last executing test programs: 5m27.604286239s ago: executing program 3 (id=1505): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, r1, 0xfffffffc}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r2, 0xb}}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="1fe1bc7f", 0x4) sendmmsg$unix(r6, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0xeffd) r7 = syz_io_uring_setup(0x4ed, &(0x7f0000000140)={0x0, 0xfec9, 0x400, 0x0, 0x20024c}, &(0x7f00000001c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x21, {0x4, 0x1}, 0x6}, 0x1) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040), r1, 0x0, 0x2, 0x4}}, 0x20) 5m26.95127753s ago: executing program 0 (id=1506): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x2, 0xa, 0x8, 0x2, 0x2, 0x0, 0x70bd27, 0x25dfdc02}, 0x10}, 0x1, 0x400000000000000}, 0x80) 5m26.565730432s ago: executing program 3 (id=1507): mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2, &(0x7f0000000200)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0, 0x0) (async) set_mempolicy_home_node(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0x707b, 0x400, 0x2, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x118, &(0x7f0000000080)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) recvmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000000440)=@caif=@util, 0x80, &(0x7f0000001240)=[{&(0x7f0000005e40)=""/4096, 0x1000}], 0x1, &(0x7f0000000700)=""/179, 0xb3}}, {{&(0x7f00000007c0)=@caif=@rfm, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/81, 0x51}, {&(0x7f0000000a40)=""/128, 0x80}, {&(0x7f0000006e40)=""/4109, 0x100d}, {&(0x7f0000000ac0)=""/113, 0x71}, {&(0x7f0000003240)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/231, 0xe7}, {&(0x7f0000000cc0)=""/243, 0xf3}], 0x8, &(0x7f0000000e40)=""/212, 0xd4}, 0xfffffff5}, {{&(0x7f0000000f40)=@pppol2tpin6, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000fc0)=""/203, 0xcb}, {&(0x7f00000010c0)=""/222, 0xde}, {&(0x7f00000009c0)=""/34, 0x22}], 0x3, &(0x7f0000004240)=""/214, 0xd6}, 0x3}, {{0x0, 0x0, &(0x7f0000004880)=[{&(0x7f0000004340)=""/198, 0xc6}, {&(0x7f0000004440)=""/125, 0x7d}, {&(0x7f00000011c0)=""/1, 0x1}, {&(0x7f00000044c0)=""/80, 0x50}, {&(0x7f0000004540)=""/171, 0xab}, {&(0x7f0000004600)=""/196, 0xc4}, {&(0x7f0000004700)=""/186, 0xba}, {&(0x7f00000047c0)=""/129, 0x81}], 0x8, &(0x7f0000004900)=""/244, 0xf4}, 0xfffffb38}, {{&(0x7f0000004a00)=@rc={0x1f, @none}, 0x80, &(0x7f0000005c00)=[{&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000005a80)=""/106, 0x6a}, {&(0x7f0000000540)=""/46, 0x2e}, {&(0x7f0000005b40)=""/20, 0x14}, {&(0x7f0000001280)=""/92, 0x5c}], 0x5, &(0x7f0000005c80)=""/1, 0x1}, 0x977f}], 0x5, 0x2002, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="549406abeec5c164a643749f000000", @ANYRES16=r6, @ANYBLOB="000128bd7000fddbdf25010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) (async) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="549406abeec5c164a643749f000000", @ANYRES16=r6, @ANYBLOB="000128bd7000fddbdf25010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYRES32=r0], 0xa0}}], 0x1, 0x4040815) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="02180400170000000000000000000000030005000000000002000000e0000001000000000000000008001200000000000000000000000008060000000000000000000000000000007f000001000000000000000000000000fc010000000000000000000000000000030006000000000002000002ffffffff000000000000000007001900000000000a"], 0xb8}}, 0x0) (async) sendmsg$key(r7, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="02180400170000000000000000000000030005000000000002000000e0000001000000000000000008001200000000000000000000000008060000000000000000000000000000007f000001000000000000000000000000fc010000000000000000000000000000030006000000000002000002ffffffff000000000000000007001900000000000a"], 0xb8}}, 0x0) fsopen(&(0x7f0000000180)='qnx6\x00', 0x1) syz_usb_connect$cdc_ncm(0x5, 0x73, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x60, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "8bf0433ab3"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x0, 0x1000, 0x1}, {0x6, 0x24, 0x1a, 0xfffe}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0x2, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xc, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xe6, 0x2, 0x7}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0xe, 0xa, 0x5, 0x8, 0xa}, 0x19, &(0x7f0000000280)={0x5, 0xf, 0x19, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x1, 0x4, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x8, 0x1, 0xfffa}]}, 0x1, [{0xbb, &(0x7f00000002c0)=ANY=[@ANYBLOB="bb036a6ac44ea1eee6b47ef37c9110c1f43228089ec4d44a575ee3f4645f7484a6899530772b23727261984a96d4fa3df95013a753468b18e063b892c955b55b7281c65133e605654525baf0e5be3ac0c4d9812357f4680026890f9c079236204db499e1bc9fd5d177a6a3652507cab55aabb56ab258f9eb50924f3dd63e78c4c575bb958fcdd1edca3b2a4f9fc8ec71e8217ee03d04ae17935b1719ae46ccdad03f9a212e57c5b83725954ff3de7e4ad200ae9584b1a0ab2067f0"]}]}) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_KEY(r10, 0x6a, 0x1, 0x0, 0x63) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_MPU={0x8, 0xe, 0x6a}]}}]}, 0x4c}}, 0x0) 5m26.504396105s ago: executing program 0 (id=1508): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) (fail_nth: 27) 5m26.224623729s ago: executing program 3 (id=1509): r0 = inotify_init() fcntl$notify(r0, 0x402, 0x8000003d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r3, 0x800) syz_emit_ethernet(0x7a, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x16) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x86, &(0x7f0000001500)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8908981864d689ac43445c1c26e95299e94ccad8794114ae3061e328af342f99", "e4d0ce57abcb41f7f5c8ab8f63dd38a1", {"bb3ce5a4bbb68671a2892fa0317a823c", "be9d98ca816f77013a778b6c40b49ea9"}}}}}}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r6, 0x400, 0x1) unlink(&(0x7f0000000300)='./file1\x00') r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b031200e0ff64000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r8}, 0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x7, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 5m24.174234737s ago: executing program 3 (id=1514): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f7b5ec0b2b12a9000070d00be00830000f0ff0b"], 0x0}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="2e260f009d040000000f3266ba4100ec36650fc75d85b9800000c00f3235000800000f30b805000000b9060000000f01c10f1bde652e0f309a004800006700c4e29d026a05", 0x45}], 0x1, 0x0, 0x0, 0x0) capset(&(0x7f0000000000), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 5m22.980670367s ago: executing program 0 (id=1516): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0) 5m22.132929172s ago: executing program 0 (id=1519): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r1, &(0x7f0000000340)={0x11, 0x1, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000480)={0x28, 0x4, r4, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r4, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f0000000040)={0x10, 0x1, r5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x29, 0x22, 0x0, 0x2000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000000240)=0x3) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 5m20.820750923s ago: executing program 3 (id=1520): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000020c0)=ANY=[@ANYBLOB="1201010200000010f3044d0740000102030109022d00010103f80f050904000801030101000921ff00010122b00b09058103100002ba07090502032000080eb84abdf5610fb3291ec6ba0f8ada35ffd166e911e4f8"], &(0x7f00000002c0)={0x0, 0x0, 0x5, &(0x7f0000002140)=ANY=[@ANYBLOB="050f050000fcf7c4f4cbd2340ed2a776f192497a443921ea37d18b8614bd931431a84f08117c1f2385226438f26a7daa24ab3f95e685d330f6049e34bf56e461c4a0bf82c27412a64763ca329442823ad4ff8c26e20fac94062f2090eb0e629e4d31f19b9ee1e1915b45fe2f6bd4e7f0bfcee4a09c7d511f85f567516c76"], 0x1, [{0x0, 0x0}]}) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000002200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x81, 0x40, 0x95, [{{0x9, 0x4, 0x0, 0x6d, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xd, 0x9, 0xd}}}}}]}}]}}, &(0x7f0000002440)={0xa, &(0x7f0000002240)={0xa, 0x6, 0x201, 0x6, 0x1, 0x2, 0x10, 0xd}, 0x58, &(0x7f0000002280)={0x5, 0xf, 0x58, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x7, 0xf00, 0xf, [0xf, 0xc00f, 0x30, 0xfff0]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x41, 0x3, 0x6, 0x800, 0x7}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x8, 0xf00, 0xcae, [0xffc0f0, 0xf, 0x3f00, 0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x5, 0xfd, 0xffc0}]}, 0x3, [{0x8d, &(0x7f0000002300)=@string={0x8d, 0x3, "e1311025b3d1ecc53a299cd41546726d896558c09097883fa49b879b355e46ba0f314fb663a5fdc1009a6f92833d8bed72e7f369eb4ebfad9a6a042913017e1f0717f65317ef9c4ebde4f5160ebc1a86e13651b2b204da6057ca8fb50b600997a0cce90d5c2623dbea31ff8ec41b325dd224cc0d496d374a020f23d946a8b49f509dae0dbdbfdd07301327"}}, {0x4, &(0x7f00000023c0)=@lang_id={0x4, 0x3, 0x2024}}, {0x11, &(0x7f0000002400)=@string={0x11, 0x3, "c422d81f7246c032ffa16f48315412"}}]}) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r2, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r2, 0x0, 0x0) 5m14.900341343s ago: executing program 3 (id=1527): r0 = socket(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) recvmmsg(r4, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c00)=""/4092, 0xffc}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x12}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000540)=""/226, 0xe2}, {&(0x7f00000001c0)=""/37, 0x25}, {&(0x7f0000000440)=""/84, 0x54}, {0x0}, {&(0x7f0000000640)=""/60, 0x3c}, {&(0x7f0000000840)=""/249, 0xf9}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x10122, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000003380)) connect$can_bcm(r1, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES64=r1], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0) sendmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4048884) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20000, 0x192) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x800000000, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x28}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000680001000000000000000000020000000000000006000700070000000c000880050005000000000008000500", @ANYRES32=r6], 0x34}}, 0x0) 5m14.896214634s ago: executing program 0 (id=1528): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x7c}}, 0x0) 5m11.250453344s ago: executing program 0 (id=1532): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in6=@private2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x2b, 0x0, 0xee00}, {@in=@loopback, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xf}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, {0x0, 0x4, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r6 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x83, 0x66, 0x7d, 0x10, 0x2040, 0x264, 0x4ed1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x90, 0xf1, 0x9c}}]}}]}}, 0x0) pipe(&(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[], 0x0) 4m56.324378022s ago: executing program 32 (id=1529): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="05000002009522a88fe9025d59"], 0x5) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000240)) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x26}], 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) landlock_create_ruleset(&(0x7f0000000080)={0x800, 0x2}, 0x18, 0x1) socket$kcm(0xa, 0x2, 0x3a) 4m56.084821204s ago: executing program 33 (id=1527): r0 = socket(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) recvmmsg(r4, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c00)=""/4092, 0xffc}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x12}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000540)=""/226, 0xe2}, {&(0x7f00000001c0)=""/37, 0x25}, {&(0x7f0000000440)=""/84, 0x54}, {0x0}, {&(0x7f0000000640)=""/60, 0x3c}, {&(0x7f0000000840)=""/249, 0xf9}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x10122, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000003380)) connect$can_bcm(r1, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES64=r1], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0) sendmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4048884) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20000, 0x192) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x800000000, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x28}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000680001000000000000000000020000000000000006000700070000000c000880050005000000000008000500", @ANYRES32=r6], 0x34}}, 0x0) 4m55.374616059s ago: executing program 34 (id=1532): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in6=@private2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x2b, 0x0, 0xee00}, {@in=@loopback, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xf}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, {0x0, 0x4, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r6 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x83, 0x66, 0x7d, 0x10, 0x2040, 0x264, 0x4ed1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x90, 0xf1, 0x9c}}]}}]}}, 0x0) pipe(&(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[], 0x0) 4m32.472107103s ago: executing program 4 (id=1555): r0 = socket$inet_udp(0x2, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) setsockopt$sock_int(r0, 0x88, 0x45, &(0x7f0000000140), 0x4) 4m32.186959223s ago: executing program 4 (id=1556): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002540)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "83c5b03b"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000100)={0x0, 0x27, 0x93, {0x93, 0x1, "a4609f3ee03963495546883b24f7855c35d6045f52beda77399701f2a9e6b09f8501ed16b89ffeacfab74ea3d2689677636584c8b8952379a6b1e8814a57bc59555aaf0cc9e1ee3f7af1db37ed5b83894e19dbb625372c3dc34ead91e23f3b9ab62b0f3c21e7ffe20106199982c89774697e6b6ba347c57b3b3f9cf0bf1c57810df8647d1aa70b9784bb22c209dcbd7771"}}, &(0x7f0000000040)={0x0, 0x3, 0x49, @string={0x49, 0x3, "bf3a5a9e0b2bf050fbdcdf962a9d434a1402568414fc54ddd75db4bdc21f07c6af34d0693b47c6e60e45ca8a1721b4d0d45e3036a3c194baf7c19a550c1b7da228edd34e59d296"}}, &(0x7f00000001c0)={0x0, 0x22, 0x12, {[@local=@item_4={0x3, 0x2, 0x7, "f7087eaa"}, @global=@item_4={0x3, 0x1, 0x8, "4c154e9c"}, @local=@item_012={0x0, 0x2, 0x3}, @local=@item_012={0x2, 0x2, 0x5, 'bL'}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x2, 0x1, {0x22, 0x8b}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x0, 0xf, 0xffffffffffffff27, "b9eada6b7a44915482b9f251c1cbf26c0bfa996c98d99511274a978ec2f4779babfcc44556541efcfbaa4123c77a2e1ea61b102918f14e678d7ca92484e85a2c9b49f395a3dbe088f1aae718b0b11001716a0b9e9d81a0407727516d88213af347"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000003c0)={0x20, 0x1, 0x37, "e4d3fe295a9afaf66f9f54dae016c106fb00e6a26f4f0cbb62c1436236f968d3e7cbaa592f0b67010e3dee45e6c3c02d6aba99f236ee57"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x72}}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x1, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x1, 0x0, 0x41, 0x2}) io_uring_enter(r1, 0x4000627, 0x1996, 0x43, 0x0, 0x0) syz_io_uring_setup(0x620f, &(0x7f0000000480)={0x0, 0x878, 0x10000, 0x3, 0x94, 0x0, r1}, &(0x7f0000000500), &(0x7f0000000540)) 4m29.112796562s ago: executing program 4 (id=1558): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x11, &(0x7f0000000080)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x718, 0x328, 0x580, 0x580, 0xd0, 0x328, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x18, 0x40}, {0x5}}}, @common=@srh={{0x30}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) 4m28.790602895s ago: executing program 4 (id=1559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x140, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x114, 0x3, 0x0, 0x1, [{0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x103, 0x6, 0x1, 0x0, "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"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1bc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4m28.423817295s ago: executing program 4 (id=1560): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000008411215500000000000010902240001000000000904000001030000000921ffff00012205000905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 4m24.845687326s ago: executing program 4 (id=1565): getcwd(&(0x7f0000000080)=""/228, 0xe4) r0 = socket(0x8000000010, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000032c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000003300)={0x3c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x973c}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004804) write(r0, &(0x7f00000002c0)="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", 0xfc) 4m9.385226042s ago: executing program 35 (id=1565): getcwd(&(0x7f0000000080)=""/228, 0xe4) r0 = socket(0x8000000010, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000032c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000003300)={0x3c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x973c}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004804) write(r0, &(0x7f00000002c0)="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", 0xfc) 2m42.939523432s ago: executing program 6 (id=1723): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000006c40)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x5, @mcast2, 0x2}, 0x1c, 0x0}}], 0x1, 0x8884) 2m42.598704691s ago: executing program 6 (id=1724): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00000003c0)="42e8", 0x2}, {0x0, 0xfffffd66}], 0x2, 0x0, 0x1e0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xcf, 0x69, 0x54, 0x10, 0x403, 0xf850, 0x17b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x17, 0x0, 0x0, 0x5, 0x7d, 0x44}}]}}]}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000009c0)=[@code={0x1, 0x4c, {"c4011f5162c7f3410faede66420f1b1a0f6f8200000000c483791539fb0f20d835200000000f22d841da30b9ed0a00000f32f3430fc736660fc733"}}, @uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18, 0x29}, @code={0x1, 0x63, {"0f01cbc4a181746f023e640f09360f55a93f42bc83660f38de3d04000000c463c55cc500c4e1a9f4bc8000000000b9800000c00f3235008000000f30440f20c03507000000440f22c0f00fc1ac3600000100"}}, @code={0x1, 0x7f, {"66baf80cb8a402e98eef66bafc0c66edb8010000000f01d9c441f81759a7c4c1916aa7cac8849ec744240001000000c7442402feffffffc7442406000000000f011c24f3430f1edf67f2de3766baf80cb88172ca89ef66bafc0cb014ee66420f3880810000000066b825010f00d0"}}, @uexit={0x0, 0x18, 0x7f}, @uexit={0x0, 0x18, 0x4}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0x9}, @code={0x1, 0x78, {"b805000000b9cf79d3430f01c16426450f35c442dd00bcbb03caed0948b800200000000000000f23c80f21f8350400d0000f23f8b9800000c00f3235001000000f3066470fc7b700800000470f60d566baf80cb8a3fe0b82ef66bafc0cec0f0095140000000f35"}}, @code={0x1, 0x64, {"f30f1ec1c744240035000000c744240200000000ff2c24c42281ddebc40200f5be00480000480fc76d004e0fc79f0a000000c482659364fd08410f01c264640fc7b1698c0000b805000000b9000000000f01c1"}}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18, 0xb976}, @code={0x1, 0x61, {"42db97feffffff6546816dbf0000c0fe450fc730b90c0600000f3266b8a1008ee8450f01cfb964090000b808000000ba000000000f302e470f0054f62e0f01d166baf80cb850abcb89ef66bafc0c66ed"}}, @uexit={0x0, 0x18, 0xcb0}, @code={0x1, 0x69, {"b9800000c00f3235000400000f30420f21a6b9f70200000f32b9ba080000b88da2de58ba000000000f3066ba6100ecc744240054000000c744240200000000ff2c24c4823529690066ba6100ed66ba400066ed65670f01c5"}}, @code={0x1, 0x47, {"65360fc72f460f01df3667f0f61b430f78fcc4c34944f4040f01cb670f01f8f2f2670f20a3b8010000000f01d9c4a135eab53fef0000"}}, @uexit={0x0, 0x18}, @code={0x1, 0x74, {"b957090000b850000000ba000000000f300fc75e00c4e30120120cc74424003d5e8357c7442402f23f0000c7442406000000000f011c244413250060000066baf80cb81d64fc85ef66bafc0cec660f3880554566b82c008ee866ba6100ed2e420f01c5"}}, @code={0x1, 0x69, {"66ba420066b800a066efc4c1a05cddc441dd6ae9f3410f09b9b20a00000f323ef0438133421a8382c7442400b3000000c744240207730000ff1c24400f01c466b869008ee8c7442400ae000000c74424021d000000ff2c24"}}, @uexit={0x0, 0x18, 0x2}, @code={0x1, 0x7a, {"663642dceb66baf80cb81a839b8fef66bafc0c66edb9a40300000f32360f206048b800800000000000000f23c00f21f835020008000f23f8c483f9618e000000000066470fc7b4260000000066baf80cb88c06028fef66bafc0cb80080ffffef44da7fc4c4c27979ea"}}, @code={0x1, 0x89, {"8fe9709163ac66ba4100edf246a466b818010f00d0c74424003d010000c744240200000000ff2c24c744240000000100c74424021ef80000c7442406000000000f011c2466410f3882890000000066400f3881a40807000000c7442400b8d5ed97c744240299180000c7442406000000000f01142446dbe1"}}, @code={0x1, 0x5b, {"b94e080000b802000000ba000000000f3080a7e7f972492bc422a1081b460f015e01b9800000c00f3235008000000f3066b8e7008ec066b838010f00d066b82b008ee026430f370f01c2"}}], 0x65e}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2m40.879679619s ago: executing program 6 (id=1731): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x40, 0x40, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xe, 0x0, 0x0, 0x64}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) 2m40.316527161s ago: executing program 6 (id=1733): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x7ca1, &(0x7f00000001c0)={0x0, 0x57b6, 0x200, 0x0, 0x2db}, &(0x7f0000000080), &(0x7f0000000240)) r2 = io_uring_setup(0x6a7b, &(0x7f0000000000)={0x0, 0x3026, 0x40, 0x5, 0x235, 0x0, r1}) r3 = io_uring_setup(0x10860, &(0x7f0000000140)={0x0, 0x6ed5, 0x800, 0x0, 0xffff, 0x0, r2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x14, &(0x7f0000001900)=[0xffffffff], 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) io_uring_enter(r3, 0x5ccf, 0xd74c, 0x38, 0x0, 0x0) 2m40.15902639s ago: executing program 6 (id=1734): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0xffffffffffffff8c) 2m39.927343207s ago: executing program 6 (id=1736): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000200)={0x0, 0x0}) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a80)=ANY=[@ANYBLOB="200000001300000328bd7000fbdbdf250800d900cc1c0c3c6afe119639e547a0afb3edb9ca495128a326b1caeadd2dc1e96c8d91bce6c79c07317fe8b4512f54352deed8fdd32b5087cca98701533ff8a8b32df8dc2fb2ea84432d6913207ee5b6611ae196a22ef80f5588", @ANYRES32=r3, @ANYBLOB="0800c300", @ANYRES32=r3, @ANYBLOB], 0x20}], 0x1, 0x0, 0x0, 0x4000}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) preadv(r5, &(0x7f0000000540)=[{&(0x7f0000000080)=""/91, 0x5b}], 0x1, 0xfe, 0x5b3) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000000000000000000008000100e0e0000108000300", @ANYRES32=r7], 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000b00)={0x0, 0x40}, 0x8) recvfrom$packet(r0, &(0x7f0000000300)=""/54, 0x36, 0x40012023, &(0x7f0000000740)={0x11, 0x18, r7, 0x1, 0x7}, 0x14) setsockopt(r6, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) ioctl$USBDEVFS_CLAIM_PORT(r9, 0x80045518, &(0x7f0000000000)=0x1) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000200)=ANY=[@ANYRES32=r10], 0xf) syz_usb_connect(0x5, 0x36, &(0x7f0000000d00)={{0x12, 0x1, 0x250, 0x1a, 0xec, 0x5c, 0x8, 0xc4b, 0x100, 0xe50d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x90, 0x4, [{{0x9, 0x4, 0x89, 0x5, 0x2, 0x93, 0x68, 0x6a, 0x9, [], [{{0x9, 0x5, 0x8, 0x2, 0x200, 0x5, 0x4, 0x6}}, {{0x9, 0x5, 0xf, 0x2, 0x54, 0x2, 0x5, 0x2}}]}}]}}]}}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004e826d4094225a4241d10102030109022b00010400000009040000026964c2000905040600000000000705569e"], 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0xd0, 0xd5, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x7, 0x1, 0x1, 0x43, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x6, 0x40, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0xfe, 0x1}}]}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x0, 0x1, 0x3, 0xff, 0x6}, 0x10a, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xa, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="00039206e60e63e43ff27d9056fda1fbbac47c59eeaa9e0d8e048900a2153d1385766cc31b1eadf7cb16a55d0e74b109ea24f107beacb8e9b4b7f8b367d8b0ff1a79a9f0db2b10c034b23b2eab2d86e3c092bb38f35a9ea1010f786b5b6be1f49b100cd7182de386e768e5f01ea391aac886a7bd74f9ff90eb501455b769b9d1441296b627adbd42e6850ef273eb38c2bcecfe4570f7d1c7340d156ae75ed22e8a6bb872fb009942cf3933d200"/182]}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x100c}}, {0xfc49, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x100c}}, {0xa6, &(0x7f0000000480)=@string={0xa6, 