last executing test programs: 8m4.167578535s ago: executing program 1 (id=2): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x4, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000000280)={0x0, "f8d0795308ab7dcd6b16d60155f0e4f75257ebcea827aa2b9a5308dae765cb33cb35badf4802defde177e36aaa76b3ce4309f1c31b0bea734d5fa2f289be35c9", 0x2a}, 0x48, 0xfffffffffffffffb) keyctl$setperm(0x5, r5, 0x2000) keyctl$get_security(0x11, r5, 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r6, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0xffb) fcntl$setstatus(r6, 0x4, 0x46400) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xfffffffd, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz0\x00', 0x0, 0xffffffffffffff78}) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) 8m1.506526011s ago: executing program 1 (id=15): r0 = socket(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x3, @mcast1, 0x2}, 0x1c) r1 = memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x6) fallocate(r1, 0x0, 0x0, 0x200401) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) get_mempolicy(&(0x7f0000000080), 0x0, 0x8f3f, &(0x7f0000fff000/0x1000)=nil, 0x4) (async) fallocate(r1, 0x0, 0x0, 0x200401) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800000, 0x0, 0x0, 0x3, 0x2, 0x10}, 0x20) 8m1.250191656s ago: executing program 1 (id=16): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaa", @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e", 0xd, 0xfffffffffffffffe) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f00000001c0)={{0x2e2, 0x8}, {0x3, 0x7}, 0x4, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffffff280012800b0001006572"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r2, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="3e0f38f0a0e7a3640f320fc7a80d00650f01df642e65660f384179862e0fc730f2260f30360f01c4f3d93af3f30f0159f7", 0x31}], 0x1, 0x43, 0x0, 0x0) r10 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000240)={0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x294}) syz_kvm_setup_cpu$x86(r5, r10, &(0x7f0000fe0000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7m59.676673141s ago: executing program 1 (id=25): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x108) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x0, 0x2, 0x0, {0x0, 0x4000000, 0x0, 0x100, 0x0, 0x0, 0x8000000, 0x8000, 0x200, 0x8000, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r2) syz_clone(0x1021000, &(0x7f0000000040)="d939dfd92640adb4f186119964078a7c216f513d1af555", 0x17, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="e07066f5a5317cc5d962f49466d29eb0a5a3d3630d8d34255bfc1f9fa5c4b3cd787559be21e41ec19a5de52cc3c65937") 7m58.644777741s ago: executing program 1 (id=29): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0900000081000000040000000080000016000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000001000000eb0379cacb38d7000000233900eaff000000000000000000"], 0x48) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={r1, @in={{0x2, 0x4e21, @multicast2}}, 0x80, 0x0, 0x0, 0x542000, 0x90}, 0x9c) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) (async) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f9", 0xbd, 0x805, 0x0, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={r1, 0x772}, &(0x7f0000000180)=0xc) (async) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty, 0x8}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'dvmrp0\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x30}, 0x0, 0x238, 0x268, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@rt={{0x138}, {0xf, [0xd, 0x4], 0x0, 0x4, 0x6, [@empty, @private0, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @mcast2, @empty, @dev={0xfe, 0x80, '\x00', 0x2d}, @mcast2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @loopback, @loopback, @mcast2], 0xa}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x200}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) (async) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 7m58.127526354s ago: executing program 1 (id=31): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000080)=""/25, 0x19) mkdir(&(0x7f0000000140)='./control\x00', 0x191) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000000)='./control\x00', 0x40000000) inotify_add_watch(r3, &(0x7f0000000040)='./control\x00', 0x20000040) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c0108800c"], 0x1d8}}, 0x0) 7m57.75862109s ago: executing program 32 (id=31): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000080)=""/25, 0x19) mkdir(&(0x7f0000000140)='./control\x00', 0x191) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000000)='./control\x00', 0x40000000) inotify_add_watch(r3, &(0x7f0000000040)='./control\x00', 0x20000040) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c0108800c"], 0x1d8}}, 0x0) 7m23.920581178s ago: executing program 0 (id=92): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000040)={0x14, &(0x7f00000001c0)={0x40, 0x21, 0xaa, {0xaa, 0x5, "f673dad151c183bf2dc4ce12089d90ff6cb630a2e5ae962b94513e963806d8796683d0ea8e16f2d4420919f22e4489642abc65f99dfe64e22c128f51080d51f9fda123530edae4f2e4758251f1efd684d3377b5091a6c5aaf48dcb71c38f58a3fc46443c1b30a3fb3b0fb05e95f1f004ac28dff7e838fbb8387cd4be928fee3afe8dab46d907136cb1d02f14585b51cfbb7e4b22caa87b6aa58b27534be42f95c6dc756588f68f3c"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x44, &(0x7f0000000500)={0x20, 0xf, 0xf5, "581d89c2bef8bb7aade020735f14c8205b86b20c6dcadf81db16d2ae779e7a5db9dbc973f9cbafa7ec518b662d33b2567dbda5adf712cfbbbdd6427dd08672bf0e312d25c26583e575e6e26e83abac11a15c1f3d3ef0b1d1220e73ff938c49901bdb14f3b904176fc1fc54bf44303ff891c03b1c663a920c0a91b268f45569e0b5c9e40c19b6c32132a0791972d58bf2668f5d8a4d9ef2bee2e6bf4121e5cc26b51cbccd72d1288322342df1f6f0fc2611d4af0dd3b72f3f2474e424340c788ce62afe316df23414a4b571611fa14ec185cfe5c20919be7891552c869a0ce4496ff7b7af539407cf101210894b4b207d7a2e04768c"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0x19}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x4, 0x5, 0xd, 0x5, 0xe16, 0x7, 0xe, 0x1, 0x5, 0x5, 0x401, 0x7}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0xc}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x89, 0x2}}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000340)) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000000c0)={0x0, 0x9, 0x4, "4ff4d2e3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m20.588504722s ago: executing program 0 (id=105): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="14b47612a68ec2bbeab4730483ae35c0", 0x10) (async) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="14b47612a68ec2bbeab4730483ae35c0", 0x10) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x20000) (async) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x20000) ioctl$I2C_TENBIT(r2, 0x704, 0x0) 7m20.23634538s ago: executing program 0 (id=106): setns(0xffffffffffffffff, 0x40000000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4000810, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) pwritev2(r0, &(0x7f0000001540)=[{&(0x7f0000000180)="e47f1d943dd47dea2b918bf8edf317e3c8f2d9dcb2515153cc969f6af186bc4195a32dcd31725aa974bdca2b67be90dd08696f1f84e6cd1e33d5412688a427dc4e434886d59cf0fade57f1f5b42a59d295f165fb1c465cecb9513238a13d164f87dec72873bd567728af8489e78d61fc49eb052750622cfe9640bb41144d490648351207ddbc06d1cbc39a80252f3fc3520bf0522a3a1979558adcc41d41959863ba72500cfbb9809637e4142b8c2813928413958d5c20a7b457d19b9614746c834030c788e080756b0b", 0xca}, {&(0x7f00000000c0)="fa73f4da44600908bba083c1b4302db1a519f21ad679afc44bc38a2ee8adab3058f7e679e656370557ec0981abd661c65a25f78f63290590f9c2c65cdd54babefac650597f035d95639f99ae97063c84b3da0acdcc23561d8011db3ce8d5694193c34fe3026175b65ae09e17b373", 0x6e}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="9169278d3c97f3d3ec9426e24310cbbadb7e3ab2a09d2e168eb44ad6384f60d4edd70b422021a9f44f71f9c5fd5c49ca5c5dafa3b2c017740430c7b32bcea64fe8ded80493980a5c12c7d9f1c480f5f3bcd892914de3c16f2a453044b4bcf49e8864e7052ca6e6ab78a4c25f597688a10de0e0ef6c246e5d715d60457e43decb956e975445e34e1def249cf7d9f7f8b2f0aa651338991a17033646357ff8", 0x9e}, {&(0x7f0000001340)="7f40bfeb3389fe86200788d1f43b96039b2d8f43c5bb9f1a3267130ff764a97a6634e5d997175aaee311aca470b34e43af27355d33925b76a816ccd5db17a41bf90cebab0c03ddfb4bc99a5b6c9abaf7b325907b98784b985e7863c5858e76e0f8e1d7c97935cda5cfd333e6bbbcea8f8f0178b54f2bec850ca2869438ebfc28acbad6f053aa5e6bef2e702f02a231e78c0e4b50a287ee082a8ebc0d31d87f1a354708d4e0accd900068187d221174cb50437356c6ae00a000dc400b809dc560020b66362f1c97e6bdb3cc80c44410d7ff", 0xd1}, {&(0x7f0000001440)="1804706be47da15e26971958236b9ed6aa010c2c8536a40c36acfb481b21e31c12aee6719b4347e1e73bb9dbf8d70e15d27f7b5f0c233945614d0d4a344d23f4f147018f8ad5e6edc51ce9d6b8ad35d6c5065fc76f23a0ec2a3c3539aa3d98870c7ef3ccf679e9317c9cda64b5f372c8186f5e4571f42aabe2582a72a3346144775280aff475441bf37e338b924dd23d4bd56650c730f83a85b4e42a6a3f543958497d62103e318dff791b1ee9b9e9d983169a1d02fea739c4a54b80ed4405b537f556ad0a0420f71af62a7d9bcde9dc8c3b4d0c78e9a2e552c82b01b92a0451", 0xe0}], 0x6, 0x5, 0x313, 0x1) r2 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x5, @remote, 0x4}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = accept(r3, &(0x7f00000015c0)=@rc, &(0x7f0000001640)=0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0xc0}}, 0x4000001) getsockname$packet(r4, &(0x7f0000001680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000016c0)=0x14) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002d00010026bd7000fcdbdf25040020000800090038eac21a"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 7m19.713242415s ago: executing program 0 (id=107): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='\x00', 0x89901) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 7m19.4619162s ago: executing program 0 (id=109): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r1, 0x0, &(0x7f0000000000)={{}, {0x0, 0xffffffffffffffff}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="c359e22454977c79"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7d9e, &(0x7f00000003c0)={0x0, 0xfdcf, 0x800, 0x1, 0x24}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bind$xdp(r4, &(0x7f00000001c0)={0x2c, 0x0, r5}, 0x2a) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) (async) utimensat(r1, 0x0, &(0x7f0000000000)={{}, {0x0, 0xffffffffffffffff}}, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="c359e22454977c79"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) io_uring_setup(0x7d9e, &(0x7f00000003c0)={0x0, 0xfdcf, 0x800, 0x1, 0x24}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) (async) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) (async) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) (async) bind$xdp(r4, &(0x7f00000001c0)={0x2c, 0x0, r5}, 0x2a) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) 7m18.547498842s ago: executing program 0 (id=114): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0x5, 'uM'}, @main=@item_4={0x3, 0x0, 0x9, "78ea0fb9"}]}}, 0x0}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000041) 7m17.288829326s ago: executing program 33 (id=114): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0x5, 'uM'}, @main=@item_4={0x3, 0x0, 0x9, "78ea0fb9"}]}}, 0x0}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000041) 54.491549281s ago: executing program 2 (id=1456): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x200100, 0x5}, 0x18) write$P9_RVERSION(r0, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0x4, 0x8, '9P2000.L'}, 0x15) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001b"], 0xa) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x4008}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x2) 54.374298982s ago: executing program 2 (id=1457): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x30) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x5, 0x2e, r0, 0x0) fanotify_mark(r1, 0x441, 0x48000001, r0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000002480)={0x2020}, 0x2020) lseek(r3, 0xfffffffffffffff5, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_void(r5, 0x1, 0x3f, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000faffffff0000070000000900010073797a30000000007c000000090a010400000000000000000500000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000938001280340001800a0001006c696d6974000000240002800c00024000000000010010000c00014000000000000000010800034000010000080004"], 0xc4}}, 0x20054800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = epoll_create(0x8) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="740000001000030500"/20, @ANYRES32=r6, @ANYBLOB="00000000000000004c0012800c0001006d6163766c616e003c00028008000100100000001c0005800a000400aaaaaaaaaabb000002000400d8928afb7028000008000300030000000a000400aaaaaaaaaabb0000080005", @ANYRES32=r8], 0x74}}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000005580)='/sys/kernel/vmcoreinfo', 0x0, 0x148) socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0xfad6, 0x800, 0x3, 0x16c}, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 54.234116496s ago: executing program 2 (id=1459): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000001fe00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 53.954859402s ago: executing program 2 (id=1462): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000740)={0x0, 0xa4}, 0x8) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x5, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0300000980070705ab0b78"], 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="d3", 0x1) 51.070598709s ago: executing program 2 (id=1469): r0 = socket$kcm(0x21, 0x2, 0x2) unshare(0x24020400) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x4}, 0x10) sendmsg$tipc(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4008000) r3 = dup3(r1, r2, 0x80000) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000040)) r4 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r4, &(0x7f000001a3c0)=""/102381, 0xffffffffffffff32, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @empty}}}], 0x20}, 0x0) 49.894503863s ago: executing program 2 (id=1473): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x14}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) r1 = syz_open_dev$audion(&(0x7f0000000180), 0x1, 0x42) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa0, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x64, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6c}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x90}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000010) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x2300, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000003c0)) io_setup(0x9, &(0x7f0000000400)=0x0) io_submit(r4, 0x7, &(0x7f0000002900)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x4, 0x8, r3, &(0x7f0000000440), 0x0, 0x7, 0x0, 0x1, r3}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x8, 0x7, r3, &(0x7f00000004c0)="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", 0x1000, 0x3}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x3, 0x7, r3, &(0x7f0000001500)="fc65f7311a0f0e66c61e4804afac134acf5c9f77471e2445802d1d19e5b8f19295cc1999211d13515c46788e4d79d59977312360dd388cce04c50ac975d4b2456d43f87c2abe0099baacc570add7269744d4d738392085a5af53bda101d127eb249d6e3429a429e7b2b3e4db2a3550e210b053e39b3fccf62336955b0d431af186c7f7020642b93ccbe5c47bdbb583d87b7f5469f6bfd221435dde943a2a325278d0253dd0568c2ba9d8", 0xaa, 0x3, 0x0, 0x2, r1}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x3, 0x10, r3, &(0x7f0000001600)="aafe283e17b0098eaad97b51c519aa7a2f9045dbc2bc6914f90e8ebc4cb73d6afd7df8a5f76fbf2e89d2006866a9024f7471de53784e1ae9cb0ed123bb8aa36e9eaac2eb3d9e3913396d9aac6ac00df0c14c974c10b58bc9d0d9f6c661bf7e54207ce83ace98b5c44844198b12f9d5ced5f8f8e76608f4086223a7c632a2ce7e889b1498dce08a8c607bb15883cc40b3085be0a2856eb939ff2fedeb228fb6f28392ba85c3fb4ef80c4103f54cf39d5916533e7d5834aab67151fafa11f83a2dd724885bc074a95fc199da91ffcb", 0xce, 0x0, 0x0, 0x3, r3}, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0xbd57, r3, &(0x7f0000001740)="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", 0x1000, 0x9, 0x0, 0x3}, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x1, 0x1, r3, &(0x7f0000002780)="864ed13058bc3d2de387e949923b9b4779561c190c9e0f34df50f83054b2d27c62b563cffdb46351b757742c588e5be1a1687926ec647011ae3f2116ea17f74564bbc2f254c4bc1feac3de2d508f7a2cc31b81917ae1d9b7a52fbe109d674f7b05d7b57d0e6b7e7278142b60fce9e47eae97063beafbd395c419fef9d1f8782b54f6d8cb54ece7db330bff74995c2d81a48d070baa603762ec59f32c1bdba4f916ef78da615f06408cf46df8a4fe73e9c1f11ea4fe2dc204ff70", 0xba, 0x0, 0x0, 0x5, r3}, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, &(0x7f0000002880)="e9ace7c9292242f317bd5ab6edc007a4657aef7019e411541e4456e838969d9a5be8c5cc19", 0x25, 0x2, 0x0, 0x1, r3}]) ioctl$I2C_RETRIES(r3, 0x701, 0x101) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000002a80)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x1000400}, 0xc, &(0x7f0000002a40)={&(0x7f0000002980)={0xa0, r0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5a0869041126b7e451f1df97b024c1c8a19962d6abde384e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6b6ef08cae8dffd1d6181da8430c22ac"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a34546f736ff6402460a882211629480ef8c5416ca6358c68a58d2c004e460e6"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="acc5c80e1126502808e2b9454b53048d2c1a2737ca342c8f"}]}]}, 0xa0}}, 0x24000000) syz_emit_vhci(&(0x7f0000002ac0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_usb_connect(0x0, 0xe75, &(0x7f0000002b00)={{0x12, 0x1, 0x110, 0xf, 0x26, 0xb8, 0x8, 0x1bbb, 0xb6, 0x6b95, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe63, 0x3, 0x6, 0x5, 0x10, 0x7, [{{0x9, 0x4, 0x15, 0xfd, 0xf, 0xdf, 0x22, 0x83, 0x9, [@hid_hid={0x9, 0x21, 0xfffc, 0x7, 0x1, {0x22, 0x89c}}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x0, 0xc}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xfffc, 0x27, 0xc, "0f6b"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x2, 0x3, 0x4, "", '\'1'}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x4, 0x8, 0x40}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x5, 0x1, 0xe9, 0x81, "ee8ba3"}]}], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0x9, 0xfb, 0xc, [@generic={0xbc, 0x8, "9201992a3a6c1c71c14dbd690ce5f6d06da2be42872338a1625400c28397d67fc14128c7b0e11aaabb55ea6b24a801accdc1c87eae5469c5ef736592e0fb2ad99a96d9a03bfb0359c7e36624ebb390279bd423f679f66790672871a493be19f3570647f3ec79233c0bce9cf8d2758f4bbf5d4b861eb8516fe8c90a59c0c4249eae615412d562fe99f554f70591adc263edd83377881d683a4c4bbd096196892ddff358aa232a3f0c3fd004cde4c8f67287a7b137ad1e819bf3c0"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x1}]}}, {{0x9, 0x5, 0x4, 0xc, 0x20, 0x3, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfb, 0x9}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0xcd, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x3}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x6, 0x9, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x87, 0x1000}, @generic={0xe5, 0x0, "ca0530b74f5773327c6159ca018ee7b0994230aaa694ac54ef38b26065db0b22066edf65e4dff1f44efb02f16ed722a58ff9bf738510ac805d8e4f74740d9085732cd33b1224a56252ea8e15e31c97743845cdc5654d5508a6e584b992a7b007c6d419630d62ec9a04def5ee82671240dabebbcb7cccc4dec6c803d4190a14597da9c58ab5b245f094dc06da39280b81d373c622782f67e3268e832cf3c01b214ebe8210b4a5f977008efb9def2b0df95425aabbeb177104c5a82801285f9544f2565b0361a9474829334ef1153ead196c7fd5a7dbae8eb3cdf6641a8404dbe6fc3d05"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0xd, 0xf, 0x6, [@generic={0xc4, 0xc, "61be68c42aa853aa8f04724c2911a4319b89474f9a6e30a5f32065694c09e9ad1773cf89e0271d34e9b64ff90f9f35dc6072a3039e3b98ea243e4d2938748312133d8a7a4d0ea46925ae28d695d9080b863d9d1e3c7ff1ba6bb13c3456cc75c6ad39a49eaceaaef8fbb34e3c9f18318893d754843a42c55dc6f9760c3a6495ce37868c2773c76b686b520cc323aa073cf6268ac83e26003ef85c902f5dc47b25ec87240c5ad3b374cb71e9c11df476fd44e457f10f77d3bf3101442c56dfd8addedc"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x400, 0x1, 0x0, 0x3, [@generic={0x97, 0x8da1c49cf88921f5, "ace2424a1f10143ecbce740a99005de70ec20684ce2fa181cb7434f158bde934658c28c7a2b80c9b6120586e06eb5aabae3e7255a8bb85eaf1bde454838686b89a81a537bcfb32e274af70220ec08ec1e3962af28a85bde1b4d7e4a8d0654311ce591a8003caf5834c43af4a7c334ba0cc5e736e6f5566772d080b856ce0079fad23308bfd9b5ce3c9022164ff60990a79b80cb466"}, @generic={0x9b, 0xe, "95c9c35c5ce85456856cfb1ce7e5f25d87fa0035034cde953e8d1ee8c80d5927843b6de5d59b3984c622f67cb3cd210b7141b6b40ada7a48e5d4f624098f7bdc3ad3da5922b7ad7decccc0f81abd9e75e1b06651cca6a14533d4d50221ed9dfb352e9533ce161f0a9d16c7cd6ab1ba2b17bed3d1c8049009a220c9e4c4457599959d4c121bbb5aa979eb8d993c78fa9980bf1293fad11a1dfd"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x458, 0x4c, 0x7, 0x0, [@generic={0x6f, 0x11, "50a94e4b6dcd6ac5d0860f9056af1009e4f8754920080272e1a28f88d23aa70eb430a10ddec923ab6204a8ecb2b038d8cee9793296ecf56bb5d329d2516d6df2279968fef5460c92a4afa570a0f9f830e702480fd96c728cbe1523f7f0d49496c5a378ecd69006ebc1fa78c3f2"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x4, 0x8, 0x5}}, {{0x9, 0x5, 0xf, 0x30, 0x20, 0xc0, 0xe5, 0x9, [@generic={0x8a, 0x2, "bd5ac28a5af086acc4e6daed5ceea5416c72e957d6e6c87660b7963e643e4c986a4ec797d5fe61a00436f42fd1231c662e2d1d05432bfa4ced00c187b288005bb62b573ed514e1b2f9ed0fa88be36cf69b5776afcd4f850edb73347022d16be72fe9c5b6fc638fa7b4bb75b1bef7cb934c6c27bd2e956dcb22b315861fde4479585dd4bef86690cc"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0xe1, 0xfb, 0x9, [@generic={0xf8, 0x30, "432c037541749d64509c1c628da147a4c37be45779dbf3bb89a6ad1768af47c93d051cd515b81cf41b690573d60413ef15ee0a81467d20013e277a9bcb518170dfc18e62866800f3e342576e92d59e924827596a9b0f8306d823800085b5d7e988464dd59ec42dcae0ce7b9458d928af9e5c29105f38874d19430759dc7238134eba57ebc3cc0493946f1a56ffcce7eaead1e0e7481d01fecb15f291ca29d251e51ffba0f0d37361f4ceb548b92276700633145110308c621908ac8e526dde3fb091986b670bd9d37a030c9a4a2f21586313bd1e73a5ce9f2a418a558948afc6fbc7fd338bb99c9d7757eab7cb62a651ba0d57c7608f"}, @generic={0xb4, 0x9, "5e97b8519930f45a23f1d2efaf84babd6a82be1566aa84f5a53f712e65400df0a6f091762b1d2f48c56ded2093a3821e83709b8f738ac83d5184f211b012067bb3b960b5e802b12e7f68101794ed288966a568d09522f94b0c78dfb9d35d5953cf16553ba2d5c44b1e72a73b26552e1cd74bf9ded87028cf833ae7ff4ef93b4cd230d52c451f366041ab7bd578194d2e6a319457193bb048ca704fc97d29d29b995b7633617e2a97421aa45151c293be8d10"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3de, 0x8, 0x4, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x1}]}}, {{0x9, 0x5, 0xa, 0x10, 0x248, 0x8, 0x7}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x9, 0x3, 0x40}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0x40, 0x9, 0x0, [@generic={0x8f, 0x21, "60ffa0f893923a921bb0b807a71854528e0575e5155115b4ee2944c39fa3ec7325fe4f3be71fdfad8c9d566280d2f670446bcf9f49f223ba9fa4b03badb3a7370ffe712de283d09dfc8dae9e1b3d2551d6786ba816575d14804a27ac3beea16f017bcc57661407897ba3af441147c92a7b5e2ca4083001ea1cfc44f901e9f206f70854583759677878e0639c6b"}, @generic={0xf1, 0x8, "2978c60f0f7c018f1d4cac20b5b91fd5cf0163943721122d930e865b6d844c37d65e0d7e5a062b64cfb128af90640aed118c4ab0c9a7b98cb2ed7acd340eb230e74622d5a3b33350ea6902746dc4fd7018c91aea40d984fa8ed78fc21647265c003bb194b8521e883dbe17192e209d7dc03716cbcb3dd7218b7a3d2951a6908a09bd57c1647625f4c7acf7d5ad88e581a5c59f7d2b7bc9b6b154fe79a0b1089c9d07e25fba1cbf739867e398cdd274071a8746b4eab0291b6786059063ce88831d25a66148ab204656637a7ff250b7a1f430cd3c4fce62933b3d9bab4d4efd2c935a26bfdce55abfe7c0e377aac85d"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x1, 0x9e, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xa}, @generic={0x8b, 0x23, "362f8e4ee4c7800315c7ed951dddec927e414fac4e69c347b7b5ff82e07d182f5706822b763d02c9b551fc45233c61ea819cd0af9a5464e5f297d735cf9c8decfe188bdeeca21dc417a21f5acbb71e6da9fd5aefe52dae3a46cf679c1686c6d97954a76e573d08a43e70b71681639356d42f77fc7ca23410c2384fe808445fab1c3e65118d716ace06"}]}}]}}, {{0x9, 0x4, 0x2a, 0xff, 0x8, 0x2, 0x6, 0x0, 0x7, [], [{{0x9, 0x5, 0xb, 0x10, 0x20, 0x80, 0xff, 0x8, [@generic={0x3, 0x0, "b6"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0xa, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x5}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x4, 0x94, 0x9, [@generic={0xbd, 0x2, "f51bbff6e9761445faf7ba3010ebd5f4c672843b5d44ab42a71e1592a777cd1f156271b2fe421131ebe53107d1ad82f8f378f245b91bd4644b0b96e5e41806ec763f51b0bed6a42ffaf4ae24979fba6027c19c9babc8b7ae1f9c2a4a218a8df30d40e424db7fd3ac20ee19b7d6009cc2e751fb65302ea060e7cdd21d63abfaa88d1d1105ba510a3c7c8a2c291b23bb99b955ad38abc2e76cd81570a5cd40441be5927ea007da590bce56264a714ac91f5a7f28044a0325d323efa0"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x238, 0x6, 0xc, 0x9}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x0, 0x5, 0x7c}}, {{0x9, 0x5, 0x1, 0x1, 0x10, 0x4, 0x2b, 0x4, [@generic={0xec, 0x7, "04b3392f6f3f5e1e5770bd36f682802bedf3de6db5110a93da5a7bac651b1cb363d56e8dab6823714aa0fd8d5ae6711627437d19c4f70eb4a1c7a08824544244098507603c695549f09db30c3be68e5abe86ca02bd1b9f7873acbfc08170114aac78ddbcd8bfb43ad77a1157c95d016820f2c3bf729b60c07f83c8e2d6e4838b9ca800039b312e3b4553a2eca65b8c58aa683049aaaf411188002d124aa4b7f66b33a55e9d00c58d34801b6d9fb2d45fd5fbc5384aee0151999d844f73aa8f3c11618322717a8c7d919640ee8652b18f2cfd7f9dee3759b8c6eead835cc3468030d0e6a1335225ac5f17"}, @generic={0x77, 0x6, "40131dcde688b753eb798f4994a1cec37c44e38b8a9bd9f0c9a4a3cf6711ad6ed15914f542358667ac8e776321a8d945996f9de1092cdf65ed5a75cf1037735abfe4a2f0621a2b7ab0e8624face49a63a0c1c5069f2cca336f1755436aa4b6bb844a726e553a7af76f618f34d9074d0440e6d72167"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x20, 0x7f, 0x7, 0xf1}}, {{0x9, 0x5, 0xe, 0x1, 0x40, 0x2, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0xd3, 0x6, 0x5, 0xc4, 0xed, 0x82, 0x3, [@generic={0xe6, 0x30, "4882c2c15b485867ce83345a57e07102f2a1f35f29c87c32a97b0ca3a00f2924131456be252df2b7735d6f2367762f18ceee1ab7fe295ab50815d58498cb96c126eca68bd56dcccb5e421e9f90a34832669c382f573fe78fb7368208a1212dc6f2592a21f043b5f6cc3e16f4c5b4a6ab67e97ade55460cd130b3b68d296e58f0ebf389d18cadab382e65e30f60c7fa2b71f5f8e1b541058b05f5f3e3214a260aeae21c85790349e5896c978341ac0682d5618484d55dc58a52c9a6b30efb497821c0ea2c9141bb0809658917c301641e12567b88840abba466e5491e3ddd4de52ec6b61e"}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "b565"}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x400, 0x9a75, 0x9}, [@ncm={0x6, 0x24, 0x1a, 0xff}]}], [{{0x9, 0x5, 0x6, 0x10, 0x400, 0x8, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa9, 0x8bb}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x3, 0x2, 0x63, [@generic={0xc7, 0x0, "ef5edbb656eee07ee79c9fea4c6ed9102611a9a797a0705b87aa96937823ef4b74047a2e36d575d3831e9ed7dd294900e9cc06121457c6a6c904b83a0d939a0fd7010e94a7f2e57bc5041a94a4e5ee8cd37f9fa47df9ceecbb4468db0fa7449a6823b1a09034a2a80d1058c4b7cec3942e3f660c392a69999a621e1106a504e977e23393624c7c2d522f6fd83a85988fce6fc6fd51db7dc78f21eea747ba5d4439de7d61113fdc920a9adb8aed4f3c8c4de1c80d8b5fe9511828225266314864fdc913b78a"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x20, 0x7, 0x4, 0x1}}, {{0x9, 0x5, 0x3, 0x8, 0x10, 0x9, 0x8, 0x37, [@generic={0x8f, 