494][ T30] #3: ffffffff8ff7a7a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xd0/0x230 [ 897.514709][ T30] 2 locks held by kworker/u8:13/10432: [ 897.520178][ T30] 3 locks held by kworker/1:5/16299: [ 897.525531][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 897.536831][ T30] #1: ffffc900041ffd00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 897.550531][ T30] #2: ffffffff8ff7a7a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 897.562000][ T30] 3 locks held by kworker/u8:18/16848: [ 897.567755][ T30] 1 lock held by syz-executor/19345: [ 897.573109][ T30] #0: ffffffff8ff7a7a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xd0/0x230 [ 897.583354][ T30] 2 locks held by syz.5.3072/23050: [ 897.588641][ T30] #0: ffff888028fed100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 897.598660][ T30] #1: ffffffff8ff7a7a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xd0/0x230 [ 897.608851][ T30] 2 locks held by syz.9.3087/23134: [ 897.614156][ T30] #0: ffffffff8ff7a7a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x1a6/0x790 [ 897.624834][ T30] #1: ffff888028fed100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x310 [ 897.634679][ T30] 2 locks held by syz-executor/23451: [ 897.640063][ T30] #0: ffff88801e695118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6a0 [ 897.650144][ T30] #1: ffffffff8ff7a7a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 897.660495][ T30] 2 locks held by syz-executor/23533: [ 897.665983][ T30] #0: ffff8880247d0118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6a0 [ 897.676195][ T30] #1: ffffffff8ff7a7a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 897.686510][ T30] [ 897.688848][ T30] ============================================= [ 897.688848][ T30] [ 897.697380][ T30] NMI backtrace for cpu 0 [ 897.701714][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller #0 [ 897.710475][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 897.720535][ T30] Call Trace: [ 897.723805][ T30] [ 897.726725][ T30] dump_stack_lvl+0x241/0x360 [ 897.731397][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 897.736583][ T30] ? __pfx__printk+0x10/0x10 [ 897.741166][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 897.746095][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 897.751537][ T30] ? _printk+0xd5/0x120 [ 897.755694][ T30] ? __pfx__printk+0x10/0x10 [ 897.760310][ T30] ? __wake_up_klogd+0xcc/0x110 [ 897.765181][ T30] ? __pfx__printk+0x10/0x10 [ 897.769793][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 897.774839][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 897.780803][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 897.786775][ T30] watchdog+0xff6/0x1040 [ 897.791032][ T30] ? watchdog+0x1ea/0x1040 [ 897.795438][ T30] ? __pfx_watchdog+0x10/0x10 [ 897.800120][ T30] kthread+0x2f0/0x390 [ 897.804209][ T30] ? __pfx_watchdog+0x10/0x10 [ 897.808902][ T30] ? __pfx_kthread+0x10/0x10 [ 897.813494][ T30] ret_from_fork+0x4b/0x80 [ 897.817907][ T30] ? __pfx_kthread+0x10/0x10 [ 897.822561][ T30] ret_from_fork_asm+0x1a/0x30 [ 897.827330][ T30] [ 897.830925][ T30] Sending NMI from CPU 0 to CPUs 1: [ 897.836224][ C1] NMI backtrace for cpu 1 [ 897.836237][ C1] CPU: 1 UID: 0 PID: 16848 Comm: kworker/u8:18 Not tainted 6.13.0-rc3-syzkaller #0 [ 897.836256][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 897.836267][ C1] Workqueue: bat_events batadv_nc_worker [ 897.836294][ C1] RIP: 0010:lock_acquire+0x1b7/0x550 [ 897.836314][ C1] Code: 08 4c 89 ff e8 ca 2c 8b 00 48 8d 5c 24 60 4c 8b bc 24 80 00 00 00 fa 48 c7 c7 00 a4 0a 8c e8 90 d8 4d 0a 65 ff 05 89 da 87 7e <45> 31 c9 41 f7 c7 00 02 00 00 41 0f 94 c1 48 8b 7c 24 20 44 89 f6 [ 897.836327][ C1] RSP: 0018:ffffc9000430f9e0 EFLAGS: 00000002 [ 897.836341][ C1] RAX: 0000000000000001 RBX: ffffc9000430fa40 RCX: ffffffff817aaf14 [ 897.836353][ C1] RDX: 0000000000000000 RSI: ffffffff8c0aa400 RDI: ffffffff8c5faaa0 [ 897.836365][ C1] RBP: ffffc9000430fb40 R08: ffffffff90197977 R09: 