0x3, "1957b018271994f8a211a0b1b4621f5a8232b6f55aa2427b117443131351df1b5764efa611e9a9945808a4b17abcd7f1a4d45fbc48552a5882c2941fc0b73f033d2b7b2f1de5bf2b5b0a159136db58d9501fe72ddcf461458cc254a2f185b35f1f6af6f96b2debb6ba9dda094287da42a3d23e2fb4fdc21836f2122ce5a4cbb6907460ed5cc08ae1cd44dc275795e858b03bf825d75aef4ff01c45bdbeeb82cb0887512a"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x9e}}, {0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="0803e0d53e7f8d812a732e2052097ad791e2cca04361dbff17067450e7cabb21604cc55631fc0d185b5177f891d199e7bbec470ca36e11b2f64e4f884adb7ba57675fa5bdaa0c446ddb2ccb78256a89b39efe027cfe31c62c9c249209010d10487c0028faf361efac0ce0cca36b37a9914e7d5973eabea6dd909b470"]}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x839d4ef7389b0a87}}, {0x6e, &(0x7f00000007c0)=@string={0x6e, 0x3, "6f93a1326ec12a24830d9a8f81ec0ed5770e9d627880f168d63431618111e0ed78508fae1c4786b2b2ba186a1f474e8e66a79470ca4509f4a6aff838d6e604fd691f5d0c75382fcbaa8a81f14b2eca7138628097c3c7299b76bebc49d3e16d3bb6c74d10885ea1e74b0420d6"}}]}) 2m24.76927866s ago: executing program 36 (id=1736): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000200)={0x0, 0x0}) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a80)=ANY=[@ANYBLOB="200000001300000328bd7000fbdbdf250800d900cc1c0c3c6afe119639e547a0afb3edb9ca495128a326b1caeadd2dc1e96c8d91bce6c79c07317fe8b4512f54352deed8fdd32b5087cca98701533ff8a8b32df8dc2fb2ea84432d6913207ee5b6611ae196a22ef80f5588", @ANYRES32=r3, @ANYBLOB="0800c300", @ANYRES32=r3, @ANYBLOB], 0x20}], 0x1, 0x0, 0x0, 0x4000}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) preadv(r5, &(0x7f0000000540)=[{&(0x7f0000000080)=""/91, 0x5b}], 0x1, 0xfe, 0x5b3) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000000000000000000008000100e0e0000108000300", @ANYRES32=r7], 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000b00)={0x0, 0x40}, 0x8) recvfrom$packet(r0, &(0x7f0000000300)=""/54, 0x36, 0x40012023, &(0x7f0000000740)={0x11, 0x18, r7, 0x1, 0x7}, 0x14) setsockopt(r6, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) ioctl$USBDEVFS_CLAIM_PORT(r9, 0x80045518, &(0x7f0000000000)=0x1) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000200)=ANY=[@ANYRES32=r10], 0xf) syz_usb_connect(0x5, 0x36, &(0x7f0000000d00)={{0x12, 0x1, 0x250, 0x1a, 0xec, 0x5c, 0x8, 0xc4b, 0x100, 0xe50d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x90, 0x4, [{{0x9, 0x4, 0x89, 0x5, 0x2, 0x93, 0x68, 0x6a, 0x9, [], [{{0x9, 0x5, 0x8, 0x2, 0x200, 0x5, 0x4, 0x6}}, {{0x9, 0x5, 0xf, 0x2, 0x54, 0x2, 0x5, 0x2}}]}}]}}]}}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004e826d4094225a4241d10102030109022b00010400000009040000026964c2000905040600000000000705569e"], 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0xd0, 0xd5, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x7, 0x1, 0x1, 0x43, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x6, 0x40, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0xfe, 0x1}}]}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x0, 0x1, 0x3, 0xff, 0x6}, 0x10a, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xa, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="00039206e60e63e43ff27d9056fda1fbbac47c59eeaa9e0d8e048900a2153d1385766cc31b1eadf7cb16a55d0e74b109ea24f107beacb8e9b4b7f8b367d8b0ff1a79a9f0db2b10c034b23b2eab2d86e3c092bb38f35a9ea1010f786b5b6be1f49b100cd7182de386e768e5f01ea391aac886a7bd74f9ff90eb501455b769b9d1441296b627adbd42e6850ef273eb38c2bcecfe4570f7d1c7340d156ae75ed22e8a6bb872fb009942cf3933d200"/182]}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x100c}}, {0xfc49, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x100c}}, {0xa6, &(0x7f0000000480)=@string={0xa6, 0x3, "1957b018271994f8a211a0b1b4621f5a8232b6f55aa2427b117443131351df1b5764efa611e9a9945808a4b17abcd7f1a4d45fbc48552a5882c2941fc0b73f033d2b7b2f1de5bf2b5b0a159136db58d9501fe72ddcf461458cc254a2f185b35f1f6af6f96b2debb6ba9dda094287da42a3d23e2fb4fdc21836f2122ce5a4cbb6907460ed5cc08ae1cd44dc275795e858b03bf825d75aef4ff01c45bdbeeb82cb0887512a"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x9e}}, {0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="0803e0d53e7f8d812a732e2052097ad791e2cca04361dbff17067450e7cabb21604cc55631fc0d185b5177f891d199e7bbec470ca36e11b2f64e4f884adb7ba57675fa5bdaa0c446ddb2ccb78256a89b39efe027cfe31c62c9c249209010d10487c0028faf361efac0ce0cca36b37a9914e7d5973eabea6dd909b470"]}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x839d4ef7389b0a87}}, {0x6e, &(0x7f00000007c0)=@string={0x6e, 0x3, "6f93a1326ec12a24830d9a8f81ec0ed5770e9d627880f168d63431618111e0ed78508fae1c4786b2b2ba186a1f474e8e66a79470ca4509f4a6aff838d6e604fd691f5d0c75382fcbaa8a81f14b2eca7138628097c3c7299b76bebc49d3e16d3bb6c74d10885ea1e74b0420d6"}}]}) 1m31.283491404s ago: executing program 8 (id=1908): r0 = socket(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) recvmmsg(r4, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c00)=""/4092, 0xffc}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x12}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000540)=""/226, 0xe2}, {&(0x7f00000001c0)=""/37, 0x25}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000002d40)=""/4107, 0x100b}, {&(0x7f0000000640)=""/60, 0x3c}, {&(0x7f0000000840)=""/249, 0xf9}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x10122, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000003380)) connect$can_bcm(r1, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES64=r1], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0) sendmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4048884) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20000, 0x192) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x800000000, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x28}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000680001000000000000000000020000000000000006000700070000000c000880050005000000000008000500", @ANYRES32=r6], 0x34}}, 0x0) 1m27.073258572s ago: executing program 8 (id=1920): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000400)={0xc, @sdr={0x50424752, 0x885}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x304}, "060000000400", "a590d6cbe29665fffe6115bb3dbf924c", '\x00\x00\x00@', "c8090000004f5b4c"}, 0x28) 1m25.886565567s ago: executing program 8 (id=1922): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x58840}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x37}, 0x15, r1}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7}}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x79, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x0, 0xd1, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x2, 0xfa, {0x9, 0x21, 0xf001, 0x5, 0x1, {0x22, 0x709}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x9}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0xa, 0x1, 0xf6, 0x20, 0x3}, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="050f0f100000000000000000e4ff0000c33250df47489f3a867203116943929fe3a9363013f23199fb33c4a8d104eb38ec84b8b57d1e81e0d71b82160d0d6dbde10d382357a048393b4cd6a357f8a79c749b73fa3797ac850c3baa5f03eb40eb1c197af6fe9aed3f23291fc9f3"], 0x5, [{0x91, &(0x7f0000000180)=@string={0x91, 0x3, "5c467e15c0c122b737af72bc91a6ce0903edba7b58bb000e500ef3e4408667a5ec31c54adca7f3888022fc7e4362c59069630e4b8fe2feec6c72a31f62b0ffe8397e631c5c92a5487ca3f41ef19c38b78a4e18b378a7d3b6b31555a66d73462f37c667c665c9b79efa3b062cf15f8cfa5fb9d04959a7436619e77ebc75621b8ef4a03754c4ab375f55b801ebc5454f"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x413}}, {0x5b, &(0x7f00000002c0)=@string={0x5b, 0x3, "e22c6c47fa50d701549944d4357134e5855f1f2328888f47720a051da55492178ced0c73c88c7ddec8407e58118b3a5ee8c3e4a8d965b14510d1a689220f5e1502cc8e7b2a195c2eaf46746d5a638a8bc417e9189d78d7ca5e"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xfcff}}]}) r5 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xffffffff, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x2, 0x3, {0x9, 0x21, 0x3, 0x6, 0x1, {0x22, 0x643}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x4, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x4, 0x4, 0x7}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x300, 0xf1, 0xc, 0x9, 0x10, 0xfc}, 0x54, &(0x7f0000000480)={0x5, 0xf, 0x54, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x5, 0x0, 0x509, [0xff30, 0xff0f, 0x3f, 0xc000]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x3, 0xf0f, 0x2, [0xc000, 0xff3f, 0x30, 0xfff0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x5, 0x6, 0xf16}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x3}]}, 0x3, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x200a}}, {0xfe, &(0x7f0000000740)=@string={0xfe, 0x3, "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"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x2409}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setxattr$security_ima(0x0, &(0x7f0000000140), 0x0, 0x700, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000004) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, 0x0, &(0x7f0000000140)) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x7, 0x8, {0x8, 0xd, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m23.596497945s ago: executing program 8 (id=1930): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x40, 0x40, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xe, 0x0, 0x0, 0x600}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) 1m23.315223048s ago: executing program 8 (id=1932): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000400)={0xc, @sdr={0x50424752, 0x885}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x304}, "060000000400", "a590d6cbe29665fffe6115bb3dbf924c", '\x00\x00\x00@', "c8090000004f5b4c"}, 0x28) 1m20.93563714s ago: executing program 8 (id=1939): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0x0, 0x4) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902120001000000000904"], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000200)={0x0, 0x0}) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a80)=ANY=[@ANYBLOB="200000001300000328bd7000fbdbdf250800d900cc1c0c3c6afe119639e547a0afb3edb9ca495128a326b1caeadd2dc1e96c8d91bce6c79c07317fe8b4512f54352deed8fdd32b5087cca98701533ff8a8b32df8dc2fb2ea84432d6913207ee5b6611ae196a22ef80f5588", @ANYRES32=r3, @ANYBLOB="0800c300", @ANYRES32=r3, @ANYBLOB], 0x20}], 0x1, 0x0, 0x0, 0x4000}, 0x40) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) socket$igmp(0x2, 0x3, 0x2) preadv(r4, &(0x7f0000000540)=[{&(0x7f0000000080)=""/91, 0x5b}], 0x1, 0xfe, 0x5b3) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000000000000000000008000100e0e0000108000300", @ANYRES32=r6], 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000b00)={0x0, 0x40}, 0x8) recvfrom$packet(r0, &(0x7f0000000300)=""/54, 0x36, 0x40012023, &(0x7f0000000740)={0x11, 0x18, r6, 0x1, 0x7}, 0x14) setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) ioctl$USBDEVFS_CLAIM_PORT(r8, 0x80045518, &(0x7f0000000000)=0x1) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000200)=ANY=[@ANYRES32=r9], 0xf) syz_usb_connect(0x5, 0x36, &(0x7f0000000d00)={{0x12, 0x1, 0x250, 0x1a, 0xec, 0x5c, 0x8, 0xc4b, 0x100, 0xe50d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x90, 0x4, [{{0x9, 0x4, 0x89, 0x5, 0x2, 0x93, 0x68, 0x6a, 0x9, [], [{{0x9, 0x5, 0x8, 0x2, 0x200, 0x5, 0x4, 0x6}}, {{0x9, 0x5, 0xf, 0x2, 0x54, 0x2, 0x5, 0x2}}]}}]}}]}}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004e826d4094225a4241d10102030109022b00010400000009040000026964c2000905040600000000000705569e"], 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0xd0, 0xd5, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x7, 0x1, 0x1, 0x43, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x6, 0x40, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0xfe, 0x1}}]}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x0, 0x1, 0x3, 0xff, 0x6}, 0x10a, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xa, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="00039206e60e63e43ff27d9056fda1fbbac47c59eeaa9e0d8e048900a2153d1385766cc31b1eadf7cb16a55d0e74b109ea24f107beacb8e9b4b7f8b367d8b0ff1a79a9f0db2b10c034b23b2eab2d86e3c092bb38f35a9ea1010f786b5b6be1f49b100cd7182de386e768e5f01ea391aac886a7bd74f9ff90eb501455b769b9d1441296b627adbd42e6850ef273eb38c2bcecfe4570f7d1c7340d156ae75ed22e8a6bb872fb009942cf3933d200"/182]}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x100c}}, {0xfc49, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x100c}}, {0xa6, &(0x7f0000000480)=@string={0xa6, 0x3, "1957b018271994f8a211a0b1b4621f5a8232b6f55aa2427b117443131351df1b5764efa611e9a9945808a4b17abcd7f1a4d45fbc48552a5882c2941fc0b73f033d2b7b2f1de5bf2b5b0a159136db58d9501fe72ddcf461458cc254a2f185b35f1f6af6f96b2debb6ba9dda094287da42a3d23e2fb4fdc21836f2122ce5a4cbb6907460ed5cc08ae1cd44dc275795e858b03bf825d75aef4ff01c45bdbeeb82cb0887512a"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x9e}}, {0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="0803e0d53e7f8d812a732e2052097ad791e2cca04361dbff17067450e7cabb21604cc55631fc0d185b5177f891d199e7bbec470ca36e11b2f64e4f884adb7ba57675fa5bdaa0c446ddb2ccb78256a89b39efe027cfe31c62c9c249209010d10487c0028faf361efac0ce0cca36b37a9914e7d5973eabea6dd909b470"]}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x839d4ef7389b0a87}}, {0x6e, &(0x7f00000007c0)=@string={0x6e, 0x3, "6f93a1326ec12a24830d9a8f81ec0ed5770e9d627880f168d63431618111e0ed78508fae1c4786b2b2ba186a1f474e8e66a79470ca4509f4a6aff838d6e604fd691f5d0c75382fcbaa8a81f14b2eca7138628097c3c7299b76bebc49d3e16d3bb6c74d10885ea1e74b0420d6"}}]}) 1m5.715201028s ago: executing program 37 (id=1939): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0x0, 0x4) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902120001000000000904"], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000200)={0x0, 0x0}) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a80)=ANY=[@ANYBLOB="200000001300000328bd7000fbdbdf250800d900cc1c0c3c6afe119639e547a0afb3edb9ca495128a326b1caeadd2dc1e96c8d91bce6c79c07317fe8b4512f54352deed8fdd32b5087cca98701533ff8a8b32df8dc2fb2ea84432d6913207ee5b6611ae196a22ef80f5588", @ANYRES32=r3, @ANYBLOB="0800c300", @ANYRES32=r3, @ANYBLOB], 0x20}], 0x1, 0x0, 0x0, 0x4000}, 0x40) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) socket$igmp(0x2, 0x3, 0x2) preadv(r4, &(0x7f0000000540)=[{&(0x7f0000000080)=""/91, 0x5b}], 0x1, 0xfe, 0x5b3) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000000000000000000008000100e0e0000108000300", @ANYRES32=r6], 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000b00)={0x0, 0x40}, 0x8) recvfrom$packet(r0, &(0x7f0000000300)=""/54, 0x36, 0x40012023, &(0x7f0000000740)={0x11, 0x18, r6, 0x1, 0x7}, 0x14) setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) ioctl$USBDEVFS_CLAIM_PORT(r8, 0x80045518, &(0x7f0000000000)=0x1) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000200)=ANY=[@ANYRES32=r9], 0xf) syz_usb_connect(0x5, 0x36, &(0x7f0000000d00)={{0x12, 0x1, 0x250, 0x1a, 0xec, 0x5c, 0x8, 0xc4b, 0x100, 0xe50d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x90, 0x4, [{{0x9, 0x4, 0x89, 0x5, 0x2, 0x93, 0x68, 0x6a, 0x9, [], [{{0x9, 0x5, 0x8, 0x2, 0x200, 0x5, 0x4, 0x6}}, {{0x9, 0x5, 0xf, 0x2, 0x54, 0x2, 0x5, 0x2}}]}}]}}]}}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004e826d4094225a4241d10102030109022b00010400000009040000026964c2000905040600000000000705569e"], 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0xd0, 0xd5, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x7, 0x1, 0x1, 0x43, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x6, 0x40, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0xfe, 0x1}}]}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x0, 0x1, 0x3, 0xff, 0x6}, 0x10a, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xa, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="00039206e60e63e43ff27d9056fda1fbbac47c59eeaa9e0d8e048900a2153d1385766cc31b1eadf7cb16a55d0e74b109ea24f107beacb8e9b4b7f8b367d8b0ff1a79a9f0db2b10c034b23b2eab2d86e3c092bb38f35a9ea1010f786b5b6be1f49b100cd7182de386e768e5f01ea391aac886a7bd74f9ff90eb501455b769b9d1441296b627adbd42e6850ef273eb38c2bcecfe4570f7d1c7340d156ae75ed22e8a6bb872fb009942cf3933d200"/182]}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x100c}}, {0xfc49, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x100c}}, {0xa6, &(0x7f0000000480)=@string={0xa6, 0x3, "1957b018271994f8a211a0b1b4621f5a8232b6f55aa2427b117443131351df1b5764efa611e9a9945808a4b17abcd7f1a4d45fbc48552a5882c2941fc0b73f033d2b7b2f1de5bf2b5b0a159136db58d9501fe72ddcf461458cc254a2f185b35f1f6af6f96b2debb6ba9dda094287da42a3d23e2fb4fdc21836f2122ce5a4cbb6907460ed5cc08ae1cd44dc275795e858b03bf825d75aef4ff01c45bdbeeb82cb0887512a"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x9e}}, {0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="0803e0d53e7f8d812a732e2052097ad791e2cca04361dbff17067450e7cabb21604cc55631fc0d185b5177f891d199e7bbec470ca36e11b2f64e4f884adb7ba57675fa5bdaa0c446ddb2ccb78256a89b39efe027cfe31c62c9c249209010d10487c0028faf361efac0ce0cca36b37a9914e7d5973eabea6dd909b470"]}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x839d4ef7389b0a87}}, {0x6e, &(0x7f00000007c0)=@string={0x6e, 0x3, "6f93a1326ec12a24830d9a8f81ec0ed5770e9d627880f168d63431618111e0ed78508fae1c4786b2b2ba186a1f474e8e66a79470ca4509f4a6aff838d6e604fd691f5d0c75382fcbaa8a81f14b2eca7138628097c3c7299b76bebc49d3e16d3bb6c74d10885ea1e74b0420d6"}}]}) 14.340644531s ago: executing program 1 (id=2125): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0xdb) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_clone(0x5080200, &(0x7f00000002c0)="f6381939e66bf4501be683f26f1a5e970af95466e2ccf77a345bfb687b257b6811e7e8d1f0e7296e97c9e0640e3226e3131f3e4b4ffcc3851cb3b234f21846f90dc10b1b0fadb529d2ce582a22", 0x4d, &(0x7f0000000180), &(0x7f0000000340), &(0x7f0000000440)="02fdf9a9318edea006c6435379f34b774282feb5a53f9964eb3060839149110c29d0179812522fb413e4be1a4522a4b911291a23f757ddf588fde9c8c5645bc5862936b408ed4f59cf1e65d6a57385f213156e2ef0810baeb060f51a5684e4cb26115ff49694d738a18772f9baaf999d4e143343fbf3e5e773616577a2a48648d2d8dd84ef2ed711f244de9eb0fba4b080612edf") ptrace(0x10, r6) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_REG_LIST(r7, 0xc008aeb0, &(0x7f0000000380)={0x1, [0x2]}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r5, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x8000}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_VAPIC_ADDR(r9, 0x4008ae93, &(0x7f00000000c0)=0x10000) ioctl$KVM_RUN(r9, 0xae80, 0x0) io_uring_register$IORING_REGISTER_PBUF_STATUS(r9, 0x1a, &(0x7f0000000000)={0x1}, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x80001, 0x0, [0xc0, 0x7fffffffffffffff, 0xc9, 0x9, 0x6, 0x0, 0x8, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet(0x2, 0x80000, 0x200a) socket$inet(0x2, 0x5, 0x4) 12.574097475s ago: executing program 1 (id=2134): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$video4linux(0x0, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r6, 0x26, 0x0) fcntl$lock(r6, 0x7, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000200)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x5, 0x3a, '\'', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) creat(&(0x7f00000001c0)='./file0\x00', 0x16c) 11.184481735s ago: executing program 1 (id=2136): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001b80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000340)="fd", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}], 0x2, 0x4000000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1}, 0x8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32=r2], 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x8f, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r6, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/rpc\x00') ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f00000001c0)=0x4) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0305602, &(0x7f0000000100)={0x1, 0x300}) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="00050100f31db370b889970080000000bb1c78a3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_connect(0x3, 0x41, &(0x7f0000001000)=ANY=[@ANYBLOB="120110b200000010cf0701108b8f0102030109022f000108031007090484fc03f805"], &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="df16540000004e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semop(0x0, 0x0, 0x0) 11.083283486s ago: executing program 5 (id=2137): socket(0x2d, 0x2, 0x0) syz_open_dev$swradio(&(0x7f00000012c0), 0x1, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) syz_io_uring_setup(0x6c85, &(0x7f00000003c0)={0x0, 0x4cd2, 0x80, 0x2, 0x21e}, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x3) r1 = syz_io_uring_setup(0x21f1, &(0x7f00000000c0)={0x0, 0x400000, 0x10100, 0xfffffffb}, &(0x7f0000000200)=0x0, &(0x7f0000000400)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x2, 0x1000000, 0x2c, @mcast2, @private0, 0x7800, 0x80, 0x20003, 0x270}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x200000000000000, 0x0, 0x0) 10.749212894s ago: executing program 5 (id=2138): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000440)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_open_procfs(r1, &(0x7f0000000180)='coredump_filter\x00') pwrite64(r2, 0x0, 0x44, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600"], 0xc}, 0x4004c40) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f0000000040)={0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x81, 0x2, 0x8, 0xff, 0x5, 0x39, 0x7, 0x4, 0x3, 0x1, 0x80, 0xbe, 0x0, 0x4, 0xa8, 0x1}}) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xcc, 0x1, 0x6, 0x2, 0x1, 0x1, 0xff, 0x5, 0x1, 0xe, 0x9, 0x0, 0x2, 0x81, 0x5}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) epoll_create1(0x80000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8, 0x30}, &(0x7f0000000040)=0xc) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000140)="000000000d800000", 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000091106a000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 9.651040715s ago: executing program 5 (id=2141): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$alg(0x26, 0x5, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000040)=0x9, 0x8, 0x3) mmap(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0xcc4c6000) timer_gettime(r1, &(0x7f0000000000)) 9.407525235s ago: executing program 5 (id=2143): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000040)=""/123) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="200119"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001240)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="20030d000000339a28f022d00bb290bc37073538a4ac2dc3ded0a4d2"], 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000700)={0x0, 0x3, 0x5, "2f8d88abc8"}, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x1, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0xfffffff6, 0x0, &(0x7f0000000040)) r2 = syz_usb_connect$cdc_ecm(0x4, 0xa0, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x1, 0x1, 0xc3, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x5, {{0xb, 0x24, 0x6, 0x0, 0x0, "40cdfd15368d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xf52, 0x0, 0x101, 0xd5}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x1, 0x96, 0x4, 0x2}, @mdlm_detail={0x28, 0x24, 0x13, 0x8, "86c9be5b15de646fdb3fab039401cae72af524d2c493899812c041852c1aad7dfa7bf24d"}, @country_functional={0x8, 0x24, 0x7, 0x1, 0x81, [0x7]}, @mbim_extended={0x8, 0x24, 0x1c, 0x100, 0xff, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x37, 0x9, 0x3e}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0xb6, 0x16}}, {{0x9, 0x5, 0x3, 0x2, 0x3e7, 0x1, 0x8}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x6, 0x2, 0x5, 0x20, 0x3}, 0x20, &(0x7f0000000180)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x24049bb35d5ba157, 0x3, 0x6, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "d85c7bd27e296940f7fc43f508e451f4"}]}, 0x6, [{0x58, &(0x7f0000000200)=@string={0x58, 0x3, "2f568dae90d52faccf7141534b12e3f5d29cef10b761b98e59010a6a18d2826b5aa95c8162bfa774153e04e2d60085776dbe84146c4a0a5ae5311f1b8b60890ff8d95ce82135b7bfd1fcedbe40f06fd62c5f4988fd9a"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xf8ff}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000480)={0x14, &(0x7f0000000600)={0x40, 0x30, 0xbc, {0xbc, 0x30, "70133dec0bba3e8541647caffb5fc9df859b6bd235011b6fea9ddd616fa0a3ce9a19c0527a0ba0ad282aa32baa3d7c5817fbbdcf2e725062af196821fe5c0002b57071f8342f6c73d4cad4dab044ddd4e66b75069ebcad34afa6287cca2f38b8e4d6d575a06df8d075a8c0580bb746cf534010351381c29143e6448b14a85148397baa44696b601ecc2537263f210262f1447a07f0f397a9d2677f9db4d7b757e1d1d37618927efbb6e04b3816e8b9f977b00a0df84f80d62b0b"}}, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000840)={0x1c, &(0x7f0000000740)={0x20, 0x5, 0xf0, "15f16e502266253cf57b91df0f6796f3e4599a49f45f1d42b1b4be00efca34cd407a226069fcd4f3b15a44e00982180d4012affca1417dc049926c1b3f04313ad8c8679fa05947aee58bc1bbe787ac8c45377f4d6b879e7fd54a6770b8db12cbc580d06516e0f851c3907ee40f4492d85c5e1a419ce456849a2f13ada2a2c845b2ddce050c9590e9d4d9c9ae352347708a509288606d899777e3ac4c544a73aca14a528d54d2dea5ea345a37317fb98042960c6ed09f232e0f84de68140b1254b4b32e1ca2845e94eef6515abdaed54d7c649ee0be32e7e3015e52a39766c0aff24101028cbcda130b60fc431b1b7297"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xd5}}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x50010, 