0xc, "7f489c032afc82155d4692c366d1c7f9182658e9ff69ec2288acc90e608330ce4c3e9c5e0afedf7fef20c6ab46110a03722dd4e43fea4a581bea35980316f08cbf3ad2de7399e54659a7006c7330d33e2e41f6245f2868836625485b973e19aec3c2559a4938e5e180f90e867790be79bd6abd71c1e85935377fb0b4a3c24d65bbec1244688f4ca8fa2a183d77"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x2}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x0, 0x85, 0x2}}]}}]}}]}}, &(0x7f0000003b00)={0xa, &(0x7f0000003980)={0xa, 0x6, 0x250, 0xfd, 0x7, 0x8, 0x10, 0x9}, 0x5, &(0x7f00000039c0)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000003a00)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000003a40)=@lang_id={0x4, 0x3, 0x801}}, {0x77, &(0x7f0000003a80)=@string={0x77, 0x3, "1e34760ca0346b51b57004cb24aa6492217e43236e66215aa925f6737fe7766ff08a4897ce25feb6b86bbe8688df0b091265f006dedf68f879e7867ab13802ed6f87cf51d16ce0b44bf6193aefd05b954c2c2d9f4b661a1c30400d1f311ae597e404de1004225072b634a7652a586b59f50aa5bf8f"}}]}) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000003b40)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x80, 0xed, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x0, 0x23, 0xf4}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0xf, 0x5, 0x10}}]}}}]}}]}}, &(0x7f0000004000)={0xa, &(0x7f0000003b80)={0xa, 0x6, 0x200, 0x1, 0x3, 0x29, 0x8, 0x6}, 0xa6, &(0x7f0000003bc0)={0x5, 0xf, 0xa6, 0x1, [@generic={0xa1, 0x10, 0xa, "b23b136c93822b83ca1f08868f34c386d183fed402943761ee408004507c30bf565cb7f16093878f3354c854c930da3583682ee7d351f7b10a3f4e01659efffa93398b9f442b3b116eb495e405658938d7c5e417efba386c5fc048af42fc91f9de82010707375872ce964ef10098b0eb5fd3396476b168f4ca64f4ea24afb03dc0b74381c777f0c7d0e07c31ed876209a660f0ee2f6a533eab7403f054b1"}]}, 0x4, [{0xca, &(0x7f0000003c80)=@string={0xca, 0x3, "c5a13fcfe62b546d676d9a7464b6baea60fef70a86394196a98452c133562c2c30426f38218d60e6424e134f92f0b51308f9523130c43dccd65aff9f2aa8c6702d2dcb59359e5c482f5a52ab0596fb8c08dea7bf5ea1f50685aa65d8f489ff206013b2bcd88753bcfa9b14b21cc14b392473a5ae995fe47aef6b5f49f74a0bc2c1846705bde0d328aa99b33ffdb9257cdbdf075904a59e3d4aed540316d632c7e35f63010d2bb632b3f362ecd273802d02bb6afa30a32ba18439d0dbee47caaf3b991ecb8edd036c"}}, {0x43, &(0x7f0000003d80)=@string={0x43, 0x3, "03787487efaec86359dfe5bf259767a3ca91c0ec55bd71073054fac80418a9b7a73ebd33ff79dd3758afce03596816549d792bdeffc6e98bd8a1a23bbacc1591e2"}}, {0xe8, &(0x7f0000003e00)=@string={0xe8, 0x3, "d6b4ea0965728abe0d2a985d2015b86a510091df01262099c3f4aa1930ef242e10ca0822cc5e165c6f299193612d74c7539b3bd2951d368f374b022f396e06ef97853a8264bd5b637027d64836c1bdca97c91069f95f3856437462418325dac37f3465946950987961a6e3648a9f435e015b188d444f765890756bac0b69e29a9d2095ffb900bebb24d4d4acbcb08b5bce06f5df77d32eb7c1e6556d363f5d4c864a46df38b0410c1528e6df14af2d3f35193829bad648c0a25fec1ccc4472fb0d0b0fe253e84e6874485af5d9070e7fe11d2caea9159a5a1ad0d2b26512e407c7b15531b998"}}, {0xc1, &(0x7f0000003f00)=@string={0xc1, 0x3, "4683e96e11e892cc3cb4348d923fdc39b469e6176c25a9d387e49fcdb4aa9892e9c0323652556d02dc09fd23761de064fdd4d17ead35b5f47c04b0d75e597a372be0a8dfecfff1473a0f54c01f03cf1a80c3cc81b373c79f2c2747169730e227adf4daaed6d5c2d9a7ead157cfc827e2c1a934b9c751d10aa6137eb1fa8a99a08f71c59513e40c954cd6b863e80c525bf76d84f1758fc698e4639f4f1582383cdcd938343ccf3c7dde2e13526ac0bbd060b59a574bba70fcfc64223807ac4a"}}]}) sendmsg$key(r3, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)={0x2, 0x8, 0x5, 0x9, 0x9, 0x0, 0x70bd28, 0x25dfdbfb, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e21, 0x9, @private1, 0x8001}}]}, 0x48}}, 0x4000) connect$inet6(r1, &(0x7f0000004180)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x8}, 0x1c) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000041c0)=0x0) r6 = syz_open_procfs(r5, &(0x7f0000004200)='oom_score\x00') openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000004240), 0x2, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004540)={r1, 0xe0, &(0x7f0000004440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000004280)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f00000042c0)=[0x0, 0x0], &(0x7f0000004300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa3, &(0x7f0000004340)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000004380), &(0x7f00000043c0), 0x8, 0x9, 0x8, 0x8, &(0x7f0000004400)}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000004580)={{{@in=@multicast1, @in6=@loopback, 0x4e22, 0x9, 0x4e21, 0x0, 0xa, 0x80, 0x20, 0xff, r7, 0xee01}, {0x7, 0x7, 0x401, 0xffffffffffffffff, 0x6, 0x1, 0x1, 0x1}, {0xfffffffffffffffb, 0xfffffffffffffff8, 0xfffffffffffffc00, 0x1}, 0x38, 0x6e6bbf, 0x0, 0x0, 0x2, 0x3}, {{@in=@broadcast, 0x4d6, 0x3c}, 0x0, @in6=@remote, 0x3504, 0x2, 0x3, 0x1, 0xffa, 0x8001, 0x4}}, 0xe8) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000004680)={0x48}) userfaultfd(0x80800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000004700)) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x40485404, &(0x7f0000004740)={{0xffffffffffffffff, 0x1, 0x8, 0x2, 0x8}, 0x2, 0xf800000000000000}) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000047c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xe8f, 0x12, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x80, 0x8c, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x7ff, 0xcf, 0x1, {0x22, 0x93c}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xff, 0x6, 0xac}}}}}]}}]}}, &(0x7f0000004ac0)={0xa, &(0x7f0000004800)={0xa, 0x6, 0x201, 0x0, 0x4, 0xf, 0x40, 0x7}, 0x9a, &(0x7f0000004840)={0x5, 0xf, 0x9a, 0x3, [@generic={0x87, 0x10, 0x2, "c25378dc9fefec6cd5c46d0c36c0dc6440753804d1c80697b78448836345c33acaaaa3be8424a972a81bbf749b1aa54b393b66a973417fb8eb727c6b1b12d40a77f360a28a455b7205acbe31b17e40be59dacb1f435853a06f76300fdae50299712b3d218c808537c9ee1c9322d799dead468164d48a6df75fb2288bcef6ce41b600d81f"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0xe1, 0xf, 0x2, 0x401, 0xe7}]}, 0x6, [{0x4, &(0x7f0000004900)=@lang_id={0x4, 0x3, 0xc04}}, {0x40, &(0x7f0000004940)=@string={0x40, 0x3, "cc8c483fc52f5b1d3fa38a2caa3542ae217406ee6379bd9785e5983b9b0ed1b5fd552bae0b897ddb9458c2fe976024b0aae3a11da8c9a42b949e909340ea"}}, {0x76, &(0x7f0000004980)=@string={0x76, 0x3, "4985a060f4f6fde928ccc3a7b4444534a1c47c6cd3d2f29d0fbfd3ed3bf8dbbfc036746e8e8123f4318fbc16b5bae6cdd28e32b0c5f88902bae5fa8c66a56995e08f8531a470f52c0d9d9ff29ad427e7ddc5d597384809186f61027f586771cd5a2e16080bf29eb1ffc84a851eafa5bef826e7e1"}}, {0x1f, &(0x7f0000004a00)=@string={0x1f, 0x3, "5d677915166fbe06edfdec70ec2d9915073bcf218d037f397676f15271"}}, {0x18, &(0x7f0000004a40)=@string={0x18, 0x3, "4309d5a55a75efabbdff6237bb5a2e75983ee18edd08"}}, {0x4, &(0x7f0000004a80)=@lang_id={0x4, 0x3, 0x412}}]}) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000004b40)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xe, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x40, 0x5, 0xd}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0xf8, 0xcd}}]}}}]}}]}}, &(0x7f0000005040)={0xa, &(0x7f0000004b80)={0xa, 0x6, 0x310, 0x3, 0x7, 0x8, 0x8, 0xb2}, 0x5, &(0x7f0000004bc0)={0x5, 0xf, 0x5}, 0xa, [{0x87, &(0x7f0000004c00)=@string={0x87, 0x3, "d46521f54ec35353d04ac58fea3a55a2758624b4dfdcdd6e393f34cbb1439333e8d012895635474caecae2e970699ce56b065d6f18c757d20394bb62a8f96d96712defa4190c927357e1f6987b729a180136aee3473c78f5bcc24a93ff34400eee165203a6318a3d507e407aff084637605d8408d3b7c39324de285e69891b8969f5e612fd"}}, {0x94, &(0x7f0000004cc0)=@string={0x94, 0x3, "d79da05df6e4b95a06a5a5a3d4f2319afe2dec82fdb03150ba028252f1d08abb371a752070e02ff258de0d94d5fea86990ab6087b4e8dcec74fe9e3d00e2272de99819000b724159a0e6b6dc3bed3dbdf6723375efd04ac6d4c96efe335517f02a18f0be94939e729a4c2119db86dd14ae9c229728f32c4910301f92b85559eb7d4984fd9298c8ca620b1d1a86fb071590f9"}}, {0x4, &(0x7f0000004d80)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000004dc0)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000004e00)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000004e40)=@lang_id={0x4, 0x3, 0xc01}}, {0xd3, &(0x7f0000004e80)=@string={0xd3, 0x3, "69b1afbbfe9b4dab648f5f2afdc2e439a8fe5043377f9e3be1231cb2b7ac840e2b08dd75404731504940c653a93ff74d233418ee2e4b481ae0b404026f7c0f5cff24ff7326f027eb5dcd30a0311f3da93b4de765568607f9552280280499eb792e4357d616d4e8362b9c965e6aae18fc074059a2dc2dbab09387755db0c88a0e6b4915228bf44cdf00fc21860c96dc8e2824d245851c1e62f78a20f26b0f49ec831647b6dea88d725f9788705536bd2da66581a63d84f3444bc8ecfd3b5e20cf9a3deab8691f943f747d5c4b4c3207b9c5"}}, {0x4, &(0x7f0000004f80)=@lang_id={0x4, 0x3, 0x443}}, {0x3e, &(0x7f0000004fc0)=@string={0x3e, 0x3, "b6d318b2a9c5b8249a21ac9424549411c7aa227d735aa2704460f7b0a679dce64800a3a09774cffea1ab94454d8d76811d125c28fc6ea00e0afe51bf"}}, {0x4, &(0x7f0000005000)=@lang_id={0x4, 0x3, 0x2c01}}]}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000005100)=0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000005140), 0x2, 0x0) 34.480955682s ago: executing program 34 (id=1473): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x14}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) r1 = syz_open_dev$audion(&(0x7f0000000180), 0x1, 0x42) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa0, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x64, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6c}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x90}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000010) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x2300, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000003c0)) io_setup(0x9, &(0x7f0000000400)=0x0) io_submit(r4, 0x7, &(0x7f0000002900)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x4, 0x8, r3, &(0x7f0000000440), 0x0, 0x7, 0x0, 0x1, r3}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x8, 0x7, r3, &(0x7f00000004c0)="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", 0x1000, 0x3}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x3, 0x7, r3, &(0x7f0000001500)="fc65f7311a0f0e66c61e4804afac134acf5c9f77471e2445802d1d19e5b8f19295cc1999211d13515c46788e4d79d59977312360dd388cce04c50ac975d4b2456d43f87c2abe0099baacc570add7269744d4d738392085a5af53bda101d127eb249d6e3429a429e7b2b3e4db2a3550e210b053e39b3fccf62336955b0d431af186c7f7020642b93ccbe5c47bdbb583d87b7f5469f6bfd221435dde943a2a325278d0253dd0568c2ba9d8", 0xaa, 0x3, 0x0, 0x2, r1}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x3, 0x10, r3, &(0x7f0000001600)="aafe283e17b0098eaad97b51c519aa7a2f9045dbc2bc6914f90e8ebc4cb73d6afd7df8a5f76fbf2e89d2006866a9024f7471de53784e1ae9cb0ed123bb8aa36e9eaac2eb3d9e3913396d9aac6ac00df0c14c974c10b58bc9d0d9f6c661bf7e54207ce83ace98b5c44844198b12f9d5ced5f8f8e76608f4086223a7c632a2ce7e889b1498dce08a8c607bb15883cc40b3085be0a2856eb939ff2fedeb228fb6f28392ba85c3fb4ef80c4103f54cf39d5916533e7d5834aab67151fafa11f83a2dd724885bc074a95fc199da91ffcb", 0xce, 0x0, 0x0, 0x3, r3}, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0xbd57, r3, &(0x7f0000001740)="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", 0x1000, 0x9, 0x0, 0x3}, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x1, 0x1, r3, &(0x7f0000002780)="864ed13058bc3d2de387e949923b9b4779561c190c9e0f34df50f83054b2d27c62b563cffdb46351b757742c588e5be1a1687926ec647011ae3f2116ea17f74564bbc2f254c4bc1feac3de2d508f7a2cc31b81917ae1d9b7a52fbe109d674f7b05d7b57d0e6b7e7278142b60fce9e47eae97063beafbd395c419fef9d1f8782b54f6d8cb54ece7db330bff74995c2d81a48d070baa603762ec59f32c1bdba4f916ef78da615f06408cf46df8a4fe73e9c1f11ea4fe2dc204ff70", 0xba, 0x0, 0x0, 0x5, r3}, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, &(0x7f0000002880)="e9ace7c9292242f317bd5ab6edc007a4657aef7019e411541e4456e838969d9a5be8c5cc19", 0x25, 0x2, 0x0, 0x1, r3}]) ioctl$I2C_RETRIES(r3, 0x701, 0x101) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000002a80)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x1000400}, 0xc, &(0x7f0000002a40)={&(0x7f0000002980)={0xa0, r0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5a0869041126b7e451f1df97b024c1c8a19962d6abde384e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6b6ef08cae8dffd1d6181da8430c22ac"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a34546f736ff6402460a882211629480ef8c5416ca6358c68a58d2c004e460e6"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="acc5c80e1126502808e2b9454b53048d2c1a2737ca342c8f"}]}]}, 0xa0}}, 0x24000000) syz_emit_vhci(&(0x7f0000002ac0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_usb_connect(0x0, 0xe75, &(0x7f0000002b00)={{0x12, 0x1, 0x110, 0xf, 0x26, 0xb8, 0x8, 0x1bbb, 0xb6, 0x6b95, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe63, 0x3, 0x6, 0x5, 0x10, 0x7, [{{0x9, 0x4, 0x15, 0xfd, 0xf, 0xdf, 0x22, 0x83, 0x9, [@hid_hid={0x9, 0x21, 0xfffc, 0x7, 0x1, {0x22, 0x89c}}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x0, 0xc}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xfffc, 0x27, 0xc, "0f6b"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x2, 0x3, 0x4, "", '\'1'}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x4, 0x8, 0x40}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x5, 0x1, 0xe9, 0x81, "ee8ba3"}]}], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0x9, 0xfb, 0xc, [@generic={0xbc, 0x8, "9201992a3a6c1c71c14dbd690ce5f6d06da2be42872338a1625400c28397d67fc14128c7b0e11aaabb55ea6b24a801accdc1c87eae5469c5ef736592e0fb2ad99a96d9a03bfb0359c7e36624ebb390279bd423f679f66790672871a493be19f3570647f3ec79233c0bce9cf8d2758f4bbf5d4b861eb8516fe8c90a59c0c4249eae615412d562fe99f554f70591adc263edd83377881d683a4c4bbd096196892ddff358aa232a3f0c3fd004cde4c8f67287a7b137ad1e819bf3c0"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x1}]}}, {{0x9, 0x5, 0x4, 0xc, 0x20, 0x3, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfb, 0x9}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0xcd, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x3}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x6, 0x9, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x87, 0x1000}, @generic={0xe5, 0x0, "ca0530b74f5773327c6159ca018ee7b0994230aaa694ac54ef38b26065db0b22066edf65e4dff1f44efb02f16ed722a58ff9bf738510ac805d8e4f74740d9085732cd33b1224a56252ea8e15e31c97743845cdc5654d5508a6e584b992a7b007c6d419630d62ec9a04def5ee82671240dabebbcb7cccc4dec6c803d4190a14597da9c58ab5b245f094dc06da39280b81d373c622782f67e3268e832cf3c01b214ebe8210b4a5f977008efb9def2b0df95425aabbeb177104c5a82801285f9544f2565b0361a9474829334ef1153ead196c7fd5a7dbae8eb3cdf6641a8404dbe6fc3d05"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0xd, 0xf, 0x6, [@generic={0xc4, 0xc, "61be68c42aa853aa8f04724c2911a4319b89474f9a6e30a5f32065694c09e9ad1773cf89e0271d34e9b64ff90f9f35dc6072a3039e3b98ea243e4d2938748312133d8a7a4d0ea46925ae28d695d9080b863d9d1e3c7ff1ba6bb13c3456cc75c6ad39a49eaceaaef8fbb34e3c9f18318893d754843a42c55dc6f9760c3a6495ce37868c2773c76b686b520cc323aa073cf6268ac83e26003ef85c902f5dc47b25ec87240c5ad3b374cb71e9c11df476fd44e457f10f77d3bf3101442c56dfd8addedc"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x400, 0x1, 0x0, 0x3, [@generic={0x97, 0x8da1c49cf88921f5, "ace2424a1f10143ecbce740a99005de70ec20684ce2fa181cb7434f158bde934658c28c7a2b80c9b6120586e06eb5aabae3e7255a8bb85eaf1bde454838686b89a81a537bcfb32e274af70220ec08ec1e3962af28a85bde1b4d7e4a8d0654311ce591a8003caf5834c43af4a7c334ba0cc5e736e6f5566772d080b856ce0079fad23308bfd9b5ce3c9022164ff60990a79b80cb466"}, @generic={0x9b, 0xe, "95c9c35c5ce85456856cfb1ce7e5f25d87fa0035034cde953e8d1ee8c80d5927843b6de5d59b3984c622f67cb3cd210b7141b6b40ada7a48e5d4f624098f7bdc3ad3da5922b7ad7decccc0f81abd9e75e1b06651cca6a14533d4d50221ed9dfb352e9533ce161f0a9d16c7cd6ab1ba2b17bed3d1c8049009a220c9e4c4457599959d4c121bbb5aa979eb8d993c78fa9980bf1293fad11a1dfd"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x458, 0x4c, 0x7, 0x0, [@generic={0x6f, 0x11, "50a94e4b6dcd6ac5d0860f9056af1009e4f8754920080272e1a28f88d23aa70eb430a10ddec923ab6204a8ecb2b038d8cee9793296ecf56bb5d329d2516d6df2279968fef5460c92a4afa570a0f9f830e702480fd96c728cbe1523f7f0d49496c5a378ecd69006ebc1fa78c3f2"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x4, 0x8, 0x5}}, {{0x9, 0x5, 0xf, 0x30, 0x20, 0xc0, 0xe5, 0x9, [@generic={0x8a, 0x2, "bd5ac28a5af086acc4e6daed5ceea5416c72e957d6e6c87660b7963e643e4c986a4ec797d5fe61a00436f42fd1231c662e2d1d05432bfa4ced00c187b288005bb62b573ed514e1b2f9ed0fa88be36cf69b5776afcd4f850edb73347022d16be72fe9c5b6fc638fa7b4bb75b1bef7cb934c6c27bd2e956dcb22b315861fde4479585dd4bef86690cc"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0xe1, 0xfb, 0x9, [@generic={0xf8, 0x30, "432c037541749d64509c1c628da147a4c37be45779dbf3bb89a6ad1768af47c93d051cd515b81cf41b690573d60413ef15ee0a81467d20013e277a9bcb518170dfc18e62866800f3e342576e92d59e924827596a9b0f8306d823800085b5d7e988464dd59ec42dcae0ce7b9458d928af9e5c29105f38874d19430759dc7238134eba57ebc3cc0493946f1a56ffcce7eaead1e0e7481d01fecb15f291ca29d251e51ffba0f0d37361f4ceb548b92276700633145110308c621908ac8e526dde3fb091986b670bd9d37a030c9a4a2f21586313bd1e73a5ce9f2a418a558948afc6fbc7fd338bb99c9d7757eab7cb62a651ba0d57c7608f"}, @generic={0xb4, 0x9, "5e97b8519930f45a23f1d2efaf84babd6a82be1566aa84f5a53f712e65400df0a6f091762b1d2f48c56ded2093a3821e83709b8f738ac83d5184f211b012067bb3b960b5e802b12e7f68101794ed288966a568d09522f94b0c78dfb9d35d5953cf16553ba2d5c44b1e72a73b26552e1cd74bf9ded87028cf833ae7ff4ef93b4cd230d52c451f366041ab7bd578194d2e6a319457193bb048ca704fc97d29d29b995b7633617e2a97421aa45151c293be8d10"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3de, 0x8, 0x4, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x1}]}}, {{0x9, 0x5, 0xa, 0x10, 0x248, 0x8, 0x7}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x9, 0x3, 0x40}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0x40, 0x9, 0x0, [@generic={0x8f, 0x21, "60ffa0f893923a921bb0b807a71854528e0575e5155115b4ee2944c39fa3ec7325fe4f3be71fdfad8c9d566280d2f670446bcf9f49f223ba9fa4b03badb3a7370ffe712de283d09dfc8dae9e1b3d2551d6786ba816575d14804a27ac3beea16f017bcc57661407897ba3af441147c92a7b5e2ca4083001ea1cfc44f901e9f206f70854583759677878e0639c6b"}, @generic={0xf1, 0x8, "2978c60f0f7c018f1d4cac20b5b91fd5cf0163943721122d930e865b6d844c37d65e0d7e5a062b64cfb128af90640aed118c4ab0c9a7b98cb2ed7acd340eb230e74622d5a3b33350ea6902746dc4fd7018c91aea40d984fa8ed78fc21647265c003bb194b8521e883dbe17192e209d7dc03716cbcb3dd7218b7a3d2951a6908a09bd57c1647625f4c7acf7d5ad88e581a5c59f7d2b7bc9b6b154fe79a0b1089c9d07e25fba1cbf739867e398cdd274071a8746b4eab0291b6786059063ce88831d25a66148ab204656637a7ff250b7a1f430cd3c4fce62933b3d9bab4d4efd2c935a26bfdce55abfe7c0e377aac85d"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x1, 0x9e, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xa}, @generic={0x8b, 0x23, "362f8e4ee4c7800315c7ed951dddec927e414fac4e69c347b7b5ff82e07d182f5706822b763d02c9b551fc45233c61ea819cd0af9a5464e5f297d735cf9c8decfe188bdeeca21dc417a21f5acbb71e6da9fd5aefe52dae3a46cf679c1686c6d97954a76e573d08a43e70b71681639356d42f77fc7ca23410c2384fe808445fab1c3e65118d716ace06"}]}}]}}, {{0x9, 0x4, 0x2a, 0xff, 0x8, 0x2, 0x6, 0x0, 0x7, [], [{{0x9, 0x5, 0xb, 0x10, 0x20, 0x80, 0xff, 0x8, [@generic={0x3, 0x0, "b6"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0xa, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x5}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x4, 0x94, 0x9, [@generic={0xbd, 0x2, "f51bbff6e9761445faf7ba3010ebd5f4c672843b5d44ab42a71e1592a777cd1f156271b2fe421131ebe53107d1ad82f8f378f245b91bd4644b0b96e5e41806ec763f51b0bed6a42ffaf4ae24979fba6027c19c9babc8b7ae1f9c2a4a218a8df30d40e424db7fd3ac20ee19b7d6009cc2e751fb65302ea060e7cdd21d63abfaa88d1d1105ba510a3c7c8a2c291b23bb99b955ad38abc2e76cd81570a5cd40441be5927ea007da590bce56264a714ac91f5a7f28044a0325d323efa0"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x238, 0x6, 0xc, 0x9}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x0, 0x5, 0x7c}}, {{0x9, 0x5, 0x1, 0x1, 0x10, 0x4, 0x2b, 0x4, [@generic={0xec, 0x7, "04b3392f6f3f5e1e5770bd36f682802bedf3de6db5110a93da5a7bac651b1cb363d56e8dab6823714aa0fd8d5ae6711627437d19c4f70eb4a1c7a08824544244098507603c695549f09db30c3be68e5abe86ca02bd1b9f7873acbfc08170114aac78ddbcd8bfb43ad77a1157c95d016820f2c3bf729b60c07f83c8e2d6e4838b9ca800039b312e3b4553a2eca65b8c58aa683049aaaf411188002d124aa4b7f66b33a55e9d00c58d34801b6d9fb2d45fd5fbc5384aee0151999d844f73aa8f3c11618322717a8c7d919640ee8652b18f2cfd7f9dee3759b8c6eead835cc3468030d0e6a1335225ac5f17"}, @generic={0x77, 0x6, "40131dcde688b753eb798f4994a1cec37c44e38b8a9bd9f0c9a4a3cf6711ad6ed15914f542358667ac8e776321a8d945996f9de1092cdf65ed5a75cf1037735abfe4a2f0621a2b7ab0e8624face49a63a0c1c5069f2cca336f1755436aa4b6bb844a726e553a7af76f618f34d9074d0440e6d72167"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x20, 0x7f, 0x7, 0xf1}}, {{0x9, 0x5, 0xe, 0x1, 0x40, 0x2, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0xd3, 0x6, 0x5, 0xc4, 0xed, 0x82, 0x3, [@generic={0xe6, 0x30, "4882c2c15b485867ce83345a57e07102f2a1f35f29c87c32a97b0ca3a00f2924131456be252df2b7735d6f2367762f18ceee1ab7fe295ab50815d58498cb96c126eca68bd56dcccb5e421e9f90a34832669c382f573fe78fb7368208a1212dc6f2592a21f043b5f6cc3e16f4c5b4a6ab67e97ade55460cd130b3b68d296e58f0ebf389d18cadab382e65e30f60c7fa2b71f5f8e1b541058b05f5f3e3214a260aeae21c85790349e5896c978341ac0682d5618484d55dc58a52c9a6b30efb497821c0ea2c9141bb0809658917c301641e12567b88840abba466e5491e3ddd4de52ec6b61e"}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "b565"}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x400, 0x9a75, 0x9}, [@ncm={0x6, 0x24, 0x1a, 0xff}]}], [{{0x9, 0x5, 0x6, 0x10, 0x400, 0x8, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa9, 0x8bb}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x3, 0x2, 0x63, [@generic={0xc7, 0x0, "ef5edbb656eee07ee79c9fea4c6ed9102611a9a797a0705b87aa96937823ef4b74047a2e36d575d3831e9ed7dd294900e9cc06121457c6a6c904b83a0d939a0fd7010e94a7f2e57bc5041a94a4e5ee8cd37f9fa47df9ceecbb4468db0fa7449a6823b1a09034a2a80d1058c4b7cec3942e3f660c392a69999a621e1106a504e977e23393624c7c2d522f6fd83a85988fce6fc6fd51db7dc78f21eea747ba5d4439de7d61113fdc920a9adb8aed4f3c8c4de1c80d8b5fe9511828225266314864fdc913b78a"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x20, 0x7, 0x4, 0x1}}, {{0x9, 0x5, 0x3, 0x8, 0x10, 0x9, 0x8, 0x37, [@generic={0x8f, 0xc, "7f489c032afc82155d4692c366d1c7f9182658e9ff69ec2288acc90e608330ce4c3e9c5e0afedf7fef20c6ab46110a03722dd4e43fea4a581bea35980316f08cbf3ad2de7399e54659a7006c7330d33e2e41f6245f2868836625485b973e19aec3c2559a4938e5e180f90e867790be79bd6abd71c1e85935377fb0b4a3c24d65bbec1244688f4ca8fa2a183d77"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x2}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x0, 0x85, 0x2}}]}}]}}]}}, &(0x7f0000003b00)={0xa, &(0x7f0000003980)={0xa, 0x6, 0x250, 0xfd, 0x7, 0x8, 0x10, 0x9}, 0x5, &(0x7f00000039c0)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000003a00)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000003a40)=@lang_id={0x4, 0x3, 0x801}}, {0x77, &(0x7f0000003a80)=@string={0x77, 0x3, "1e34760ca0346b51b57004cb24aa6492217e43236e66215aa925f6737fe7766ff08a4897ce25feb6b86bbe8688df0b091265f006dedf68f879e7867ab13802ed6f87cf51d16ce0b44bf6193aefd05b954c2c2d9f4b661a1c30400d1f311ae597e404de1004225072b634a7652a586b59f50aa5bf8f"}}]}) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000003b40)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x80, 0xed, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x0, 0x23, 0xf4}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0xf, 0x5, 0x10}}]}}}]}}]}}, &(0x7f0000004000)={0xa, &(0x7f0000003b80)={0xa, 0x6, 0x200, 0x1, 0x3, 0x29, 0x8, 0x6}, 0xa6, &(0x7f0000003bc0)={0x5, 0xf, 0xa6, 0x1, [@generic={0xa1, 0x10, 0xa, "b23b136c93822b83ca1f08868f34c386d183fed402943761ee408004507c30bf565cb7f16093878f3354c854c930da3583682ee7d351f7b10a3f4e01659efffa93398b9f442b3b116eb495e405658938d7c5e417efba386c5fc048af42fc91f9de82010707375872ce964ef10098b0eb5fd3396476b168f4ca64f4ea24afb03dc0b74381c777f0c7d0e07c31ed876209a660f0ee2f6a533eab7403f054b1"}]}, 0x4, [{0xca, &(0x7f0000003c80)=@string={0xca, 0x3, "c5a13fcfe62b546d676d9a7464b6baea60fef70a86394196a98452c133562c2c30426f38218d60e6424e134f92f0b51308f9523130c43dccd65aff9f2aa8c6702d2dcb59359e5c482f5a52ab0596fb8c08dea7bf5ea1f50685aa65d8f489ff206013b2bcd88753bcfa9b14b21cc14b392473a5ae995fe47aef6b5f49f74a0bc2c1846705bde0d328aa99b33ffdb9257cdbdf075904a59e3d4aed540316d632c7e35f63010d2bb632b3f362ecd273802d02bb6afa30a32ba18439d0dbee47caaf3b991ecb8edd036c"}}, {0x43, &(0x7f0000003d80)=@string={0x43, 0x3, "03787487efaec86359dfe5bf259767a3ca91c0ec55bd71073054fac80418a9b7a73ebd33ff79dd3758afce03596816549d792bdeffc6e98bd8a1a23bbacc1591e2"}}, {0xe8, &(0x7f0000003e00)=@string={0xe8, 0x3, "d6b4ea0965728abe0d2a985d2015b86a510091df01262099c3f4aa1930ef242e10ca0822cc5e165c6f299193612d74c7539b3bd2951d368f374b022f396e06ef97853a8264bd5b637027d64836c1bdca97c91069f95f3856437462418325dac37f3465946950987961a6e3648a9f435e015b188d444f765890756bac0b69e29a9d2095ffb900bebb24d4d4acbcb08b5bce06f5df77d32eb7c1e6556d363f5d4c864a46df38b0410c1528e6df14af2d3f35193829bad648c0a25fec1ccc4472fb0d0b0fe253e84e6874485af5d9070e7fe11d2caea9159a5a1ad0d2b26512e407c7b15531b998"}}, {0xc1, &(0x7f0000003f00)=@string={0xc1, 0x3, "4683e96e11e892cc3cb4348d923fdc39b469e6176c25a9d387e49fcdb4aa9892e9c0323652556d02dc09fd23761de064fdd4d17ead35b5f47c04b0d75e597a372be0a8dfecfff1473a0f54c01f03cf1a80c3cc81b373c79f2c2747169730e227adf4daaed6d5c2d9a7ead157cfc827e2c1a934b9c751d10aa6137eb1fa8a99a08f71c59513e40c954cd6b863e80c525bf76d84f1758fc698e4639f4f1582383cdcd938343ccf3c7dde2e13526ac0bbd060b59a574bba70fcfc64223807ac4a"}}]}) sendmsg$key(r3, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)={0x2, 0x8, 0x5, 0x9, 0x9, 0x0, 0x70bd28, 0x25dfdbfb, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e21, 0x9, @private1, 0x8001}}]}, 0x48}}, 0x4000) connect$inet6(r1, &(0x7f0000004180)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x8}, 0x1c) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000041c0)=0x0) r6 = syz_open_procfs(r5, &(0x7f0000004200)='oom_score\x00') openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000004240), 0x2, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004540)={r1, 0xe0, &(0x7f0000004440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000004280)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f00000042c0)=[0x0, 0x0], &(0x7f0000004300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa3, &(0x7f0000004340)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000004380), &(0x7f00000043c0), 0x8, 0x9, 0x8, 0x8, &(0x7f0000004400)}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000004580)={{{@in=@multicast1, @in6=@loopback, 0x4e22, 0x9, 0x4e21, 0x0, 0xa, 0x80, 0x20, 0xff, r7, 0xee01}, {0x7, 0x7, 0x401, 0xffffffffffffffff, 0x6, 0x1, 0x1, 0x1}, {0xfffffffffffffffb, 0xfffffffffffffff8, 0xfffffffffffffc00, 0x1}, 0x38, 0x6e6bbf, 0x0, 0x0, 0x2, 0x3}, {{@in=@broadcast, 0x4d6, 0x3c}, 0x0, @in6=@remote, 0x3504, 0x2, 0x3, 0x1, 0xffa, 0x8001, 0x4}}, 0xe8) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000004680)={0x48}) userfaultfd(0x80800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000004700)) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x40485404, &(0x7f0000004740)={{0xffffffffffffffff, 0x1, 0x8, 0x2, 0x8}, 0x2, 0xf800000000000000}) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000047c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xe8f, 0x12, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x80, 