1ffffffff2032f2e [ 897.836377][ C1] R10: dffffc0000000000 R11: fffffbfff2032f2f R12: 1ffff92000861f44 [ 897.836390][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000246 [ 897.836401][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 897.836415][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 897.836427][ C1] CR2: 000055ea13d0da00 CR3: 000000000e736000 CR4: 00000000003526f0 [ 897.836441][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 897.836451][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 897.836462][ C1] Call Trace: [ 897.836468][ C1] [ 897.836474][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 897.836492][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 897.836510][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 897.836531][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 897.836547][ C1] ? nmi_handle+0x14f/0x5a0 [ 897.836565][ C1] ? nmi_handle+0x2a/0x5a0 [ 897.836583][ C1] ? lock_acquire+0x1b7/0x550 [ 897.836603][ C1] ? default_do_nmi+0x63/0x160 [ 897.836620][ C1] ? exc_nmi+0x123/0x1f0 [ 897.836635][ C1] ? end_repeat_nmi+0xf/0x53 [ 897.836652][ C1] ? lock_acquire+0xd4/0x550 [ 897.836668][ C1] ? lock_acquire+0x1b7/0x550 [ 897.836684][ C1] ? lock_acquire+0x1b7/0x550 [ 897.836700][ C1] ? lock_acquire+0x1b7/0x550 [ 897.836717][ C1] [ 897.836722][ C1] [ 897.836730][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 897.836748][ C1] ? batadv_nc_worker+0xcb/0x610 [ 897.836763][ C1] ? __pfx_lock_release+0x10/0x10 [ 897.836780][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 897.836800][ C1] batadv_nc_worker+0xec/0x610 [ 897.836815][ C1] ? batadv_nc_worker+0xcb/0x610 [ 897.836830][ C1] ? batadv_nc_worker+0xcb/0x610 [ 897.836846][ C1] ? process_scheduled_works+0x976/0x1840 [ 897.836862][ C1] process_scheduled_works+0xa66/0x1840 [ 897.836885][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 897.836904][ C1] ? assign_work+0x364/0x3d0 [ 897.836919][ C1] worker_thread+0x870/0xd30 [ 897.836937][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 897.836957][ C1] ? __kthread_parkme+0x169/0x1d0 [ 897.836973][ C1] ? __pfx_worker_thread+0x10/0x10 [ 897.836988][ C1] kthread+0x2f0/0x390 [ 897.837005][ C1] ? __pfx_worker_thread+0x10/0x10 [ 897.837020][ C1] ? __pfx_kthread+0x10/0x10 [ 897.837037][ C1] ret_from_fork+0x4b/0x80 [ 897.837052][ C1] ? __pfx_kthread+0x10/0x10 [ 897.837069][ C1] ret_from_fork_asm+0x1a/0x30 [ 897.837088][ C1] [ 897.837727][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 898.170637][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller #0 [ 898.179400][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 898.189452][ T30] Call Trace: [ 898.192730][ T30] [ 898.195665][ T30] dump_stack_lvl+0x241/0x360 [ 898.200348][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 898.205552][ T30] ? __pfx__printk+0x10/0x10 [ 898.210151][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 898.216145][ T30] ? vscnprintf+0x5d/0x90 [ 898.220478][ T30] panic+0x349/0x880 [ 898.224376][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 898.230533][ T30] ? __pfx_panic+0x10/0x10 [ 898.234961][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 898.240344][ T30] ? __irq_work_queue_local+0x137/0x410 [ 898.245890][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 898.251274][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 898.257432][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 898.263591][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 898.269743][ T30] watchdog+0x1035/0x1040 [ 898.274081][ T30] ? watchdog+0x1ea/0x1040 [ 898.278498][ T30] ? __pfx_watchdog+0x10/0x10 [ 898.283171][ T30] kthread+0x2f0/0x390 [ 898.287246][ T30] ? __pfx_watchdog+0x10/0x10 [ 898.291942][ T30] ? __pfx_kthread+0x10/0x10 [ 898.296558][ T30] ret_from_fork+0x4b/0x80 [ 898.300987][ T30] ? __pfx_kthread+0x10/0x10 [ 898.305579][ T30] ret_from_fork_asm+0x1a/0x30 [ 898.310349][ T30] [ 898.313602][ T30] Kernel Offset: disabled [ 898.317924][ T30] Rebooting in 86400 seconds..