0xffffffffffffffff, 0x8000000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x4b52, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x114, &(0x7f0000000000)=0x1, 0x0, 0x4) 8.597747187s ago: executing program 7 (id=2146): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$video4linux(0x0, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r6, 0x26, 0x0) fcntl$lock(r6, 0x7, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000200)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x5, 0x3a, '\'', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) creat(&(0x7f00000001c0)='./file0\x00', 0x16c) 8.238820203s ago: executing program 2 (id=2147): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d0009"], 0x0) 7.548103225s ago: executing program 9 (id=2148): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x46}, 0x1c) 7.446979496s ago: executing program 7 (id=2149): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r3 = open_tree(r2, &(0x7f0000000080)='./mnt\x00', 0x89801) unshare(0x22020400) pidfd_getfd(r3, r2, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x6, 0x7a, &(0x7f00000000c0)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r5 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) io_uring_enter(r5, 0x40f9, 0x217, 0xa5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 7.19740855s ago: executing program 1 (id=2150): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000140)={0x3, 0x33565348, 0x1, @discrete={0x6863bdd6, 0x10000}}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x10500ad, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getresuid(&(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000280)) 7.116175552s ago: executing program 9 (id=2151): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0x3d, 0xc6, 0xca, 0x8, 0x148f, 0x7601, 0xa191, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf3, 0x6, 0x10, 0x6, [{{0x9, 0x4, 0x1b, 0x2, 0x0, 0x87, 0xcd, 0xd4, 0x2}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x0, 0xf9, 0xd, 0x20, 0x1}, 0x127, &(0x7f0000000240)={0x5, 0xf, 0x127, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x7fff, 0x0, 0xffca, [0xffc000, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4a, 0x0, 0x4, 0x0, 0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x75, 0x70, 0x7, 0x4, 0x7}, @generic={0xe7, 0x10, 0x4, "d5757377864799630f72703fac70104f2248d4ed803610b5bd6575f604882c24f8e20f05a9d0c3e14327e73238999c9ea9092dcf06956a328d8309cb70a71343494e21ac26933e0e6a76fb5254fa1d2baf613880670e532a4d3d92f2ff2266c60287759272330f00bce76e962a3dfc4120dd584d0cface122116c78dfe18092ea469308be427b18468e47c0ec587c9cb215dcced5f25cb24e64849d0383bf1295419fc29d503145e071310da5149afceab63e502c58bb414ddc4a12605ec68a1f0cd5037a39a88aea9c76fb1a7121447ec9aaaf7c40b53ef1da7446c70c808ee9af29cd9"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x1, 0x5, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x0, 0x6, 0x2}]}, 0x2, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x458}}, {0x11, &(0x7f0000000440)=@string={0x11, 0x3, "ac95c34c9adb65df6fa13f0036a6ec"}}]}) io_submit(0x0, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700fbff, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x1001}]) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x6700000000000000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 6.337598693s ago: executing program 2 (id=2152): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="000000000d800000", 0x8) 6.030401579s ago: executing program 2 (id=2153): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001400)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x0, 0x5}, 0x1, {0x10}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x4, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_pauseparam={0x13, 0xe, 0x2, 0x2}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1f2}, @in6={0xa, 0x4e21, 0xfffffffa, @empty, 0x2}, @in6={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x17c8}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0x3, @local, 0x10001}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x90) r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x40}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000440)={0x0, 0x2, 0x5, 0xbb83}) memfd_create(&(0x7f0000000140)='\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="050000007f000000f00e00008001000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x50) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_MADVISE={0x19, 0x1a, 0x0, 0x0, 0x0, &(0x7f0000008000/0x1000)=nil, 0x1000, 0x4, 0x1}) listen(0xffffffffffffffff, 0x0) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 5.251434438s ago: executing program 5 (id=2154): r0 = socket(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) recvmmsg(r4, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c00)=""/4092, 0xffc}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x12}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000540)=""/226, 0xe2}, {&(0x7f00000001c0)=""/37, 0x25}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000002d40)=""/4107, 0x100b}, {&(0x7f0000000640)=""/60, 0x3c}, {&(0x7f0000000840)=""/249, 0xf9}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x10122, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000003380)) connect$can_bcm(r1, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r1, 0x0, 0x440c0) sendmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4048884) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20000, 0x192) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x800000000, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x28}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000680001000000000000000000020000000000000006000700070000000c000880050005000000000008000500", @ANYRES32=r6], 0x34}}, 0x0) 5.224017908s ago: executing program 9 (id=2155): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, 0x0, 0x40) 4.708746604s ago: executing program 9 (id=2156): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_getroute={0x1c, 0x1a, 0xb01, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd}}, 0x1c}}, 0x40004040) (fail_nth: 2) 4.660572798s ago: executing program 1 (id=2157): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$can_raw(r3, &(0x7f00000005c0), 0x10) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) (async) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) (async) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$vbi(0x0, 0x1, 0x2) syz_emit_ethernet(0x46, &(0x7f0000001600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000380000000000019078640101b8ac1414aa0b009078032c000045000000000000000089000000000000ac1414aaa815fa7e08a23da4"], 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205649, 0x0) (async) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205649, 0x0) r7 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x2, 0x33424752, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5}}) recvmmsg(r3, &(0x7f0000007140)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001700)=""/217, 0xdc}, {0x0}], 0x1}, 0x4}], 0x1, 0x600100a2, 0x0) (async) recvmmsg(r3, &(0x7f0000007140)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001700)=""/217, 0xdc}, {0x0}], 0x1}, 0x4}], 0x1, 0x600100a2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mmap(&(0x7f0000c4b000/0x1000)=nil, 0x1000, 0x0, 0x20010, r5, 0x41995000) (async) mmap(&(0x7f0000c4b000/0x1000)=nil, 0x1000, 0x0, 0x20010, r5, 0x41995000) io_setup(0x8, &(0x7f00000001c0)) (async) io_setup(0x8, &(0x7f00000001c0)=0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r8, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_rdma(0x10, 0x3, 0x14) (async) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001814010000fb000000000000080001"], 0x20}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in=@remote, @in=@empty, 0x4e20, 0x3, 0x4e21, 0x101, 0x2, 0x80, 0x80, 0xff, r2, r10}, {0x101, 0x8, 0x9, 0x6, 0x8, 0x3, 0x6, 0x521e}, {0x8000000000000000, 0x101, 0x3, 0x5}, 0x401, 0x6e6bb8, 0x1, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x32}, 0xa, @in6=@local, 0x3501, 0x3, 0x2, 0x1, 0x80000007, 0x4, 0x7f}}, 0xe8) 3.68975936s ago: executing program 9 (id=2158): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f7b5ec0b2b12a9000070d00be00830000"], 0x0}, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$media(&(0x7f0000000b40), 0x2e18, 0x100) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f00000011c0), 0x0}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) capset(0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000001200)={{0x2, 0x0, 0x80, {0xeeef0000, 0x3000}}, "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", "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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3.153395335s ago: executing program 2 (id=2159): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002540)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "83c5b03b"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @lang_id={0x0, 0x3, 0x423}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x13, @string={0x13, 0x3, "bf3a5a9e0b2bf050fbdcdf962a9d434a14"}}, &(0x7f00000001c0)={0x0, 0x22, 0xe, {[@local=@item_4={0x3, 0x2, 0x7, "f7087eaa"}, @global=@item_4={0x3, 0x1, 0x8, "4c154e9c"}, @local=@item_012={0x0, 0x2, 0x3}, @local=@item_012={0x2, 0x2, 0x5, 'bL'}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x2, 0x1, {0x22, 0x8b}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x0, 0xf, 0x61, "b9eada6b7a44915482b9f251c1cbf26c0bfa996c98d99511274a978ec2f4779babfcc44556541efcfbaa4123c77a2e1ea61b102918f14e678d7ca92484e85a2c9b49f395a3dbe088f1aae718b0b11001716a0b9e9d81a0407727516d88213af347"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000003c0)={0x20, 0x1, 0x37, "e4d3fe295a9afaf66f9f54dae016c106fb00e6a26f4f0cbb62c1436236f968d3e7cbaa592f0b67010e3dee45e6c3c02d6aba99f236ee57"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x72}}) 1.876128605s ago: executing program 7 (id=2160): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031200e0ff64000200475400f6", 0xe, 0xb00000000000000, &(0x7f0000000140)={0x11, 0x8100, r2}, 0x14) 1.448175534s ago: executing program 7 (id=2161): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x28011, r3, 0x0) ftruncate(r3, 0x796c) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x3, 0x5a2, &(0x7f0000000b00)={{0x12, 0x1, 0x110, 0x4a, 0x4f, 0x77, 0x8, 0x582, 0x52, 0xf3ae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x590, 0x1, 0x3, 0x3, 0x80, 0x70, [{{0x9, 0x4, 0xc4, 0x8, 0xc, 0x92, 0x5a, 0x8d, 0x10, [], [{{0x9, 0x5, 0x0, 0x10, 0x20, 0xfe, 0x9, 0x4, [@generic={0xe1, 0x5, "732e5616f863ebbe462b5dd2a6dfd89651d67a8d8ba4c0e677241edbe22e9bc80dcd6fabf0c900ba1fa2efc5a51985921cda8795b900a7f9193606a62edcfa7d262a34d7c978a2de486519821619a2d8722af0cd2e2ee2d73ebb48ff0ba6e3cb9c62439402bc25031bd3f9648104abacaf8434694f9fe202ccd9cb1c0a287e41a50a7c757b8a8b3341d1ad304f6997c0f6cc6b39446edce05f0dda6d64f4f2e191405714395bae77587b795373b4cfc1694b3427d643cc53b020b4af173dc31ccdeb00728e4eae037f3fff3d06ae8711b6a090cd5c876e9ddd25b04485c850"}, @generic={0xe9, 0x23, "5ea612eaa32f912f0623f103da9d5a2d0a98dc4a036741bf9709fda1887f41105fae2139ec3312efe535cd4d04bd00586bbf73af9599762d1d303474bdde5fe21b33cb63e2cef9886891e905f512bd2ee899180d57b2c0e9498f8e7e00473499b982e8689c5c06dff2b0d753b8c9eddd6fe90788448624b154e3279f62f264467d567ea2905b87ecf33a6d4622f0b263d1ae0ae508e1ce4af30e2b89682f12f9c57f255dc9622e96db18f865d9eb554075a8ca17e3a641d999cacd5a3bf948365fd3e6c121cd5ffe2adfc40aae99b1e93a89e20fc3d9a6a501e710aef9795ffacabf1cd74d0061"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x10, 0x7, 0x8, 0x6, [@generic={0x26, 0x24, "922d701402044af06d023b0687d47a3f4dc7cc72a3bb77ad6c868b4207716c04be0d593d"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x8}]}}, {{0x9, 0x5, 0xf, 0x8, 0x8, 0x3, 0x38, 0xd, [@generic={0xb7, 0x11, "bf88a37838ec5a9020259a532006ed4c1bb5ac239b47d92e235fba032b5db42a07b24abea1745985bef64ffac0aa1936ebf06c83749dd08a21676167ce96c04369d70c13fb86cb8ca65dabbc064dcf2f518d3489dac24c2dfc48194cc3bb9a896adb20741b1ce5ccc7b02b9b8d23590d6abeb5050e834690c8855255861c7afe995c62c6a38a39e1767ea308b8b55e27efdc73f91268b29da8ec8d2ba79c057b22ba3a8b28699664c6153e753eaa3908f42b05b26e"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x28, 0x27, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x1}, @generic={0x3, 0x6, "85"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x0, 0x4, 0x9, 0xa7, [@generic={0x26, 0xd, "964add73a5517cea37a01b9389e9ce7e890556277e465fe0e4c6a02bf419d9069b81f582"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x208, 0xd, 0x8, 0xec, [@generic={0xdb, 0x22, "8f630ff38c285f137961800f85a9109221e2eb00549c0f0c59bb011e8f497c30521cc4294c58de828557f902d8ffc4591a0e71ea8a63c4c5401e394858d2bade658f947dd05a8a6fd3adc4ea9ba371441ee848374f77451214112d45d14a5949f7316e92fca02c21835264af259792134eeb7d67d55a9a260d3c6afd1f13d23939fcdc899c63f9317d196d296e0d7add408864b54a407f0668e60c63a63bf9dbd4a75ff3affa9d84e7ebbcfcced06ac3b5725d4ec49c809900686597614c9e92ef6b3b4f5bb5cdc743c48ceccf725bf925669ff8cfef66c7e6"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0xc9e}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x6, 0x3, 0x5}}, {{0x9, 0x5, 0xa, 0x4, 0x10, 0x7, 0x2, 0x2}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x5, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xc, 0x3}]}}, {{0x9, 0x5, 0x2, 0x3, 0x400, 0x1, 0xf8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0x79}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x34, 0x51, 0x1, [@generic={0x74, 0xf, "4092084108f39c4442427832312b1192317296960e3e3cbc5eaae04dbed7cf85e925796c143a53e4985358fdf9df6e2bf2966f35e8e242de377caef7e96975bb170e0eb6fa004174c2b29684932bb14cff4a1332ed85f662c9b940b170938f49caf011aba1818be01f804a175cba0f6b6a0f"}, @generic={0xd0, 0x30, "3ff542ac312179f4355ac1f4d7970b06b85669a188dc159121d3f3679f046dac593e45694fe8f9c720b5f7c2c71d29d24fa41cec55d5e9f17aea0734e6790e271211462ec769efa06bdb1061df789061b0f8d5943e77c0f2a5678125d9b8f6d5096daaa4563aadfd7f8a50d8da53df0bbb677a46244fd681e99f36ab624b80bd2611800e820ec6cb53b296834aee262db9a6492c0d10ae79cb051d9190003e74c092a05a9a1f0c0fb21ffbc3887d3b6412c759217e0a7ec5f920cc08e94e811c3a44b9f5ae3e96b64be29237a7de"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x1, 0x5, 0x2}}]}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x8, 0xe, 0xed, 0x0, 0x77}, 0x8, &(0x7f0000000080)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x406}}]}) r6 = fcntl$dupfd(r4, 0x406, r5) write$binfmt_script(r6, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "eb1c1bc065dfb26993b8010e3f16c687521f16962310fda3acf14bda21ded71cad76d350fe60a83cdc"}, 0x34) 1.168806126s ago: executing program 1 (id=2162): socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x1400000, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 992.500425ms ago: executing program 9 (id=2163): syz_usb_connect$cdc_ncm(0x5, 0x83, &(0x7f0000000600)={{0x12, 0x1, 0x340, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x2, 0x1, 0x6, 0x90, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x10, 0x6d63, 0x39, 0xdf}, {0x6, 0x24, 0x1a, 0x439, 0x28}, [@mdlm={0x15, 0x24, 0x12, 0xfff9}]}, {{0x9, 0x5, 0x81, 0x3, 0x220, 0xc, 0x8, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x81, 0x4, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5, 0xf1, 0x4b}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x110, 0xc2, 0x0, 0x7, 0x20, 0x9}, 0x2d, &(0x7f0000000700)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "b27ebe5d89365a77fd7a625825b7f8b1"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "0f3e1ca605d49103c95049f781e17d86"}]}, 0x9, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x422}}, {0xcc, &(0x7f00000007c0)=@string={0xcc, 0x3, "e4041db4cece1dc8d8377c54fc5f6f7cb399471bc897abe44a921c30f37dead28f4c3c478c55da21fc3e602939f133688ee1088bac8f6d88965b9375512da214b6ba029be9e27336fdff99e545a8a6ba802faa6f8eb8c83095102053bdee3f78e64cc1c40e3710e92092c79b32c2ca63df7eea968829dfecd8687fdffae1a44efb0eff3d456ee39cfac1479df0dc27f7c8337a463ec84840e21ce8751ff4790a0dfa17ccb36e71ae2308a7a775be31dc71759262aa856d2ebcbdab4607910c9498737259f122acc56bf9"}}, {0x54, &(0x7f00000008c0)=@string={0x54, 0x3, "5bb9c6150844c128efcdbf1e03acc36cddd849028872cb5bcab9b00676a12cff86f80a9ce10b54dcf02918796f31aa5bec3c237a1ef32097819bbcf2494fb9c1d7d00ecde0e5b75770f3e39fa485c15841b7"}}, {0x63, &(0x7f0000000940)=@string={0x63, 0x3, "a38456ab951f0190597e5ee24c70dfbd966eb62dbe924c4014e679e39d5cf57c7d77e3a324881a0c4430cc349c6d48fb4b33f63dde75b93dfd9ad37afe569d08537bda2306e9557754149864358d79398014d721fcf1ebd28698e00d6f9b7bc170"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x804}}, {0x7, &(0x7f0000000a00)=@string={0x7, 0x3, "4c166ce7bb"}}, {0xb7, &(0x7f0000000a40)=@string={0xb7, 0x3, "cc4b10cd8159026090b5b14c1dfc274ac0f2ce1e6cd95ad3cf2a5d9be41b3f8c92ad5f02f9f3c92e406095ca68c450d7962631002104bd1a844ac6d4929bf4097e05d8a8fbe7b13b3cc16f13869471ab1065c077e15d8b930de14176cefcd29433debd7362c83a2b1fa9c7328147fb9f2ebd094ac0068af2b833e6186fadd62693d49faa8c9fc880fd2c83d587dd31b2fda6615e020ef8b3b8b4c6205b985a7c088fd59cd4727ccbdef28b8d85c36bffbaf60fdb43"}}, {0x3e, &(0x7f0000000b00)=@string={0x3e, 0x3, "67fd5e259ab1f18e9a636185bb675ab138b92216ca68fbce755ac9b59d6d1687144672669ffe5f24b6221a48f53fe628b072d4068f5a35d35f5d1b25"}}]}) 487.170166ms ago: executing program 2 (id=2164): r0 = syz_io_uring_setup(0x230a, &(0x7f0000000380)={0x0, 0xb437, 0x800, 0x1, 0x15}, &(0x7f0000000400), &(0x7f0000000440)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x80, 0x1, 0x5, 0x1, {{0x5, 0x4, 0x3, 0x7, 0x14, 0x68, 0x0, 0x9a, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002bc0)=[{}], 0x1) 416.643409ms ago: executing program 7 (id=2165): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x40, 0x40, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xe, 0x0, 0x0, 0xb00}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) 271.949576ms ago: executing program 5 (id=2166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) socket(0x28, 0x5, 0x0) mkdir(0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'ip6erspan0\x00', 0x7101}) io_setup(0x8e, &(0x7f0000000100)=0x0) io_submit(r6, 0x3, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x6, r5, &(0x7f00000001c0)="f8a5d78ea1", 0x5}, 0x0, 0x0]) close(r4) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = inotify_init1(0x0) inotify_add_watch(r8, 0x0, 0x33000222) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 110.757295ms ago: executing program 7 (id=2167): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001400)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x0, 0x5}, 0x1, {0x10}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x4, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_pauseparam={0x13, 0xe, 0x2, 0x2}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1f2}, @in6={0xa, 0x4e21, 0xfffffffa, @empty, 0x2}, @in6={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x17c8}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0x3, @local, 0x10001}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x90) r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x40}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000440)={0x0, 0x2, 0x5, 0xbb83}) memfd_create(&(0x7f0000000140)='\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="050000007f000000f00e00008001000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x50) unshare(0x22020600) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_MADVISE={0x19, 0x1a, 0x0, 0x0, 0x0, &(0x7f0000008000/0x1000)=nil, 0x1000, 0x4, 0x1}) listen(0xffffffffffffffff, 0x0) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 0s ago: executing program 2 (id=2168): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@allocspi={0x200, 0x16, 0xe32b7fa974c0285, 0x0, 0x0, {{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2}, {@in6=@remote, 0x0, 0x32}, @in=@multicast2}, 0x0, 0x5}, [@sa={0xe4, 0x6, {{@in6=@rand_addr=' \x01\x00', @in=@remote}, {@in=@multicast2}, @in=@broadcast}}, @lifetime_val={0x24}]}, 0x200}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xf7ffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@delqdisc={0x2a0, 0x25, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0xfff1, 0x4}, {}, {0x4, 0xc}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa}, @qdisc_kind_options=@q_tbf={{0x8}, {0x54, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x29ee1fc21d21f9d8}, @TCA_TBF_BURST={0x8, 0x6, 0x2}, @TCA_TBF_BURST={0x8, 0x6, 0x6}, @TCA_TBF_BURST={0x8, 0x6, 0x2}, @TCA_TBF_RATE64={0xc, 0x4, 0x2c34c32bafc8c698}, @TCA_TBF_RATE64={0xc, 0x4, 0x35f7ecd1838e6ceb}, @TCA_TBF_PRATE64={0xc, 0x5, 0x5de4929a02563833}, @TCA_TBF_BURST={0x8, 0x6, 0x6}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x999}, @TCA_RATE={0x6, 0x5, {0x8, 0x3}}, @TCA_STAB={0x19c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x3a, 0x8000, 0x7, 0x0, 0xf, 0x9c1, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x2d, 0x2, 0x81, 0x40, 0x2, 0x1, 0x2, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0xcc, 0x6, 0x5, 0x7, 0x0, 0x2a, 0x33b9, 0xa}}, {0x18, 0x2, [0x9, 0xf, 0x4, 0xffff, 0x8, 0x5, 0x4, 0x7, 0x401, 0x9]}}, {{0x1c, 0x1, {0x6, 0xf, 0x4, 0x4000, 0x2, 0x3ed, 0x8, 0x2}}, {0x8, 0x2, [0xabc, 0xe]}}, {{0x1c, 0x1, {0x2, 0x1, 0x8, 0x4, 0x1, 0x6, 0x1, 0x9}}, {0x16, 0x2, [0x52d, 0x723f, 0x7fff, 0x99, 0x7, 0x3, 0xb4b4, 0x62bf, 0x6]}}, {{0x1c, 0x1, {0x8, 0x31, 0x5, 0x7, 0x0, 0x6, 0x4, 0x4}}, {0xc, 0x2, [0x40, 0x8001, 0x0, 0x8]}}, {{0x1c, 0x1, {0x2, 0xd7, 0x2, 0x2, 0x0, 0x0, 0x626, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x9, 0xfa, 0x8, 0x8, 0x2, 0x1, 0x7, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x7, 0xdf, 0x7f, 0xb, 0x1, 0x4, 0x8, 0x7}}, {0x12, 0x2, [0x81, 0x7cf, 0x3, 0x3cd, 0x8, 0x65e, 0x6]}}, {{0x1c, 0x1, {0xfb, 0x9e, 0x2, 0x2, 0x2, 0x9, 0x4, 0x2}}, {0x8, 0x2, [0x8, 0x7]}}]}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0x200, 0x4, 0x1, 0x1ff, 0x0, 0x1}}, {0x6, 0x2, [0x311a]}}, {{0x1c, 0x1, {0x80, 0x40, 0xe2, 0x1f2, 0x0, 0x5, 0x6, 0x5}}, {0xe, 0x2, [0x4, 0x1, 0x1, 0x8, 0x101]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @qdisc_kind_options=@q_qfg={0x8}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x804d}, 0x20004804) r14 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) unshare(0x2000000) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x68, r14, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r15}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r16 = getpid() syz_pidfd_open(r16, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504"], 0x0) kernel console output (not intermixed with test programs): 20] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 824.864774][ T920] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 825.000481][ T920] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 825.053793][ T920] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.812319][T13332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 826.822551][T13332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 826.878843][ T10] usb 9-1: USB disconnect, device number 14 [ 827.104761][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 827.244035][ T24] usb 6-1: device descriptor read/64, error -71 [ 827.483935][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 827.623781][ T24] usb 6-1: device descriptor read/64, error -71 [ 827.798597][ T24] usb usb6-port1: attempt power cycle [ 828.153729][ T24] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 828.257647][ T24] usb 6-1: device descriptor read/8, error -71 [ 828.477725][ T9] usb 3-1: USB disconnect, device number 3 [ 828.533720][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 828.569798][ T24] usb 6-1: device descriptor read/8, error -71 [ 828.836998][ T920] usb 10-1: usb_control_msg returned -71 [ 828.844291][ T920] usbtmc 10-1:16.0: can't read capabilities [ 828.864668][ T24] usb usb6-port1: unable to enumerate USB device [ 828.925428][ T920] usb 10-1: USB disconnect, device number 4 [ 828.947110][T13352] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 829.253630][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 829.423757][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 829.464528][ T24] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 829.545965][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 831.657403][T13405] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1861'. [ 831.893786][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.40 [ 831.906609][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.939409][ T24] usb 3-1: Product: о [ 831.995204][T13405] syzkaller1: entered promiscuous mode [ 832.008718][ T24] usb 3-1: can't set config #1, error -71 [ 832.048657][T13405] syzkaller1: entered allmulticast mode [ 832.105908][ T24] usb 3-1: USB disconnect, device number 4 [ 832.585678][ T24] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 