0x8c, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x7ff, 0xcf, 0x1, {0x22, 0x93c}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xff, 0x6, 0xac}}}}}]}}]}}, &(0x7f0000004ac0)={0xa, &(0x7f0000004800)={0xa, 0x6, 0x201, 0x0, 0x4, 0xf, 0x40, 0x7}, 0x9a, &(0x7f0000004840)={0x5, 0xf, 0x9a, 0x3, [@generic={0x87, 0x10, 0x2, "c25378dc9fefec6cd5c46d0c36c0dc6440753804d1c80697b78448836345c33acaaaa3be8424a972a81bbf749b1aa54b393b66a973417fb8eb727c6b1b12d40a77f360a28a455b7205acbe31b17e40be59dacb1f435853a06f76300fdae50299712b3d218c808537c9ee1c9322d799dead468164d48a6df75fb2288bcef6ce41b600d81f"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0xe1, 0xf, 0x2, 0x401, 0xe7}]}, 0x6, [{0x4, &(0x7f0000004900)=@lang_id={0x4, 0x3, 0xc04}}, {0x40, &(0x7f0000004940)=@string={0x40, 0x3, "cc8c483fc52f5b1d3fa38a2caa3542ae217406ee6379bd9785e5983b9b0ed1b5fd552bae0b897ddb9458c2fe976024b0aae3a11da8c9a42b949e909340ea"}}, {0x76, &(0x7f0000004980)=@string={0x76, 0x3, "4985a060f4f6fde928ccc3a7b4444534a1c47c6cd3d2f29d0fbfd3ed3bf8dbbfc036746e8e8123f4318fbc16b5bae6cdd28e32b0c5f88902bae5fa8c66a56995e08f8531a470f52c0d9d9ff29ad427e7ddc5d597384809186f61027f586771cd5a2e16080bf29eb1ffc84a851eafa5bef826e7e1"}}, {0x1f, &(0x7f0000004a00)=@string={0x1f, 0x3, "5d677915166fbe06edfdec70ec2d9915073bcf218d037f397676f15271"}}, {0x18, &(0x7f0000004a40)=@string={0x18, 0x3, "4309d5a55a75efabbdff6237bb5a2e75983ee18edd08"}}, {0x4, &(0x7f0000004a80)=@lang_id={0x4, 0x3, 0x412}}]}) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000004b40)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xe, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x40, 0x5, 0xd}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0xf8, 0xcd}}]}}}]}}]}}, &(0x7f0000005040)={0xa, &(0x7f0000004b80)={0xa, 0x6, 0x310, 0x3, 0x7, 0x8, 0x8, 0xb2}, 0x5, &(0x7f0000004bc0)={0x5, 0xf, 0x5}, 0xa, [{0x87, &(0x7f0000004c00)=@string={0x87, 0x3, "d46521f54ec35353d04ac58fea3a55a2758624b4dfdcdd6e393f34cbb1439333e8d012895635474caecae2e970699ce56b065d6f18c757d20394bb62a8f96d96712defa4190c927357e1f6987b729a180136aee3473c78f5bcc24a93ff34400eee165203a6318a3d507e407aff084637605d8408d3b7c39324de285e69891b8969f5e612fd"}}, {0x94, &(0x7f0000004cc0)=@string={0x94, 0x3, "d79da05df6e4b95a06a5a5a3d4f2319afe2dec82fdb03150ba028252f1d08abb371a752070e02ff258de0d94d5fea86990ab6087b4e8dcec74fe9e3d00e2272de99819000b724159a0e6b6dc3bed3dbdf6723375efd04ac6d4c96efe335517f02a18f0be94939e729a4c2119db86dd14ae9c229728f32c4910301f92b85559eb7d4984fd9298c8ca620b1d1a86fb071590f9"}}, {0x4, &(0x7f0000004d80)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000004dc0)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000004e00)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000004e40)=@lang_id={0x4, 0x3, 0xc01}}, {0xd3, &(0x7f0000004e80)=@string={0xd3, 0x3, "69b1afbbfe9b4dab648f5f2afdc2e439a8fe5043377f9e3be1231cb2b7ac840e2b08dd75404731504940c653a93ff74d233418ee2e4b481ae0b404026f7c0f5cff24ff7326f027eb5dcd30a0311f3da93b4de765568607f9552280280499eb792e4357d616d4e8362b9c965e6aae18fc074059a2dc2dbab09387755db0c88a0e6b4915228bf44cdf00fc21860c96dc8e2824d245851c1e62f78a20f26b0f49ec831647b6dea88d725f9788705536bd2da66581a63d84f3444bc8ecfd3b5e20cf9a3deab8691f943f747d5c4b4c3207b9c5"}}, {0x4, &(0x7f0000004f80)=@lang_id={0x4, 0x3, 0x443}}, {0x3e, &(0x7f0000004fc0)=@string={0x3e, 0x3, "b6d318b2a9c5b8249a21ac9424549411c7aa227d735aa2704460f7b0a679dce64800a3a09774cffea1ab94454d8d76811d125c28fc6ea00e0afe51bf"}}, {0x4, &(0x7f0000005000)=@lang_id={0x4, 0x3, 0x2c01}}]}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000005100)=0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000005140), 0x2, 0x0) 30.517573422s ago: executing program 6 (id=1554): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff", @ANYBLOB="51cebb379c3a4688d8db677b91cdce17748892d80002b5cfe3e5febc6e8fb1cb722f48add1d896841d222eab7fc2abb27838833b2e3fcb0c2606066065bd8577b2a9f507a05ed6a66e65f31ea9d0e0651d571b25f06ec25390ab576a7c46594ca57e5874e3d01bd782f4f4202221090400000000000000199d0a899106269a3a403965552be12c1f3cc140a6ecd6f2eafeeec7fb08f80f5613fd0e963e6eda36f7f92e662cd803e560b22790f9e4a3e1bd6d277d46b5f1f8582be462170ca18b82642eafd81860782903fff79c46"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') getdents64(r1, &(0x7f0000002f40)=""/4077, 0xfed) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async, rerun: 64) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 64) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRES64=r0], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000014) (async) syz_usb_disconnect(r2) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100133dad3ff1014109034420102030109021200010b07401309043fee00ffffff0ec9904f7688aab5e5892fc2c17759ab472c447e1743cc3420d0047bdcb3e604dc0f8770f012f1b2f38a0455584b31b3b975de05aa37a19378"], 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) (async) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) 29.628071986s ago: executing program 6 (id=1557): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000840) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) socket(0x22, 0x2, 0x4) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 29.499184135s ago: executing program 3 (id=1558): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x101542, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000010}) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x280, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 29.320269351s ago: executing program 3 (id=1560): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = syz_clone(0xc0300000, 0x0, 0xffffffffffffffe9, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x10, r1) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)={@map, 0xffffffffffffffff, 0x13, 0x0, 0x0, @void, @value}, 0x20) ptrace$getregs(0xe, r1, 0xc, &(0x7f0000000540)=""/229) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x74, 0x2, 0x6, 0x201, 0x6000000, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x74}}, 0x0) recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000440)=""/140, 0x8c}], 0x5}}], 0x3ffffffffffff61, 0x2, 0x0) 28.731634759s ago: executing program 3 (id=1562): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12015001020000102501a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a00000809ec800300040000000904010000000000000904010102020d0000090582021000"], 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000001000)={0x2000200e}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x5, 0x1, 0x4ffffffd, 0xa80, 0x5, 0x8, 0x4, 0x8000009, 0x5, 0x707f, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0}) unshare(0x10000) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 27.593810811s ago: executing program 6 (id=1564): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') r1 = syz_io_uring_setup(0x3488, &(0x7f0000000500)={0x0, 0xd2a7, 0x10100, 0x1000, 0x181}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x6216, 0xafae, 0x10, &(0x7f0000000080)={[0x8000000000000000]}, 0x8) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000001040)={0x0, 0x1, 0x4, 0x20, 0xfc, "0000e5ff0100"}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x2000, 0x0) 27.402298179s ago: executing program 6 (id=1566): syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket(0x10, 0x80002, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f0000000000), 0xf, 0x101800) syz_usb_connect(0x6, 0x24, &(0x7f00000001c0)=ANY=[], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 26.049024175s ago: executing program 3 (id=1571): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r1 = mmap$KVM_VCPU(&(0x7f0000ffa000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x8) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffff8]}}) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0xffffff01, 0x3, 0x8, 0x4, "9a8525cac8c3e539170a9b6fe0d80055c8a6f6f374cf2cac6d03a215b8496b9282aedaa825ac854264282cbaf669af201d763901afc0d542a6b8feba2939a3cf", "d39b5bdb9df32d0e229abf75b3e43b8e75ab3236904f74e1b37d187432b586fc", [0x6, 0x2]}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) readv(r2, &(0x7f0000000400)=[{&(0x7f0000000140)=""/234, 0xea}], 0x1) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000340)="b799cbc18248f0e71446324ee69d75cd17c97ea5d1e523b1582f3a4152e3bc6a036b69cce164012751fe0f15914ad4683b93a2906e103813751ff59aea1be9b0e6ab174daa3dac60", 0x0, 0x48) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000340)="b799cbc18248f0e71446324ee69d75cd17c97ea5d1e523b1582f3a4152e3bc6a036b69cce164012751fe0f15914ad4683b93a2906e103813751ff59aea1be9b0e6ab174daa3dac60", 0x0, 0x48) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000004c0)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}) r5 = landlock_create_ruleset(&(0x7f0000000080)={0x100, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) (async) landlock_restrict_self(r5, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x81) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x0, 0xa7}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000080)={0x9, 0x5, 0x1}) (async) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000080)={0x9, 0x5, 0x1}) socket$pppoe(0x18, 0x1, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_pidfd_open(0x0, 0x0) (async) syz_pidfd_open(0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x1a4, 0x41, 0x107, 0x0, 0x7, {0x2, 0x7c}, [@nested={0x4, 0x31}, @nested={0x18c, 0x1, 0x0, 0x1, [@typed={0x8, 0xb7, 0x0, 0x0, @u32=0x4}, @nested={0xbc, 0x72, 0x0, 0x1, [@nested={0xb6, 0xbf, 0x0, 0x1, [@generic="101605171f2cae6e02e35137e6c95b8283449d81e8e1b21653226c06c6f7d3035c92b755e8bd9c9f860b83056a1383bd3e5f152c5a6bac913291fb16852a82bd79e0cc83c28ff45691a66046302ec16f0808b62f9588249849d647c4cdcc1bf662f8f044e432744e7bd10d10775fff0acaa7b4aaedd577c125d212b7a3b5742e5768d7a04a70cba73452ff8fb9a17a9cb30e484d37c13e3573b24933a3959ff032a7", @typed={0x8, 0x141, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3b}}, @typed={0x8, 0xf2, 0x0, 0x0, @uid}]}]}, @typed={0x8, 0x6d, 0x0, 0x0, @pid}, @nested={0x18, 0xbf, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}]}, @nested={0xa2, 0x3b, 0x0, 0x1, [@typed={0x8, 0x122, 0x0, 0x0, @fd}, @typed={0x8, 0x149, 0x0, 0x0, @u32=0xfffffffc}, @generic="3e3707a3d5850b61589e913d211694d95177fdfe57f360741e8e65feb4bd4c6014906f0b92f7816efd7b39d96ab363846c48ff18234de556b34e4fe7f744f570abbde67017ff5d0473e68a22d1f40d6e0afd99a9918833fd41be2b811b2e67c031b4bf30562bd6d58ec2ce3e68272b8e8d5468039ba4ffeba662", @typed={0x8, 0xfa, 0x0, 0x0, @u32=0x9b}, @typed={0x8, 0x12e, 0x0, 0x0, @str='wg0\x00'}, @nested={0x4, 0x5e}]}]}]}, 0x1a4}}, 0x4010) 25.403559127s ago: executing program 6 (id=1575): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, r0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x404000) r1 = syz_usb_connect(0x0, 0x68, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x13, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000180)={0x0, 0x14, 0x8f, "00f71fd9ae768314ea903ff971388ad4ca7959a9790dab141efec85a287234ff815e862b6123c7fa91dff59e5550e347f24c0db9c7fbf49b48b64960819e380de41cc94782530e70f2c53f858ebd0560fe8eafdaa6d199b7cca1274f851af650c6db67d5dcab3fe889e00c5008af777a602c3424ffb35adaa2b46c46e1b1ddab97f9b3e5d65b75722f673dd76fbd24"}, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000380)={0x20, 0x8, 0x6, "d94be4f7acbb"}, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWCHAIN={0x8c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xf2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x10}}, 0xd0}}, 0x24004000) 25.364108141s ago: executing program 3 (id=1576): r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x8b28, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) (async, rerun: 32) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) (rerun: 32) ioctl$EVIOCGSW(r3, 0x80111500, &(0x7f0000001440)=""/4082) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) (async, rerun: 32) r4 = socket$rxrpc(0x21, 0x2, 0x2) (rerun: 32) getsockopt(r4, 0xb733ad0, 0x6, 0x0, &(0x7f0000000000)) 24.070482167s ago: executing program 5 (id=1577): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) (async) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x80000) r2 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) readv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) (async) readv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) readv(r4, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) ioctl$FBIOPUTCMAP(r6, 0x4605, &(0x7f00000001c0)={0x4, 0x92, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r7 = socket(0x8, 0x3, 0x8001) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0xc}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0xc}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfa, {0x0, 0x0, 0x0, r12, {0x0, 0xfff3}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x24, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) (async) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x24, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) 23.929709891s ago: executing program 3 (id=1579): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES64=r1], 0x28}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) getdents64(r2, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x1}]}, 0x1c}}, 0x20000000) 23.904080745s ago: executing program 4 (id=1580): select(0x300, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0xfefd, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x5319) 23.759158181s ago: executing program 4 (id=1581): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x4) socket(0x6, 0x4, 0x2) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000100)=""/55) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x200004, 0x804, 0x4, 0xf, 0x120000, 0x7f, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x6, 0x1], 0xffff1000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000040)=@x86={0x7, 0x72, 0x81, 0x0, 0xd8, 0x7, 0x8, 0xff, 0x78, 0xd4, 0x21, 0x5, 0x0, 0x200004, 0x8, 0x4, 0x1, 0x3, 0x0, '\x00', 0x79, 0xe}) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x32314152}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000400)={0x7, 0x7, 0x2, {0x1, @vbi={0x8, 0xfffffff8, 0x9, 0x20363159, [0x7, 0xef], [0xe, 0x5], 0x2}}, 0x3}) r8 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) syz_usb_disconnect(r8) r9 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000800)={@ifindex, 0xffffffffffffffff, 0x15, 0x12, 0xffffffffffffffff, @void, @value}, 0x20) 22.303514546s ago: executing program 6 (id=1582): landlock_create_ruleset(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) syz_80211_inject_frame(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="f4000600ffffffffffbfffffffffffff"], 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000240)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000300)=[{r5, 0x205}], 0x1, 0x0, 0x0, 0x0) connect$unix(r5, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000340)={'virt_wifi0\x00', 0x400}) 21.484562617s ago: executing program 5 (id=1583): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000006040), 0x803) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000280)={{0x3, 0x0, 0x1, 0x1, 0x11}, 0xffffffff, 0x29, 'id1\x00', 'timer1\x00', 0x0, 0xfff, 0x201, 0x10, 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x74, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0xaa, 0x8c, 0x6, 0x2, 0x1, 0x0, 0x4}}, {0x4}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x14}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, 0x0, 0x0) listen(r8, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000001ac0)={r9, 0x0, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r13, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) write$binfmt_elf64(r11, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x78) r15 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x400) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r15, 0x4020940d, &(0x7f0000000500)={0x0, 0x0, 0x0}) close(r11) ioctl$LOOP_GET_STATUS64(r10, 0x4c05, &(0x7f00000000c0)) mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) 20.662327257s ago: executing program 5 (id=1584): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1abe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x4}}, 0x20) r1 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}], 0x1, 0x40800) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x21, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="400c1f"], 0x0, 0x0, 0x0, 0x0}, 0x0) 20.603530894s ago: executing program 4 (id=1585): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)}], 0x1}, 0x4004) lsm_get_self_attr(0x64, &(0x7f0000000040)={0x0, 0x0, 0xdf, 0xbf, ""/191}, &(0x7f0000000140)=0x1c, 0x1) r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x27a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x36, [{{0x9, 0x4, 0x0, 0xb9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "cb8e7e34"}]}}, 0x0}, 0x0) 19.923512898s ago: executing program 4 (id=1586): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) (async) getsockopt(r0, 0x2, 0x1, &(0x7f0000000240)=""/60, &(0x7f00000000c0)=0x3c) (async) poll(&(0x7f0000000040)=[{r0}, {r0, 0x400}], 0x2, 0x483a4) fcntl$setpipe(r0, 0x407, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) (async) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x201, 0x0, 0x17, 0x34, 0x3}) (async) r4 = socket$kcm(0x10, 0x2, 0x4) socket(0x11, 0x800000003, 0x0) (async, rerun: 64) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) (rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) (async) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x3a, 0x6, 0x3, 0xfffffffffffff749, 0x6}) r7 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) ioctl$CEC_DQEVENT(r7, 0xc0506107, 0xfffffffffffffffd) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x20040840}, 0x0) 19.853350706s ago: executing program 4 (id=1587): r0 = syz_io_uring_setup(0x7046, &(0x7f0000000180)={0x0, 0x1061, 0x80, 0x4, 0x1ab}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000001500)="6c12a93ad50663a686493277e963eec81b456049bc2a6746304fe386732b539a0320ac7c3477a4153c15d357c026b603bac7164d00aefabf3908b6f7220c1bd1d6184fc30ceb461b1e3a2205bd14bd50ca80bcc32105987fa5d0590df302dcd8dd12b28e5dbda310d7fe52329723b54b6b1a2cc0125dcce28c712cfe0c8ad63ebab450585a058821ef58cfc90f0437a1539dea655dbb2ecef92dd68e1d5ae23b70a6eea86049e4427988046e2956f253983817ebd139a3e41c086370b9b5064b2e00e976af64eed3308aac24a2ce871071d00528d02c122db5cb2652eddf6027d8c802d6dc0734894f5d7e9fa0480e8585fc362268618b565b8cd95df1f2f82cb20cd279f961ced6d20fc2a069830f32fbde9551f259df5ab5a773a5a268efaa0ddf310719bd851751ca731a4f6595f1cbb8b9dced951b1ce042c08c6572651feb4ec041a9d07d095f5193105fccfe255b20be4b4f3ac571a1689a017e1d2534fae6e8f69e7b49c4b5ba384f54e46b4919b6ddd03816bb4993cac39bebb3f4fb5641a5faaf03f112752ccac78e5045fcc86f7986a5f5897f40f33b4fc17c90d0c8e0eabdcd518c8594b1f4c1fad50d061b0ccdb18c02a22cda1d55f840dcbe796ff7ba956ff8db9ed399790b0038ef6c4bbb0f7ab8af0c5b2f12fbe71129024fb4076c3daadaacd3774334364acd7f7218c8c846656b90a2a0cc6829774e7f39bb1df28088d58c52ec49b6fbbb9ae73c7522952550c69d11a8d0b1f08689a712921412a2d612577167d07ba75307bbed9baf54c52560bc18c34bd68cc38b953b1c0263dfdd196b51e412a52439ecc2c036f1e1f09fd6f28e1e7e320c539dd16a37045b9451b2e04bbad3e083646ce6417a5b30a52106c27a139841ab7aa77e6e6ac5321147dc2cf85f662283c1a2b6aec36c8ea5a9a9c32a1b2b24ecd4aa211c1418338672eb11a8b963f8f8647fcd5b5085a30bc366d13156edbee8c4d7aeeb19cd9a2a6e3012792b2c50ec1bf5282a939cb8ccf23bdb670fff978695d677aa209b136a8041d0fbb3fedc0bec49cb56ed9f6ccaf9d8a9a5004ed152902d08f0190771299049ad092ba53a927f6aa21772d209c4ba2bb9a95a4fba70b0c2e6153c5f9845893f99ce9c54f454be0e9a18e3983ce2cfe83f0d3d8d236887b42f94b59d8530cc59ea0c7542eb76d5d2111b385324cc40696fc7debe6f9717311974cd096bdb526dadc49de11f9b9062d0cc49cd554ded300d96f32e7882eb5317f420ab624962a61d134487b391111098492723a220a663f90c3a20f387f527c1a2fd84ad387626b3227caf3c83b9d2cf7d3cd36382c0375db210546577168ab3c742397b42870c2a86ec8f3d13cd2f21c7a1f79ed3412a7aa644eec73ca010f17e6b389767d0e44e5094dac725d6dbd33f199a22b85f0ac011eeef4e9e887d199437d75d391b855e3d57f50fcc279d3423fce6b8fd2c32758727819d7a6e3ee3110f2c6878bd95ca8d42d35abaa8a02f31d04cda51f4959ac8e1973c067ec15d4e1f50d6e6bd7cbcb65071c36d350626475c7ee4ea9b5dfc8ad8dd6b63c5540ccc392bd3aca1cdbb5c1194ba2b32fe6e8e96632ebba1f07e55944fd1a624377563e05c6f2c6045a274666ed5cc89a641b2a3747088a91fbfe15f1a13771ca74cb54c8a02803912b4de1fe0452d74b8e8f793df744d0f69b5d1a0aebc8f208a3d06819767b535a1831886f1d7c9e4fccb2e2372df9d4949863e1f2e3bb8bb4c9e8b8dd408e5af6e22da0c677189de56beb5ebfade4111930f697cb8c79ccff8f7e7574c2194a471b27a74e7e8b21d55d96a19dae2209fedb6b52b16ded4a3d5894df19711272e3eaca1b4786eb970976876aec7f95bb498fdda8dda5af0911f4a4fcde4b65a92c5914dc7bea3284f49184bee8b1acfbf6621bc0521c3549b3ef63f4ecda87433486728301370ebcd676c7e9f42ef8ed85b7616abcb046aee1814abed2fa9b7fb3abe1aaa89a390b4be5058fb1c3f3f149f52df0189d65c80b93bf65028a53de1942c34244b91e9492ec28408715743e9a9d9939c8f785c5f8d2cb600ffbac6babc2e52b2c04a4cf1f15787d3d7e555e642377746fe73c31dfbf1ebd985bc4144665dcbc5d3bf4cc85396c5af2ff4af48a87a5dfa00ef67b19ff8bc3999325568c4b58b18b83c816f9f7533babbcfe2cc0223c3ced95ffe3cd11d1ba4951d6a2dca74a2446829ac03c59d2b448f6a5251a8e4f18f7bb40ec96216d4af452fc93f03e991b4550030cb645f63eaef9c166452d77f3d165c2ba669de4f224bc536541ea479b214edebf2d061f32606cbd4a7a9d08ea9cd8edf29b0797caa08bbac23a3e9b9ea0686ad0a1d4ae5f7c7809e4d95039fb2e6902151120d6fa9d102fdbbd156a251c5f70c62a70097743412409add1e051290ae573e56fafcb0dc1ef910a505ea2756bbaa5acd1cc3192fbb5bb63812c2a284666f84665437e34303459a89b79ee51bcbfd6a5eae94604a0e65610348bde5d94adcf31509e350b1af2ec2fd879a3d3f2d631f99978c9bade641be1d95563ad5475d0baca5f7cb22700484501aa9b4a6a343fb08ff408d833366b3b40893d07f20e4f8a2502aff4d741ac07382f15901059265881702ce8d86405c4f6c654a7cf1cf29c34cb7b00c84418816cc4b6725c87a807fd3f82a056b65230bd3cf8f91e891c17b1e528b372df913544a84071886ff7692272744a3637045217d769344f618cd556d17c9ae221363dfe3ca5d550fdf6b6a5dfbfbc3a1c263dd8e5bc41519924a59e64e651da8468902054e18827b7bbfabd49a3fa06af65586bbb1b62cc1a9c26f7809f3c2e7b6967453bc4c45141a2ed4bf4f53228318e5ed68b927bc784bb6a555febc0588effa8d376d0877c2940ab69a1154a7f599d79b902329b59b8cf14c4f988c5573a0feec7048168421384e623379ceb1775746bcc761a82869c13fecf4d9c649c477cd117fcd6790cce9388f67005af3fdbdc33bd17cf24868b6325e44519b01e3ee0412da851d86fd616f9ef6077280ee5043abda9a25c623054c9d9a778e486f992f98ae1738b93dec565ea663e1f58a7ea1f845da00bb264f618d66d66c736da3732eb232cc9374c27d2cb9580766c586653b5f20e0ba81b5494aba7f46c0f9f5e008574070b2000c62ac4c0c5430f14ff05991af1ca761a52c38277fa2fa4d8d9a3e3fa5b73cd9ccc60d5570d17461354c991405a2dc67662c3b446821561f3fe93c90ba7e1ec8daf3b73dca32cf4622cd199249fdb6ce01ea05b34aed72a1053edd85b87ae460f65a0d1069c747b029d910af12cc7df4a69fa29a17bdd2f612e0fe5aac7c7326d320ed805524d4af257a16ce65a6b16dc0fe4172b8b10921bfbb4ad50ebc1fac8850caeadffe8243a10c9a69155a64e3090e1595c229e38473a05e558e41c90a1e0e4cdd28fac1ae234d382c7f97589d358ea789a5b156104bf224ea9fdb054e8cd8798f3464f3b3c9f2e093fdaebe639d85c9e369648ba74d9d3286c645a93501341c42e484b2261d01b3d7e6d15944c28781fed744822a04a33bdd98c7a3a6d83753606b23066a92ae17b5d3e9ae54a62134241e1ef387c5142f63725bb2bcd3d08936402bc218831c779854cf98b01334d905a2e7db16cf25d267abcc79328dacbea0f2ea5769f68cf98e3be43c8d2266d216042caffe469e2ccdfb58e197227b5ef2ee3a41eadc0049b78169f5bfdc7975ec3d5bacc3aab3b283d6dc694578769853c660a6a2f95b4b6efec458ab9dd5a06277357223418e7ce3809a7c9d326b418e6473a13acb2f67bffeb7aa8b490a0226a472bf387c34cc0593106342d6c4f6a8e399ae14d386c3a1dce743bc81ea1cca2b3647e2b8dccd65b083ac1fd23c7cd056ea53dcebf978cdac8d69af819fcf94d02cf44b55b5afcb0fa00e459b212ee4e0cdce01ccfce915dd53eef308659d29ccde90a9dec0614981665e71d1d3da8c2c84e47aed007350442cdc67051e8a097d0125b8f98b74b80907cfa413bf80e65ad3d82b0628b68284522d1e5ec6d43e42ec37e50334cc9e4578be08542fbb42e8798de44ae0b2316fd8bf47c45dc0c713445a80d419900336a032d0b293b6401e0ca1cf90c346fc818dab6a307e29e3403901ace0d6e004e8e3244f05aae6092abfe69bfc523e8eb0fd8e233cd506594c366ab41ac98a143c72dd7eab368b574a7822e5b3930232ac447d23411736ae59edbb6ecf1e5cd25dfb94cc0c4bd5fcc8ad79e9ee5345e3c01567b52de7d23ffa3a6ec67c494f060e769788bdce7df88f91db17998de12f63683d44d442aad49537dd19f4f0e689f0e2a17bcb81f4d28ec092599cbe535ff83fcafcf79bb744f0b82c32181f873995ee62de9c22606f8d302743b9ac635a89624b922c95be582bddfdddcf42064e4a27f90556b1263f614957ca941be9a088f4cd64298954da61dc0152f87a44248d229593174d9400f3d55ddd9d4cb1e5d2ce5145048c995927fa2271f4632bf2c8fabf3916ef1e1bce98a2f739da651ce8247147b5d8c1ea35d9bd2d3a291f3ae79195b09e9bc7f4938d2047b463810c7d3132baf72122c8b2f63bcc996616d90e158af69ad96afd0e0090b4c91b8c5a97b6a731a2acae4c313bd1ba776b36c57d3db29a216f7636b29c743af6e4084dbdb801e092c0f4216b4fca584b6693743fc7aa1409caeb8e6d444bb1a0b791c270349f2265e84b1f09d5a24b366a2404e2a55f9d39736c0d2e4494172b90ed33c6ff9ee37d6cb6309c827b7df9697873fb98a8e6b35a799e26f9decad9b857e3a2391a016bf4dbf31ef1f3358af6656b06e7659f380415815e4557ee536bca885169899bb1a2561202188e57691104bbeca27364058573f42c00252999aae6af45f6181effea2d6108067ea62b0679ab94a62dc577711baa64c3bd080ded5b8f12a7d8590e5e62db39ed0ef5604467b7acb001e54dad6241d553c5cc8fdf629866ba7fbb74c4bdab360fad718baa1f753ebb06acdc88b6d90c17d7cd0db6fae7c30b60ef6f27c9c36c1d508e0381f844bf9a36ad171e173e998d347eeb4e983fb9bcebec2b4079447c28b31bcffc8aefbe0501ab6e3be414cd82be919e7b4de4194a5a8d840bb267489d0b10607a97fbaa5e875bb1fb6446c27899140adb98dbdb39dd7c295d2e0fd50413d2bac04148c644b4e5825fc669b4b14b90f3de555dabd1e35c3aef4806398b78700edaa56077b34726bd1212e442295c4704cd6c8e1d3734a0fac3dd9ed12addf46b9ff830d73efb6ecf262a8eaa60d012c115a6029f610b574fcc4b7c866516b6825111e8b1a83af0a7a35f55b197cbab41122a3986fdf60572e706893cf7c5b930bad12b9226f396aa93e08b44d907e64bf1c6089aaf03bc859e73ecb3c94411f72cf0e17958bcff8a361b5c518d6405f2848d7675f2542ecf3ae6ca34d55acee40227a65544b385c5963d88450cdd7d365c5721a66537a3581c8716509e3d36fcd541cb22cce47bfcfb416503bcd701f569c855b4ac3e1a1ca51dcf958dd0e57b9e50d8a2864de64714ec9c5321b5b48a4c83b27d65671acece7fd03e56fc81fb17e338020a6e1cd0a7fd774acda3a301fb0e6c5f1597c5927443af67bea655b17c406726c61ee7fb73620498aff5b7adc3839b6af13f6662ab1a49809d965b092680ade90400445b644daac2dd5469214cda63513b43ec93feb5616e3fee35bc45cd16dcfa62fb8ae5db338a61215e64166a1621ab44f381d7f4", 0xffe}, {&(0x7f0000000140)="ecc5", 0x2}], 0x2, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 19.482266244s ago: executing program 4 (id=1588): socket$inet6(0xa, 0x3, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x14d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000680)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0xfe, 0x6d, 0x0, 0x8, 0x9}, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x407, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x8, 0x6, 0x44495658, 0x9, 0x86, 0x4, 0x2, 0xdd4, 0x1, 0x3, 0x1, 0x2}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r5, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000100)={0xa, 0xff7f, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c) sendto$inet6(r6, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x4001058a, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000006040), 0x803) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000540)={{0x3, 0x0, 0x1, 0x0, 0x11}, 0xffffffff, 0x29, 'id1\x00', 'timer1\x00', 0x0, 0xfff, 0x201, 0xf9f6, 