832.908263][ T24] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 832.955705][ T24] usb 3-1: config 0 has no interface number 0 [ 832.962081][ T24] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 832.973076][ T24] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 832.983748][ T2153] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 832.992393][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.030790][ T24] usb 3-1: config 0 descriptor?? [ 833.177402][T13428] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1864'. [ 833.269674][ T24] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input67 [ 833.437507][ T2153] usb 6-1: config 0 has no interfaces? [ 833.470056][ T24] usb 3-1: USB disconnect, device number 5 [ 833.568143][ T2153] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 833.617872][T13437] vlan2: entered promiscuous mode [ 833.633903][T13437] vlan2: entered allmulticast mode [ 833.679650][ T2153] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.688994][ T5151] Bluetooth: hci0: unexpected event for opcode 0x203d [ 833.703958][T13437] hsr_slave_1: entered allmulticast mode [ 833.810506][T13443] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1868'. [ 833.819794][ T2153] usb 6-1: Product: syz [ 833.881227][ T2153] usb 6-1: Manufacturer: syz [ 833.915772][ T2153] usb 6-1: SerialNumber: syz [ 834.075222][ T2153] usb 6-1: config 0 descriptor?? [ 834.107174][T13448] No such timeout policy "syz0" [ 834.533758][ T43] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 834.883773][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 835.290990][ T43] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 835.439069][ T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 835.487809][ T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 835.549664][ T43] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 835.621574][ T43] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 835.749299][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.903665][ T920] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 836.136263][ T920] usb 9-1: not running at top speed; connect to a high speed hub [ 836.148116][ T920] usb 9-1: config 243 has an invalid interface number: 213 but max is 1 [ 836.334314][ T920] usb 9-1: config 243 has an invalid interface descriptor of length 5, skipping [ 836.383390][ T920] usb 9-1: config 243 has an invalid interface number: 27 but max is 1 [ 836.428013][ T920] usb 9-1: config 243 contains an unexpected descriptor of type 0x1, skipping [ 836.481176][ T920] usb 9-1: config 243 contains an unexpected descriptor of type 0x2, skipping [ 836.509639][ T920] usb 9-1: config 243 has no interface number 0 [ 836.543583][ T920] usb 9-1: config 243 has no interface number 1 [ 836.568143][ T920] usb 9-1: config 243 interface 213 altsetting 4 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 836.615474][ T920] usb 9-1: config 243 interface 27 altsetting 2 has an invalid endpoint descriptor of length 4, skipping [ 836.732036][ T920] usb 9-1: config 243 interface 27 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 836.908964][ T920] usb 9-1: config 243 interface 27 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 837.193676][ T920] usb 9-1: config 243 interface 27 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 837.277500][ T920] usb 9-1: config 243 interface 213 has no altsetting 0 [ 837.356367][ T920] usb 9-1: config 243 interface 27 has no altsetting 0 [ 837.398730][ T920] usb 9-1: New USB device found, idVendor=148f, idProduct=7601, bcdDevice=a1.91 [ 837.416640][ T920] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.469837][ T920] usb 9-1: Product: syz [ 837.487676][ T920] usb 9-1: Manufacturer: 閬䳃󶭥ꅯ?꘶ [ 837.527282][ T920] usb 9-1: SerialNumber: syz [ 837.669333][T12044] usb 6-1: USB disconnect, device number 19 [ 837.693808][ T5151] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 837.702638][ T5151] Bluetooth: hci0: Injecting HCI hardware error event [ 837.712016][ T6668] Bluetooth: hci0: hardware error 0x00 [ 837.802841][ T920] usb 9-1: USB disconnect, device number 15 [ 838.901380][ T43] usb 3-1: usb_control_msg returned -71 [ 838.946847][ T43] usbtmc 3-1:16.0: can't read capabilities [ 838.987657][ T43] usb 3-1: USB disconnect, device number 6 [ 839.014192][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 839.399127][ T9] usb 10-1: config 0 has no interfaces? [ 839.418798][ T24] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 839.455227][ T9] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 839.489577][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.507028][ T9] usb 10-1: Product: syz [ 839.521523][ T9] usb 10-1: Manufacturer: syz [ 839.533701][ T9] usb 10-1: SerialNumber: syz [ 839.548270][ T9] usb 10-1: config 0 descriptor?? [ 839.784982][ T6668] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 839.869140][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 839.880414][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.907951][ T24] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 840.363206][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.478696][T13544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.539840][ T24] usb 9-1: config 0 descriptor?? [ 840.674261][T13544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.275739][ T24] usb 9-1: string descriptor 0 read error: -22 [ 841.492255][ T24] input: HID 256c:006d as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0034/input/input68 [ 841.709836][ T24] input: HID 256c:006d as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0034/input/input69 [ 841.892991][ T24] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0034/input/input70 [ 841.963687][ T2153] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 842.174246][ T2153] usb 3-1: Using ep0 maxpacket: 8 [ 842.193268][ T2153] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 842.207900][ T2153] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 842.300151][ T24] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0034/input/input71 [ 842.350908][ T2153] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 842.390411][ T2153] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 842.454237][ T24] uclogic 0003:256C:006D.0034: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.8-1/input0 [ 842.526873][ T2153] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 842.709979][ T2153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.844325][ T43] usb 9-1: reset full-speed USB device number 16 using dummy_hcd [ 843.665713][ T24] usb 9-1: USB disconnect, device number 16 [ 844.350342][T13592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.366072][T13592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.387541][ T5823] usb 10-1: USB disconnect, device number 5 [ 844.594375][ T24] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 844.799903][ T24] usb 9-1: config 0 has no interfaces? [ 844.817696][ T24] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 844.826980][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.837154][ T24] usb 9-1: Product: syz [ 844.841411][ T24] usb 9-1: Manufacturer: syz [ 844.906726][ T24] usb 9-1: SerialNumber: syz [ 844.949790][ T24] usb 9-1: config 0 descriptor?? [ 847.013637][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 847.295185][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 847.325774][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 847.375841][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 847.438421][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 847.705258][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 847.745026][ T2153] usb 3-1: usb_control_msg returned -71 [ 847.843885][ T2153] usbtmc 3-1:16.0: can't read capabilities [ 847.882909][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 847.935022][T13622] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[13622] [ 848.024935][ T2153] usb 3-1: USB disconnect, device number 7 [ 848.042598][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.161594][ T10] usb 9-1: USB disconnect, device number 17 [ 848.603954][ T2153] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 848.955538][ T2153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 849.112640][T13615] netlink: 'syz.9.1893': attribute type 5 has an invalid length. [ 849.323952][ T2153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.341297][ T2153] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 849.369529][ T2153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.412946][ T2153] usb 3-1: config 0 descriptor?? [ 850.138529][ T2153] usb 3-1: string descriptor 0 read error: -22 [ 850.297778][ T24] usb 6-1: usb_control_msg returned -71 [ 850.303496][ T24] usbtmc 6-1:16.0: can't read capabilities [ 850.304157][ T5823] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 850.459786][ T2153] uclogic 0003:256C:006D.0035: failed retrieving string descriptor #100: -71 [ 850.506582][ T2153] uclogic 0003:256C:006D.0035: failed retrieving pen parameters: -71 [ 850.539233][ T24] usb 6-1: USB disconnect, device number 20 [ 850.564392][ T2153] uclogic 0003:256C:006D.0035: failed probing pen v1 parameters: -71 [ 850.573816][ T2153] uclogic 0003:256C:006D.0035: failed probing parameters: -71 [ 850.581417][ T2153] uclogic 0003:256C:006D.0035: probe with driver uclogic failed with error -71 [ 850.632915][ T2153] usb 3-1: USB disconnect, device number 8 [ 850.682216][T13662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.696735][T13662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.723830][ T5823] usb 9-1: Using ep0 maxpacket: 8 [ 850.731526][ T5823] usb 9-1: config 0 has an invalid interface number: 130 but max is 0 [ 850.745661][ T5823] usb 9-1: config 0 has no interface number 0 [ 850.800725][ T5823] usb 9-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 850.821907][ T5823] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.932875][ T5823] usb 9-1: Product: syz [ 850.942198][ T5823] usb 9-1: Manufacturer: syz [ 850.983115][ T5823] usb 9-1: SerialNumber: syz [ 850.994886][ T5823] usb 9-1: config 0 descriptor?? [ 851.207477][ T5823] as10x_usb: device has been detected [ 851.219281][ T5823] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 851.530728][ T5823] usb 9-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 851.703380][ T5823] as10x_usb: error during firmware upload part1 [ 851.755308][ T5823] Registered device PCTV Systems picoStick (74e) [ 851.765473][ T5823] usb 9-1: USB disconnect, device number 18 [ 851.939089][ T5823] Unregistered device PCTV Systems picoStick (74e) [ 851.984496][ T5823] as10x_usb: device has been disconnected [ 852.112416][T13685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.214150][T13685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.464326][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 852.839757][ T10] usb 3-1: config 0 has no interfaces? [ 852.859919][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 852.869713][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.881611][ T10] usb 3-1: Product: syz [ 852.930385][ T10] usb 3-1: Manufacturer: syz [ 852.954857][ T10] usb 3-1: SerialNumber: syz [ 853.032424][ T10] usb 3-1: config 0 descriptor?? [ 853.043698][ T5823] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 853.304232][ T5823] usb 9-1: Using ep0 maxpacket: 8 [ 853.514369][ T5823] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 853.570728][ T5823] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 853.836627][ T5823] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 853.895862][ T5823] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 854.108774][ T5823] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 854.216591][ T5823] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.275854][ T10] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 854.296232][T13715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.311570][T13715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.429119][ T10] usb 6-1: device descriptor read/64, error -71 [ 854.483823][T12291] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 854.658834][T12291] usb 10-1: Using ep0 maxpacket: 16 [ 854.678421][T12291] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.706474][T12291] usb 10-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 854.723768][ T10] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 854.764307][T12291] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.797492][T12291] usb 10-1: config 0 descriptor?? [ 854.935333][ T10] usb 6-1: device descriptor read/64, error -71 [ 855.070004][ T10] usb usb6-port1: attempt power cycle [ 855.231964][T12291] apple 0003:05AC:024B.0036: reserved main item tag 0xd [ 855.253851][T12291] apple 0003:05AC:024B.0036: unknown main item tag 0x5 [ 855.283299][T12291] apple 0003:05AC:024B.0036: unknown main item tag 0x6 [ 855.375328][T12291] apple 0003:05AC:024B.0036: ignoring exceeding usage max [ 855.399405][T12291] apple 0003:05AC:024B.0036: invalid report_size 18680 [ 855.423961][ T10] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 855.442122][T12291] apple 0003:05AC:024B.0036: item 0 2 1 7 parsing failed [ 855.465377][ T10] usb 6-1: device descriptor read/8, error -71 [ 855.480416][T12291] apple 0003:05AC:024B.0036: parse failed [ 855.487702][T12291] apple 0003:05AC:024B.0036: probe with driver apple failed with error -22 [ 855.541889][T12291] usb 10-1: USB disconnect, device number 6 [ 855.726470][ T10] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 855.896450][ T10] usb 6-1: device descriptor read/8, error -71 [ 856.102006][ T10] usb usb6-port1: unable to enumerate USB device [ 856.168271][ T2153] usb 3-1: USB disconnect, device number 9 [ 856.503371][ T5823] usb 9-1: usb_control_msg returned -71 [ 856.512499][ T5823] usbtmc 9-1:16.0: can't read capabilities [ 856.563681][ T5823] usb 9-1: USB disconnect, device number 19 [ 856.666753][ T5903] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 856.921181][ T5903] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 856.943121][ T5903] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 856.970001][ T5903] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 857.420258][ T5903] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.536924][ T5903] usb 10-1: Product: syz [ 857.556873][ T5903] usb 10-1: Manufacturer: syz [ 857.606172][ T5903] usb 10-1: SerialNumber: syz [ 857.637722][T13758] misc userio: Begin command sent, but we're already running [ 857.865195][T13735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.874345][T13735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.982772][ T5903] usb 10-1: cannot find UAC_HEADER [ 857.995701][T13761] geneve1: entered promiscuous mode [ 858.055955][T13761] geneve1: entered allmulticast mode [ 858.116689][ T5903] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 858.205547][ T5903] usb 10-1: USB disconnect, device number 7 [ 858.356535][ T920] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 858.458691][ T30] kauditd_printk_skb: 219 callbacks suppressed [ 858.458713][ T30] audit: type=1326 audit(1748552887.058:7484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.5.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 858.637737][ T920] usb 9-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 858.661008][ T30] audit: type=1326 audit(1748552887.058:7485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.5.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 858.711644][ T920] usb 9-1: config 0 interface 0 has no altsetting 0 [ 858.741182][ T920] usb 9-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 858.825936][ T920] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.839068][ T30] audit: type=1326 audit(1748552887.058:7486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.5.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 858.888409][ T920] usb 9-1: config 0 descriptor?? [ 858.959143][ T30] audit: type=1326 audit(1748552887.108:7487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.5.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 859.090316][ T30] audit: type=1326 audit(1748552887.108:7488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.5.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 859.118465][T13761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 859.154401][T13761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.193671][ T5823] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 859.247172][ T30] audit: type=1326 audit(1748552887.108:7489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.5.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 859.334405][ T30] audit: type=1326 audit(1748552887.108:7490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.5.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 859.387933][ T920] usbhid 9-1:0.0: can't add hid device: -71 [ 859.394606][ T5823] usb 10-1: Using ep0 maxpacket: 8 [ 859.415489][ T5823] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 859.434628][ T920] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 859.442680][ T30] audit: type=1326 audit(1748552887.108:7491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.5.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 859.449409][ T5823] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.493828][ T2153] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 859.529360][ T920] usb 9-1: USB disconnect, device number 20 [ 859.566309][ T5823] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 859.593968][ T5823] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 859.625907][ T30] audit: type=1326 audit(1748552887.128:7492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.5.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 859.639492][ T5823] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 859.680068][ T30] audit: type=1326 audit(1748552887.128:7493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.5.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 859.712637][ T2153] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 859.743921][ T2153] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.794243][ T2153] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 859.804928][ T5823] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 859.827015][ T2153] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.835626][ T5823] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 859.850786][ T5823] usb 10-1: SerialNumber: syz [ 859.861290][ T2153] usb 6-1: config 0 descriptor?? [ 859.880905][ T5823] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 859.905030][ T5823] usbtest 10-1:1.0: Linux gadget zero [ 859.940982][ T5823] usbtest 10-1:1.0: high-speed {control in/out bulk-in int-in} tests (+alt) [ 860.172275][T13773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.197804][T13773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.225213][T13793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.234258][T13793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.380845][T13797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1931'. [ 860.471024][T12044] usb 10-1: USB disconnect, device number 8 [ 860.501394][ T2153] usb 6-1: string descriptor 0 read error: -22 [ 860.570748][T13801] syzkaller1: entered promiscuous mode [ 860.577068][T13801] syzkaller1: entered allmulticast mode [ 860.779537][ T2153] uclogic 0003:256C:006D.0037: failed retrieving string descriptor #100: -71 [ 860.805739][ T2153] uclogic 0003:256C:006D.0037: failed retrieving pen parameters: -71 [ 860.869378][ T2153] uclogic 0003:256C:006D.0037: failed probing pen v1 parameters: -71 [ 860.900051][ T2153] uclogic 0003:256C:006D.0037: failed probing parameters: -71 [ 860.956332][ T2153] uclogic 0003:256C:006D.0037: probe with driver uclogic failed with error -71 [ 860.969120][ T2153] usb 6-1: USB disconnect, device number 25 [ 862.276064][T13821] sctp: [Deprecated]: syz.5.1937 (pid 13821) Use of int in max_burst socket option. [ 862.276064][T13821] Use struct sctp_assoc_value instead [ 863.454122][ T920] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 863.622148][ T920] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 863.642877][ T920] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.714508][ T920] usb 9-1: Product: syz [ 863.718893][ T920] usb 9-1: Manufacturer: syz [ 863.746427][ T920] usb 9-1: SerialNumber: syz [ 863.769986][ T920] usb 9-1: config 0 descriptor?? [ 864.234927][T13847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.269109][T13847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.419727][T13851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.450555][T13851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.533400][T13851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.602778][T13851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.609530][T13876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.619391][T13876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.284044][ T5823] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 866.555280][ T5823] usb 6-1: config 0 has no interfaces? [ 866.682444][ T5823] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 866.693218][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.711719][ T5823] usb 6-1: Product: syz [ 866.729577][ T5823] usb 6-1: Manufacturer: syz [ 866.740810][ T5823] usb 6-1: SerialNumber: syz [ 866.759669][ T5823] usb 6-1: config 0 descriptor?? [ 866.776264][T13895] ptrace attach of "./syz-executor exec"[12947] was attempted by "./syz-executor exec"[13895] [ 867.134100][T13882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.161023][T13882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.793666][T12044] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 870.153656][T12044] usb 3-1: Using ep0 maxpacket: 8 [ 870.185758][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.192263][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.216870][T12093] usb 6-1: USB disconnect, device number 26 [ 870.343672][T12044] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 870.449431][T12044] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 870.583089][T12044] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 870.625137][T13927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 870.721778][ T30] audit: type=1326 audit(1748552899.288:7494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13926 comm="syz.5.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 870.790750][T12044] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 870.872891][T12044] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 870.956496][ T30] audit: type=1326 audit(1748552899.288:7495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13926 comm="syz.5.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 870.986408][T12044] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.207204][ T30] audit: type=1326 audit(1748552899.288:7496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13926 comm="syz.5.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 871.464156][ T30] audit: type=1326 audit(1748552899.288:7497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13926 comm="syz.5.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 871.486627][ C1] vkms_vblank_simulate: vblank timer overrun [ 871.534373][ T30] audit: type=1326 audit(1748552899.288:7498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13926 comm="syz.5.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 871.572469][ T30] audit: type=1326 audit(1748552899.288:7499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13926 comm="syz.5.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 871.600989][ T30] audit: type=1326 audit(1748552899.288:7500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13926 comm="syz.5.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 871.741305][ T30] audit: type=1326 audit(1748552899.368:7501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13926 comm="syz.5.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 871.822583][ T30] audit: type=1326 audit(1748552899.368:7502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13926 comm="syz.5.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 872.046844][ T30] audit: type=1326 audit(1748552899.368:7503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13926 comm="syz.5.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 872.069610][ C1] vkms_vblank_simulate: vblank timer overrun [ 872.153746][ T5903] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 872.326278][ T5903] usb 6-1: config 0 has an invalid interface number: 23 but max is 0 [ 872.335902][ T5903] usb 6-1: config 0 has no interface number 0 [ 872.385778][ T5903] usb 6-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 872.402514][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.440338][ T5903] usb 6-1: Product: syz [ 872.474665][ T5903] usb 6-1: Manufacturer: syz [ 872.531163][ T5903] usb 6-1: SerialNumber: syz [ 872.623873][ T5903] usb 6-1: config 0 descriptor?? [ 872.638239][ T5903] ftdi_sio 6-1:0.23: FTDI USB Serial Device converter detected [ 872.663280][ T5903] usb 6-1: Detected SIO [ 872.787470][ T5903] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 872.856026][T12044] usb 3-1: usb_control_msg returned -71 [ 872.887364][T12044] usbtmc 3-1:16.0: can't read capabilities [ 872.964677][T12044] usb 3-1: USB disconnect, device number 10 [ 873.356645][ T5903] usb 6-1: USB disconnect, device number 27 [ 873.371068][ T5903] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 873.412128][ T5903] ftdi_sio 6-1:0.23: device disconnected [ 873.542288][T12044] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 873.798259][T12044] usb 3-1: config 0 has no interfaces? [ 873.837591][T12044] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 873.873671][T12044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.916977][T12044] usb 3-1: Product: syz [ 873.921224][T12044] usb 3-1: Manufacturer: syz [ 873.947334][T12044] usb 3-1: SerialNumber: syz [ 873.978463][T12044] usb 3-1: config 0 descriptor?? [ 874.538229][T13989] FAULT_INJECTION: forcing a failure. [ 874.538229][T13989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 874.606349][T13969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.647139][T13989] CPU: 0 UID: 0 PID: 13989 Comm: syz.7.1971 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 874.647172][T13989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 874.647183][T13989] Call Trace: [ 874.647190][T13989] [ 874.647197][T13989] dump_stack_lvl+0x189/0x250 [ 874.647228][T13989] ? __pfx____ratelimit+0x10/0x10 [ 874.647245][T13989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 874.647269][T13989] ? __pfx__printk+0x10/0x10 [ 874.647286][T13989] ? __might_fault+0xb0/0x130 [ 874.647313][T13989] should_fail_ex+0x414/0x560 [ 874.647334][T13989] _copy_from_user+0x2d/0xb0 [ 874.647358][T13989] ___sys_sendmsg+0x158/0x2a0 [ 874.647383][T13989] ? __pfx____sys_sendmsg+0x10/0x10 [ 874.647434][T13989] ? __fget_files+0x2a/0x420 [ 874.647453][T13989] ? __fget_files+0x3a0/0x420 [ 874.647480][T13989] __x64_sys_sendmsg+0x19b/0x260 [ 874.647505][T13989] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 874.647534][T13989] ? __pfx_ksys_write+0x10/0x10 [ 874.647549][T13989] ? rcu_is_watching+0x15/0xb0 [ 874.647572][T13989] ? do_syscall_64+0xbe/0x3b0 [ 874.647591][T13989] do_syscall_64+0xfa/0x3b0 [ 874.647607][T13989] ? lockdep_hardirqs_on+0x9c/0x150 [ 874.647622][T13989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.647638][T13989] ? clear_bhb_loop+0x60/0xb0 [ 874.647661][T13989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.647677][T13989] RIP: 0033:0x7f2035d8e969 [ 874.647691][T13989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 874.647705][T13989] RSP: 002b:00007f2036c8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 874.647722][T13989] RAX: ffffffffffffffda RBX: 00007f2035fb5fa0 RCX: 00007f2035d8e969 [ 874.647734][T13989] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 874.647744][T13989] RBP: 00007f2036c8f090 R08: 0000000000000000 R09: 0000000000000000 [ 874.647753][T13989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.647763][T13989] R13: 0000000000000000 R14: 00007f2035fb5fa0 R15: 00007f20360dfa28 [ 874.647786][T13989] [ 874.862998][T13991] CIFS: VFS: Malformed UNC in devname [ 875.106102][T13969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 875.535735][T14003] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1973'. [ 875.641761][T14004] syzkaller1: entered promiscuous mode [ 875.783786][T14004] syzkaller1: entered allmulticast mode [ 876.870034][ T5903] usb 3-1: USB disconnect, device number 11 [ 876.918617][T14018] netlink: 'syz.5.1979': attribute type 7 has an invalid length. [ 876.998307][T14018] netlink: 'syz.5.1979': attribute type 8 has an invalid length. [ 877.157060][T14034] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 878.233756][T12291] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 878.423758][T12291] usb 3-1: Using ep0 maxpacket: 32 [ 878.463131][T12291] usb 3-1: unable to get BOS descriptor or descriptor too short [ 878.499299][T12291] usb 3-1: config 244 has an invalid interface number: 68 but max is 0 [ 878.550752][T12291] usb 3-1: config 244 has no interface number 0 [ 878.587105][T12291] usb 3-1: config 244 interface 68 altsetting 3 has an endpoint descriptor with address 0xF8, changing to 0x88 [ 878.626739][T14058] netlink: 'syz.5.1987': attribute type 1 has an invalid length. [ 878.656948][T12291] usb 3-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 878.685695][T14058] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1987'. [ 878.718403][T12291] usb 3-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 878.787277][T12291] usb 3-1: config 244 interface 68 altsetting 3 endpoint 0xA has invalid wMaxPacketSize 0 [ 878.841163][T12291] usb 3-1: config 244 interface 68 has no altsetting 0 [ 878.881179][T12291] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 878.915722][T12291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.968901][T12291] usb 3-1: Product: syz [ 878.973143][T12291] usb 3-1: Manufacturer: syz [ 879.036520][T12291] usb 3-1: SerialNumber: syz [ 879.256999][ T5151] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 879.271468][ T5151] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 879.281788][ T5151] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 879.294059][ T5151] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 879.301908][ T5151] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 879.333785][T12291] comedi comedi0: Endpoint has wrong direction [ 879.344339][T12291] dt9812 3-1:244.68: driver 'dt9812' failed to auto-configure device. [ 879.367764][T12291] usb 3-1: USB disconnect, device number 12 [ 879.671260][T14080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.682518][T14080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.705473][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1990'. [ 879.798030][T14080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.811197][T14080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.850930][ T30] audit: type=1326 audit(1748552908.418:7504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14075 comm="syz.5.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 879.901877][T14084] syzkaller1: entered promiscuous mode [ 879.907757][T14084] syzkaller1: entered allmulticast mode [ 879.919388][ T30] audit: type=1326 audit(1748552908.418:7505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14075 comm="syz.5.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 879.972007][ T30] audit: type=1326 audit(1748552908.418:7506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14075 comm="syz.5.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 880.032946][ T30] audit: type=1326 audit(1748552908.418:7507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14075 comm="syz.5.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 880.085133][ T30] audit: type=1326 audit(1748552908.488:7508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14075 comm="syz.5.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 880.114314][ T30] audit: type=1326 audit(1748552908.498:7509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14075 comm="syz.5.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 880.144510][ T30] audit: type=1326 audit(1748552908.578:7510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14075 comm="syz.5.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 880.167597][ T30] audit: type=1326 audit(1748552908.578:7511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14075 comm="syz.5.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 880.290056][ T30] audit: type=1326 audit(1748552908.578:7512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14075 comm="syz.5.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 880.312560][ C1] vkms_vblank_simulate: vblank timer overrun [ 880.583638][ T30] audit: type=1326 audit(1748552908.808:7513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14075 comm="syz.5.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 880.702042][T14070] chnl_net:caif_netlink_parms(): no params data found [ 880.944673][ T5823] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 881.132963][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 881.172762][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.230099][ T5823] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 881.375458][ T6668] Bluetooth: hci6: command tx timeout [ 881.408601][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.490097][T14070] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.518479][T14070] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.542955][ T5823] usb 3-1: config 0 descriptor?? [ 881.563033][T14070] bridge_slave_0: entered allmulticast mode [ 881.610932][T14070] bridge_slave_0: entered promiscuous mode [ 881.716512][T14070] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.818691][T14070] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.908939][T14070] bridge_slave_1: entered allmulticast mode [ 881.916909][T14070] bridge_slave_1: entered promiscuous mode [ 882.062890][T14070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 882.088496][T14070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.189921][ T5823] usb 3-1: string descriptor 0 read error: -22 [ 882.328590][T14070] team0: Port device team_slave_0 added [ 882.401471][ T5823] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0038/input/input79 [ 882.418012][T14070] team0: Port device team_slave_1 added [ 882.547278][ T5823] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0038/input/input80 [ 882.579705][T14070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.595635][T14070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.647222][ T5823] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0038/input/input81 [ 882.699576][T14070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.731038][ T5823] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0038/input/input82 [ 882.733651][T12044] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 882.799692][T14070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.829533][T14070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.867320][ T5823] uclogic 0003:256C:006D.0038: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 882.890332][ T5823] usb 3-1: USB disconnect, device number 13 [ 882.900296][T14070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.943962][T12044] usb 10-1: Using ep0 maxpacket: 16 [ 882.994306][T12044] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.023628][T12044] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.053893][ T5903] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 883.076453][T12044] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 883.089866][T12044] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 883.099384][T12044] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.125782][T12044] usb 10-1: config 0 descriptor?? [ 883.133441][T14070] hsr_slave_0: entered promiscuous mode [ 883.161090][T14070] hsr_slave_1: entered promiscuous mode [ 883.174974][T14070] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 883.184274][ T5903] usb 6-1: device descriptor read/64, error -71 [ 883.202796][T14070] Cannot create hsr debugfs directory [ 883.344573][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2003'. [ 883.416185][T14134] bond0: entered promiscuous mode [ 883.423837][ T5903] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 883.445252][T14134] bond0: left promiscuous mode [ 883.454289][ T6668] Bluetooth: hci6: command tx timeout [ 883.580083][ T5903] usb 6-1: device descriptor read/64, error -71 [ 883.616926][T14124] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 883.715981][ T5903] usb usb6-port1: attempt power cycle [ 883.982230][T14149] vlan2: entered promiscuous mode [ 884.011608][T14149] vlan2: entered allmulticast mode [ 884.012099][ T6668] Bluetooth: hci4: unexpected event for opcode 0x203d [ 884.061753][T14149] hsr_slave_1: entered allmulticast mode [ 884.084144][ T5903] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 884.114942][T14149] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2005'. [ 884.128040][ T5903] usb 6-1: device descriptor read/8, error -71 [ 884.194431][T12291] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 884.230616][T12044] usbhid 10-1:0.0: can't add hid device: -71 [ 884.253074][T12044] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 884.279633][T12044] usb 10-1: USB disconnect, device number 9 [ 884.383772][ T5903] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 884.385310][T12291] usb 3-1: Using ep0 maxpacket: 8 [ 884.410279][T12291] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 884.435811][ T5903] usb 6-1: device descriptor read/8, error -71 [ 884.439262][T12291] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 884.511837][T12291] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 884.534120][T12291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.542342][T12291] usb 3-1: Product: Ӥ됝컎젝㟘呼忼籯馳ᭇ韈鉊〜緳틪䲏䜼喌⇚㻼⥠栳謈辬衭宖疓ⵑᒢ몶鬂㙳�ꡅ몦⾀澪뢎ト႕匠砿䳦쓁㜎鈠鯇숲揊统雪⦈棘交໻㷿湅鳣쇺鵇㏈䙺젾䁈᳢痨੹嗀찗溳깱ࠣꞧ빵畱抒薪⹭붼䚫鄇鐌玘奲⋱얬參 [ 884.554288][ T5903] usb usb6-port1: unable to enumerate USB device [ 884.595185][T12291] usb 3-1: Manufacturer: Т [ 884.600191][T12291] usb 3-1: SerialNumber: 륛ᗆ䐈⣁췯ế갃泃ɉ犈寋맊ڰꅶＬ鰊௡⧰礘ㅯ宪㳬稣霠鮁佉솹탗촎垷鿣薤壁띁 [ 884.646998][T14164] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2007'. [ 884.883019][T12291] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 884.936582][T12291] cdc_ncm 3-1:1.0: bind() failure [ 884.999999][T12291] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 885.045890][T12291] cdc_ncm 3-1:1.1: bind() failure [ 885.124604][T12291] usb 3-1: USB disconnect, device number 14 [ 885.500840][T14180] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2007'. [ 885.547119][ T6668] Bluetooth: hci6: command tx timeout [ 885.903991][ T5823] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 885.981069][T14212] team0: Device gtp0 is of different type [ 886.084508][ T5823] usb 3-1: Using ep0 maxpacket: 16 [ 886.108656][ T5823] usb 3-1: config 1 has an invalid descriptor of length 117, skipping remainder of the config [ 886.149638][ T5823] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 886.176355][ T5823] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 886.209573][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.219524][ T5823] usb 3-1: Product: syz [ 886.233914][ T5823] usb 3-1: Manufacturer: syz [ 886.270688][ T5823] usb 3-1: SerialNumber: syz [ 886.304873][T12291] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 886.454496][T12044] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 886.485982][T12291] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 886.505325][T12291] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.544013][ T5823] usb 3-1: 0:2 : does not exist [ 886.557293][ T5823] usb 3-1: unit 9 not found! [ 886.564855][T12291] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 886.591190][T12291] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.610245][T14070] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 886.639505][T12044] usb 10-1: config 0 has no interfaces? [ 886.658099][T12044] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 886.661429][ T5823] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4) [ 886.668319][T12044] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.689278][T12044] usb 10-1: Product: syz [ 886.694892][T12291] usb 6-1: config 0 descriptor?? [ 886.701808][T12044] usb 10-1: Manufacturer: syz [ 886.737128][T12044] usb 10-1: SerialNumber: syz [ 886.759460][T12044] usb 10-1: config 0 descriptor?? [ 886.771636][T14070] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 886.883301][T14070] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 886.932276][T14070] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 886.992151][ T5823] usb 3-1: USB disconnect, device number 15 [ 887.051822][T14221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.062266][T14221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.122922][T12291] kone 0003:1E7D:2CED.0039: collection stack underflow [ 887.153651][T12291] kone 0003:1E7D:2CED.0039: item 0 4 0 12 parsing failed [ 887.184512][T12291] kone 0003:1E7D:2CED.0039: parse failed [ 887.214344][T12291] kone 0003:1E7D:2CED.0039: probe with driver kone failed with error -22 [ 887.233111][T14231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.280179][T14231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.530177][T14070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 887.613980][ T6668] Bluetooth: hci6: command tx timeout [ 887.761675][T14070] 8021q: adding VLAN 0 to HW filter on device team0 [ 887.862363][ T3000] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.869962][ T3000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 887.944617][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 887.946704][ T30] audit: type=1326 audit(1748552916.558:7515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14236 comm="syz.2.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db678e969 code=0x7ffc0000 [ 888.005894][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.013153][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 888.021670][ T6668] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 888.032080][ T6668] Bluetooth: hci4: Injecting HCI hardware error event [ 888.041373][ T6668] Bluetooth: hci4: hardware error 0x00 [ 888.056169][ T30] audit: type=1326 audit(1748552916.558:7516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14236 comm="syz.2.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db678e969 code=0x7ffc0000 [ 888.279529][ T5823] usb 6-1: USB disconnect, device number 32 [ 888.560876][T14070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.847670][T14070] veth0_vlan: entered promiscuous mode [ 889.385885][T14070] veth1_vlan: entered promiscuous mode [ 889.750766][T14070] veth0_macvtap: entered promiscuous mode [ 889.829005][T14070] veth1_macvtap: entered promiscuous mode [ 889.927288][T14070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 890.024284][T14070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 890.121947][T12044] usb 10-1: USB disconnect, device number 10 [ 890.145085][ T6668] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 890.226576][T14070] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.237477][T14070] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.246778][T14070] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.256540][T14070] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.587783][T14276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.644934][T14276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.659288][ T5903] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 890.723276][T14276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.734937][T14278] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2024'. [ 890.784288][T14276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.817484][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.833711][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 890.853445][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.863923][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.914353][ T5903] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 890.973715][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.026326][ T5903] usb 6-1: config 0 descriptor?? [ 891.044399][T14282] vlan0: entered promiscuous mode [ 891.049760][T14282] vlan0: entered allmulticast mode [ 891.086627][T14282] hsr_slave_1: entered allmulticast mode [ 891.161424][T14283] syzkaller1: entered promiscuous mode [ 891.182267][T14283] syzkaller1: entered allmulticast mode [ 891.221960][T14282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2027'. [ 891.291303][T14292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.327506][T14292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.664700][ T5903] usb 6-1: string descriptor 0 read error: -22 [ 892.070770][ T5903] uclogic 0003:256C:006D.003A: failed retrieving string descriptor #100: -71 [ 892.101836][ T5903] uclogic 0003:256C:006D.003A: failed retrieving pen parameters: -71 [ 892.133281][ T5903] uclogic 0003:256C:006D.003A: failed probing pen v1 parameters: -71 [ 892.190984][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.193175][ T5903] uclogic 0003:256C:006D.003A: failed probing parameters: -71 [ 892.215920][ T5903] uclogic 0003:256C:006D.003A: probe with driver uclogic failed with error -71 [ 892.249640][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.288563][ T5903] usb 6-1: USB disconnect, device number 33 [ 892.684237][T12044] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 892.883839][T12044] usb 3-1: Using ep0 maxpacket: 32 [ 892.903197][T12044] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 892.931219][T12044] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 892.969380][T12044] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 892.990604][T12044] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 893.036277][T12044] usb 3-1: config 0 interface 0 has no altsetting 0 [ 893.060380][T12044] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 893.087032][T12044] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 893.106774][T12044] usb 3-1: Product: syz [ 893.111050][T12044] usb 3-1: Manufacturer: syz [ 893.134820][T12044] usb 3-1: SerialNumber: syz [ 893.160502][T12044] usb 3-1: config 0 descriptor?? [ 893.193722][ T10] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 893.217533][T12044] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 893.247083][T12044] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 893.462415][ T10] usb 10-1: config 0 has no interfaces? [ 893.482826][ T10] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 893.522793][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.553058][ T10] usb 10-1: Product: syz [ 893.572058][ T10] usb 10-1: Manufacturer: syz [ 893.583096][ T10] usb 10-1: SerialNumber: syz [ 893.650776][ T10] usb 10-1: config 0 descriptor?? [ 893.656070][T12044] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 893.822283][ T5823] usb 3-1: USB disconnect, device number 16 [ 893.845350][ T5823] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 893.927514][T12044] usb 2-1: config 0 has no interfaces? [ 893.954161][T14320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.982806][T12044] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 893.998743][T12044] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.001611][T14320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.016469][T12044] usb 2-1: Product: syz [ 894.091080][T12044] usb 2-1: Manufacturer: syz [ 894.138832][T14347] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2035'. [ 894.162642][T12044] usb 2-1: SerialNumber: syz [ 894.195910][T12044] usb 2-1: config 0 descriptor?? [ 894.466622][T14347] syzkaller1: entered promiscuous mode [ 894.472452][T14347] syzkaller1: entered allmulticast mode [ 894.599207][T14334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.609617][T14334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.639217][T14364] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 895.869746][T12093] usb 10-1: USB disconnect, device number 11 [ 898.254785][T14404] FAULT_INJECTION: forcing a failure. [ 898.254785][T14404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 898.540742][T12044] usb 2-1: USB disconnect, device number 118 [ 898.553761][T14404] CPU: 1 UID: 0 PID: 14404 Comm: syz.2.2043 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 898.553783][T14404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 898.553793][T14404] Call Trace: [ 898.553799][T14404] [ 898.553807][T14404] dump_stack_lvl+0x189/0x250 [ 898.553835][T14404] ? __pfx____ratelimit+0x10/0x10 [ 898.553853][T14404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 898.553877][T14404] ? __pfx__printk+0x10/0x10 [ 898.553902][T14404] should_fail_ex+0x414/0x560 [ 898.553923][T14404] strncpy_from_user+0x36/0x290 [ 898.553942][T14404] getname_flags+0xf3/0x540 [ 898.553967][T14404] user_path_at+0x24/0x60 [ 898.553982][T14404] do_fchownat+0x105/0x270 [ 898.554005][T14404] ? __pfx_do_fchownat+0x10/0x10 [ 898.554027][T14404] ? __pfx_ksys_write+0x10/0x10 [ 898.554042][T14404] ? rcu_is_watching+0x15/0xb0 [ 898.554066][T14404] __x64_sys_chown+0x82/0xa0 [ 898.554089][T14404] do_syscall_64+0xfa/0x3b0 [ 