0x4}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xfffffffffffffee2, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 19.019323423s ago: executing program 5 (id=1589): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000000000040160c030000000000000109022400010000d00009040000010300000009210e0000012207000905810320000000fc99091fc44e8386b6f1c5045b6e8089222e2c9ba2ba3b386c9fb3b4034e5780b2d62fe621e724348fbb3f833e61e289d26da2a0dd166578c8f157dc3a7b7d5684e408a34de979b537de43fba22e4e5dbd69bf94b0ec1e3d071f620fc5ed0e285b785dc9d5d473bcd16ba8a278ca75a9671d544df9ff0daa3cb3a364da2b4bf7f19f12a81600047f7110611ddfd8ace8622727fb422141"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a31000000000800044000000000090001"], 0x64}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRESOCT=0x0], 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) (async, rerun: 32) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x498c00) (async, rerun: 32) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x40810) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x8402, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) (async, rerun: 32) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x2, {0x0, 0xf0, 0x1}, 0xff}, 0x18) (async, rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r8, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) 16.008705658s ago: executing program 5 (id=1590): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x44) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000003600"/17], 0x50) r1 = syz_io_uring_setup(0x24fc, &(0x7f0000000180)={0x0, 0x6386, 0x10580, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='1'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpid() fcntl$setownex(r5, 0xf, &(0x7f0000000100)={0x2, r6}) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r7) 15.135151242s ago: executing program 5 (id=1591): ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x6, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4, 'syz0\x00', 0x0}) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000480)={0x7, 0x8, 0xfa00, {r1, 0x8}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff30"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000180)={0xfffffffffffffcd2, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x28000000000000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000240)=[{0x48, 0x0, 0x0, 0xffefffff}, {0x6}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r7 = signalfd4(r6, &(0x7f0000000300)={[0x6]}, 0x8, 0x80800) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f0000000580)={'security\x00', 0x0, [0x5, 0x36, 0x4, 0xf, 0x3ff]}, &(0x7f0000000340)=0x54) r8 = socket$packet(0x11, 0x8af4ff5a5c45cb8d, 0x300) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendto$packet(r8, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$IPT_SO_GET_ENTRIES(r8, 0x0, 0x41, &(0x7f0000000800)=ANY=[@ANYBLOB="7365637572697479000000000000000000000000000000000000000000000000d0000000fcae183c90a2dafc6c8afd2ff330e28f151403730028dfdfefcfa17c7db62e48409fdbbe46e85c8291eb2756225bc04057ec3b8641c60c1d1d50903a932bf1934009174abb36e7d08b9786d40452f951dbf1502d95209b228b9390f352e61a905071c49e9c2cb78ef7a0122a07d4b9bebaf775883116ed209acde7e220eed57a71d8cd03443127de32b7aeb04e56e426ca18fda0baed"], &(0x7f00000001c0)=0xf4) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') 8.014331284s ago: executing program 35 (id=1579): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES64=r1], 0x28}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) getdents64(r2, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x1}]}, 0x1c}}, 0x20000000) 6.967142442s ago: executing program 36 (id=1582): landlock_create_ruleset(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) syz_80211_inject_frame(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="f4000600ffffffffffbfffffffffffff"], 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000240)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000300)=[{r5, 0x205}], 0x1, 0x0, 0x0, 0x0) connect$unix(r5, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000340)={'virt_wifi0\x00', 0x400}) 4.008549421s ago: executing program 37 (id=1588): socket$inet6(0xa, 0x3, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x14d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000680)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0xfe, 0x6d, 0x0, 0x8, 0x9}, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x407, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x8, 0x6, 0x44495658, 0x9, 0x86, 0x4, 0x2, 0xdd4, 0x1, 0x3, 0x1, 0x2}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r5, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000100)={0xa, 0xff7f, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c) sendto$inet6(r6, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x4001058a, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000006040), 0x803) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000540)={{0x3, 0x0, 0x1, 0x0, 0x11}, 0xffffffff, 0x29, 'id1\x00', 'timer1\x00', 0x0, 0xfff, 0x201, 0xf9f6, 0x4}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xfffffffffffffee2, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 0s ago: executing program 38 (id=1591): ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x6, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4, 'syz0\x00', 0x0}) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000480)={0x7, 0x8, 0xfa00, {r1, 0x8}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff30"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000180)={0xfffffffffffffcd2, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x28000000000000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000240)=[{0x48, 0x0, 0x0, 0xffefffff}, {0x6}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r7 = signalfd4(r6, &(0x7f0000000300)={[0x6]}, 0x8, 0x80800) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f0000000580)={'security\x00', 0x0, [0x5, 0x36, 0x4, 0xf, 0x3ff]}, &(0x7f0000000340)=0x54) r8 = socket$packet(0x11, 0x8af4ff5a5c45cb8d, 0x300) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendto$packet(r8, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$IPT_SO_GET_ENTRIES(r8, 0x0, 0x41, &(0x7f0000000800)=ANY=[@ANYBLOB="7365637572697479000000000000000000000000000000000000000000000000d0000000fcae183c90a2dafc6c8afd2ff330e28f151403730028dfdfefcfa17c7db62e48409fdbbe46e85c8291eb2756225bc04057ec3b8641c60c1d1d50903a932bf1934009174abb36e7d08b9786d40452f951dbf1502d95209b228b9390f352e61a905071c49e9c2cb78ef7a0122a07d4b9bebaf775883116ed209acde7e220eed57a71d8cd03443127de32b7aeb04e56e426ca18fda0baed"], &(0x7f00000001c0)=0xf4) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') kernel console output (not intermixed with test programs): 9144][ T24] usb 5-1: Product: syz [ 468.023954][ T976] usb 7-1: USB disconnect, device number 80 [ 468.038432][ T24] usb 5-1: Manufacturer: syz [ 468.064811][ T24] usb 5-1: SerialNumber: syz [ 468.685387][T11638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.820416][T11638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.839857][T11647] loop8: detected capacity change from 0 to 1 [ 468.858515][T11647] Dev loop8: unable to read RDB block 1 [ 468.877393][T11636] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 468.906282][T11647] loop8: unable to read partition table [ 468.933655][T11647] loop8: partition table beyond EOD, truncated [ 469.007463][T11647] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 469.349627][ T976] usb 7-1: new full-speed USB device number 81 using dummy_hcd [ 469.552994][ T976] usb 7-1: config 0 has an invalid interface number: 23 but max is 0 [ 469.567336][ T976] usb 7-1: config 0 has no interface number 0 [ 469.629610][ T976] usb 7-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 469.794407][ T976] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.838111][ T976] usb 7-1: Product: syz [ 469.863824][ T976] usb 7-1: Manufacturer: syz [ 470.173459][ T976] usb 7-1: SerialNumber: syz [ 470.224365][ T976] usb 7-1: config 0 descriptor?? [ 470.277011][ T976] ftdi_sio 7-1:0.23: FTDI USB Serial Device converter detected [ 470.344666][ T976] usb 7-1: Detected SIO [ 470.356204][ T976] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 470.639012][ T976] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 470.825669][ T976] usb 6-1: config index 0 descriptor too short (expected 65069, got 45) [ 470.844878][ T976] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 470.915929][ T976] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.919547][ T24] usb 5-1: 0:2 : does not exist [ 471.011695][ T976] usb 6-1: config 0 has no interfaces? [ 471.017269][ T976] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 471.053035][ T24] usb 5-1: USB disconnect, device number 86 [ 471.090778][ T10] usb 7-1: USB disconnect, device number 81 [ 471.121510][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 471.164495][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.177728][ T10] ftdi_sio 7-1:0.23: device disconnected [ 471.229980][ T976] usb 6-1: config 0 descriptor?? [ 471.247179][T11665] binder: 11664:11665 ioctl c0306201 2000000003c0 returned -14 [ 471.427455][T11667] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1189'. [ 471.535787][T11663] netlink: 'syz.5.1187': attribute type 2 has an invalid length. [ 471.604963][T11663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.650904][T11663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.703713][ T24] usb 6-1: USB disconnect, device number 92 [ 471.786627][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 471.786648][ T30] audit: type=1326 audit(1747048035.710:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.4.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d838e969 code=0x7ffc0000 [ 471.989045][ T5928] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 471.996792][ T30] audit: type=1326 audit(1747048035.710:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.4.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d838e969 code=0x7ffc0000 [ 472.070330][ T30] audit: type=1326 audit(1747048035.750:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.4.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fa0d838e969 code=0x7ffc0000 [ 472.149000][ T5928] usb 7-1: Using ep0 maxpacket: 16 [ 472.149454][ T30] audit: type=1326 audit(1747048035.800:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.4.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d838e969 code=0x7ffc0000 [ 472.174873][ T5928] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 472.189897][T11621] syz.2.1175 (11621): drop_caches: 1 [ 472.219013][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.248858][ T5928] usb 7-1: Product: syz [ 472.259385][ T5928] usb 7-1: Manufacturer: syz [ 472.279596][ T5928] usb 7-1: SerialNumber: syz [ 472.297848][ T30] audit: type=1326 audit(1747048035.800:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.4.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa0d838e969 code=0x7ffc0000 [ 472.310225][ T5928] r8152-cfgselector 7-1: Unknown version 0x0000 [ 472.359251][ T5928] r8152-cfgselector 7-1: config 0 descriptor?? [ 472.418898][ T30] audit: type=1326 audit(1747048035.800:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.4.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d838e969 code=0x7ffc0000 [ 472.498763][ T30] audit: type=1326 audit(1747048035.800:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.4.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d838e969 code=0x7ffc0000 [ 472.605608][ T30] audit: type=1326 audit(1747048035.810:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.4.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa0d838e969 code=0x7ffc0000 [ 472.679239][ T30] audit: type=1326 audit(1747048035.810:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.4.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d838e969 code=0x7ffc0000 [ 472.737439][ T30] audit: type=1326 audit(1747048035.810:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.4.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa0d838d2d0 code=0x7ffc0000 [ 472.793731][ T5928] r8152-cfgselector 7-1: USB disconnect, device number 82 [ 472.876354][T11694] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1198'. [ 472.893276][T11694] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1198'. [ 472.904031][T11694] netlink: 'syz.3.1198': attribute type 6 has an invalid length. [ 472.928623][T11694] netlink: 'syz.3.1198': attribute type 5 has an invalid length. [ 472.951664][T11694] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1198'. [ 472.959164][ T10] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 473.019241][ T5927] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 473.109115][ T10] usb 3-1: device descriptor read/64, error -71 [ 473.191416][T11698] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1199'. [ 473.204240][T11700] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1199'. [ 473.232180][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 473.244612][ T5927] usb 5-1: unable to get BOS descriptor or descriptor too short [ 473.269468][ T5927] usb 5-1: config 1 interface 0 has no altsetting 0 [ 473.286758][ T5927] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 473.296304][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.299853][T11700] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1199'. [ 473.315956][ T5927] usb 5-1: Product: syz [ 473.323287][ T5927] usb 5-1: Manufacturer: syz [ 473.328164][ T5927] usb 5-1: SerialNumber: syz [ 473.349049][T11698] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1199'. [ 473.362365][ T10] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 473.491751][T11631] delete_channel: no stack [ 473.496452][T11631] delete_channel: no stack [ 473.548967][ T10] usb 3-1: device descriptor read/64, error -71 [ 473.679406][ T10] usb usb3-port1: attempt power cycle [ 473.782779][T11691] openvswitch: netlink: Actions may not be safe on all matching packets [ 473.935973][T11712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1204'. [ 473.956205][T11712] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1204'. [ 474.000286][ T5832] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 474.149049][ T10] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 474.179644][ T10] usb 3-1: device descriptor read/8, error -71 [ 474.253133][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.271823][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.318260][ T5832] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 474.379254][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.428987][ T10] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 474.463879][ T5832] usb 4-1: config 0 descriptor?? [ 474.473046][ T10] usb 3-1: device descriptor read/8, error -71 [ 474.589787][ T10] usb usb3-port1: unable to enumerate USB device [ 474.739018][ T5928] usb 7-1: new full-speed USB device number 83 using dummy_hcd [ 474.879581][ T5928] usb 7-1: device descriptor read/64, error -71 [ 475.119024][ T5928] usb 7-1: new full-speed USB device number 84 using dummy_hcd [ 475.179471][T11710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.216198][T11710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.249153][ T5928] usb 7-1: device descriptor read/64, error -71 [ 475.347225][ T5832] usbhid 4-1:0.0: can't add hid device: -71 [ 475.369943][ T5928] usb usb7-port1: attempt power cycle [ 475.406932][ T5832] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 475.464976][ T5832] usb 4-1: USB disconnect, device number 88 [ 475.728924][ T5928] usb 7-1: new full-speed USB device number 85 using dummy_hcd [ 475.789703][ T5928] usb 7-1: device descriptor read/8, error -71 [ 475.834982][ T5927] usbhid 5-1:1.0: can't add hid device: -71 [ 475.841136][ T5927] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 475.891779][ T5927] usb 5-1: USB disconnect, device number 87 [ 476.080237][ T5928] usb 7-1: new full-speed USB device number 86 using dummy_hcd [ 476.113475][ T5928] usb 7-1: device descriptor read/8, error -71 [ 476.234239][ T5928] usb usb7-port1: unable to enumerate USB device [ 476.483418][ T5927] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 476.551304][T11747] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1214'. [ 476.659514][ T5927] usb 5-1: device descriptor read/64, error -71 [ 476.829324][ T10] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 476.898981][ T5927] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 476.969807][ T10] usb 3-1: device descriptor read/64, error -71 [ 477.081515][ T5927] usb 5-1: device descriptor read/64, error -71 [ 477.185773][T11631] syz.5.1177 (11631) used greatest stack depth: 19560 bytes left [ 477.209400][ T5927] usb usb5-port1: attempt power cycle [ 477.212576][ T10] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 477.358989][ T10] usb 3-1: device descriptor read/64, error -71 [ 477.535907][ T10] usb usb3-port1: attempt power cycle [ 477.618951][ T5927] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 477.674392][ T5927] usb 5-1: device descriptor read/8, error -71 [ 477.887896][T11763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.899913][ T10] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 477.931394][T11763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.942721][ T10] usb 3-1: device descriptor read/8, error -71 [ 477.956472][T11763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.970751][ T5927] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 478.036986][T11764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.048728][ T5927] usb 5-1: device descriptor read/8, error -71 [ 478.089359][T11763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.100459][T11764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.123189][ T976] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 478.146827][T11766] netlink: 'syz.5.1220': attribute type 1 has an invalid length. [ 478.179095][T11766] netlink: 'syz.5.1220': attribute type 2 has an invalid length. [ 478.189807][T11763] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1219'. [ 478.199138][ T10] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 478.216272][ T5927] usb usb5-port1: unable to enumerate USB device [ 478.228992][T11763] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1219'. [ 478.230814][ T10] usb 3-1: device descriptor read/8, error -71 [ 478.319188][T11763] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1219'. [ 478.362262][ T10] usb usb3-port1: unable to enumerate USB device [ 478.371870][ T976] usb 7-1: Using ep0 maxpacket: 16 [ 478.499044][ T976] usb 7-1: device descriptor read/all, error -71 [ 478.539155][ T5832] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 478.689481][ T5832] usb 6-1: Using ep0 maxpacket: 32 [ 478.697548][ T5832] usb 6-1: unable to get BOS descriptor or descriptor too short [ 478.707474][ T5832] usb 6-1: config 7 has an invalid interface number: 128 but max is 0 [ 478.716667][ T5832] usb 6-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 478.906666][ T5832] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 478.928157][ T5832] usb 6-1: config 7 has no interface number 0 [ 478.943503][ T5832] usb 6-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 478.973132][ T5832] usb 6-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 478.987802][ T5832] usb 6-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 479.004416][ T5832] usb 6-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 479.022927][ T5832] usb 6-1: config 7 interface 128 has no altsetting 0 [ 479.037141][ T5832] usb 6-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 479.049355][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.057434][ T5832] usb 6-1: Product: syz [ 479.066964][ T5832] usb 6-1: Manufacturer: syz [ 479.091428][ T5832] usb 6-1: SerialNumber: syz [ 479.115048][T11768] raw-gadget.6 gadget.5: fail, usb_ep_enable returned -22 [ 479.309450][ T10] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 479.470267][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 479.485305][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 479.503111][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 479.523159][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 479.547071][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.567582][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 479.586186][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.807704][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 479.815148][ T10] usbtmc 4-1:16.0: can't read capabilities [ 480.015242][T11774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.024494][T11774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.044500][ T5927] usb 4-1: USB disconnect, device number 89 [ 480.413687][T11789] veth2: entered allmulticast mode [ 480.687128][T11786] netlink: 'syz.2.1227': attribute type 10 has an invalid length. [ 480.733030][T11786] tipc: Resetting bearer [ 480.913187][T11800] netlink: 146840 bytes leftover after parsing attributes in process `syz.4.1232'. [ 481.049105][ T10] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 481.204651][ T5832] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 481.212325][ T5832] usb 6-1: MIDIStreaming interface descriptor not found [ 481.232343][ T10] usb 7-1: config 3 has an invalid interface number: 151 but max is 1 [ 481.240905][ T10] usb 7-1: config 3 has an invalid interface number: 181 but max is 1 [ 481.304905][ T10] usb 7-1: config 3 has an invalid descriptor of length 246, skipping remainder of the config [ 481.329519][ T5832] usb 6-1: USB disconnect, device number 93 [ 481.344123][ T10] usb 7-1: config 3 has no interface number 0 [ 481.357388][ T10] usb 7-1: config 3 has no interface number 1 [ 481.370733][ T10] usb 7-1: config 3 interface 151 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 481.392164][ T10] usb 7-1: config 3 interface 151 altsetting 8 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 481.415739][ T10] usb 7-1: config 3 interface 151 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 481.436151][ T10] usb 7-1: config 3 interface 151 altsetting 8 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 481.456101][ T10] usb 7-1: config 3 interface 181 altsetting 16 has a duplicate endpoint with address 0x1, skipping [ 481.469098][ T10] usb 7-1: config 3 interface 181 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 481.482523][ T10] usb 7-1: config 3 interface 151 has no altsetting 0 [ 481.489864][ T10] usb 7-1: config 3 interface 181 has no altsetting 0 [ 481.500437][ T10] usb 7-1: Dual-Role OTG device on HNP port [ 481.506738][ T10] usb 7-1: New USB device found, idVendor=12d1, idProduct=e2a3, bcdDevice=36.68 [ 481.551514][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.568779][ T10] usb 7-1: Product: syz [ 481.586167][ T10] usb 7-1: Manufacturer: syz [ 481.592555][ T10] usb 7-1: SerialNumber: syz [ 481.608624][ T10] usb 7-1: rejected 1 configuration due to insufficient available bus power [ 481.639345][ T10] usb 7-1: no configuration chosen from 1 choice [ 481.658940][ T5927] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 481.871970][ T5927] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 481.927269][ T5927] usb 3-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.40 [ 481.944822][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.956654][ T5927] usb 3-1: Product: syz [ 481.967501][T11821] FAULT_INJECTION: forcing a failure. [ 481.967501][T11821] name failslab, interval 1, probability 0, space 0, times 0 [ 481.984681][ T5927] usb 3-1: Manufacturer: syz [ 481.989440][ T5927] usb 3-1: SerialNumber: syz [ 481.998417][T11821] CPU: 1 UID: 0 PID: 11821 Comm: syz.4.1239 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(full) [ 481.998448][T11821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 481.998473][T11821] Call Trace: [ 481.998482][T11821] [ 481.998502][T11821] dump_stack_lvl+0x189/0x250 [ 481.998542][T11821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.998572][T11821] ? __pfx__printk+0x10/0x10 [ 481.998599][T11821] ? __pfx___might_resched+0x10/0x10 [ 481.998618][T11821] ? fs_reclaim_acquire+0x7d/0x100 [ 481.998655][T11821] should_fail_ex+0x414/0x560 [ 481.998682][T11821] should_failslab+0xa8/0x100 [ 481.998712][T11821] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 481.998747][T11821] ? __alloc_skb+0x112/0x2d0 [ 481.998776][T11821] __alloc_skb+0x112/0x2d0 [ 481.998803][T11821] netlink_ack+0x146/0xa50 [ 481.998822][T11821] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 481.998850][T11821] ? ref_tracker_free+0x63a/0x7d0 [ 481.998870][T11821] ? __copy_skb_header+0xa7/0x550 [ 481.998907][T11821] netlink_rcv_skb+0x2a0/0x490 [ 481.998932][T11821] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 481.998956][T11821] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 481.998998][T11821] ? netlink_deliver_tap+0x2e/0x1b0 [ 481.999020][T11821] ? netlink_deliver_tap+0x2e/0x1b0 [ 481.999049][T11821] netlink_unicast+0x758/0x8d0 [ 481.999080][T11821] netlink_sendmsg+0x805/0xb30 [ 481.999114][T11821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.999141][T11821] ? aa_sock_msg_perm+0x94/0x160 [ 481.999164][T11821] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 481.999186][T11821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.999211][T11821] __sock_sendmsg+0x219/0x270 [ 481.999234][T11821] ____sys_sendmsg+0x505/0x830 [ 481.999267][T11821] ? __pfx_____sys_sendmsg+0x10/0x10 [ 481.999302][T11821] ? import_iovec+0x74/0xa0 [ 481.999333][T11821] ___sys_sendmsg+0x21f/0x2a0 [ 481.999364][T11821] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.999425][T11821] ? __fget_files+0x2a/0x420 [ 481.999450][T11821] ? __fget_files+0x3a0/0x420 [ 481.999487][T11821] __x64_sys_sendmsg+0x19b/0x260 [ 481.999517][T11821] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 481.999561][T11821] ? do_syscall_64+0xba/0x210 [ 481.999590][T11821] do_syscall_64+0xf6/0x210 [ 481.999616][T11821] ? clear_bhb_loop+0x45/0xa0 [ 481.999642][T11821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.999662][T11821] RIP: 0033:0x7fa0d838e969 [ 481.999681][T11821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.999699][T11821] RSP: 002b:00007fa0d9137038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.999730][T11821] RAX: ffffffffffffffda RBX: 00007fa0d85b5fa0 RCX: 00007fa0d838e969 [ 481.999747][T11821] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 481.999760][T11821] RBP: 00007fa0d9137090 R08: 0000000000000000 R09: 0000000000000000 [ 481.999773][T11821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 481.999786][T11821] R13: 0000000000000000 R14: 00007fa0d85b5fa0 R15: 00007fa0d86dfa28 [ 481.999818][T11821] [ 482.517207][ T5927] usbhid 3-1:1.0: can't add hid device: -71 [ 482.523567][ T5927] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 482.533699][ T5927] usb 3-1: USB disconnect, device number 99 [ 483.251455][T11838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1243'. [ 483.525551][T11840] tipc: Started in network mode [ 483.536986][T11840] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 483.553194][T11840] tipc: Enabled bearer , priority 0 [ 484.028288][ T5832] usb 7-1: USB disconnect, device number 89 [ 484.456200][T11871] netlink: 'syz.4.1252': attribute type 10 has an invalid length. [ 484.669224][ T5832] tipc: Node number set to 11578026 [ 484.676633][ T976] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 484.870017][ T976] usb 3-1: Using ep0 maxpacket: 8 [ 484.890313][ T976] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 484.907652][ T976] usb 3-1: config 0 has no interface number 0 [ 484.914860][ T976] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 484.927605][ T976] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 484.943878][ T976] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 484.976568][ T976] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.010518][ T976] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 485.024995][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.033989][ T976] usb 3-1: Product: syz [ 485.038284][ T976] usb 3-1: Manufacturer: syz [ 485.045213][ T976] usb 3-1: SerialNumber: syz [ 485.059617][ T976] usb 3-1: config 0 descriptor?? [ 485.275923][ T976] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 485.493640][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 485.493659][ T30] audit: type=1326 audit(1747048049.430:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11891 comm="syz.5.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f484832ab39 code=0x7ffc0000 [ 485.570742][ T30] audit: type=1326 audit(1747048049.430:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11891 comm="syz.5.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484838e969 code=0x7ffc0000 [ 485.593110][ C0] vkms_vblank_simulate: vblank timer overrun [ 485.606035][ T30] audit: type=1326 audit(1747048049.430:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11891 comm="syz.5.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484838e969 code=0x7ffc0000 [ 485.629237][ C0] vkms_vblank_simulate: vblank timer overrun [ 485.656426][T11897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 485.677863][T11897] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 485.691835][ T30] audit: type=1326 audit(1747048049.460:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11891 comm="syz.5.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f484832ab39 code=0x7ffc0000 [ 485.724873][T11897] bond0: (slave lo): Error: Device can not be enslaved while up [ 485.778748][T11900] input: syz1 as /devices/virtual/input/input36 [ 485.959876][ T30] audit: type=1326 audit(1747048049.460:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11891 comm="syz.5.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f484832ab39 code=0x7ffc0000 [ 486.035903][ T30] audit: type=1326 audit(1747048049.460:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11891 comm="syz.5.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f484832ab39 code=0x7ffc0000 [ 486.156186][ T30] audit: type=1326 audit(1747048049.460:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11891 comm="syz.5.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f484832ab39 code=0x7ffc0000 [ 486.328510][ T30] audit: type=1326 audit(1747048049.460:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11891 comm="syz.5.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f484832ab39 code=0x7ffc0000 [ 486.470958][ T30] audit: type=1326 audit(1747048049.460:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11891 comm="syz.5.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f484832ab39 code=0x7ffc0000 [ 486.628678][ T30] audit: type=1326 audit(1747048049.460:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11891 comm="syz.5.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484838e969 code=0x7ffc0000 [ 486.768669][T11893] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1260'. [ 486.778252][T11893] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1260'. [ 486.849052][ T1627] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 487.009093][ T1627] usb 7-1: Using ep0 maxpacket: 16 [ 487.057281][ T1627] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 487.080867][ T1627] usb 7-1: config 1 has no interface number 1 [ 487.087051][ T1627] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 487.147207][ T1627] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 487.166029][ T1627] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.216266][ T1627] usb 7-1: Product: syz [ 487.228853][ T1627] usb 7-1: Manufacturer: syz [ 487.261934][ T1627] usb 7-1: SerialNumber: syz [ 487.454106][ T976] usb 3-1: USB disconnect, device number 100 [ 487.718440][T11926] program syz.3.1267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 487.800346][ T1627] usb 7-1: 2:1 : no UAC_FORMAT_TYPE desc [ 487.848917][ T1627] usb 7-1: USB disconnect, device number 90 [ 487.945749][ T6392] udevd[6392]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 488.033186][T11938] input: syz0 as /devices/virtual/input/input37 [ 488.052755][T11935] sctp: [Deprecated]: syz.4.1271 (pid 11935) Use of int in max_burst socket option deprecated. [ 488.052755][T11935] Use struct sctp_assoc_value instead [ 488.638982][T11927] ALSA: mixer_oss: invalid OSS volume 'P' [ 488.668916][ T976] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 488.889071][ T976] usb 7-1: Using ep0 maxpacket: 32 [ 488.903041][ T976] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 488.923884][ T976] usb 7-1: config 0 has no interface number 0 [ 489.013468][ T976] usb 7-1: config 0 interface 12 has no altsetting 0 [ 489.064913][ T976] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 489.106354][ T976] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.126427][ T976] usb 7-1: Product: syz [ 489.155847][ T976] usb 7-1: Manufacturer: syz [ 489.167017][ T976] usb 7-1: SerialNumber: syz [ 489.239752][ T976] usb 7-1: config 0 descriptor?? [ 490.028254][T11959] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 490.043857][T11959] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 490.056134][T11959] bond0: (slave lo): Error: Device can not be enslaved while up [ 490.143104][ T5832] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 490.310050][ T5832] usb 5-1: device descriptor read/64, error -71 [ 490.433617][T11943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.472551][T11943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.547063][ T976] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 490.557480][ T976] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 490.567133][ T976] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 490.587466][ T976] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 490.619548][ T5832] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 490.636202][ T976] usb 7-1: USB disconnect, device number 91 [ 490.809403][ T5832] usb 5-1: device descriptor read/64, error -71 [ 490.919830][ T5832] usb usb5-port1: attempt power cycle [ 491.049168][ T5928] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 491.126870][T11975] mmap: syz.3.1283 (11975): VmData 37457920 exceed data ulimit 1070. Update limits or use boot option ignore_rlimit_data. [ 491.152640][T11975] netlink: 'syz.3.1283': attribute type 11 has an invalid length. [ 491.167651][T11975] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1283'. [ 491.200966][ T5928] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.212622][ T5928] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 491.240115][ T5928] usb 6-1: config 1 has no interface number 0 [ 491.264054][ T5832] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 491.268967][ T5928] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.300130][ T5832] usb 5-1: device descriptor read/8, error -71 [ 491.303032][ T5928] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 491.325512][ T5928] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 491.334962][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.349417][ T5928] usb 6-1: Product: syz [ 491.353657][ T5928] usb 6-1: Manufacturer: syz [ 491.358356][ T5928] usb 6-1: SerialNumber: syz [ 491.579207][ T5832] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 491.609795][ T5832] usb 5-1: device descriptor read/8, error -71 [ 491.668980][ T1627] usb 4-1: new low-speed USB device number 90 using dummy_hcd [ 491.720553][ T5832] usb usb5-port1: unable to enumerate USB device [ 491.814791][T11994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1289'. [ 491.827738][T11994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1289'. [ 491.857336][ T1627] usb 4-1: LPM exit latency is zeroed, disabling LPM. [ 491.890408][ T1627] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 491.999259][ T1627] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x3 is Bulk; changing to Interrupt [ 492.035380][ T1627] usb 4-1: config 1 interface 0 has no altsetting 0 [ 492.089294][ T1627] usb 4-1: string descriptor 0 read error: -22 [ 492.095718][ T1627] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 492.149690][ T1627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.193656][ T5928] cdc_ncm 6-1:1.1: bind() failure [ 492.244199][T11986] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 492.252860][T11986] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 492.274117][ T1627] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 492.393207][ T5832] usb 6-1: USB disconnect, device number 94 [ 492.971934][ T30] kauditd_printk_skb: 390 callbacks suppressed [ 492.971955][ T30] audit: type=1326 audit(1747048056.910:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12003 comm="syz.5.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484838e969 code=0x7ffc0000 [ 493.013373][T12007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1292'. [ 493.055699][ T30] audit: type=1326 audit(1747048056.940:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12003 comm="syz.5.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484838e969 code=0x7ffc0000 [ 493.079585][ T30] audit: type=1326 audit(1747048056.940:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12003 comm="syz.5.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f484838e969 code=0x7ffc0000 [ 493.164279][ T30] audit: type=1326 audit(1747048056.940:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12003 comm="syz.5.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484838e969 code=0x7ffc0000 [ 493.223956][ T30] audit: type=1326 audit(1747048056.940:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12003 comm="syz.5.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484838e969 code=0x7ffc0000 [ 493.334114][T12013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 493.441718][ T30] audit: type=1326 audit(1747048056.940:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12003 comm="syz.5.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f484838e969 code=0x7ffc0000 [ 493.527036][T12013] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 493.539861][T12013] bond0: (slave lo): Error: Device type is different from other slaves [ 493.651425][ T30] audit: type=1326 audit(1747048056.940:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12003 comm="syz.5.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484838e969 code=0x7ffc0000 [ 493.721922][ T30] audit: type=1326 audit(1747048056.940:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12003 comm="syz.5.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f484838e969 code=0x7ffc0000 [ 494.169216][ T5832] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 494.320006][ T10] usb 4-1: USB disconnect, device number 90 [ 494.335533][ T5832] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 494.352434][ T5832] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 494.428851][ T5832] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 494.428914][ T5832] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 494.504690][ T5832] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 494.506937][ T5832] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 494.567286][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 494.625709][ T5832] usb 6-1: Product: syz [ 494.669572][ T5832] usb 6-1: Manufacturer: syz [ 494.701743][ T5832] cdc_wdm 6-1:1.0: skipping garbage [ 494.753684][ T5832] cdc_wdm 6-1:1.0: skipping garbage [ 494.776169][ T5832] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 494.808891][ T5832] cdc_wdm 6-1:1.0: Unknown control protocol [ 495.161128][T12020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.180525][T12050] loop2: detected capacity change from 0 to 7 [ 495.228508][T12050] Dev loop2: unable to read RDB block 7 [ 495.240327][T12020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.254419][T12050] loop2: unable to read partition table [ 495.309742][T12050] loop2: partition table beyond EOD, truncated [ 495.317334][T12050] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 495.372357][ T5199] Dev loop2: unable to read RDB block 7 [ 495.378172][ T5199] loop2: unable to read partition table [ 495.411367][ T5199] loop2: partition table beyond EOD, truncated [ 495.447592][T12052] bridge3: entered promiscuous mode [ 495.477730][T12052] bridge3: entered allmulticast mode [ 495.517357][ T5832] usb 6-1: USB disconnect, device number 95 [ 495.783890][T12065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1311'. [ 495.999493][ T5832] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 496.313236][ T5832] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 496.313293][ T5832] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 496.313320][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.318888][ T5832] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 496.735257][ T976] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 496.803949][T12087] pim6reg: entered allmulticast mode [ 496.984694][ T976] usb 4-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 497.005425][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.076772][ T976] usb 4-1: Product: syz [ 497.114106][ T976] usb 4-1: Manufacturer: syz [ 497.118827][ T976] usb 4-1: SerialNumber: syz [ 497.238887][ T5927] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 497.339457][ T976] gspca_main: pac207-2.14.0 probing 093a:2476 [ 497.346145][ T5832] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 497.388902][ T5927] usb 5-1: device descriptor read/64, error -71 [ 497.391537][ T5832] stv0680 7-1:4.0: STV(e): camera ping failed!! [ 497.423127][ T976] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 497.434964][ T5832] stv0680 7-1:4.0: last error: 0, command = 0x0 [ 497.457654][ T976] usb 4-1: USB disconnect, device number 91 [ 497.626325][ T5832] usb 7-1: USB disconnect, device number 92 [ 497.639235][ T5927] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 497.779142][ T5927] usb 5-1: device descriptor read/64, error -71 [ 497.895850][ T5927] usb usb5-port1: attempt power cycle [ 498.289332][ T5927] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 498.320139][T12105] FAULT_INJECTION: forcing a failure. [ 498.320139][T12105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.351520][ T5927] usb 5-1: device descriptor read/8, error -71 [ 498.368139][T12105] CPU: 1 UID: 0 PID: 12105 Comm: syz.6.1320 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(full) [ 498.368163][T12105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 498.368173][T12105] Call Trace: [ 498.368180][T12105] [ 498.368187][T12105] dump_stack_lvl+0x189/0x250 [ 498.368217][T12105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.368239][T12105] ? __pfx__printk+0x10/0x10 [ 498.368263][T12105] should_fail_ex+0x414/0x560 [ 498.368281][T12105] _copy_to_user+0x31/0xb0 [ 498.368304][T12105] __se_sys_cachestat+0x9a9/0xa90 [ 498.368323][T12105] ? __se_sys_cachestat+0x374/0xa90 [ 498.368345][T12105] ? __pfx___se_sys_cachestat+0x10/0x10 [ 498.368370][T12105] ? rcu_is_watching+0x15/0xb0 [ 498.368395][T12105] ? __secure_computing+0xe2/0x2a0 [ 498.368422][T12105] do_syscall_64+0xf6/0x210 [ 498.368443][T12105] ? clear_bhb_loop+0x45/0xa0 [ 498.368461][T12105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.368475][T12105] RIP: 0033:0x7f949e58e969 [ 498.368489][T12105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.368502][T12105] RSP: 002b:00007f949f3b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c3 [ 498.368518][T12105] RAX: ffffffffffffffda RBX: 00007f949e7b5fa0 RCX: 00007f949e58e969 [ 498.368529][T12105] RDX: 0000200000001600 RSI: 00002000000015c0 RDI: 0000000000000000 [ 498.368539][T12105] RBP: 00007f949f3b4090 R08: 0000000000000000 R09: 0000000000000000 [ 498.368549][T12105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.368558][T12105] R13: 0000000000000000 R14: 00007f949e7b5fa0 R15: 00007f949e8dfa28 [ 498.368579][T12105] [ 498.537008][ C1] vkms_vblank_simulate: vblank timer overrun [ 498.806478][T12107] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 498.818993][T12107] bond0: (slave lo): Error: Device can not be enslaved while up [ 498.978974][ T5927] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 498.999759][ T5927] usb 5-1: device descriptor read/8, error -71 [ 499.112635][ T5927] usb usb5-port1: unable to enumerate USB device [ 499.326436][T12112] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1321'. [ 499.348368][T12112] bridge_slave_0: left allmulticast mode [ 499.354185][T12112] bridge_slave_0: left promiscuous mode [ 499.360782][T12112] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.541458][T12112] bridge_slave_1: left allmulticast mode [ 499.547389][T12112] bridge_slave_1: left promiscuous mode [ 499.554141][T12112] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.572863][T12112] bond0: (slave bond_slave_0): Releasing backup interface [ 499.591562][T12112] bond0: (slave bond_slave_1): Releasing backup interface [ 499.629889][T12112] team0: Port device team_slave_0 removed [ 499.653477][T12112] team0: Port device team_slave_1 removed [ 499.663108][T12112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.670922][T12112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.685134][T12112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.692977][T12112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.721480][T12112] bond0: (slave wlan1): Releasing backup interface [ 499.736521][T12112] bond2: (slave geneve2): Releasing active interface [ 499.744071][T12112] geneve2: left promiscuous mode [ 499.758150][T12112] geneve2: left allmulticast mode [ 499.770568][T12112] bond4: (slave ip6gretap1): Releasing backup interface [ 499.777889][T12112] bond4: (slave ip6gretap1): the permanent HWaddr of slave - 8e:2c:a1:25:4f:c0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 499.931125][T12112] bond4: (slave veth7): Releasing backup interface [ 500.099428][ T10] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 500.300054][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 500.309479][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.361652][ T10] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 500.395648][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.422050][ T10] usb 6-1: config 0 descriptor?? [ 500.514195][ T5832] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 500.723785][ T5832] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 500.735016][ T5832] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 500.752441][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 500.766041][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 500.778061][ T5832] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 500.812826][ T5832] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 500.827355][ T10] usb 6-1: USB disconnect, device number 96 [ 500.841069][T12132] binder: 12128:12132 ioctl c0306201 200000000780 returned -22 [ 500.878121][T12129] team0: Device gtp0 is of different type [ 500.889299][ T5832] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 500.964436][ T5832] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 500.992197][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 501.033199][ T5832] usb 3-1: Product: syz [ 501.044218][ T5832] usb 3-1: Manufacturer: syz [ 501.092724][ T5832] cdc_wdm 3-1:1.0: skipping garbage [ 501.207148][ T5832] cdc_wdm 3-1:1.0: skipping garbage [ 501.325451][ T5832] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 501.351093][T12121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.365669][T12121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.374240][ T5832] cdc_wdm 3-1:1.0: Unknown control protocol [ 501.467560][ T5927] usb 3-1: USB disconnect, device number 101 [ 501.653384][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.660471][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.892218][T12151] FAULT_INJECTION: forcing a failure. [ 501.892218][T12151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.926333][T12150] netlink: 'syz.5.1330': attribute type 5 has an invalid length. [ 501.978450][T12151] CPU: 0 UID: 0 PID: 12151 Comm: syz.3.1331 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(full) [ 501.978472][T12151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 501.978483][T12151] Call Trace: [ 501.978489][T12151] [ 501.978496][T12151] dump_stack_lvl+0x189/0x250 [ 501.978524][T12151] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.978551][T12151] ? __pfx__printk+0x10/0x10 [ 501.978574][T12151] should_fail_ex+0x414/0x560 [ 501.978593][T12151] _copy_to_user+0x31/0xb0 [ 501.978615][T12151] simple_read_from_buffer+0xe1/0x170 [ 501.978637][T12151] proc_fail_nth_read+0x1df/0x250 [ 501.978661][T12151] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 501.978684][T12151] ? rw_verify_area+0x258/0x650 [ 501.978699][T12151] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 501.978721][T12151] vfs_read+0x1fd/0x980 [ 501.978741][T12151] ? __pfx___mutex_lock+0x10/0x10 [ 501.978764][T12151] ? __pfx_vfs_read+0x10/0x10 [ 501.978786][T12151] ? __fget_files+0x2a/0x420 [ 501.978816][T12151] ? __fget_files+0x3a0/0x420 [ 501.978841][T12151] ? __fget_files+0x2a/0x420 [ 501.978876][T12151] ksys_read+0x145/0x250 [ 501.978898][T12151] ? rcu_is_watching+0x15/0xb0 [ 501.978929][T12151] ? __pfx_ksys_read+0x10/0x10 [ 501.978945][T12151] ? __secure_computing+0xe2/0x2a0 [ 501.978972][T12151] do_syscall_64+0xf6/0x210 [ 501.978992][T12151] ? clear_bhb_loop+0x45/0xa0 [ 501.979010][T12151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.979024][T12151] RIP: 0033:0x7f520998d37c [ 501.979038][T12151] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 501.979051][T12151] RSP: 002b:00007f52077f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 501.979066][T12151] RAX: ffffffffffffffda RBX: 00007f5209bb5fa0 RCX: 00007f520998d37c [ 501.979077][T12151] RDX: 000000000000000f RSI: 00007f52077f60a0 RDI: 0000000000000003 [ 501.979086][T12151] RBP: 00007f52077f6090 R08: 0000000000000000 R09: 0000000000000000 [ 501.979096][T12151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.979104][T12151] R13: 0000000000000000 R14: 00007f5209bb5fa0 R15: 00007f5209cdfa28 [ 501.979126][T12151] [ 503.104830][T12179] bond0: (slave lo): Error: Can not enslave VLAN challenged device to VLAN enabled bond [ 503.437957][T12185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.518367][T12185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.671504][ T5928] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 504.159069][T12200] netlink: 9 bytes leftover after parsing attributes in process `syz.6.1344'. [ 504.233211][T12200] 0: renamed from hsr0 (while UP) [ 504.276782][T12200] 0: entered allmulticast mode [ 504.341591][T12200] hsr_slave_0: entered allmulticast mode [ 504.347362][T12200] hsr_slave_1: entered allmulticast mode [ 504.408996][ T5928] usb 5-1: device descriptor read/64, error -71 [ 504.418537][T12200] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 504.679790][ T5928] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 504.718853][T12206] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.849528][ T5927] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 504.876722][ T5928] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 504.957748][ T5928] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 504.995425][T12219] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 505.027058][ T5928] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 505.037003][ T5928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 505.052746][ T5928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 505.066938][ T5928] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 505.091514][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 505.101708][ T5928] usb 5-1: Product: syz [ 505.105958][ T5928] usb 5-1: Manufacturer: syz [ 505.121437][T12219] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1346'. [ 505.175318][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 505.207966][ T5927] usb 4-1: config 0 has an invalid interface number: 47 but max is 0 [ 505.218720][ T5927] usb 4-1: config 0 has no interface number 0 [ 505.260490][ T5928] cdc_wdm 5-1:1.0: skipping garbage [ 505.276552][ T5927] usb 4-1: New USB device found, idVendor=ba8e, idProduct=5273, bcdDevice=e9.1f [ 505.297766][ T5928] cdc_wdm 5-1:1.0: skipping garbage [ 505.304524][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.318557][ T5927] usb 4-1: Product: syz [ 505.323896][ T5928] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 505.334714][ T5927] usb 4-1: Manufacturer: syz [ 505.341281][ T5928] cdc_wdm 5-1:1.0: Unknown control protocol [ 505.347484][ T5927] usb 4-1: SerialNumber: syz [ 505.374954][ T5927] usb 4-1: config 0 descriptor?? [ 505.397713][ T5927] usb-storage 4-1:0.47: USB Mass Storage device detected [ 505.748305][T12195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.760843][T12195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.788270][ T976] usb 4-1: USB disconnect, device number 92 [ 506.626716][T12245] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1353'. [ 506.896919][ T5927] usb 5-1: USB disconnect, device number 101 [ 506.932435][T12254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1356'. [ 507.019437][ T5832] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 507.197340][T12262] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 507.212977][T12262] bond0: (slave lo): Error: Device type is different from other slaves [ 507.221566][ T5832] usb 4-1: Using ep0 maxpacket: 8 [ 507.233156][ T5832] usb 4-1: config 0 has an invalid interface number: 154 but max is 0 [ 507.243470][ T5832] usb 4-1: config 0 has no interface number 0 [ 507.260579][ T5832] usb 4-1: config 0 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 507.435741][ T5832] usb 4-1: config 0 interface 154 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 507.494704][ T5832] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=9e.bc [ 507.510450][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 507.528508][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 507.536513][ T5927] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 507.547012][ T5928] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 