898.554105][T14404] ? lockdep_hardirqs_on+0x9c/0x150 [ 898.554121][T14404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.554136][T14404] ? clear_bhb_loop+0x60/0xb0 [ 898.554155][T14404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.554169][T14404] RIP: 0033:0x7f7db678e969 [ 898.554183][T14404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 898.554197][T14404] RSP: 002b:00007f7db76b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 898.554213][T14404] RAX: ffffffffffffffda RBX: 00007f7db69b6080 RCX: 00007f7db678e969 [ 898.554224][T14404] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 898.554234][T14404] RBP: 00007f7db76b1090 R08: 0000000000000000 R09: 0000000000000000 [ 898.554243][T14404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 898.554252][T14404] R13: 0000000000000000 R14: 00007f7db69b6080 R15: 00007f7db6adfa28 [ 898.554275][T14404] [ 899.008336][T14408] vlan2: entered promiscuous mode [ 899.032796][T14408] vlan2: entered allmulticast mode [ 899.055157][T14408] hsr_slave_1: entered allmulticast mode [ 899.232652][ T6668] Bluetooth: hci1: unexpected event for opcode 0x203d [ 899.240983][T14408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2044'. [ 899.933768][T12044] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 900.174098][T12044] usb 3-1: Using ep0 maxpacket: 16 [ 900.185185][T12044] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 900.203555][T12044] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 900.233969][T12044] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 900.296641][T12044] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 900.334493][T12044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.342922][T12044] usb 3-1: Product: syz [ 900.347405][T12044] usb 3-1: Manufacturer: syz [ 900.352041][T12044] usb 3-1: SerialNumber: syz [ 900.907196][T14447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.980123][T14447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.025522][ T9] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 901.922745][ T9] usb 2-1: config 0 has no interfaces? [ 901.981061][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 902.024783][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.055803][ T9] usb 2-1: Product: syz [ 902.060072][ T9] usb 2-1: Manufacturer: syz [ 902.073860][ T9] usb 2-1: SerialNumber: syz [ 902.124403][ T9] usb 2-1: config 0 descriptor?? [ 902.553185][T12044] usb 3-1: 0:2 : does not exist [ 902.574326][T12044] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 902.630818][T12044] usb 3-1: USB disconnect, device number 17 [ 902.673643][ T9] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 902.862438][ T9] usb 6-1: config 0 has no interfaces? [ 903.043028][ T9] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 903.077290][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.123044][ T9] usb 6-1: Product: syz [ 903.151948][ T9] usb 6-1: Manufacturer: syz [ 903.161547][ T9] usb 6-1: SerialNumber: syz [ 903.187715][ T9] usb 6-1: config 0 descriptor?? [ 903.294472][ T6668] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 903.304261][ T6668] Bluetooth: hci1: Injecting HCI hardware error event [ 903.312898][ T5151] Bluetooth: hci1: hardware error 0x00 [ 903.458145][T14460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.468182][T14460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.556133][T14467] FAULT_INJECTION: forcing a failure. [ 903.556133][T14467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 903.622744][T14467] CPU: 1 UID: 0 PID: 14467 Comm: syz.2.2057 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 903.622776][T14467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 903.622790][T14467] Call Trace: [ 903.622798][T14467] [ 903.622808][T14467] dump_stack_lvl+0x189/0x250 [ 903.622845][T14467] ? __pfx____ratelimit+0x10/0x10 [ 903.622876][T14467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 903.622907][T14467] ? __pfx__printk+0x10/0x10 [ 903.622929][T14467] ? __might_fault+0xb0/0x130 [ 903.622967][T14467] should_fail_ex+0x414/0x560 [ 903.622995][T14467] _copy_from_user+0x2d/0xb0 [ 903.623026][T14467] ____sys_sendmsg+0x2fe/0x830 [ 903.623065][T14467] ? __pfx_____sys_sendmsg+0x10/0x10 [ 903.623105][T14467] ? import_iovec+0x74/0xa0 [ 903.623139][T14467] ___sys_sendmsg+0x21f/0x2a0 [ 903.623176][T14467] ? __pfx____sys_sendmsg+0x10/0x10 [ 903.623242][T14467] ? __fget_files+0x2a/0x420 [ 903.623269][T14467] ? __fget_files+0x3a0/0x420 [ 903.623307][T14467] __sys_sendmmsg+0x227/0x430 [ 903.623345][T14467] ? __pfx___sys_sendmmsg+0x10/0x10 [ 903.623374][T14467] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 903.623427][T14467] ? ksys_write+0x22a/0x250 [ 903.623454][T14467] ? __pfx_ksys_write+0x10/0x10 [ 903.623475][T14467] ? rcu_is_watching+0x15/0xb0 [ 903.623509][T14467] __x64_sys_sendmmsg+0xa0/0xc0 [ 903.623544][T14467] do_syscall_64+0xfa/0x3b0 [ 903.623567][T14467] ? lockdep_hardirqs_on+0x9c/0x150 [ 903.623589][T14467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.623610][T14467] ? clear_bhb_loop+0x60/0xb0 [ 903.623636][T14467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.623657][T14467] RIP: 0033:0x7f7db678e969 [ 903.623677][T14467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 903.623696][T14467] RSP: 002b:00007f7db76d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 903.623720][T14467] RAX: ffffffffffffffda RBX: 00007f7db69b5fa0 RCX: 00007f7db678e969 [ 903.623736][T14467] RDX: 0000000000000001 RSI: 0000200000006c40 RDI: 0000000000000003 [ 903.623750][T14467] RBP: 00007f7db76d2090 R08: 0000000000000000 R09: 0000000000000000 [ 903.623764][T14467] R10: 0000000000008884 R11: 0000000000000246 R12: 0000000000000001 [ 903.623778][T14467] R13: 0000000000000000 R14: 00007f7db69b5fa0 R15: 00007f7db6adfa28 [ 903.623812][T14467] [ 904.485982][ T9] usb 2-1: USB disconnect, device number 119 [ 905.143584][ T9] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 905.193728][T13414] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 905.347907][T13414] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 905.373220][T13414] usb 3-1: config 0 interface 0 has no altsetting 0 [ 905.383717][ T5151] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 905.398133][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 905.421271][T13414] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 905.430790][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 905.461484][T13414] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 905.473649][ T9] usb 2-1: config 0 has no interface number 0 [ 905.502594][T13414] usb 3-1: Product: syz [ 905.507276][T13414] usb 3-1: Manufacturer: syz [ 905.517152][T13414] usb 3-1: SerialNumber: syz [ 905.526497][ T9] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice= 0.05 [ 905.539328][T13414] usb 3-1: config 0 descriptor?? [ 905.571964][T13414] usb 3-1: selecting invalid altsetting 0 [ 905.603798][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.634814][ T9] usb 2-1: config 0 descriptor?? [ 905.669210][ T9] usb 2-1: bad CDC descriptors [ 905.694399][T12093] usb 6-1: USB disconnect, device number 34 [ 905.846610][T13414] usb 3-1: USB disconnect, device number 18 [ 905.863071][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2059'. [ 905.894235][T14496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.912654][ T5903] usb 2-1: USB disconnect, device number 120 [ 905.925602][T14496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.056333][T14489] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2061'. [ 906.079400][T14489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2061'. [ 906.143828][T14489] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2061'. [ 906.163615][T12093] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 906.170147][T14489] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2061'. [ 906.283246][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.433035][T12093] usb 6-1: Using ep0 maxpacket: 8 [ 906.444045][T12093] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 906.457460][T12093] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 906.506638][T12093] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 906.537215][T12093] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.671997][T14509] netlink: 'syz.9.2064': attribute type 10 has an invalid length. [ 906.696047][T14509] 8021q: adding VLAN 0 to HW filter on device team0 [ 906.713972][T14509] bond0: (slave team0): Enslaving as an active interface with an up link [ 906.753290][T12093] usb 6-1: Product: Ӥ됝컎젝㟘呼忼籯馳ᭇ韈鉊〜緳틪䲏䜼喌⇚㻼⥠栳謈辬衭宖疓ⵑᒢ몶鬂㙳�ꡅ몦⾀澪뢎ト႕匠砿䳦쓁㜎鈠鯇숲揊统雪⦈棘交໻㷿湅鳣쇺鵇㏈䙺젾䁈᳢痨੹嗀찗溳깱ࠣꞧ빵畱抒薪⹭붼䚫鄇鐌玘奲⋱얬參 [ 906.828649][T12093] usb 6-1: Manufacturer: Т [ 906.839228][T12093] usb 6-1: SerialNumber: 륛ᗆ䐈⣁췯ế갃泃ɉ犈寋맊ڰꅶＬ鰊௡⧰礘ㅯ宪㳬稣霠鮁佉솹탗촎垷鿣薤壁띁 [ 907.329605][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.374286][T12093] cdc_ncm 6-1:1.0: bind() failure [ 907.424444][T12093] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 907.447071][T12044] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 907.473473][T12093] cdc_ncm 6-1:1.1: bind() failure [ 907.521607][T12093] usb 6-1: USB disconnect, device number 35 [ 907.611026][T14531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.619617][T12044] usb 2-1: Using ep0 maxpacket: 8 [ 907.634203][T12044] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 907.725843][T12044] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 907.741007][T14531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.781946][T12044] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 907.825553][T12044] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 907.913713][T12044] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 907.964525][T12044] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.353759][T12093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.177491][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.374246][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.545437][T12093] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 909.709453][T12093] usb 6-1: config 0 has no interfaces? [ 909.751086][T12093] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 909.785148][T12093] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.830039][T12093] usb 6-1: Product: syz [ 909.848808][T12093] usb 6-1: Manufacturer: syz [ 909.869479][T12093] usb 6-1: SerialNumber: syz [ 909.950712][T12093] usb 6-1: config 0 descriptor?? [ 910.414307][ T2153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.517155][T14562] netlink: 'syz.2.2073': attribute type 2 has an invalid length. [ 911.057646][T14571] syzkaller1: entered promiscuous mode [ 911.078335][T14571] syzkaller1: entered allmulticast mode [ 911.464167][ T2153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.627938][ T9] usb 6-1: USB disconnect, device number 36 [ 911.726154][T14578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2076'. [ 911.903330][T14583] syzkaller1: entered promiscuous mode [ 911.929368][T14583] syzkaller1: entered allmulticast mode [ 912.157962][T12044] usb 2-1: usb_control_msg returned -71 [ 912.216369][T12044] usbtmc 2-1:16.0: can't read capabilities [ 912.233706][T12093] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 912.280164][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.293891][T12044] usb 2-1: USB disconnect, device number 121 [ 912.421214][T12291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.468837][T12093] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 912.559662][T12093] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.568109][ T2153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.582025][T12093] usb 6-1: config 0 descriptor?? [ 912.593925][T14589] xt_CT: No such helper "snmp" [ 912.601883][T12093] cp210x 6-1:0.0: cp210x converter detected [ 912.807740][T12093] usb 6-1: cp210x converter now attached to ttyUSB0 [ 913.054062][T12093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.062644][T12093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.303715][T12044] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 913.478723][T12044] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 913.501165][T12044] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 913.519486][T12044] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 913.530234][T12044] usb 2-1: Manufacturer: syz [ 913.538833][T12044] usb 2-1: SerialNumber: syz [ 913.539640][T14610] pimreg: entered allmulticast mode [ 913.555382][T12044] usb 2-1: config 0 descriptor?? [ 913.581203][T14604] syz.7.2080: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 913.582704][T12044] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 913.609941][T14614] pimreg: left allmulticast mode [ 913.615316][T12093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.629630][T12044] usb 2-1: No valid video chain found. [ 913.635282][T14604] CPU: 1 UID: 0 PID: 14604 Comm: syz.7.2080 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 913.635312][T14604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 913.635325][T14604] Call Trace: [ 913.635335][T14604] [ 913.635345][T14604] dump_stack_lvl+0x189/0x250 [ 913.635387][T14604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 913.635421][T14604] ? __pfx__printk+0x10/0x10 [ 913.635446][T14604] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 913.635477][T14604] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 913.635512][T14604] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 913.635548][T14604] warn_alloc+0x214/0x310 [ 913.635593][T14604] ? __pfx_warn_alloc+0x10/0x10 [ 913.635639][T14604] ? __get_vm_area_node+0x28f/0x300 [ 913.635673][T14604] ? vicodec_start_streaming+0x97b/0x1470 [ 913.635714][T14604] __vmalloc_node_range_noprof+0x67e/0x1340 [ 913.635784][T14604] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 913.635816][T14604] ? __kasan_kmalloc_large+0x1c/0xa0 [ 913.635850][T14604] ? rcu_is_watching+0x15/0xb0 [ 913.635883][T14604] ? vicodec_start_streaming+0x97b/0x1470 [ 913.635916][T14604] ? vicodec_start_streaming+0x97b/0x1470 [ 913.635949][T14604] __kvmalloc_node_noprof+0x3bf/0x600 [ 913.635983][T14604] ? vicodec_start_streaming+0x97b/0x1470 [ 913.636015][T14604] ? trace_contention_end+0x39/0x120 [ 913.636066][T14604] vicodec_start_streaming+0x97b/0x1470 [ 913.636112][T14604] ? __pfx_vicodec_start_streaming+0x10/0x10 [ 913.636149][T14604] vb2_start_streaming+0x128/0x460 [ 913.636188][T14604] vb2_core_streamon+0x2e0/0x4f0 [ 913.636227][T14604] v4l2_m2m_ioctl_streamon+0xe0/0x140 [ 913.636268][T14604] __video_do_ioctl+0xc9b/0xdb0 [ 913.636313][T14604] ? __pfx___video_do_ioctl+0x10/0x10 [ 913.636362][T14604] video_usercopy+0x86e/0x14f0 [ 913.636408][T14604] ? __pfx___video_do_ioctl+0x10/0x10 [ 913.636440][T14604] ? __pfx_video_usercopy+0x10/0x10 [ 913.636486][T14604] ? __fget_files+0x2a/0x420 [ 913.636522][T14604] ? __fget_files+0x2a/0x420 [ 913.636552][T14604] ? __fget_files+0x3a0/0x420 [ 913.636587][T14604] v4l2_ioctl+0x18a/0x1e0 [ 913.636619][T14604] ? __pfx_v4l2_ioctl+0x10/0x10 [ 913.636650][T14604] __se_sys_ioctl+0xf9/0x170 [ 913.636679][T14604] do_syscall_64+0xfa/0x3b0 [ 913.636705][T14604] ? lockdep_hardirqs_on+0x9c/0x150 [ 913.636730][T14604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.636754][T14604] ? clear_bhb_loop+0x60/0xb0 [ 913.636784][T14604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.636807][T14604] RIP: 0033:0x7f2035d8e969 [ 913.636828][T14604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 913.636849][T14604] RSP: 002b:00007f2036c8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 913.636876][T14604] RAX: ffffffffffffffda RBX: 00007f2035fb5fa0 RCX: 00007f2035d8e969 [ 913.636894][T14604] RDX: 0000200000000240 RSI: 0000000040045612 RDI: 0000000000000005 [ 913.636910][T14604] RBP: 00007f2035e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 913.636926][T14604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 913.636941][T14604] R13: 0000000000000000 R14: 00007f2035fb5fa0 R15: 00007f20360dfa28 [ 913.636980][T14604] [ 913.637006][T14604] Mem-Info: [ 913.960062][T14604] active_anon:9600 inactive_anon:0 isolated_anon:0 [ 913.960062][T14604] active_file:13842 inactive_file:40224 isolated_file:0 [ 913.960062][T14604] unevictable:768 dirty:280 writeback:0 [ 913.960062][T14604] slab_reclaimable:11017 slab_unreclaimable:110625 [ 913.960062][T14604] mapped:43713 shmem:2443 pagetables:1538 [ 913.960062][T14604] sec_pagetables:0 bounce:0 [ 913.960062][T14604] kernel_misc_reclaimable:0 [ 913.960062][T14604] free:1274012 free_pcp:265 free_cma:0 [ 914.008720][T14604] Node 0 active_anon:38400kB inactive_anon:0kB active_file:55368kB inactive_file:160684kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:174852kB dirty:1120kB writeback:0kB shmem:8236kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12848kB pagetables:6152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 914.042229][T12044] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 914.054823][T14604] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 914.089918][T14604] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 914.120317][T14604] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 914.132989][T14604] Node 0 DMA32 free:1163456kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB active_anon:38656kB inactive_anon:0kB active_file:55368kB inactive_file:158840kB unevictable:1536kB writepending:1120kB present:3129332kB managed:2561236kB mlocked:0kB bounce:0kB free_pcp:992kB local_pcp:684kB free_cma:0kB [ 914.165636][T14604] lowmem_reserve[]: 0 0 1 1 1 [ 914.170657][T14604] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1844kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 914.184029][T12044] usb 10-1: device descriptor read/64, error -71 [ 914.200622][T14604] lowmem_reserve[]: 0 0 0 0 0 [ 914.209548][T14604] Node 1 Normal free:3917096kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:228kB local_pcp:228kB free_cma:0kB [ 914.245420][T14604] lowmem_reserve[]: 0 0 0 0 0 [ 914.250326][T14604] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 914.277487][T14604] Node 0 DMA32: 144*4kB (ME) 310*8kB (ME) 208*16kB (UME) 134*32kB (ME) 222*64kB (M) 64*128kB (UME) 21*256kB (UME) 21*512kB (UME) 10*1024kB (UM) 6*2048kB (UM) 266*4096kB (M) = 1161264kB [ 914.301818][T14604] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 914.314099][T14604] Node 1 Normal: 206*4kB (UM) 48*8kB (UME) 39*16kB (UME) 214*32kB (UME) 99*64kB (UME) 27*128kB (UME) 21*256kB (UME) 8*512kB (UME) 6*1024kB (UME) 2*2048kB (UM) 947*4096kB (M) = 3917096kB [ 914.332872][T14604] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 914.360835][T14604] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 914.370393][T14604] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 914.392314][T14604] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 914.408982][T14604] 56505 total pagecache pages [ 914.417601][T14604] 0 pages in swap cache [ 914.422016][T14604] Free swap = 124996kB [ 914.430736][T14604] Total swap = 124996kB [ 914.436651][T14604] 2097051 pages RAM [ 914.440590][T14604] 0 pages HighMem/MovableOnly [ 914.449291][T14604] 424636 pages reserved [ 914.455248][T14604] 0 pages cma reserved [ 914.483841][T12044] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 914.623758][T12044] usb 10-1: device descriptor read/64, error -71 [ 914.653949][T12093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.735584][T12044] usb usb10-port1: attempt power cycle [ 914.759436][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2085'. [ 914.828918][T14634] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2085'. [ 914.852325][ T10] usb 6-1: USB disconnect, device number 37 [ 914.858923][ T9] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 914.875704][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 914.907880][ T10] cp210x 6-1:0.0: device disconnected [ 915.016256][ T9] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 915.035055][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.084422][T12044] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 915.102418][ T9] usb 3-1: config 0 has no interface number 0 [ 915.112560][ T9] usb 3-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 915.133712][T12044] usb 10-1: device descriptor read/8, error -71 [ 915.160238][ T9] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 915.176559][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.206695][ T9] usb 3-1: config 0 descriptor?? [ 915.383684][T12044] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 915.404382][T12044] usb 10-1: device descriptor read/8, error -71 [ 915.426827][ T9] usb 3-1: USB disconnect, device number 19 [ 915.460743][T13414] usb 2-1: USB disconnect, device number 122 [ 915.544726][T12044] usb usb10-port1: unable to enumerate USB device [ 915.696237][ T2153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.743766][T14657] x_tables: duplicate underflow at hook 2 [ 915.934446][T13414] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 916.094205][T12291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.099174][T13414] usb 2-1: Using ep0 maxpacket: 8 [ 916.117560][T13414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.148388][T13414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 916.158702][ T2153] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 916.205580][T13414] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 916.219654][T13414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.241152][T13414] usb 2-1: config 0 descriptor?? [ 916.394473][ T2153] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 916.402834][ T2153] usb 6-1: config 0 has no interface number 0 [ 916.410155][ T2153] usb 6-1: config 0 interface 29 has no altsetting 0 [ 916.431561][ T2153] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 916.442146][ T2153] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.463166][ T2153] usb 6-1: Product: syz [ 916.489575][ T2153] usb 6-1: Manufacturer: syz [ 916.508104][ T2153] usb 6-1: SerialNumber: syz [ 916.546229][ T2153] usb 6-1: config 0 descriptor?? [ 916.733882][T12093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.037536][T14664] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2091'. [ 917.119831][T14664] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2091'. [ 917.153884][T14664] netlink: 'syz.5.2091': attribute type 14 has an invalid length. [ 917.194041][T14664] netlink: 'syz.5.2091': attribute type 12 has an invalid length. [ 917.583999][T12291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.658036][T12044] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 917.773784][T12093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.871186][T12044] usb 10-1: config 0 has no interfaces? [ 917.900142][T12044] usb 10-1: New USB device found, idVendor=0bda, idProduct=8713, bcdDevice=95.ac [ 918.098193][T12044] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.145905][T12044] usb 10-1: Product: syz [ 918.165228][T12044] usb 10-1: Manufacturer: syz [ 918.210148][T12044] usb 10-1: SerialNumber: syz [ 918.247353][T12044] usb 10-1: config 0 descriptor?? [ 918.301199][T14701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.339998][T14701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.454459][T14703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.484192][T14703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.539513][T14703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.627811][T14703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.797654][T13414] usbhid 2-1:0.0: can't add hid device: -71 [ 918.814031][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.824473][T12291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.832622][T12093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.840813][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.856996][T13414] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 918.913312][T13414] usb 2-1: USB disconnect, device number 123 [ 919.004346][T14710] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2098'. [ 919.020210][T14710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2098'. [ 919.046836][ T2153] peak_usb 6-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 919.115664][ T2153] peak_usb 6-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 919.284922][ T2153] peak_usb 6-1:0.29: probe with driver peak_usb failed with error -71 [ 919.337213][ T2153] usb 6-1: USB disconnect, device number 38 [ 919.402509][T13414] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 919.594599][T13414] usb 2-1: Using ep0 maxpacket: 16 [ 919.604648][T13414] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 919.614547][T13414] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 919.662913][T13414] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 919.703248][T13414] usb 2-1: config 8 has no interface number 0 [ 919.733593][ T2153] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 919.822648][T13414] usb 2-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 919.853821][T12093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.867534][T13414] usb 2-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 919.903409][T13414] usb 2-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 919.941151][T13414] usb 2-1: config 8 interface 223 has no altsetting 0 [ 919.966592][ T2153] usb 6-1: Using ep0 maxpacket: 8 [ 919.979679][ T2153] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 920.023266][T13414] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 920.033096][T13414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.054885][ T2153] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 920.065278][T13414] usb 2-1: Product: syz [ 920.069485][T13414] usb 2-1: Manufacturer: syz [ 920.091031][ T2153] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 920.144138][T13414] usb 2-1: SerialNumber: syz [ 920.192824][ T2153] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 920.215977][T14711] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 920.353444][ T2153] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 920.398503][T12044] usb 10-1: USB disconnect, device number 16 [ 920.461242][ T2153] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.566034][T13414] usb 2-1: USB disconnect, device number 124 [ 920.603359][T14732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.615288][T14732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.894017][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.953668][ T5903] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 921.134834][ T5903] usb 10-1: Using ep0 maxpacket: 32 [ 921.143237][ T5903] usb 10-1: config 4 has an invalid interface number: 128 but max is 0 [ 921.153166][ T5903] usb 10-1: config 4 has no interface number 0 [ 921.160833][ T5903] usb 10-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.215294][ T5903] usb 10-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.251571][ T5903] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 921.290735][ T5903] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.349800][ T5903] hub 10-1:4.128: USB hub found [ 921.391654][T14744] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 921.399184][T14744] IPv6: NLM_F_CREATE should be set when creating new route [ 921.421655][T14744] lo: entered allmulticast mode [ 921.427879][T13414] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 921.444705][T14744] tunl0: entered allmulticast mode [ 921.456709][T14744] gre0: entered allmulticast mode [ 921.524131][T14744] gretap0: entered allmulticast mode [ 921.540786][ T5903] hub 10-1:4.128: 2 ports detected [ 921.546936][ T5903] hub 10-1:4.128: Using single TT (err -22) [ 921.557219][T14744] erspan0: entered allmulticast mode [ 921.578193][T14744] ip_vti0: entered allmulticast mode [ 921.588867][T14744] ip6_vti0: entered allmulticast mode [ 921.595910][T13414] usb 3-1: Using ep0 maxpacket: 8 [ 921.605023][T13414] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 921.615604][T13414] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 921.630423][T14744] sit0: entered allmulticast mode [ 921.649992][T13414] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 921.680383][T13414] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.710557][T14744] ip6tnl0: entered allmulticast mode [ 921.733732][ T5823] usb 2-1: new low-speed USB device number 125 using dummy_hcd [ 921.757770][T13414] usb 3-1: Product: Ӥ됝컎젝㟘呼忼籯馳ᭇ韈鉊〜緳틪䲏䜼喌⇚㻼⥠栳謈辬衭宖疓ⵑᒢ몶鬂㙳�ꡅ몦⾀澪뢎ト႕匠砿䳦쓁㜎鈠鯇숲揊统雪⦈棘交໻㷿湅鳣쇺鵇㏈䙺젾䁈᳢痨੹嗀찗溳깱ࠣꞧ빵畱抒薪⹭붼䚫鄇鐌玘奲⋱얬參 [ 921.763361][T14744] ip6gre0: entered allmulticast mode [ 921.875670][T14748] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 921.918116][T14744] syz_tun: entered allmulticast mode [ 922.044475][T14744] ip6gretap0: entered allmulticast mode [ 922.107124][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 922.108257][T14744] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.127069][T14744] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.137402][T13414] usb 3-1: Manufacturer: Т [ 922.142104][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.152826][T13414] usb 3-1: SerialNumber: 륛ᗆ䐈⣁췯ế갃泃ɉ犈寋맊ڰꅶＬ鰊௡⧰礘ㅯ宪㳬稣霠鮁佉솹탗촎垷鿣薤壁띁 [ 922.169495][T14744] bridge0: entered allmulticast mode [ 922.179357][ T5823] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 922.192328][T14744] vcan0: entered allmulticast mode [ 922.202711][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.273006][T14744] bond0: entered allmulticast mode [ 922.308029][ T5823] usb 2-1: config 0 descriptor?? [ 922.316080][T14744] bond_slave_0: entered allmulticast mode [ 922.326900][T14744] bond_slave_1: entered allmulticast mode [ 922.352631][T14744] team0: entered allmulticast mode [ 922.442145][T14744] team_slave_0: entered allmulticast mode [ 922.451730][T14744] team_slave_1: entered allmulticast mode [ 922.459209][T13414] cdc_ncm 3-1:1.0: bind() failure [ 922.532812][T13414] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 922.563188][T14744] dummy0: entered allmulticast mode [ 922.583080][T13414] cdc_ncm 3-1:1.1: bind() failure [ 922.612527][ T5903] hub 10-1:4.128: hub_hub_status failed (err = -32) [ 922.646295][T13414] usb 3-1: USB disconnect, device number 20 [ 922.654574][ T5903] hub 10-1:4.128: config failed, can't get hub status (err -32) [ 922.699130][T14744] nlmon0: entered allmulticast mode [ 922.717781][T14744] caif0: entered allmulticast mode [ 922.726715][T14744] batadv0: entered allmulticast mode [ 922.737289][T14744] vxcan0: entered allmulticast mode [ 922.744674][T14744] vxcan1: entered allmulticast mode [ 922.751760][T14744] veth0: entered allmulticast mode [ 922.775708][T14744] veth1: entered allmulticast mode [ 922.816092][T14744] wg0: entered allmulticast mode [ 922.850548][T14744] wg1: entered allmulticast mode [ 922.888413][T14744] wg2: entered allmulticast mode [ 922.912297][T14744] veth0_to_bridge: entered allmulticast mode [ 922.993353][T14744] veth1_to_bridge: entered allmulticast mode [ 923.005386][T14758] fuse: Bad value for 'rootmode' [ 923.082770][T14744] veth0_to_bond: entered allmulticast mode [ 923.151429][T14744] veth1_to_bond: entered allmulticast mode [ 923.162910][ T2153] usb 6-1: usb_control_msg returned -71 [ 923.273709][ T2153] usbtmc 6-1:16.0: can't read capabilities [ 923.307237][T14744] veth0_to_team: entered allmulticast mode [ 923.383757][ T2153] usb 6-1: USB disconnect, device number 39 [ 923.432311][T14744] veth1_to_team: entered allmulticast mode [ 923.453826][ T6668] Bluetooth: hci5: command 0x0406 tx timeout [ 923.615118][T14744] veth0_to_batadv: entered allmulticast mode [ 924.067590][T14744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 924.083226][T14744] batadv_slave_0: entered allmulticast mode [ 924.128049][T14744] veth1_to_batadv: entered allmulticast mode [ 924.200332][T14744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 924.419848][T14744] batadv_slave_1: entered allmulticast mode [ 924.441536][T14744] xfrm0: entered allmulticast mode [ 924.446833][ T2153] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 924.487141][T14744] veth0_to_hsr: entered allmulticast mode [ 924.528180][T14744] hsr_slave_0: entered allmulticast mode [ 924.586995][T14744] veth1_to_hsr: entered allmulticast mode [ 924.635681][ T2153] usb 6-1: Using ep0 maxpacket: 8 [ 924.655171][T14744] hsr_slave_1: entered allmulticast mode [ 924.679336][ T2153] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 924.710475][ T2153] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 924.836959][ T2153] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 924.853869][T14744] hsr0: entered allmulticast mode [ 924.895594][T14744] veth1_virt_wifi: entered allmulticast mode [ 924.911394][ T2153] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 924.954594][ T2153] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 924.958309][T14744] veth0_virt_wifi: entered allmulticast mode [ 924.964059][ T2153] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.006933][T14744] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 925.069263][T14744] veth1_vlan: entered allmulticast mode [ 925.078314][T14744] veth0_vlan: entered allmulticast mode [ 925.146837][T14744] vlan0: entered allmulticast mode [ 925.164352][T14744] vlan1: entered allmulticast mode [ 925.182419][T14744] macvlan0: entered allmulticast mode [ 925.212751][T14744] macvlan1: entered allmulticast mode [ 925.235258][T14744] ipvlan0: entered allmulticast mode [ 925.259968][T14744] ipvlan1: entered allmulticast mode [ 925.288169][T14744] veth1_macvtap: entered allmulticast mode [ 925.318666][T14744] veth0_macvtap: entered allmulticast mode [ 925.406949][T14744] macvtap0: entered allmulticast mode [ 925.444085][T14744] macsec0: entered allmulticast mode [ 925.645741][T14744] geneve0: entered allmulticast mode [ 925.774266][T13414] usb 10-1: USB disconnect, device number 17 [ 925.842000][T14744] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.923771][T14744] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.011729][T14744] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.083673][ T9] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 926.169081][T14744] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.200933][T14744] geneve1: entered allmulticast mode [ 926.232111][T14744] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 926.292344][T14744] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 926.307032][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.325844][ T9] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 926.382297][T14744] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 926.404650][ T9] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 926.415231][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.435590][ T9] usb 10-1: Product: syz [ 926.440286][T14744] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 926.452663][ T9] usb 10-1: Manufacturer: syz [ 926.475605][ T9] usb 10-1: SerialNumber: syz [ 926.520803][ T9] cdc_mbim 10-1:1.0: skipping garbage [ 926.545156][T14744] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode [ 926.582029][T14744] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 926.720029][T14778] raw-gadget.8 gadget.9: fail, usb_ep_enable returned -22 [ 926.809278][ T5823] usbhid 2-1:0.0: can't add hid device: -71 [ 926.938754][ T5823] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 927.195843][ T5823] usb 2-1: USB disconnect, device number 125 [ 927.361523][T14778] raw-gadget.8 gadget.9: fail, usb_ep_enable returned -22 [ 927.373020][ T9] cdc_mbim 10-1:1.0: setting tx_max = 184 [ 927.412491][ T9] cdc_mbim 10-1:1.0: cdc-wdm0: USB WDM device [ 927.500673][T14789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.547766][T14789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.556440][ T9] wwan wwan0: port wwan0mbim0 attached [ 927.598051][T14778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.655686][T14778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.676028][ T9] cdc_mbim 10-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.9-1, CDC MBIM, 86:46:15:1d:78:e6 [ 927.895594][ T24] usb 10-1: USB disconnect, device number 18 [ 927.915251][ T24] cdc_mbim 10-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.9-1, CDC MBIM [ 928.030815][ T24] wwan wwan0: port wwan0mbim0 disconnected [ 928.550344][ T2153] usb 6-1: usb_control_msg returned -71 [ 928.558304][ T2153] usbtmc 6-1:16.0: can't read capabilities [ 928.583013][ T2153] usb 6-1: USB disconnect, device number 40 [ 929.753670][ T2153] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 930.236870][ T2153] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 930.266208][ T2153] usb 3-1: config 0 has no interface number 0 [ 930.272438][ T2153] usb 3-1: too many endpoints for config 0 interface 107 altsetting 255: 136, using maximum allowed: 30 [ 930.360541][ T2153] usb 3-1: config 0 interface 107 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 136 [ 930.423654][ T2153] usb 3-1: config 0 interface 107 has no altsetting 0 [ 930.481048][ T2153] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 930.490635][ T2153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.533974][ T2153] usb 3-1: Product: syz [ 930.538346][ T2153] usb 3-1: Manufacturer: syz [ 930.591359][ T2153] usb 3-1: SerialNumber: syz [ 930.638729][ T2153] usb 3-1: config 0 descriptor?? [ 930.896436][T14828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 930.905036][T14828] batadv_slave_1: entered promiscuous mode [ 931.023652][T12044] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 931.023827][ T24] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 931.235579][T12044] usb 6-1: config 150 has an invalid interface number: 204 but max is 1 [ 931.244267][T12044] usb 6-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 931.313251][T12044] usb 6-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 931.325069][ T24] usb 10-1: device descriptor read/64, error -71 [ 931.350341][T12044] usb 6-1: config 150 has no interface number 0 [ 931.416395][T12044] usb 6-1: config 150 interface 204 has no altsetting 0 [ 931.444972][T12044] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 931.463618][T12044] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.489122][T12044] usb 6-1: Product: syz [ 931.509196][T12044] usb 6-1: Manufacturer: syz [ 931.543595][T12044] usb 6-1: SerialNumber: syz [ 931.604033][ T24] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 931.620293][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.627205][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.775219][T14860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.793613][ T24] usb 10-1: device descriptor read/64, error -71 [ 931.869735][T14860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.924233][ T24] usb usb10-port1: attempt power cycle [ 931.987038][T12044] usb 6-1: USB disconnect, device number 41 [ 932.260961][ T2153] hub 3-1:0.107: bad descriptor, ignoring hub [ 932.272259][ T2153] hub 3-1:0.107: probe with driver hub failed with error -5 [ 932.299201][ T2153] f81232 3-1:0.107: f81534a converter detected [ 932.323685][ T24] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 932.341730][ T2153] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 932.370311][ T24] usb 10-1: device descriptor read/8, error -71 [ 932.383569][ T2153] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 932.637231][ T24] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 932.646911][ T2153] usb 3-1: reset high-speed USB device number 21 using dummy_hcd [ 932.719423][ T24] usb 10-1: device descriptor read/8, error -71 [ 932.842606][T14864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.861812][ T24] usb usb10-port1: unable to enumerate USB device [ 932.869393][T14864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.893188][ T2153] usb 3-1: device firmware changed [ 932.903699][T12044] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 932.921657][ T2153] usb 3-1: USB disconnect, device number 21 [ 932.966177][ T2153] f81232 3-1:0.107: device disconnected [ 933.052346][ T30] audit: type=1326 audit(1748552961.658:7517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14890 comm="syz.5.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 933.063856][T12044] usb 2-1: Using ep0 maxpacket: 32 [ 933.082507][T12044] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 933.102360][T12044] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 933.119549][ T30] audit: type=1326 audit(1748552961.658:7518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14890 comm="syz.5.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 933.150951][T12044] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 933.161407][T12044] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 933.171757][ T30] audit: type=1326 audit(1748552961.658:7519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14890 comm="syz.5.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 933.195351][ T30] audit: type=1326 audit(1748552961.658:7520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14890 comm="syz.5.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 933.220294][T12044] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 933.243680][T12044] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.261011][T12044] usb 2-1: Product: syz [ 933.273695][T12044] usb 2-1: Manufacturer: syz [ 933.278537][T12044] usb 2-1: SerialNumber: syz [ 933.283604][ T30] audit: type=1326 audit(1748552961.668:7521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14890 comm="syz.5.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 933.329836][T12044] usb 2-1: config 0 descriptor?? [ 933.339136][ T30] audit: type=1326 audit(1748552961.668:7522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14890 comm="syz.5.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 933.374133][ T2153] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 933.399594][ T30] audit: type=1326 audit(1748552961.668:7523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14890 comm="syz.5.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 933.458154][ T30] audit: type=1326 audit(1748552961.668:7524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14890 comm="syz.5.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 933.515842][ T30] audit: type=1326 audit(1748552961.668:7525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14890 comm="syz.5.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 933.551112][ T2153] usb 3-1: config 0 has no interfaces? [ 933.581732][ T2153] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 933.591653][ T2153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.607614][ T2153] usb 3-1: Product: syz [ 933.614927][ T30] audit: type=1326 audit(1748552961.668:7526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14890 comm="syz.5.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2573d8e969 code=0x7ffc0000 [ 933.648259][ T2153] usb 3-1: Manufacturer: syz [ 933.654594][ T2153] usb 3-1: SerialNumber: syz [ 933.680066][ T2153] usb 3-1: config 0 descriptor?? [ 933.808107][T14902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.834392][T14902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.945738][T14879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.974361][T14879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.383845][ T2153] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 934.547402][ T2153] usb 10-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 934.563746][ T10] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 934.599990][ T2153] usb 10-1: config 0 interface 0 has no altsetting 0 [ 934.643082][ T2153] usb 10-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 934.672733][ T2153] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.735721][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 934.769786][ T2153] usb 10-1: config 0 descriptor?? [ 934.775551][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.817489][T14930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.836493][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.840672][T14930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.870124][ T10] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 934.901425][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.936240][ T10] usb 6-1: config 0 descriptor?? [ 935.218914][ T2153] ntrig 0003:1B96:0009.003B: hidraw0: USB HID v0.00 Device [HID 1b96:0009] on usb-dummy_hcd.9-1/input0 [ 935.392880][ T10] ft260 0003:0403:6030.003C: unknown main item tag 0x0 [ 935.405252][T12044] usb 3-1: USB disconnect, device number 22 [ 935.437778][ T2153] usb 10-1: USB disconnect, device number 23 [ 935.582113][ T10] ft260 0003:0403:6030.003C: chip code: 0000 0000 [ 935.774217][T12044] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 935.952524][ T10] ft260 0003:0403:6030.003C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 935.966209][T12044] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 935.975702][T12044] usb 3-1: config 0 has no interface number 0 [ 935.981912][T12044] usb 3-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 936.126491][T12044] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 936.205441][T12044] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.231401][ T10] ft260 0003:0403:6030.003C: failed to retrieve status: -32, no wakeup [ 936.275941][T12044] usb 3-1: config 0 descriptor?? [ 936.370078][T12044] usb 2-1: USB disconnect, device number 126 [ 936.507213][ T9] usb 3-1: USB disconnect, device number 23 [ 937.207581][ T9] usb 10-1: new full-speed USB device number 24 using dummy_hcd [ 937.378748][ T9] usb 10-1: not running at top speed; connect to a high speed hub [ 937.388941][ T9] usb 10-1: config 243 has an invalid interface number: 27 but max is 0 [ 937.410220][ T9] usb 10-1: config 243 has no interface number 0 [ 937.429840][ T10] ft260 0003:0403:6030.003C: failed to reset I2C controller: -71 [ 937.448148][ T9] usb 10-1: config 243 interface 27 has no altsetting 0 [ 937.473254][ T9] usb 10-1: New USB device found, idVendor=148f, idProduct=7601, bcdDevice=a1.91 [ 937.483198][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.523979][ T10] usb 6-1: USB disconnect, device number 42 [ 937.541706][ T9] usb 10-1: Product: syz [ 937.557094][ T9] usb 10-1: Manufacturer: 閬䳃󶭥ꅯ?