507.571991][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.613721][ T5832] usb 4-1: Product: syz [ 507.629325][ T5832] usb 4-1: Manufacturer: syz [ 507.658620][ T5832] usb 4-1: SerialNumber: syz [ 507.685859][ T5832] usb 4-1: config 0 descriptor?? [ 507.689648][ T5927] usb 6-1: device descriptor read/64, error -71 [ 507.715768][ T5832] appletouch 4-1:0.154: Could not find int-in endpoint [ 507.755710][ T5832] appletouch 4-1:0.154: probe with driver appletouch failed with error -5 [ 507.856893][ T5832] usbhid 4-1:0.154: couldn't find an input interrupt endpoint [ 507.959134][ T5927] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 508.018438][T12248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.042705][T12248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.066176][ T5832] usb 4-1: USB disconnect, device number 93 [ 508.109238][ T5927] usb 6-1: device descriptor read/64, error -71 [ 508.249410][ T5927] usb usb6-port1: attempt power cycle [ 508.284763][T12276] netem: incorrect gi model size [ 508.290882][ T5928] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 508.307314][T12276] netem: change failed [ 508.533128][ T5832] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 508.648921][ T5927] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 508.704197][ T5927] usb 6-1: device descriptor read/8, error -71 [ 508.959005][ T24] usb 3-1: new low-speed USB device number 102 using dummy_hcd [ 508.966810][ T5927] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 509.012226][ T5927] usb 6-1: device descriptor read/8, error -71 [ 509.144968][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 509.153620][ T5927] usb usb6-port1: unable to enumerate USB device [ 509.170973][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 509.186864][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 509.197267][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 509.213351][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 509.234889][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 509.243087][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 509.264478][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 509.277396][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 509.308996][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 509.337904][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 509.358188][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 509.380893][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 509.401301][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 509.436321][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 509.461738][T12302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.464493][ T24] usb 3-1: string descriptor 0 read error: -22 [ 509.481220][ T24] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 509.502293][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.515427][T12302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.533833][ T24] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 509.689209][ T10] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 509.731170][T12281] usb 3-1: Couldn't submit interrupt_out_urb -90 [ 509.756353][T12310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.767086][T12310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.797317][ T5832] usb 3-1: USB disconnect, device number 102 [ 509.866620][ T10] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 509.875819][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.888312][ T10] usb 5-1: Product: syz [ 509.903211][ T10] usb 5-1: Manufacturer: syz [ 509.907947][ T10] usb 5-1: SerialNumber: syz [ 509.920568][ T10] usb 5-1: config 0 descriptor?? [ 509.928764][ T10] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 510.128299][ T10] gspca_sunplus: reg_r err -71 [ 510.142420][ T10] usb 5-1: USB disconnect, device number 102 [ 510.517940][T12325] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1376'. [ 510.535351][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1376'. [ 510.608999][ T5832] usb 6-1: new full-speed USB device number 101 using dummy_hcd [ 510.688531][T12329] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 510.760004][ T5832] usb 6-1: device descriptor read/64, error -71 [ 511.069888][ T5832] usb 6-1: new full-speed USB device number 102 using dummy_hcd [ 511.128607][T12346] kvm: user requested TSC rate below hardware speed [ 511.198403][T12347] IPVS: set_ctl: invalid protocol: 134 0.0.0.0:20002 [ 511.279730][ T5832] usb 6-1: device descriptor read/64, error -71 [ 511.497254][ T5832] usb usb6-port1: attempt power cycle [ 511.729223][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 511.849463][ T5832] usb 6-1: new full-speed USB device number 103 using dummy_hcd [ 511.919867][ T5832] usb 6-1: device descriptor read/8, error -71 [ 511.929586][T12357] loop2: detected capacity change from 0 to 7 [ 511.975290][T12357] Dev loop2: unable to read RDB block 7 [ 512.005301][T12357] loop2: unable to read partition table [ 512.035373][T12357] loop2: partition table beyond EOD, truncated [ 512.066354][T12357] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 512.169002][ T5832] usb 6-1: new full-speed USB device number 104 using dummy_hcd [ 512.229246][ T5832] usb 6-1: device descriptor read/8, error -71 [ 512.241540][T12359] fuse: Unknown parameter 'user_id00000000000000000000' [ 512.349593][ T5832] usb usb6-port1: unable to enumerate USB device [ 512.687558][T12372] SET target dimension over the limit! [ 512.835972][T12375] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1391'. [ 512.929149][ T5832] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 513.109231][ T5832] usb 7-1: Using ep0 maxpacket: 16 [ 513.142825][ T5832] usb 7-1: config 0 has an invalid interface number: 126 but max is 0 [ 513.161325][ T5832] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 513.177311][ T5832] usb 7-1: config 0 has no interface number 0 [ 513.185005][ T5832] usb 7-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 513.222875][ T5832] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 513.244828][ T5832] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 513.278326][ T5832] usb 7-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 513.316163][ T5832] usb 7-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 513.348570][ T5832] usb 7-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 513.365256][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.425744][T12385] pim6reg: entered allmulticast mode [ 513.435228][ T5832] usb 7-1: config 0 descriptor?? [ 513.448750][T12372] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 513.461971][ T5832] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 513.469896][T12392] loop2: detected capacity change from 0 to 7 [ 513.477783][T12390] netlink: 'syz.5.1397': attribute type 4 has an invalid length. [ 513.492422][T12390] netlink: 'syz.5.1397': attribute type 4 has an invalid length. [ 513.502667][T12392] Dev loop2: unable to read RDB block 7 [ 513.508313][T12392] loop2: unable to read partition table [ 513.557700][T12392] loop2: partition table beyond EOD, truncated [ 513.582061][T12392] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 513.778905][ T5832] usb 7-1: USB disconnect, device number 93 [ 513.855070][T12400] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1401'. [ 513.939041][ T10] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 514.119258][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 514.130723][ T10] usb 5-1: config 1 has an invalid interface number: 242 but max is 0 [ 514.139766][ T10] usb 5-1: config 1 has no interface number 0 [ 514.145927][ T10] usb 5-1: config 1 interface 242 has no altsetting 0 [ 514.156959][ T10] usb 5-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 514.166374][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.174595][ T10] usb 5-1: Product: syz [ 514.179400][ T10] usb 5-1: Manufacturer: syz [ 514.184040][ T10] usb 5-1: SerialNumber: syz [ 514.289009][ T5832] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 514.461371][ T5832] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 514.480116][ T5832] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 514.495946][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.508187][ T5832] usb 3-1: Product: syz [ 514.534897][ T5832] usb 3-1: Manufacturer: syz [ 514.545038][ T5832] usb 3-1: SerialNumber: syz [ 514.573608][ T5832] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 514.748968][ T5927] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 514.769020][T12402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.779397][T12402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.804431][ T5832] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 514.824768][T12397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.839403][T12397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.844849][ T5832] usb 3-1: USB disconnect, device number 103 [ 514.870358][T10442] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 514.901667][ T5927] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.920783][ T5927] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 514.932499][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.960374][ T5927] usb 7-1: config 0 descriptor?? [ 514.976735][ T5927] pwc: Askey VC010 type 2 USB webcam detected. [ 515.058049][T10442] usb 6-1: Using ep0 maxpacket: 8 [ 515.077160][T10442] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.106250][T10442] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.116622][T10442] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 515.136037][T10442] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 515.158429][T10442] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.168449][ T5927] pwc: send_video_command error -71 [ 515.176917][ T5927] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 515.200246][ T5927] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 515.208402][T10442] usb 6-1: config 0 descriptor?? [ 515.248211][ T5927] usb 7-1: USB disconnect, device number 94 [ 515.541820][ T10] aqc111 5-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 515.573798][ T10] aqc111 5-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 515.619618][ T10] aqc111 5-1:1.242 eth9: register 'aqc111' at usb-dummy_hcd.4-1, Aquantia AQtion USB to 5GbE Controller, fe:f5:6e:95:78:56 [ 515.653542][T12420] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1409'. [ 515.669943][ T10] usb 5-1: USB disconnect, device number 103 [ 515.682920][ T10] aqc111 5-1:1.242 eth9: unregister 'aqc111' usb-dummy_hcd.4-1, Aquantia AQtion USB to 5GbE Controller [ 515.689038][ T5927] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 515.694944][T10442] koneplus 0003:1E7D:2E22.001E: hidraw0: USB HID v0.05 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 515.728159][T10442] koneplus 0003:1E7D:2E22.001E: couldn't init struct koneplus_device [ 515.742027][T10442] koneplus 0003:1E7D:2E22.001E: couldn't install mouse [ 515.783411][T10442] koneplus 0003:1E7D:2E22.001E: probe with driver koneplus failed with error -32 [ 515.789315][ T5928] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 515.841843][ T10] aqc111 5-1:1.242 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 515.856096][T10442] usb 6-1: USB disconnect, device number 105 [ 515.864908][ T10] aqc111 5-1:1.242 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 515.883460][ T10] aqc111 5-1:1.242 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 515.899299][ T5927] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.927509][ T5927] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 515.946508][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.958539][ T5927] usb 7-1: config 0 descriptor?? [ 515.971785][ T5927] pwc: Askey VC010 type 2 USB webcam detected. [ 515.983308][ T5928] usb 3-1: config 0 has no interfaces? [ 515.995228][ T5928] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 516.011592][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.024186][ T5928] usb 3-1: Product: syz [ 516.045990][ T5928] usb 3-1: Manufacturer: syz [ 516.066586][ T5928] usb 3-1: SerialNumber: syz [ 516.071455][ T24] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 516.105050][ T5928] usb 3-1: config 0 descriptor?? [ 516.121954][T12422] fido_id[12422]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 516.252298][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 516.261255][ T24] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 516.270769][ T24] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 516.279914][ T24] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 516.290589][ T24] usb 4-1: config 8 has no interface number 0 [ 516.299193][ T24] usb 4-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 516.322011][ T24] usb 4-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 516.353879][ T24] usb 4-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 516.394819][ T5928] usb 3-1: USB disconnect, device number 104 [ 516.408265][ T5927] pwc: recv_control_msg error -32 req 02 val 2b00 [ 516.435134][ T5927] pwc: recv_control_msg error -32 req 02 val 2700 [ 516.447619][ T24] usb 4-1: config 8 interface 223 has no altsetting 0 [ 516.458956][ T24] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 516.481689][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.497315][ T24] usb 4-1: Product: syz [ 516.509717][ T24] usb 4-1: Manufacturer: syz [ 516.524175][ T24] usb 4-1: SerialNumber: syz [ 516.565215][T12425] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 516.656893][T12410] netlink: 'syz.6.1405': attribute type 11 has an invalid length. [ 516.671530][ T5927] pwc: recv_control_msg error -32 req 04 val 1000 [ 516.686555][ T5927] pwc: recv_control_msg error -32 req 04 val 1300 [ 516.697747][ T5927] pwc: recv_control_msg error -32 req 04 val 1400 [ 516.705551][ T5927] pwc: recv_control_msg error -32 req 02 val 2000 [ 516.713530][ T5927] pwc: recv_control_msg error -32 req 02 val 2100 [ 516.737300][ T5927] pwc: recv_control_msg error -32 req 04 val 1500 [ 516.744857][ T5927] pwc: recv_control_msg error -32 req 02 val 2500 [ 516.752571][ T5927] pwc: recv_control_msg error -32 req 02 val 2400 [ 516.760339][ T5927] pwc: recv_control_msg error -32 req 02 val 2600 [ 516.767768][ T5927] pwc: recv_control_msg error -32 req 02 val 2900 [ 516.776671][ T5927] pwc: recv_control_msg error -32 req 02 val 2800 [ 516.784740][ T5927] pwc: recv_control_msg error -32 req 04 val 1100 [ 516.791412][ T5826] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 516.801556][ T5927] pwc: recv_control_msg error -32 req 04 val 1200 [ 516.815377][ T5927] pwc: Registered as video103. [ 516.829354][ T976] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 516.840684][ T5927] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input38 [ 516.861092][ T24] usb 4-1: USB disconnect, device number 94 [ 516.959165][ T5826] usb 6-1: Using ep0 maxpacket: 8 [ 516.991909][ T5826] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.015872][ T5826] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 517.029841][ T976] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 517.050362][ T5826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 517.071475][ T976] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 517.097577][ T976] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 517.100151][ T5826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 517.143901][ T976] usb 5-1: config 0 interface 0 has no altsetting 0 [ 517.164221][ T976] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 517.185392][ T5826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 517.186882][ T976] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 517.216829][ T5826] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 517.250335][ T976] usb 5-1: config 0 interface 0 has no altsetting 0 [ 517.268465][ T976] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 517.278249][ T5826] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 517.298457][ T976] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 517.307877][ T5826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.317473][ T5826] usb 6-1: Product: syz [ 517.334314][ T976] usb 5-1: config 0 interface 0 has no altsetting 0 [ 517.348253][ T976] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 517.351094][ T5826] usb 6-1: Manufacturer: syz [ 517.367622][ T976] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 517.382608][ T5826] usb 6-1: SerialNumber: syz [ 517.417946][ T5826] usb 6-1: config 0 descriptor?? [ 517.423428][ T976] usb 5-1: config 0 interface 0 has no altsetting 0 [ 517.434053][T12441] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 517.460328][ T976] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 517.485793][ T976] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 517.521176][ T976] usb 5-1: config 0 interface 0 has no altsetting 0 [ 517.551931][ T976] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 517.583442][ T976] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 517.599463][ T24] usb 7-1: USB disconnect, device number 95 [ 517.613642][ T976] usb 5-1: config 0 interface 0 has no altsetting 0 [ 517.640203][ T976] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 517.642695][T12441] netlink: 'syz.5.1413': attribute type 15 has an invalid length. [ 517.659545][ T976] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 517.733124][ T976] usb 5-1: config 0 interface 0 has no altsetting 0 [ 517.754591][ T976] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 517.768114][ T976] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 517.806282][ T976] usb 5-1: config 0 interface 0 has no altsetting 0 [ 517.836145][ T976] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 517.856169][ T976] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 517.865293][ T10] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 517.885140][ T976] usb 5-1: Product: syz [ 517.900706][ T976] usb 5-1: Manufacturer: syz [ 517.915593][ T976] usb 5-1: SerialNumber: syz [ 517.935025][ T976] usb 5-1: config 0 descriptor?? [ 517.973631][ T976] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 518.019414][ T10] usb 4-1: device descriptor read/64, error -71 [ 518.050630][ T5928] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 518.098952][ T24] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 518.234901][ T5928] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 518.254434][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.263022][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 518.269255][ T10] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 518.293151][ T5928] usb 3-1: Product: syz [ 518.297392][ T5928] usb 3-1: Manufacturer: syz [ 518.302605][ T24] usb 7-1: config 0 has an invalid interface number: 24 but max is 0 [ 518.311186][ T24] usb 7-1: config 0 has no interface number 0 [ 518.317490][ T5928] usb 3-1: SerialNumber: syz [ 518.345838][ T24] usb 7-1: New USB device found, idVendor=03f0, idProduct=3016, bcdDevice=15.8c [ 518.359516][ T5928] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 518.382580][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.410586][ T24] usb 7-1: Product: syz [ 518.414885][ T24] usb 7-1: Manufacturer: syz [ 518.428706][ T24] usb 7-1: SerialNumber: syz [ 518.449764][ T1627] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 518.459319][ T10] usb 4-1: device descriptor read/64, error -71 [ 518.470258][ T24] usb 7-1: config 0 descriptor?? [ 518.598611][ T10] usb usb4-port1: attempt power cycle [ 518.711583][ T976] usb 7-1: USB disconnect, device number 96 [ 518.970827][ T5826] rc_core: IR keymap rc-snapstream-firefly not found [ 518.992602][ T5826] Registered IR keymap rc-empty [ 519.012472][ T10] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 519.013498][ T5826] rc rc0: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 519.065235][ T5826] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input39 [ 519.116791][ T5826] input: syz syz mouse as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input40 [ 519.126337][T10442] usb 3-1: USB disconnect, device number 105 [ 519.134080][ T10] usb 4-1: device descriptor read/8, error -71 [ 519.203408][ T5826] usb 6-1: USB disconnect, device number 106 [ 519.209512][ C1] ati_remote 6-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 519.380576][ C0] usb 5-1: yurex_control_callback - control failed: -2 [ 519.438971][ T10] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 519.469305][ T5928] usb 5-1: USB disconnect, device number 104 [ 519.501526][ T5928] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 519.512387][ T10] usb 4-1: device descriptor read/8, error -71 [ 519.640703][ T10] usb usb4-port1: unable to enumerate USB device [ 519.657671][ T1627] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 519.665833][ T5826] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 519.696469][ T1627] ath9k_htc: Failed to initialize the device [ 519.719836][T10442] usb 3-1: ath9k_htc: USB layer deinitialized [ 519.730712][T12498] netlink: 'syz.4.1421': attribute type 1 has an invalid length. [ 519.753519][T12498] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 519.760932][T12498] IPv6: NLM_F_CREATE should be set when creating new route [ 519.780239][T12499] loop2: detected capacity change from 0 to 7 [ 519.792698][T12499] Dev loop2: unable to read RDB block 7 [ 519.798375][T12499] loop2: unable to read partition table [ 519.814172][T12499] loop2: partition table beyond EOD, truncated [ 519.828755][T12499] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 519.905939][ T5826] usb 6-1: config 0 has no interfaces? [ 519.919213][ T5832] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 519.932502][ T5826] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 519.943384][ T5826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.967624][ T5826] usb 6-1: Product: syz [ 519.979922][ T5826] usb 6-1: Manufacturer: syz [ 519.987195][ T5826] usb 6-1: SerialNumber: syz [ 520.005680][ T5826] usb 6-1: config 0 descriptor?? [ 520.039476][ T24] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 520.102941][ T5832] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 520.157602][ T5832] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 520.185617][ T5832] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 520.198892][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 520.209002][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 520.227231][ T24] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 520.240879][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 520.247691][ T5832] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 520.250570][ T24] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.40 [ 520.270055][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.313599][ T24] usb 5-1: Product: Ъ [ 520.317761][ T24] usb 5-1: Manufacturer: ఉ [ 520.322547][ T5832] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 520.336001][ T24] usb 5-1: SerialNumber: syz [ 520.342292][ T5832] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 520.366907][ T5832] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 520.379658][ T5832] usb 7-1: Product: syz [ 520.383884][ T5832] usb 7-1: Manufacturer: syz [ 520.416787][ T5832] cdc_wdm 7-1:1.0: skipping garbage [ 520.426911][ T5832] cdc_wdm 7-1:1.0: skipping garbage [ 520.440223][ T5832] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 520.486029][ T5832] cdc_wdm 7-1:1.0: Unknown control protocol [ 520.635822][T12494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.646697][T12494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.667233][ T10] usb 7-1: USB disconnect, device number 97 [ 521.468890][ T1627] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 521.634059][ T1627] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 521.645908][ T1627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.654070][ T1627] usb 4-1: Product: syz [ 521.658316][ T1627] usb 4-1: Manufacturer: syz [ 521.663334][ T1627] usb 4-1: SerialNumber: syz [ 521.777926][ T1627] usb 4-1: config 0 descriptor?? [ 521.807177][ T10] usb 6-1: USB disconnect, device number 107 [ 521.816626][ T5832] usb 7-1: new full-speed USB device number 98 using dummy_hcd [ 521.820828][ T1627] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 522.091077][ T5832] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 522.105674][ T5832] usb 7-1: config 0 has no interface number 0 [ 522.131827][ T5832] usb 7-1: too many endpoints for config 0 interface 1 altsetting 0: 253, using maximum allowed: 30 [ 522.168888][T10442] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 522.182314][ T5832] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 522.232613][ T5832] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.303565][ T5832] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 522.324586][T12528] kvm: pic: non byte read [ 522.329067][ T1627] gspca_sunplus: reg_w_riv err -71 [ 522.329189][ T1627] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 522.344341][ T1627] usb 4-1: USB disconnect, device number 99 [ 522.354444][T10442] usb 3-1: device descriptor read/64, error -71 [ 522.363188][ T5832] usb 7-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 522.378151][T12528] kvm: pic: level sensitive irq not supported [ 522.378272][T12528] kvm: pic: non byte read [ 522.396393][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.406804][T12528] kvm: pic: level sensitive irq not supported [ 522.406881][T12528] kvm: pic: non byte read [ 522.424784][ T5832] usb 7-1: config 0 descriptor?? [ 522.434420][T12528] kvm: pic: level sensitive irq not supported [ 522.434498][T12528] kvm: pic: non byte read [ 522.599389][T10442] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 522.716802][ T24] usbhid 5-1:1.0: can't add hid device: -71 [ 522.727111][ T24] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 522.743527][ T24] usb 5-1: USB disconnect, device number 105 [ 522.795219][T10442] usb 3-1: device descriptor read/64, error -71 [ 522.959446][T10442] usb usb3-port1: attempt power cycle [ 523.043289][T12538] loop2: detected capacity change from 0 to 7 [ 523.063303][ T6392] Dev loop2: unable to read RDB block 7 [ 523.072413][ T6392] loop2: unable to read partition table [ 523.163435][ T6392] loop2: partition table beyond EOD, truncated [ 523.336896][T12538] Dev loop2: unable to read RDB block 7 [ 523.359487][T10442] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 523.385830][T12538] loop2: unable to read partition table [ 523.423106][T12538] loop2: partition table beyond EOD, truncated [ 523.442792][T12538] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 523.465107][T10442] usb 3-1: device descriptor read/8, error -71 [ 523.709317][T10442] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 523.802154][T10442] usb 3-1: device descriptor read/8, error -71 [ 523.845054][T12550] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1436'. [ 524.089260][T10442] usb usb3-port1: unable to enumerate USB device [ 525.139122][T10442] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 525.369027][T10442] usb 4-1: Using ep0 maxpacket: 16 [ 525.391744][T10442] usb 4-1: config 0 has an invalid interface number: 63 but max is 0 [ 525.404346][T10442] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.448541][T10442] usb 4-1: config 0 has no interface number 0 [ 525.475088][T10442] usb 4-1: config 0 interface 63 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 525.514722][T10442] usb 4-1: config 0 interface 63 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 525.575088][T10442] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice=41.e6 [ 525.614957][T10442] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.661648][T10442] usb 4-1: config 0 descriptor?? [ 526.401188][T12575] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.423419][ T24] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 526.429055][T12575] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.474913][T12575] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.500554][T12575] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.572067][ T5832] usbhid 7-1:0.1: can't add hid device: -71 [ 526.591950][ T5832] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 526.628248][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 526.640060][ T5832] usb 7-1: USB disconnect, device number 98 [ 526.652875][ T24] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 526.692029][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 526.705837][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 526.719288][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 526.734817][T12577] netlink: 'syz.6.1444': attribute type 1 has an invalid length. [ 526.738246][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 526.755647][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 526.773330][ T24] usb 5-1: Product: syz [ 526.794748][T12577] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 526.807310][ T24] usb 5-1: Manufacturer: syz [ 526.825274][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 526.836896][T12577] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 526.858482][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 526.868323][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 526.880888][T12577] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 526.895319][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 526.918050][T12583] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1444'. [ 526.957569][T12577] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 526.983140][T12577] bond5: (slave geneve3): making interface the new active one [ 526.996911][T12577] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 527.011364][ T10] usb 4-1: USB disconnect, device number 100 [ 527.057025][T12583] 8021q: adding VLAN 0 to HW filter on device bond5 [ 527.069235][ T5832] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 527.138039][T12571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.173155][T12571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.239663][ T5832] usb 3-1: Using ep0 maxpacket: 8 [ 527.257376][T10442] usb 5-1: USB disconnect, device number 106 [ 527.282915][ T5832] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 527.308612][T12588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.316225][ T5832] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 527.338405][T12588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.346886][ T5832] usb 3-1: config 135 has no interface number 0 [ 527.359747][ T5832] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 527.376198][T12590] loop2: detected capacity change from 0 to 7 [ 527.399402][ T5832] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 527.410382][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.414094][T12590] Dev loop2: unable to read RDB block 7 [ 527.418408][ T5832] usb 3-1: Product: syz [ 527.441595][T12590] loop2: unable to read partition table [ 527.442058][ T5832] usb 3-1: Manufacturer: syz [ 527.457842][T12590] loop2: partition table beyond EOD, truncated [ 527.462577][ T5832] usb 3-1: SerialNumber: syz [ 527.468910][ T10] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 527.489028][T12590] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 527.521595][ T5832] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 527.543095][ T5832] usb 3-1: No valid video chain found. [ 527.631982][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 527.660174][T12596] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 527.663429][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 527.708848][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 527.739270][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 527.759233][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 527.781479][ T10] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 527.798889][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.815702][ T10] usb 4-1: Product: syz [ 527.829414][ T24] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 527.830695][ T10] usb 4-1: Manufacturer: syz [ 527.852503][ T10] usb 4-1: SerialNumber: syz [ 527.872370][ T10] usb 4-1: config 0 descriptor?? [ 527.920461][ T10] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 527.967582][ T5928] usb 3-1: USB disconnect, device number 110 [ 527.988928][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 528.002635][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.023633][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 528.065144][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=01ff, bcdDevice= 0.40 [ 528.078439][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.090858][ T24] usb 6-1: Product: syz [ 528.095095][ T24] usb 6-1: Manufacturer: syz [ 528.102111][ T24] usb 6-1: SerialNumber: syz [ 528.118263][ T5832] usb 4-1: USB disconnect, device number 101 [ 528.187744][T12611] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1454'. [ 528.270120][T10442] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 528.439328][T10442] usb 5-1: Using ep0 maxpacket: 8 [ 528.452113][T10442] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 528.463104][T10442] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.485409][T10442] usb 5-1: Product: syz [ 528.506792][T10442] usb 5-1: Manufacturer: syz [ 528.517823][T10442] usb 5-1: SerialNumber: syz [ 528.536153][T10442] usb 5-1: config 0 descriptor?? [ 528.549900][T10442] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 528.784604][T12626] loop2: detected capacity change from 0 to 7 [ 528.794764][T12626] Dev loop2: unable to read RDB block 7 [ 528.802413][T12626] loop2: unable to read partition table [ 528.809940][T12626] loop2: partition table beyond EOD, truncated [ 528.826931][T12626] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 529.709613][ T5928] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 530.062797][ T5928] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 530.108927][ T5928] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 530.160946][ T5928] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 530.349297][ T5928] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 530.392787][ T5928] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 530.481470][ T5928] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 530.566801][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 530.650726][ T5928] usb 3-1: Product: syz [ 530.706496][ T5928] usb 3-1: Manufacturer: syz [ 530.739210][ T5928] cdc_wdm 3-1:1.0: skipping garbage [ 530.789421][ T24] usb 6-1: 0:2 : does not exist [ 530.795249][ T5928] cdc_wdm 3-1:1.0: skipping garbage [ 530.831428][ T5928] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 530.847547][ T5928] cdc_wdm 3-1:1.0: Unknown control protocol [ 530.877021][ T24] usb 6-1: USB disconnect, device number 108 [ 530.967355][T12635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.026312][ T6392] udevd[6392]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 531.036574][T12635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.069224][ T5928] usb 5-1: USB disconnect, device number 107 [ 531.132198][ T5832] usb 3-1: USB disconnect, device number 111 [ 531.238305][T12655] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 531.409607][T10442] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 531.588880][T10442] usb 4-1: Using ep0 maxpacket: 8 [ 531.608501][T10442] usb 4-1: config 0 has an invalid interface number: 39 but max is 0 [ 531.616759][T10442] usb 4-1: config 0 has no interface number 0 [ 531.626333][T10442] usb 4-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=30.27 [ 531.880897][T10442] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.943982][T10442] usb 4-1: Product: syz [ 532.013751][T10442] usb 4-1: Manufacturer: syz [ 532.034110][T10442] usb 4-1: SerialNumber: syz [ 532.066373][T10442] usb 4-1: config 0 descriptor?? [ 532.125165][T10442] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 532.322416][T12654] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1465'. [ 532.340114][T10442] usb 4-1: USB disconnect, device number 102 [ 532.699293][ T24] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 532.851616][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.868592][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 532.902926][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 532.964755][ T24] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 532.984266][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.023987][ T24] usb 6-1: config 0 descriptor?? [ 533.033528][T12682] loop2: detected capacity change from 0 to 7 [ 533.055512][T12682] Dev loop2: unable to read RDB block 7 [ 533.092119][T12682] loop2: unable to read partition table [ 533.101872][T12682] loop2: partition table beyond EOD, truncated [ 533.144449][T12682] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 533.266162][ T24] ath6kl: Failed to submit usb control message: -71 [ 533.329402][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 533.338894][ T5826] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 533.387946][ T24] ath6kl: Unable to send get target info: -71 [ 533.418202][ T24] ath6kl: Failed to init ath6kl core: -71 [ 533.444636][ T24] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 533.506992][ T24] usb 6-1: USB disconnect, device number 109 [ 533.539479][ T5826] usb 3-1: Using ep0 maxpacket: 8 [ 533.557048][ T5826] usb 3-1: config 6 has an invalid interface number: 21 but max is 2 [ 533.575806][ T5826] usb 3-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 533.588382][ T5826] usb 3-1: config 6 has an invalid interface number: 42 but max is 2 [ 533.596909][ T5826] usb 3-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 533.621309][T12693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 533.645304][ T5826] usb 3-1: config 6 has an invalid interface number: 211 but max is 2 [ 533.654849][ T5826] usb 3-1: config 6 has no interface number 0 [ 533.664639][ T5826] usb 3-1: config 6 has no interface number 1 [ 533.671853][ T5826] usb 3-1: config 6 has no interface number 2 [ 533.678041][ T5826] usb 3-1: config 6 interface 21 altsetting 253 has a duplicate endpoint with address 0x4, skipping [ 533.692363][ T5826] usb 3-1: config 6 interface 21 altsetting 253 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 533.705992][ T5826] usb 3-1: config 6 interface 21 altsetting 253 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 533.720479][ T5826] usb 3-1: config 6 interface 21 altsetting 253 has a duplicate endpoint with address 0xA, skipping [ 533.733476][ T5826] usb 3-1: config 6 interface 21 altsetting 253 endpoint 0x6 has invalid maxpacket 1112, setting to 64 [ 533.746446][ T5826] usb 3-1: config 6 interface 21 altsetting 253 has an invalid descriptor for endpoint zero, skipping [ 533.763464][ T5826] usb 3-1: config 6 interface 21 altsetting 253 has a duplicate endpoint with address 0xA, skipping [ 533.774585][ T5826] usb 3-1: config 6 interface 21 altsetting 253 has a duplicate endpoint with address 0xA, skipping [ 533.788347][ T5826] usb 3-1: config 6 interface 21 altsetting 253 has an invalid descriptor for endpoint zero, skipping [ 533.802079][ T5826] usb 3-1: config 6 interface 21 altsetting 253 endpoint 0x3 has an invalid bInterval 64, changing to 10 [ 533.815487][ T5826] usb 3-1: config 6 interface 21 altsetting 253 has a duplicate endpoint with address 0xF, skipping [ 533.830218][ T5826] usb 3-1: config 6 interface 42 altsetting 255 has a duplicate endpoint with address 0x1, skipping [ 533.857490][ T5826] usb 3-1: config 6 interface 42 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 533.875498][ T5826] usb 3-1: config 6 interface 42 altsetting 255 has a duplicate endpoint with address 0x8, skipping [ 533.886681][ T5826] usb 3-1: config 6 interface 42 altsetting 255 has a duplicate endpoint with address 0x1, skipping [ 533.901945][ T5826] usb 3-1: config 6 interface 42 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 533.913244][ T5826] usb 3-1: config 6 interface 211 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 533.928457][ T5826] usb 3-1: config 6 interface 211 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 533.942841][ T5826] usb 3-1: config 6 interface 211 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 533.954442][ T5826] usb 3-1: config 6 interface 211 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 533.968355][ T5826] usb 3-1: config 6 interface 211 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 533.988199][ T5826] usb 3-1: config 6 interface 21 has no altsetting 0 [ 533.995533][ T5826] usb 3-1: config 6 interface 42 has no altsetting 0 [ 534.007075][ T5826] usb 3-1: config 6 interface 211 has no altsetting 0 [ 534.057353][ T5826] usb 3-1: Dual-Role OTG device on HNP port [ 534.071559][ T5826] usb 3-1: New USB device found, idVendor=1bbb, idProduct=00b6, bcdDevice=6b.95 [ 534.097689][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.118041][ T5826] usb 3-1: Product: 㐞౶㒠八炵쬄ꨤ鉤縡⍃普娡▩珶潶諰靈◎뛾殸蚾ऋ攒۰窆㢱蝯减泑든㨙탯镛ⱌ鼭晋ᰚ䀰Ἅᨱ韥Ӥპ∄牐㒶斧堪奫૵뾥 [ 534.168447][ T5826] usb 3-1: Manufacturer: ࠁ [ 534.178690][ T5826] usb 3-1: SerialNumber: syz [ 534.401730][T12685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.420817][T12685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.453228][T12685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.462280][T12685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.482549][T12685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.507445][T12685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.733776][ T30] audit: type=1326 audit(1747048098.670:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12702 comm="syz.5.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484838e969 code=0x7ffc0000 [ 534.790049][ T30] audit: type=1326 audit(1747048098.670:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12702 comm="syz.5.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f484838e969 code=0x7ffc0000 [ 534.845953][ T30] audit: type=1326 audit(1747048098.670:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12702 comm="syz.5.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484838e969 code=0x7ffc0000 [ 534.972695][ T30] audit: type=1326 audit(1747048098.670:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12702 comm="syz.5.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f484838e969 code=0x7ffc0000 [ 535.119599][ T30] audit: type=1326 audit(1747048098.670:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12702 comm="syz.5.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484838e969 code=0x7ffc0000 [ 535.158529][ T30] audit: type=1326 audit(1747048098.670:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12702 comm="syz.5.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484838e969 code=0x7ffc0000 [ 535.640850][T12729] loop2: detected capacity change from 0 to 7 [ 535.670793][ T6635] Dev loop2: unable to read RDB block 7 [ 535.679587][ T6635] loop2: unable to read partition table [ 535.692617][ T6635] loop2: partition table beyond EOD, truncated [ 535.713323][T12729] Dev loop2: unable to read RDB block 7 [ 535.750795][T12729] loop2: unable to read partition table [ 535.778696][T12729] loop2: partition table beyond EOD, truncated [ 535.815067][T12729] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 536.414090][T12737] netlink: 'syz.5.1486': attribute type 11 has an invalid length. [ 536.849094][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 538.147861][T12763] netlink: 'syz.3.1492': attribute type 2 has an invalid length. [ 538.345793][T12771] sctp: [Deprecated]: syz.5.1496 (pid 12771) Use of struct sctp_assoc_value in delayed_ack socket option. [ 538.345793][T12771] Use struct sctp_sack_info instead [ 538.499406][ T10] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 538.674134][ T10] usb 5-1: config index 0 descriptor too short (expected 18980, got 36) [ 538.803422][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 538.829718][T12777] input: syz0 as /devices/virtual/input/input42 [ 538.843758][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 538.854349][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 538.866791][T12777] input: syz1 as /devices/virtual/input/input43 [ 538.903909][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.954173][ T10] hdpvr 5-1:1.0: Could not find bulk-in endpoint [ 538.964938][ T10] hdpvr 5-1:1.0: probe with driver hdpvr failed with error -12 [ 539.172468][ T976] usb 5-1: USB disconnect, device number 108 [ 539.172565][ T5928] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 539.255416][ T5826] option 3-1:6.21: GSM modem (1-port) converter detected [ 539.275672][ T5826] cdc_ether 3-1:6.42: skipping garbage [ 539.281600][ T5826] usb 3-1: bad CDC descriptors [ 539.289153][ T5826] option 3-1:6.42: GSM modem (1-port) converter detected [ 539.318086][ T5826] option 3-1:6.211: GSM modem (1-port) converter detected [ 539.348851][ T5928] usb 6-1: Using ep0 maxpacket: 8 [ 539.361036][ T5928] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 539.372935][ T5928] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 539.388586][ T5928] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 539.429856][ T5928] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.494357][ T5928] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 539.604316][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.766430][T12783] netlink: 'syz.6.1499': attribute type 10 has an invalid length. [ 539.850422][T12783] loop6: detected capacity change from 0 to 63 [ 539.932471][ T5928] usb 6-1: GET_CAPABILITIES returned 0 [ 539.944779][ T5928] usbtmc 6-1:16.0: can't read capabilities [ 540.018884][ T976] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 540.169021][ T976] usb 5-1: Using ep0 maxpacket: 32 [ 540.197791][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 540.209420][T12777] usbtmc 6-1:16.0: Unable to send data, error -71 [ 540.537764][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 540.646519][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 540.672549][ T976] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 540.688375][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.745099][ T976] usb 5-1: config 0 descriptor?? [ 540.753739][ T976] hub 5-1:0.0: USB hub found [ 540.984723][T12787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.993833][T12787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.159226][ T5834] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 541.309126][ T5834] usb 7-1: device descriptor read/64, error -71 [ 541.573528][ T5834] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 541.709235][ T5834] usb 7-1: device descriptor read/64, error -71 [ 541.820860][ T5834] usb usb7-port1: attempt power cycle [ 541.858563][ T5928] usb 6-1: USB disconnect, device number 110 [ 542.198926][ T5834] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 542.220865][ T5834] usb 7-1: device descriptor read/8, error -71 [ 542.475694][ T5834] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 542.529974][ T5834] usb 7-1: device descriptor read/8, error -71 [ 542.590691][ T9] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 542.649608][ T5834] usb usb7-port1: unable to enumerate USB device [ 542.771610][ T9] usb 4-1: config 2 has an invalid interface number: 108 but max is 0 [ 542.791904][ T9] usb 4-1: config 2 has no interface number 0 [ 542.802070][ T9] usb 4-1: config 2 interface 108 has no altsetting 0 [ 542.831788][ T9] usb 4-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=1b.d8 [ 542.859373][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.879067][ T9] usb 4-1: Product: syz [ 542.883416][ T9] usb 4-1: Manufacturer: syz [ 542.888645][ T9] usb 4-1: SerialNumber: syz [ 543.142628][ T9] usb 4-1: Could not find all expected endpoints [ 543.179486][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 543.201919][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 543.234898][T12823] ======================================================= [ 543.234898][T12823] WARNING: The mand mount option has been deprecated and [ 543.234898][T12823] and is ignored by this kernel. Remove the mand [ 543.234898][T12823] option from the mount to silence this warning. [ 543.234898][T12823] ======================================================= [ 543.467162][ T9] usb 4-1: USB disconnect, device number 103 [ 544.157888][T12843] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 544.186821][T12843] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 544.199112][T12843] bond0: (slave lo): Error: Device can not be enslaved while up [ 544.377451][T12847] netlink: 'syz.4.1515': attribute type 4 has an invalid length. [ 544.442572][T12847] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1515'. [ 544.529115][ T5928] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 544.690389][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 544.701648][ T5928] usb 4-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 544.896696][ T5928] usb 4-1: config 0 interface 0 has no altsetting 0 [ 544.945486][ T5928] usb 4-1: New USB device found, idVendor=31ef, idProduct=60fe, bcdDevice= 0.00 [ 545.005910][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.069539][ T5928] usb 4-1: config 0 descriptor?? [ 545.725813][ T5928] usbhid 4-1:0.0: can't add hid device: -71 [ 545.744229][ T5928] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 545.778496][ T5928] usb 4-1: USB disconnect, device number 104 [ 545.811322][ T976] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 545.851068][ T976] usbhid 5-1:0.0: can't add hid device: -32 [ 545.857180][ T976] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 546.625817][T12890] x_tables: duplicate underflow at hook 1 [ 546.864335][T12907] netlink: 'syz.4.1533': attribute type 1 has an invalid length. [ 546.885213][T12907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.894804][T12907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.328964][ T9] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 547.489192][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 547.536088][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.559457][ T9] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 547.578950][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.592393][ T9] usb 6-1: config 0 descriptor?? [ 547.799177][ T976] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 547.981564][ T976] usb 4-1: config 0 has no interfaces? [ 548.011917][ T9] sony 0003:054C:024B.001F: bogus close delimiter [ 548.020070][ T9] sony 0003:054C:024B.001F: item 0 0 2 10 parsing failed [ 548.031926][ T9] sony 0003:054C:024B.001F: parse failed [ 548.037702][ T9] sony 0003:054C:024B.001F: probe with driver sony failed with error -22 [ 548.061621][ T976] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 548.071168][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.119460][ T976] usb 4-1: Product: syz [ 548.132222][ T976] usb 4-1: Manufacturer: syz [ 548.142359][ T976] usb 4-1: SerialNumber: syz [ 548.190395][ T976] usb 4-1: config 0 descriptor?? [ 548.224313][ T9] usb 6-1: USB disconnect, device number 111 [ 548.523985][T12921] netlink: 'syz.3.1537': attribute type 21 has an invalid length. [ 549.288933][ T1627] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 549.458944][ T1627] usb 6-1: Using ep0 maxpacket: 32 [ 549.491283][ T1627] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 549.526591][ T1627] usb 6-1: config 0 has no interface number 0 [ 549.552086][ T1627] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 549.662415][ T1627] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.711072][ T1627] usb 6-1: Product: syz [ 549.738825][ T1627] usb 6-1: Manufacturer: syz [ 549.793105][ T1627] usb 6-1: SerialNumber: syz [ 549.854944][ T1627] usb 6-1: config 0 descriptor?? [ 549.887364][ T1627] smsc95xx v2.0.0 [ 550.152004][T12938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.161451][T12938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.305962][T12956] netlink: 'syz.6.1549': attribute type 10 has an invalid length. [ 551.325479][T12956] syz_tun: entered promiscuous mode [ 551.375185][T12956] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 551.501532][ T976] usb 4-1: USB disconnect, device number 105 [ 551.858964][ T976] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 552.035261][T12962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.047881][T12963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.052444][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.057825][T12962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.095129][ T1627] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 552.106565][ T1627] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 552.108330][ T976] usb 4-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 552.115992][T12963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.158364][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.186651][ T976] usb 4-1: config 0 descriptor?? [ 552.195290][ T1627] usb 6-1: USB disconnect, device number 112 [ 552.390124][T12973] Cannot find del_set index 4 as target [ 552.396188][T12972] Cannot find del_set index 4 as target [ 552.669168][ T1627] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 552.699078][ T5834] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 552.819685][ T1627] usb 6-1: Using ep0 maxpacket: 8 [ 552.826257][T12960] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1550'. [ 552.839429][ T976] usbhid 4-1:0.0: can't add hid device: -71 [ 552.845493][ T976] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 552.851869][ T1627] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 552.865774][ T1627] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.878350][ T1627] usb 6-1: Product: syz [ 552.881961][ T976] usb 4-1: USB disconnect, device number 106 [ 552.889914][ T5834] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 552.895030][ T1627] usb 6-1: Manufacturer: syz [ 552.904242][ T5834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.908536][ T1627] usb 6-1: SerialNumber: syz [ 552.933204][ T1627] usb 6-1: config 0 descriptor?? [ 552.944414][ T5834] usb 7-1: config 0 descriptor?? [ 553.145809][ T1627] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 553.167985][T12976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.185447][ T1627] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 553.189317][T12976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.221862][ T1627] usb 6-1: USB disconnect, device number 113 [ 553.302234][ T5834] usb 7-1: string descriptor 0 read error: -71 [ 553.317584][ T5834] usb 7-1: USB disconnect, device number 103 [ 553.644771][T12999] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1559'. [ 553.683786][T12999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1559'. [ 554.648989][ T5826] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 554.838474][ T5826] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.882750][ T5826] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 554.902753][T13004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.918830][ T5826] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 554.949898][T13004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.986844][ T5826] usb 4-1: New USB device found, idVendor=0125, idProduct=a4a1, bcdDevice= 0.40 [ 555.006650][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.041429][ T5826] usb 4-1: Product: syz [ 555.051556][ T5826] usb 4-1: Manufacturer: syz [ 555.066558][ T5826] usb 4-1: SerialNumber: syz [ 555.128279][ T5826] cdc_ncm 4-1:1.0: skipping garbage [ 555.629024][T13024] @: renamed from vlan0 (while UP) [ 556.216056][T13032] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 556.284400][ T5826] cdc_ncm 4-1:1.0: bind() failure [ 556.313340][ T5826] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 556.333039][ T5826] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 556.343760][T13033] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 556.362043][ T5826] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 556.399651][ T5826] usb 4-1: USB disconnect, device number 107 [ 556.743114][T13036] delete_channel: no stack [ 558.037349][T13061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1574'. [ 558.333077][ T5834] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 558.514961][ T5834] usb 7-1: Using ep0 maxpacket: 16 [ 558.548508][ T5834] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 558.571477][ T5834] usb 7-1: config 0 has no interface number 0 [ 558.580226][ T5834] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 558.614863][ T5834] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 558.683932][ T5834] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 558.733149][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.777744][ T5834] usb 7-1: Product: syz [ 558.809211][ T5834] usb 7-1: Manufacturer: syz [ 558.813974][ T5834] usb 7-1: SerialNumber: syz [ 558.845038][ T5834] usb 7-1: config 0 descriptor?? [ 558.856701][T13063] raw-gadget.5 gadget.6: fail, usb_ep_enable returned -22 [ 558.899628][T13063] raw-gadget.5 gadget.6: fail, usb_ep_enable returned -22 [ 559.105596][T13078] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 559.120645][T13063] raw-gadget.5 gadget.6: fail, usb_ep_enable returned -22 [ 559.135075][T13063] raw-gadget.5 gadget.6: fail, usb_ep_enable returned -22 [ 559.209216][T12815] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 559.416391][T13083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.434980][T13083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.453779][T12815] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.516586][T12815] usb 6-1: config 0 interface 0 has no altsetting 0 [ 559.532258][T12815] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 559.562031][T12815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.576716][T12815] usb 6-1: Product: syz [ 559.583614][T12815] usb 6-1: Manufacturer: syz [ 559.588378][T12815] usb 6-1: SerialNumber: syz [ 559.608719][T12815] usb 6-1: config 0 descriptor?? [ 559.624891][T12815] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 559.662566][T12815] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 559.686968][T12815] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 559.698572][T12815] usb 6-1: media controller created [ 559.732500][T12815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 559.809316][T12815] DVB: Unable to find symbol tda10046_attach() [ 559.815899][T12815] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 559.836298][T12815] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 559.851489][ T5834] asix 7-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0x4b [ 560.056125][ T5834] usb 7-1: USB disconnect, device number 104 [ 560.916923][T12815] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 560.943032][T12815] usb 6-1: USB disconnect, device number 114 [ 561.690090][T13098] netlink: 'syz.5.1583': attribute type 10 has an invalid length. [ 561.713102][T13098] loop6: detected capacity change from 0 to 63 [ 562.416129][T13107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.432492][T13107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.538930][ T5834] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 562.699173][ T5834] usb 6-1: Using ep0 maxpacket: 32 [ 562.706294][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.718048][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.727979][ T5834] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 562.739538][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.751768][ T5834] usb 6-1: config 0 descriptor?? [ 563.104125][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.110883][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.283935][ T5834] usbhid 6-1:0.0: can't add hid device: -71 [ 563.294937][ T5834] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 563.311819][ T5834] usb 6-1: USB disconnect, device number 115 [ 563.669142][T13119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.678629][T13119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.225091][ T5928] usb 6-1: new low-speed USB device number 116 using dummy_hcd [ 564.381247][ T5928] usb 6-1: Invalid ep0 maxpacket: 64 [ 564.538075][ T5928] usb 6-1: new low-speed USB device number 117 using dummy_hcd [ 564.699777][ T5928] usb 6-1: Invalid ep0 maxpacket: 64 [ 564.707328][ T5928] usb usb6-port1: attempt power cycle [ 565.069188][ T5928] usb 6-1: new low-speed USB device number 118 using dummy_hcd [ 565.092848][ T5928] usb 6-1: Invalid ep0 maxpacket: 64 [ 565.228915][ T5928] usb 6-1: new low-speed USB device number 119 using dummy_hcd [ 565.249892][ T5928] usb 6-1: Invalid ep0 maxpacket: 64 [ 565.255552][ T5928] usb usb6-port1: unable to enumerate USB device [ 566.954641][ T30] audit: type=1326 audit(1747048130.890:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13125 comm="syz.5.1590" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f484838e969 code=0x0 [ 568.068959][ T5928] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 568.222191][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 568.233150][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 568.243335][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 568.256821][ T5928] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 568.266128][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.274500][ T5928] usb 6-1: Product: syz [ 568.278695][ T5928] usb 6-1: Manufacturer: syz [ 568.283502][ T5928] usb 6-1: SerialNumber: syz [ 568.294259][ T5928] usb 6-1: config 0 descriptor?? [ 568.503966][ T5928] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 568.711746][T12815] usb 6-1: USB disconnect, device number 120 [ 570.129053][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 579.079436][ T5834] usb 5-1: USB disconnect, device number 109 [ 624.532907][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.539724][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.779081][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 685.973499][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.980085][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 697.490262][ T31] INFO: task kworker/0:3:5832 blocked for more than 143 seconds. [ 697.498050][ T31] Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 [ 697.505866][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 697.515864][ T31] task:kworker/0:3 state:D stack:20792 pid:5832 tgid:5832 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 697.528559][ T31] Workqueue: events rfkill_sync_work [ 697.534042][ T31] Call Trace: [ 697.537362][ T31] [ 697.540555][ T31] __schedule+0x16e2/0x4cd0 [ 697.545107][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 697.550901][ T31] ? schedule+0x165/0x360 [ 697.555270][ T31] ? __pfx___schedule+0x10/0x10 [ 697.560292][ T31] ? schedule+0x91/0x360 [ 697.564566][ T31] schedule+0x165/0x360 [ 697.569665][ T31] schedule_preempt_disabled+0x13/0x30 [ 697.575268][ T31] __mutex_lock+0x724/0xe80 [ 697.580272][ T31] ? __mutex_lock+0x51b/0xe80 [ 697.584989][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 697.590508][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 697.595571][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 697.601001][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 697.606937][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 697.613654][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 697.619803][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 697.624955][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 697.630787][ T31] rfkill_set_block+0x1cf/0x440 [ 697.635675][ T31] rfkill_sync_work+0x114/0x200 [ 697.640960][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 697.646763][ T31] process_scheduled_works+0xadb/0x17a0 [ 697.652526][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 697.658565][ T31] worker_thread+0x8a0/0xda0 [ 697.663357][ T31] kthread+0x70e/0x8a0 [ 697.667474][ T31] ? __pfx_worker_thread+0x10/0x10 [ 697.672965][ T31] ? __pfx_kthread+0x10/0x10 [ 697.677575][ T31] ? __pfx_kthread+0x10/0x10 [ 697.682300][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 697.687531][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 697.692826][ T31] ? __pfx_kthread+0x10/0x10 [ 697.697463][ T31] ret_from_fork+0x4b/0x80 [ 697.702301][ T31] ? __pfx_kthread+0x10/0x10 [ 697.706928][ T31] ret_from_fork_asm+0x1a/0x30 [ 697.711803][ T31] [ 697.714915][ T31] INFO: task kworker/0:5:10442 blocked for more than 143 seconds. [ 697.722874][ T31] Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 [ 697.731157][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 697.739916][ T31] task:kworker/0:5 state:D stack:21864 pid:10442 tgid:10442 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 697.752019][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 697.759077][ T31] Call Trace: [ 697.762397][ T31] [ 697.765374][ T31] __schedule+0x16e2/0x4cd0 [ 697.770011][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 697.775409][ T31] ? schedule+0x165/0x360 [ 697.779807][ T31] ? __pfx___schedule+0x10/0x10 [ 697.784705][ T31] ? schedule+0x91/0x360 [ 697.789364][ T31] schedule+0x165/0x360 [ 697.793552][ T31] schedule_preempt_disabled+0x13/0x30 [ 697.799099][ T31] __mutex_lock+0x724/0xe80 [ 697.803638][ T31] ? __mutex_lock+0x51b/0xe80 [ 697.808328][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 697.814666][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 697.820113][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 697.825878][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 697.831704][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 697.837822][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 697.843916][ T31] process_scheduled_works+0xadb/0x17a0 [ 697.849928][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 697.855982][ T31] worker_thread+0x8a0/0xda0 [ 697.860671][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 697.867048][ T31] ? __kthread_parkme+0x7b/0x200 [ 697.872131][ T31] kthread+0x70e/0x8a0 [ 697.876236][ T31] ? __pfx_worker_thread+0x10/0x10 [ 697.881767][ T31] ? __pfx_kthread+0x10/0x10 [ 697.886417][ T31] ? __pfx_kthread+0x10/0x10 [ 697.891134][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 697.896426][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 697.901793][ T31] ? __pfx_kthread+0x10/0x10 [ 697.906437][ T31] ret_from_fork+0x4b/0x80 [ 697.911166][ T31] ? __pfx_kthread+0x10/0x10 [ 697.915779][ T31] ret_from_fork_asm+0x1a/0x30 [ 697.920635][ T31] [ 697.923678][ T31] INFO: task syz.2.1473:12683 blocked for more than 143 seconds. [ 697.931514][ T31] Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 [ 697.939545][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 697.948244][ T31] task:syz.2.1473 state:D stack:25272 pid:12683 tgid:12683 ppid:5847 task_flags:0x400040 flags:0x00004004 [ 697.960508][ T31] Call Trace: [ 697.963825][ T31] [ 697.966764][ T31] __schedule+0x16e2/0x4cd0 [ 697.971701][ T31] ? validate_chain+0x811/0x2140 [ 697.976673][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 697.981956][ T31] ? schedule+0x165/0x360 [ 697.986318][ T31] ? __pfx___schedule+0x10/0x10 [ 697.991278][ T31] ? schedule+0x91/0x360 [ 697.995561][ T31] schedule+0x165/0x360 [ 698.000103][ T31] schedule_timeout+0x9a/0x270 [ 698.004905][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 698.010396][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 698.015625][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 698.020942][ T31] ? wait_for_completion+0x267/0x5d0 [ 698.026271][ T31] wait_for_completion+0x2bf/0x5d0 [ 698.031816][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 698.037512][ T31] ? __flush_work+0xd2/0xbc0 [ 698.042308][ T31] ? __flush_work+0xd2/0xbc0 [ 698.046913][ T31] __flush_work+0x9b9/0xbc0 [ 698.051611][ T31] ? __flush_work+0xd2/0xbc0 [ 698.056246][ T31] ? __pfx___flush_work+0x10/0x10 [ 698.061672][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 698.067014][ T31] ? __pfx___cancel_work+0x10/0x10 [ 698.072446][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 698.078170][ T31] __cancel_work_sync+0xbe/0x110 [ 698.083694][ T31] rfkill_unregister+0x92/0x220 [ 698.088596][ T31] nfc_unregister_device+0x96/0x2a0 [ 698.093961][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 698.099800][ T31] virtual_ncidev_close+0x56/0x90 [ 698.104871][ T31] __fput+0x449/0xa70 [ 698.109287][ T31] task_work_run+0x1d1/0x260 [ 698.113923][ T31] ? __pfx_task_work_run+0x10/0x10 [ 698.119165][ T31] resume_user_mode_work+0x5e/0x80 [ 698.124307][ T31] syscall_exit_to_user_mode+0x9a/0x120 [ 698.130048][ T31] do_syscall_64+0x103/0x210 [ 698.134677][ T31] ? clear_bhb_loop+0x45/0xa0 [ 698.139860][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.145804][ T31] RIP: 0033:0x7f8eeff8e969 [ 698.153055][ T31] RSP: 002b:00007f8ef02dfb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 698.161889][ T31] RAX: 0000000000000000 RBX: 00007f8ef01b7ba0 RCX: 00007f8eeff8e969 [ 698.169968][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 698.177966][ T31] RBP: 00007f8ef01b7ba0 R08: 0000000000000258 R09: 0000001ef02dfe7f [ 698.186318][ T31] R10: 00000000003ffb84 R11: 0000000000000246 R12: 00000000000833d4 [ 698.194644][ T31] R13: 00007f8ef02dfc80 R14: ffffffffffffffff R15: 00007f8ef02dfca0 [ 698.202756][ T31] [ 698.205803][ T31] INFO: task syz-executor:12924 blocked for more than 144 seconds. [ 698.213893][ T31] Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 [ 698.222034][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 698.230781][ T31] task:syz-executor state:D stack:24008 pid:12924 tgid:12924 ppid:5816 task_flags:0x400000 flags:0x00004004 [ 698.242795][ T31] Call Trace: [ 698.246101][ T31] [ 698.249472][ T31] __schedule+0x16e2/0x4cd0 [ 698.254021][ T31] ? schedule+0x165/0x360 [ 698.258366][ T31] ? __pfx___schedule+0x10/0x10 [ 698.263476][ T31] ? schedule+0x91/0x360 [ 698.267772][ T31] schedule+0x165/0x360 [ 698.272029][ T31] schedule_preempt_disabled+0x13/0x30 [ 698.277562][ T31] __mutex_lock+0x724/0xe80 [ 698.282486][ T31] ? __mutex_lock+0x51b/0xe80 [ 698.287247][ T31] ? rfkill_register+0x37/0x8e0 [ 698.292776][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 698.297833][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 698.303305][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 698.309079][ T31] ? device_initialize+0x24b/0x440 [ 698.318812][ T31] rfkill_register+0x37/0x8e0 [ 698.323586][ T31] hci_register_dev+0x3f5/0x890 [ 698.328459][ T31] vhci_create_device+0x39c/0x6e0 [ 698.333547][ T31] vhci_write+0x3ce/0x4a0 [ 698.337909][ T31] vfs_write+0x548/0xa90 [ 698.342872][ T31] ? __pfx_vhci_write+0x10/0x10 [ 698.347770][ T31] ? __pfx_vfs_write+0x10/0x10 [ 698.352596][ T31] ? expand_files+0x6c8/0x7f0 [ 698.357331][ T31] ? __lock_acquire+0xaac/0xd20 [ 698.362314][ T31] ksys_write+0x145/0x250 [ 698.366690][ T31] ? __pfx_ksys_write+0x10/0x10 [ 698.371886][ T31] ? do_syscall_64+0xba/0x210 [ 698.376608][ T31] do_syscall_64+0xf6/0x210 [ 698.381288][ T31] ? clear_bhb_loop+0x45/0xa0 [ 698.386002][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.392041][ T31] RIP: 0033:0x7fd6f698d3e0 [ 698.396500][ T31] RSP: 002b:00007ffde2921a88 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 698.405602][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fd6f698d3e0 [ 698.413681][ T31] RDX: 0000000000000002 RSI: 00007ffde2921a9a RDI: 00000000000000ca [ 698.421869][ T31] RBP: 00007fd6f6bb6738 R08: 00000000000000d7 R09: 0000000000000000 [ 698.430233][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 698.438324][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 698.446409][ T31] [ 698.449583][ T31] [ 698.449583][ T31] Showing all locks held in the system: [ 698.457365][ T31] 1 lock held by khungtaskd/31: [ 698.462772][ T31] #0: ffffffff8df3d860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 698.472758][ T31] 3 locks held by kworker/u8:5/195: [ 698.477984][ T31] #0: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 698.488036][ T31] #1: ffff8880b8823b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x318/0x6d0 [ 698.499803][ T31] #2: ffffffff999f7578 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_deactivate+0x9a/0x250 [ 698.510634][ T31] 2 locks held by kworker/u8:6/1101: [ 698.515961][ T31] #0: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 698.526083][ T31] #1: ffff8880b8823b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 698.537936][ T31] 2 locks held by getty/5590: [ 698.542710][ T31] #0: ffff8880350420a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 698.552550][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 698.563005][ T31] 4 locks held by kworker/0:3/5832: [ 698.568217][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 698.579539][ T31] #1: ffffc90003fefc60 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 698.592370][ T31] #2: ffffffff8f5cac68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 698.602526][ T31] #3: ffff888023d43100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 698.612748][ T31] 1 lock held by syz.5.692/9207: [ 698.617729][ T31] #0: ffffffff8f5cac68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 698.630951][ T31] 3 locks held by kworker/0:5/10442: [ 698.636353][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 698.647582][ T31] #1: ffffc9000daefc60 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 698.661889][ T31] #2: ffffffff8f5cac68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 698.678760][ T31] 1 lock held by syz.2.1473/12683: [ 698.684011][ T31] #0: ffff888023d43100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 698.694160][ T31] 2 locks held by syz-executor/12924: [ 698.700162][ T31] #0: ffff888052b63118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 698.710365][ T31] #1: ffffffff8f5cac68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 698.720422][ T31] 3 locks held by syz.3.1579/13080: [ 698.725639][ T31] #0: ffffffff8f35b270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 698.734357][ T31] #1: ffffffff8f35b088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 698.743641][ T31] #2: ffffffff8f5cac68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 698.753773][ T31] 2 locks held by syz.6.1582/13091: [ 698.759371][ T31] #0: ffffffff8f35b270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 698.767647][ T31] #1: ffffffff8f35b088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 698.777288][ T31] 2 locks held by syz.4.1588/13120: [ 698.782876][ T31] #0: ffffffff8f35b270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 698.793071][ T31] #1: ffffffff8f35b088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 698.802518][ T31] 2 locks held by syz.5.1591/13129: [ 698.807751][ T31] #0: ffffffff8f35b270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 698.816139][ T31] #1: ffffffff8f35b088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 698.825456][ T31] 2 locks held by syz-executor/13139: [ 698.830973][ T31] #0: ffff88802566d918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 698.841089][ T31] #1: ffffffff8f5cac68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 698.851570][ T31] 2 locks held by syz-executor/13141: [ 698.856973][ T31] #0: ffff888067382918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 698.867493][ T31] #1: ffffffff8f5cac68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 698.877529][ T31] 2 locks held by syz-executor/13142: [ 698.883305][ T31] #0: ffff888067387118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 698.893475][ T31] #1: ffffffff8f5cac68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 698.903633][ T31] 2 locks held by syz-executor/13144: [ 698.909457][ T31] #0: ffff888011e3f918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 698.919575][ T31] #1: ffffffff8f5cac68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 698.929872][ T31] 2 locks held by dhcpcd/13166: [ 698.934764][ T31] #0: ffff8880517b0258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 698.944905][ T31] #1: ffffffff8df43338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 698.956217][ T31] 2 locks held by dhcpcd/13167: [ 698.961423][ T31] #0: ffff88803680e258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 698.971660][ T31] #1: ffffffff8df43338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 698.982864][ T31] [ 698.985243][ T31] ============================================= [ 698.985243][ T31] [ 698.995690][ T31] NMI backtrace for cpu 1 [ 698.995710][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(full) [ 698.995731][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 698.995741][ T31] Call Trace: [ 698.995748][ T31] [ 698.995756][ T31] dump_stack_lvl+0x189/0x250 [ 698.995784][ T31] ? __wake_up_klogd+0xd9/0x110 [ 698.995806][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 698.995839][ T31] ? __pfx__printk+0x10/0x10 [ 698.995866][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 698.995885][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 698.995899][ T31] ? _printk+0xcf/0x120 [ 698.995919][ T31] ? __pfx__printk+0x10/0x10 [ 698.995936][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 698.995955][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 698.995974][ T31] watchdog+0xfee/0x1030 [ 698.995996][ T31] ? watchdog+0x1de/0x1030 [ 698.996023][ T31] kthread+0x70e/0x8a0 [ 698.996048][ T31] ? __pfx_watchdog+0x10/0x10 [ 698.996069][ T31] ? __pfx_kthread+0x10/0x10 [ 698.996090][ T31] ? __pfx_kthread+0x10/0x10 [ 698.996108][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 698.996126][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 698.996146][ T31] ? __pfx_kthread+0x10/0x10 [ 698.996164][ T31] ret_from_fork+0x4b/0x80 [ 698.996180][ T31] ? __pfx_kthread+0x10/0x10 [ 698.996199][ T31] ret_from_fork_asm+0x1a/0x30 [ 698.996226][ T31] [ 698.996233][ T31] Sending NMI from CPU 1 to CPUs 0: [ 699.146461][ C0] NMI backtrace for cpu 0 [ 699.146479][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(full) [ 699.146500][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 699.146511][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 699.146537][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 fb 11 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 699.146553][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 699.146569][ C0] RAX: d7c6c8c001b4e700 RBX: ffffffff81974f08 RCX: d7c6c8c001b4e700 [ 699.146582][ C0] RDX: 0000000000000001 RSI: ffffffff8d74b4fc RDI: ffffffff8bc1d3a0 [ 699.146595][ C0] RBP: ffffffff8dc07ec0 R08: ffff8880b8832b5b R09: 1ffff1101710656b [ 699.146608][ C0] R10: dffffc0000000000 R11: ffffed101710656c R12: ffffffff8f7ef670 [ 699.146622][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a48 [ 699.146633][ C0] FS: 0000000000000000(0000) GS:ffff8881260c9000(0000) knlGS:0000000000000000 [ 699.146648][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 699.146660][ C0] CR2: 000055cf09646168 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 699.146677][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 699.146687][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 699.146698][ C0] Call Trace: [ 699.146707][ C0] [ 699.146714][ C0] default_idle+0x13/0x20 [ 699.146736][ C0] default_idle_call+0x74/0xb0 [ 699.146760][ C0] do_idle+0x1e8/0x510 [ 699.146779][ C0] ? __pfx_do_idle+0x10/0x10 [ 699.146804][ C0] cpu_startup_entry+0x44/0x60 [ 699.146820][ C0] rest_init+0x2de/0x300 [ 699.146844][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 699.146871][ C0] start_kernel+0x470/0x4f0 [ 699.146892][ C0] x86_64_start_reservations+0x2a/0x30 [ 699.146916][ C0] x86_64_start_kernel+0x66/0x70 [ 699.146939][ C0] common_startup_64+0x13e/0x147 [ 699.146972][ C0] [ 699.147538][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 699.352224][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(full) [ 699.364042][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 699.374114][ T31] Call Trace: [ 699.377405][ T31] [ 699.380351][ T31] dump_stack_lvl+0x99/0x250 [ 699.384971][ T31] ? __asan_memcpy+0x40/0x70 [ 699.389579][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 699.394804][ T31] ? __pfx__printk+0x10/0x10 [ 699.399419][ T31] panic+0x2db/0x790 [ 699.403344][ T31] ? __pfx_panic+0x10/0x10 [ 699.407780][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 699.413618][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 699.419005][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 699.425176][ T31] watchdog+0x102d/0x1030 [ 699.429527][ T31] ? watchdog+0x1de/0x1030 [ 699.433969][ T31] kthread+0x70e/0x8a0 [ 699.438061][ T31] ? __pfx_watchdog+0x10/0x10 [ 699.442785][ T31] ? __pfx_kthread+0x10/0x10 [ 699.447408][ T31] ? __pfx_kthread+0x10/0x10 [ 699.452019][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 699.457369][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 699.462606][ T31] ? __pfx_kthread+0x10/0x10 [ 699.467214][ T31] ret_from_fork+0x4b/0x80 [ 699.471645][ T31] ? __pfx_kthread+0x10/0x10 [ 699.476254][ T31] ret_from_fork_asm+0x1a/0x30 [ 699.481047][ T31] [ 699.485885][ T31] Kernel Offset: disabled [ 699.490226][ T31] Rebooting in 86400 seconds..