꘶ [ 937.573707][ T9] usb 10-1: SerialNumber: syz [ 937.842718][ T9] usb 10-1: USB disconnect, device number 24 [ 938.084061][ T5887] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 938.256246][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 938.267685][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 938.291404][ T5887] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 938.322322][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.408167][ T5887] usb 3-1: config 0 descriptor?? [ 938.928954][ T5887] usbhid 3-1:0.0: can't add hid device: -71 [ 938.937088][ T5887] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 939.085451][ T5887] usb 3-1: USB disconnect, device number 24 [ 939.093556][ T9] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 939.193199][T14980] FAULT_INJECTION: forcing a failure. [ 939.193199][T14980] name failslab, interval 1, probability 0, space 0, times 0 [ 939.273335][T14980] CPU: 1 UID: 0 PID: 14980 Comm: syz.9.2156 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 939.273367][T14980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 939.273393][T14980] Call Trace: [ 939.273402][T14980] [ 939.273412][T14980] dump_stack_lvl+0x189/0x250 [ 939.273452][T14980] ? __pfx____ratelimit+0x10/0x10 [ 939.273476][T14980] ? __pfx_dump_stack_lvl+0x10/0x10 [ 939.273512][T14980] ? __pfx__printk+0x10/0x10 [ 939.273540][T14980] ? __pfx___might_resched+0x10/0x10 [ 939.273572][T14980] should_fail_ex+0x414/0x560 [ 939.273601][T14980] should_failslab+0xa8/0x100 [ 939.273631][T14980] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 939.273659][T14980] ? __alloc_skb+0x112/0x2d0 [ 939.273692][T14980] __alloc_skb+0x112/0x2d0 [ 939.273723][T14980] netlink_sendmsg+0x5c6/0xb30 [ 939.273762][T14980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 939.273797][T14980] ? aa_sock_msg_perm+0x94/0x160 [ 939.273821][T14980] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 939.273844][T14980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 939.273874][T14980] __sock_sendmsg+0x21c/0x270 [ 939.273902][T14980] ____sys_sendmsg+0x505/0x830 [ 939.273939][T14980] ? __pfx_____sys_sendmsg+0x10/0x10 [ 939.273979][T14980] ? import_iovec+0x74/0xa0 [ 939.274012][T14980] ___sys_sendmsg+0x21f/0x2a0 [ 939.274045][T14980] ? __pfx____sys_sendmsg+0x10/0x10 [ 939.274123][T14980] ? __fget_files+0x2a/0x420 [ 939.274152][T14980] ? __fget_files+0x3a0/0x420 [ 939.274189][T14980] __x64_sys_sendmsg+0x19b/0x260 [ 939.274223][T14980] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 939.274266][T14980] ? rcu_is_watching+0x15/0xb0 [ 939.274299][T14980] ? do_syscall_64+0xbe/0x3b0 [ 939.274327][T14980] do_syscall_64+0xfa/0x3b0 [ 939.274350][T14980] ? lockdep_hardirqs_on+0x9c/0x150 [ 939.274372][T14980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.274393][T14980] ? clear_bhb_loop+0x60/0xb0 [ 939.274419][T14980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.274439][T14980] RIP: 0033:0x7f9cc058e969 [ 939.274458][T14980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 939.274478][T14980] RSP: 002b:00007f9cc1445038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 939.274501][T14980] RAX: ffffffffffffffda RBX: 00007f9cc07b5fa0 RCX: 00007f9cc058e969 [ 939.274518][T14980] RDX: 0000000040004040 RSI: 0000200000000100 RDI: 0000000000000003 [ 939.274532][T14980] RBP: 00007f9cc1445090 R08: 0000000000000000 R09: 0000000000000000 [ 939.274545][T14980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.274558][T14980] R13: 0000000000000000 R14: 00007f9cc07b5fa0 R15: 00007f9cc08dfa28 [ 939.274590][T14980] [ 939.334038][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 939.583657][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 939.594947][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 939.605728][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 939.615934][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 939.629295][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 939.638785][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.383721][T12044] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 940.579101][T12044] usb 10-1: Using ep0 maxpacket: 16 [ 940.688723][T12044] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.796905][T12044] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 940.863682][ T10] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 940.896105][T12044] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 941.073989][T12044] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 941.091881][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 941.154568][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.169493][T12044] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.262261][ T10] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 941.341243][T12044] usb 10-1: config 0 descriptor?? [ 941.396664][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.440222][ T10] usb 3-1: config 0 descriptor?? [ 941.817120][T12044] microsoft 0003:045E:07DA.003D: unknown main item tag 0x0 [ 941.926695][T12044] microsoft 0003:045E:07DA.003D: unknown main item tag 0x0 [ 941.973725][T12044] microsoft 0003:045E:07DA.003D: unknown main item tag 0x0 [ 942.029356][T12044] microsoft 0003:045E:07DA.003D: unknown main item tag 0x0 [ 942.069039][ T10] usb 3-1: string descriptor 0 read error: -22 [ 942.103911][T12044] microsoft 0003:045E:07DA.003D: unknown main item tag 0x0 [ 942.147474][T12044] microsoft 0003:045E:07DA.003D: unknown main item tag 0x0 [ 942.193649][T12044] microsoft 0003:045E:07DA.003D: unknown main item tag 0x0 [ 942.223646][T12044] microsoft 0003:045E:07DA.003D: unknown main item tag 0x0 [ 942.230982][T12044] microsoft 0003:045E:07DA.003D: unknown main item tag 0x0 [ 942.297503][T12044] microsoft 0003:045E:07DA.003D: unknown main item tag 0x0 [ 942.313653][ T10] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.003E/input/input86 [ 942.378515][T15011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.397105][T12044] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.003D/input/input90 [ 942.411891][T15011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.455942][ T10] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.003E/input/input87 [ 942.474176][T12044] microsoft 0003:045E:07DA.003D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 942.525202][T12044] usb 10-1: USB disconnect, device number 25 [ 942.579484][ T10] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.003E/input/input88 [ 942.701493][ T10] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.003E/input/input89 [ 942.788557][ T10] uclogic 0003:256C:006D.003E: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 942.847506][ T10] usb 3-1: USB disconnect, device number 25 [ 943.113934][T12044] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 943.291886][ T9] usb 6-1: usb_control_msg returned -71 [ 943.309085][T12044] usb 10-1: Using ep0 maxpacket: 8 [ 943.338214][ T9] usbtmc 6-1:16.0: can't read capabilities [ 943.352423][T12044] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 943.393634][T12044] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 943.420169][ T9] usb 6-1: USB disconnect, device number 43 [ 943.446653][T12044] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 943.493248][T12044] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.540463][T12044] usb 10-1: Product: Ӥ됝컎젝㟘呼忼籯馳ᭇ韈鉊〜緳틪䲏䜼喌⇚㻼⥠栳謈辬衭宖疓ⵑᒢ몶鬂㙳�ꡅ몦⾀澪뢎ト႕匠砿䳦쓁㜎鈠鯇숲揊统雪⦈棘交໻㷿湅鳣쇺鵇㏈䙺젾䁈᳢痨੹嗀찗溳깱ࠣꞧ빵畱抒薪⹭붼䚫鄇鐌玘奲⋱얬參 [ 943.681084][T12044] usb 10-1: Manufacturer: Т [ 943.702719][T12044] usb 10-1: SerialNumber: 륛ᗆ䐈⣁췯ế갃泃ɉ犈寋맊ڰꅶＬ鰊௡⧰礘ㅯ宪㳬稣霠鮁佉솹탗촎垷鿣薤壁띁 [ 943.724713][T15029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.744302][T15029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.890535][T15036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2166'. [ 943.947053][T15036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2166'. [ 943.973352][T15036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2166'. [ 943.996916][T12044] cdc_ncm 10-1:1.0: bind() failure [ 944.009119][T12044] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 944.024448][T12044] cdc_ncm 10-1:1.1: bind() failure [ 944.045599][T15040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2166'. [ 944.050155][T12044] usb 10-1: USB disconnect, device number 26 [ 944.088038][T15040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2166'. [ 944.154789][ T5823] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 944.326722][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 944.339635][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 944.353960][ T5823] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 944.363334][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.411832][ T5823] usb 3-1: config 0 descriptor?? [ 944.413874][ T31] INFO: task kworker/0:6:5888 blocked for more than 143 seconds. [ 944.431759][ T31] Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 [ 944.449764][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 944.500423][ T31] task:kworker/0:6 state:D stack:18552 pid:5888 tgid:5888 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 944.558832][ T31] Workqueue: usb_hub_wq hub_event [ 944.564285][ T31] Call Trace: [ 944.567635][ T31] [ 944.570653][ T31] __schedule+0x16f5/0x4d00 [ 944.613704][ T31] ? __device_attach_driver+0x2ce/0x530 [ 944.633022][ T5823] ath6kl: Failed to submit usb control message: -71 [ 944.642220][ T31] ? bus_for_each_drv+0x251/0x2e0 [ 944.673555][ T5823] ath6kl: unable to send the bmi data to the device: -71 [ 944.681894][ T31] ? device_add+0x7b6/0xb50 [ 944.708155][ T31] ? usb_new_device+0xa39/0x16c0 [ 944.740177][ T31] ? kthread+0x70e/0x8a0 [ 944.743530][ T5823] ath6kl: Unable to send get target info: -71 [ 944.792192][ T5823] ath6kl: Failed to init ath6kl core: -71 [ 944.797578][ T31] ? ret_from_fork+0x3fc/0x770 [ 944.800547][ T5823] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 944.802755][ T31] ? schedule+0x165/0x360 [ 944.863718][ T31] ? __lock_acquire+0xab9/0xd20 [ 944.868925][ T31] ? __pfx___schedule+0x10/0x10 [ 944.905823][ T5823] usb 3-1: USB disconnect, device number 26 [ 944.923544][ T31] ? schedule+0x91/0x360 [ 944.928675][ T31] schedule+0x165/0x360 [ 944.933982][ T31] schedule_timeout+0x9a/0x270 [ 944.938823][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 944.963632][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 944.968926][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 944.983946][ T31] ? wait_for_completion+0x267/0x5d0 [ 944.989320][ T31] wait_for_completion+0x2bf/0x5d0 [ 945.008130][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 945.015798][ T31] i2c_del_adapter+0x581/0x6e0 [ 945.020627][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 945.030163][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 945.037539][ T31] ? dvb_usbv2_exit+0x85a/0x9e0 [ 945.042444][ T31] dvb_usbv2_probe+0x4ae/0x41a0 [ 945.051489][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 945.059145][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 945.068643][ T31] usb_probe_interface+0x641/0xbc0 [ 945.074187][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 945.079873][ T31] really_probe+0x26a/0x9a0 [ 945.084890][ T31] __driver_probe_device+0x18c/0x2f0 [ 945.090226][ T31] driver_probe_device+0x4f/0x430 [ 945.095844][ T31] __device_attach_driver+0x2ce/0x530 [ 945.101268][ T31] bus_for_each_drv+0x251/0x2e0 [ 945.108977][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 945.115398][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 945.120851][ T31] __device_attach+0x2b8/0x400 [ 945.130080][ T31] ? __pfx___device_attach+0x10/0x10 [ 945.136893][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 945.142162][ T31] bus_probe_device+0x185/0x260 [ 945.151350][ T31] device_add+0x7b6/0xb50 [ 945.157705][ T31] usb_set_configuration+0x1a87/0x20e0 [ 945.163258][ T31] usb_generic_driver_probe+0x8d/0x150 [ 945.172077][ T31] usb_probe_device+0x1c4/0x390 [ 945.177220][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 945.183005][ T31] really_probe+0x26a/0x9a0 [ 945.187653][ T31] __driver_probe_device+0x18c/0x2f0 [ 945.192986][ T31] driver_probe_device+0x4f/0x430 [ 945.198145][ T31] __device_attach_driver+0x2ce/0x530 [ 945.203607][ T31] bus_for_each_drv+0x251/0x2e0 [ 945.209423][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 945.215725][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 945.221148][ T31] __device_attach+0x2b8/0x400 [ 945.226055][ T31] ? __pfx___device_attach+0x10/0x10 [ 945.231404][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 945.237027][ T31] bus_probe_device+0x185/0x260 [ 945.241920][ T31] device_add+0x7b6/0xb50 [ 945.246321][ T31] usb_new_device+0xa39/0x16c0 [ 945.251146][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 945.256492][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 945.261732][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 945.267057][ T31] hub_event+0x2941/0x4a00 [ 945.271554][ T31] ? __pfx_hub_event+0x10/0x10 [ 945.276445][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 945.282204][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 945.287563][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 945.293322][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 945.299534][ T31] process_scheduled_works+0xae1/0x17b0 [ 945.305429][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 945.312816][ T31] worker_thread+0x8a0/0xda0 [ 945.317630][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 945.324148][ T31] ? __kthread_parkme+0x7b/0x200 [ 945.329129][ T31] kthread+0x70e/0x8a0 [ 945.333211][ T31] ? __pfx_worker_thread+0x10/0x10 [ 945.338443][ T31] ? __pfx_kthread+0x10/0x10 [ 945.343079][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 945.348570][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 945.354131][ T31] ? __pfx_kthread+0x10/0x10 [ 945.358767][ T31] ret_from_fork+0x3fc/0x770 [ 945.363367][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 945.368676][ T31] ? __switch_to_asm+0x39/0x70 [ 945.374005][ T31] ? __switch_to_asm+0x33/0x70 [ 945.378778][ T31] ? __pfx_kthread+0x10/0x10 [ 945.383380][ T31] ret_from_fork_asm+0x1a/0x30 [ 945.388482][ T31] [ 945.393220][ T31] INFO: task syz.6.1736:12725 blocked for more than 144 seconds. [ 945.401325][ T31] Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 [ 945.408744][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 945.421190][ T31] task:syz.6.1736 state:D stack:28328 pid:12725 tgid:12707 ppid:11840 task_flags:0x400040 flags:0x00004004 [ 945.433255][ T31] Call Trace: [ 945.436665][ T31] [ 945.439608][ T31] __schedule+0x16f5/0x4d00 [ 945.444419][ T31] ? __lock_acquire+0xa10/0xd20 [ 945.449312][ T31] ? schedule+0x165/0x360 [ 945.454101][ T31] ? __pfx___schedule+0x10/0x10 [ 945.459026][ T31] ? schedule+0x91/0x360 [ 945.463302][ T31] schedule+0x165/0x360 [ 945.467564][ T31] schedule_preempt_disabled+0x13/0x30 [ 945.473077][ T31] __mutex_lock+0x724/0xe80 [ 945.477870][ T31] ? __mutex_lock+0x51b/0xe80 [ 945.482670][ T31] ? usbdev_open+0x16e/0x760 [ 945.487344][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 945.492411][ T31] ? bus_find_device+0x273/0x2b0 [ 945.497571][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 945.502888][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 945.508038][ T31] ? usbdev_open+0xa7/0x760 [ 945.514724][ T31] usbdev_open+0x16e/0x760 [ 945.519198][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 945.524222][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 945.529465][ T31] chrdev_open+0x4c9/0x5e0 [ 945.534071][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 945.539064][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 945.544133][ T31] do_dentry_open+0xdf0/0x1970 [ 945.548954][ T31] vfs_open+0x3b/0x340 [ 945.553049][ T31] ? path_openat+0x2ecd/0x3830 [ 945.557991][ T31] path_openat+0x2ee5/0x3830 [ 945.562614][ T31] ? arch_stack_walk+0xfc/0x150 [ 945.567638][ T31] ? __pfx_path_openat+0x10/0x10 [ 945.572601][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.578854][ T31] do_filp_open+0x1fa/0x410 [ 945.583399][ T31] ? __lock_acquire+0xab9/0xd20 [ 945.588356][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 945.593439][ T31] ? _raw_spin_unlock+0x28/0x50 [ 945.598536][ T31] ? alloc_fd+0x64c/0x6c0 [ 945.602909][ T31] do_sys_openat2+0x121/0x1c0 [ 945.607649][ T31] ? __se_sys_futex+0x36f/0x400 [ 945.612555][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 945.619876][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 945.625301][ T31] __x64_sys_openat+0x138/0x170 [ 945.630187][ T31] do_syscall_64+0xfa/0x3b0 [ 945.634872][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.640965][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 945.647201][ T31] ? clear_bhb_loop+0x60/0xb0 [ 945.651910][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.657979][ T31] RIP: 0033:0x7f19ad18d2d0 [ 945.662425][ T31] RSP: 002b:00007f19aaff5b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 945.670996][ T31] RAX: ffffffffffffffda RBX: 0000000000040082 RCX: 00007f19ad18d2d0 [ 945.679154][ T31] RDX: 0000000000040082 RSI: 00007f19aaff5c10 RDI: 00000000ffffff9c [ 945.690413][ T31] RBP: 00007f19aaff5c10 R08: 0000000000000000 R09: 0000000000000000 [ 945.698941][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 945.707065][ T31] R13: 0000000000000000 R14: 00007f19ad3b6080 R15: 00007f19ad4dfa28 [ 945.715326][ T31] [ 945.791820][ T31] [ 945.791820][ T31] Showing all locks held in the system: [ 945.833899][ T31] 2 locks held by kworker/0:0/9: [ 945.838989][ T31] 1 lock held by khungtaskd/31: [ 945.883541][ T31] #0: ffffffff8e13ccc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 945.905887][ T31] 3 locks held by kworker/u8:7/3000: [ 945.911237][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 945.935859][ T31] #1: ffffc9000b9e7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 945.958079][ T31] #2: ffffffff8f50ab48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 945.972924][ T31] 1 lock held by dhcpcd/5496: [ 945.981826][ T31] #0: ffffffff8f50ab48 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_deladdr+0x20f/0x330 [ 945.993431][ T31] 2 locks held by getty/5588: [ 946.002310][ T31] #0: ffff88814d8180a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 946.021679][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 946.046489][ T31] 5 locks held by kworker/0:6/5888: [ 946.051759][ T31] #0: ffff88801deef148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 946.070425][ T31] #1: ffffc90004ed7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 946.092997][ T31] #2: ffff888144b32198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 946.112106][ T31] #3: ffff888046690198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 946.121731][ T31] #4: ffff888070bc7160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 946.140105][ T31] 3 locks held by kworker/u8:2/10603: [ 946.147845][ T31] #0: ffff88814528b148 ((wq_completion)tc_filter_workqueue){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 946.167980][ T31] #1: ffffc90003a6fbc0 ((work_completion)(&(rwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 946.183113][ T31] #2: ffffffff8f50ab48 (rtnl_mutex){+.+.}-{4:4}, at: route4_delete_filter_work+0x16/0x30 [ 946.203532][ T31] 3 locks held by kworker/0:3/12044: [ 946.208870][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 946.225885][ T31] #1: ffffc90004de7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 946.243307][ T31] #2: ffffffff8e1427f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 946.262687][ T31] 4 locks held by udevd/12196: [ 946.269898][ T31] #0: ffff888032af61c8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 946.286185][ T31] #1: ffff888079179888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 946.300859][ T31] #2: ffff8880467c6e18 (kn->active#18){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 946.320361][ T31] #3: ffff888046690198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 946.330088][ T31] 1 lock held by syz.7.1689/12503: [ 946.337698][ T31] #0: ffffffff8f50ab48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 946.347723][ T31] 1 lock held by syz.6.1736/12725: [ 946.352873][ T31] #0: ffff888144b32198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 946.362200][ T31] 1 lock held by syz-executor/12947: [ 946.367764][ T31] #0: ffffffff8f50ab48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 946.376885][ T31] 1 lock held by syz.8.1939/13849: [ 946.382011][ T31] #0: ffff888144b32198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 946.391038][ T31] 4 locks held by syz.1.2162/15015: [ 946.396544][ T31] #0: ffff8880277c4d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 946.406576][ T31] #1: ffff8880277c4078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 946.416931][ T31] #2: ffffffff8f672b68 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 946.427225][ T31] #3: ffff8880724fab38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 946.437510][ T31] 1 lock held by syz.7.2167/15035: [ 946.442656][ T31] #0: ffffffff8f50ab48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 946.451739][ T31] 2 locks held by syz.2.2168/15032: [ 946.457010][ T31] #0: ffffffff8f50ab48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 946.466086][ T31] #1: ffffffff8e1427f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 946.478976][ T31] [ 946.481350][ T31] ============================================= [ 946.481350][ T31] [ 946.500135][ T31] NMI backtrace for cpu 0 [ 946.500158][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 946.500190][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 946.500204][ T31] Call Trace: [ 946.500213][ T31] [ 946.500223][ T31] dump_stack_lvl+0x189/0x250 [ 946.500260][ T31] ? __wake_up_klogd+0xd9/0x110 [ 946.500296][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 946.500330][ T31] ? __pfx__printk+0x10/0x10 [ 946.500368][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 946.500405][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 946.500434][ T31] ? _printk+0xcf/0x120 [ 946.500463][ T31] ? __pfx__printk+0x10/0x10 [ 946.500502][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 946.500529][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 946.500563][ T31] watchdog+0xfee/0x1030 [ 946.500588][ T31] ? watchdog+0x1de/0x1030 [ 946.500619][ T31] kthread+0x70e/0x8a0 [ 946.500655][ T31] ? __pfx_watchdog+0x10/0x10 [ 946.500676][ T31] ? __pfx_kthread+0x10/0x10 [ 946.500711][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 946.500731][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 946.500751][ T31] ? __pfx_kthread+0x10/0x10 [ 946.500785][ T31] ret_from_fork+0x3fc/0x770 [ 946.500813][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 946.500844][ T31] ? __switch_to_asm+0x39/0x70 [ 946.500864][ T31] ? __switch_to_asm+0x33/0x70 [ 946.500885][ T31] ? __pfx_kthread+0x10/0x10 [ 946.500918][ T31] ret_from_fork_asm+0x1a/0x30 [ 946.500956][ T31] [ 946.500965][ T31] Sending NMI from CPU 0 to CPUs 1: [ 946.669998][ C1] NMI backtrace for cpu 1 [ 946.670015][ C1] CPU: 1 UID: 0 PID: 15027 Comm: syz.5.2166 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 946.670037][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 946.670048][ C1] RIP: 0010:rcu_is_watching+0x3a/0xb0 [ 946.670076][ C1] Code: e8 8b ec bc 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 60 2c b9 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 ac 45 7c 00 48 c7 c3 58 ef 9c 92 49 03 1e 48 89 [ 946.670092][ C1] RSP: 0018:ffffc900033b77c0 EFLAGS: 00000246 [ 946.670108][ C1] RAX: 1ffffffff1b7258d RBX: 0000000000000001 RCX: a93a60b8fb3af000 [ 946.670122][ C1] RDX: ffff88806c65da00 RSI: ffffffff8be26360 RDI: ffffffff8be26320 [ 946.670136][ C1] RBP: ffff88801dcdf384 R08: ffff88801dcdf347 R09: 1ffff11003b9be68 [ 946.670155][ C1] R10: dffffc0000000000 R11: ffffed1003b9be69 R12: 000000000006aca5 [ 946.670168][ C1] R13: 0000000000000001 R14: ffffffff8db92c68 R15: dffffc0000000000 [ 946.670182][ C1] FS: 0000000000000000(0000) GS:ffff888125d64000(0000) knlGS:0000000000000000 [ 946.670196][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 946.670209][ C1] CR2: 000055b7ad024aa8 CR3: 0000000033336000 CR4: 00000000003526f0 [ 946.670225][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 946.670236][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 946.670248][ C1] Call Trace: [ 946.670255][ C1] [ 946.670263][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 946.670286][ C1] __update_page_owner_free_handle+0x3e2/0x470 [ 946.670308][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 946.670333][ C1] __reset_page_owner+0x85/0x1f0 [ 946.670354][ C1] __free_frozen_pages+0xc6e/0xe50 [ 946.670384][ C1] vfree+0x1a6/0x330 [ 946.670408][ C1] ? __pfx_kcov_close+0x10/0x10 [ 946.670425][ C1] kcov_close+0x28/0x50 [ 946.670442][ C1] __fput+0x44c/0xa70 [ 946.670472][ C1] task_work_run+0x1d1/0x260 [ 946.670491][ C1] ? __pfx_task_work_run+0x10/0x10 [ 946.670510][ C1] ? kmem_cache_free+0x18f/0x400 [ 946.670534][ C1] do_exit+0x8d1/0x2550 [ 946.670549][ C1] ? __lock_acquire+0xab9/0xd20 [ 946.670572][ C1] ? do_raw_spin_lock+0x121/0x290 [ 946.670598][ C1] ? __pfx_do_exit+0x10/0x10 [ 946.670613][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 946.670647][ C1] do_group_exit+0x21c/0x2d0 [ 946.670663][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 946.670683][ C1] get_signal+0x1286/0x1340 [ 946.670714][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 946.670733][ C1] ? percpu_ref_put+0x188/0x230 [ 946.670756][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 946.670774][ C1] ? __se_sys_io_submit+0x201/0x2f0 [ 946.670801][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 946.670822][ C1] exit_to_user_mode_loop+0x75/0x110 [ 946.670841][ C1] do_syscall_64+0x2bd/0x3b0 [ 946.670860][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 946.670877][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.670895][ C1] ? clear_bhb_loop+0x60/0xb0 [ 946.670915][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.670932][ C1] RIP: 0033:0x7f2573d8e969 [ 946.670946][ C1] Code: Unable to access opcode bytes at 0x7f2573d8e93f. [ 946.670955][ C1] RSP: 002b:00007f2571bf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 946.670972][ C1] RAX: 0000000000000001 RBX: 00007f2573fb5fa0 RCX: 00007f2573d8e969 [ 946.670984][ C1] RDX: 00002000000008c0 RSI: 0000000000000003 RDI: 00007f2574b0a000 [ 946.670996][ C1] RBP: 00007f2573e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 946.671007][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 946.671018][ C1] R13: 0000000000000000 R14: 00007f2573fb5fa0 R15: 00007f25740dfa28 [ 946.671038][ C1] [ 946.673446][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 947.042359][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 947.053825][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 947.063887][ T31] Call Trace: [ 947.067173][ T31] [ 947.070114][ T31] dump_stack_lvl+0x99/0x250 [ 947.074725][ T31] ? __asan_memcpy+0x40/0x70 [ 947.079317][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 947.084529][ T31] ? __pfx__printk+0x10/0x10 [ 947.089140][ T31] panic+0x2db/0x790 [ 947.093056][ T31] ? __pfx_panic+0x10/0x10 [ 947.097495][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 947.103335][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 947.108721][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 947.114893][ T31] watchdog+0x102d/0x1030 [ 947.119228][ T31] ? watchdog+0x1de/0x1030 [ 947.123695][ T31] kthread+0x70e/0x8a0 [ 947.127784][ T31] ? __pfx_watchdog+0x10/0x10 [ 947.132472][ T31] ? __pfx_kthread+0x10/0x10 [ 947.137078][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 947.142290][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 947.147492][ T31] ? __pfx_kthread+0x10/0x10 [ 947.152123][ T31] ret_from_fork+0x3fc/0x770 [ 947.156729][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 947.161852][ T31] ? __switch_to_asm+0x39/0x70 [ 947.166633][ T31] ? __switch_to_asm+0x33/0x70 [ 947.171398][ T31] ? __pfx_kthread+0x10/0x10 [ 947.176006][ T31] ret_from_fork_asm+0x1a/0x30 [ 947.180806][ T31] [ 947.184150][ T31] Kernel Offset: disabled [ 947.188475][ T31] Rebooting in 86400 seconds..