last executing test programs: 3m6.734430329s ago: executing program 2 (id=17): r0 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) syz_io_uring_submit(0x0, 0x0, 0x0) rt_sigsuspend(0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) unshare(0x8020480) lseek(0xffffffffffffffff, 0xfffffffffffffffe, 0x0) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3900, 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000400)) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 3m4.446774555s ago: executing program 2 (id=22): r0 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x2119, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x16, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) readv(r4, &(0x7f0000000600)=[{&(0x7f0000000380)=""/43, 0x2b}], 0x1) 3m3.488584257s ago: executing program 2 (id=25): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000980)={0x0, 0x3}, &(0x7f00000009c0)=0x8) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000a00)={0x2, 'bridge_slave_1\x00', 0x1}, 0x18) 3m3.301579259s ago: executing program 2 (id=27): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000780)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff02000000000000000000000000000100"/118], 0x210) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x9a, &(0x7f00000004c0)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x64, 0x11, 0x0, @private1, @mcast2, {[@routing={0x21, 0xa, 0x2, 0x0, 0x0, [@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}]}], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, &(0x7f0000000140)={0x7f, {{0x29, 0x0, 0x2000000, @mcast1, 0x200d45}}}, 0x88) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40d4}, 0x400c044) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@delqdisc={0x134, 0x25, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xf, 0x2}, {0x5, 0xffe0}, {0x4, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}, @TCA_RATE={0x6, 0x5, {0x3, 0xa}}, @TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7, 0x9, 0x6, 0x1, 0x8a, 0x4, 0x7}}, {0x12, 0x2, [0x9f9a, 0x9, 0x2, 0x4, 0xff, 0x400, 0x7]}}, {{0x1c, 0x1, {0x2, 0xe, 0x5, 0x2, 0x0, 0x1, 0x56c, 0x1}}, {0x6, 0x2, [0x22a]}}, {{0x1c, 0x1, {0xc, 0x2, 0xf, 0x0, 0x2, 0xffffffff, 0xff, 0x1}}, {0x6, 0x2, [0x5]}}]}, @qdisc_kind_options=@q_htb={{0x8}, {0x74, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xd5, 0x77}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xdcc, 0x8}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x4}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8001}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x466, 0x7}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x134}}, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x1, {0x2, 0x1, 0x4}, 0x2}, 0x18) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r10, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x20000000) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000405007000ffe06be857000000240e2b5d92e454ff4b2828"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 3m3.010662775s ago: executing program 2 (id=29): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x5, 0x7, 0x7, 0x0, 0x2}, 0x14) sigaltstack(0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0xffffffffffffffe9, 0x6, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x44050) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/wireless\x00') preadv(r5, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/205, 0xcd}], 0x1, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c0}, 0x8000) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r2, 0x5421, 0x0) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000080)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffda6, 0x22, 0x8, 0x0, 0x0}}, 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x9) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x300, 0x2e8, 0x2e8, 0x300, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xd8, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYRES16=r0], 0x130}}, 0x0) 2m59.390187385s ago: executing program 2 (id=40): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000001b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000007080)=[{{&(0x7f0000000a80)={0x2, 0x4e24, @multicast2}, 0x10, 0x0}}, {{&(0x7f0000000b80)={0x2, 0x4e24, @multicast2}, 0x10, 0x0}}], 0x2, 0x20000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x458, 0x153, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0xf0, 0x0, [{{0x9, 0x4, 0x0, 0x76, 0x1, 0x3, 0x1, 0x3, 0xf7, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x2ec}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x5, 0x9}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x39, 0x7f, 0x5, 0x20, 0x4}, 0x4d, &(0x7f0000000240)={0x5, 0xf, 0x4d, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x81, 0x2, 0x1, 0x8ef3, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x5, 0x2, 0x5}, @wireless={0xb, 0x10, 0x1, 0x4, 0x12, 0x0, 0x0, 0x1, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "acc6324dada9cd0255e27f79bb4143eb"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "46fb4a46aad69e7bc9284de965a264bc"}]}, 0x2, [{0xb5, &(0x7f00000002c0)=@string={0xb5, 0x3, "62cad6515e499b1624bb76e2e439598e77888870b4647a5ad8883520f89e71a4def65e610d23770c12a614dfaa9e205afdc8548e2315d7dd9cea9e39960a1c87112ac4096be614e0bbe269d578d4bb0d6512021943696c14b48fbbf6ab34f086442ab4336aac830fa8dae3e401231a44b58b75762a50bfff026b3c8ea92340b8d2cb3139e305ef85eac6f493c33b352e656cad96b0ef90f9f55a99d9dae683be1627c87b07e71056753450c7c3443c53e6fecc"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2809}}]}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x10, 0x0, 0x5e50, 0x2, &(0x7f0000000400)="353ef7c60af273e12810cb4a82e42ea688aac53cada899f60025be0173ec4a2a99d0fa569c16ac740a7bc87d285382264822e7fd4b012ad3fc2b7f9ca7088d372f00cc0b3e58a7e613f637856fe1569e578539f9b8b3921fbf1447a2cbd1d174756bfdbd90aca84c77d9cbd8483bfa4551628704364140f3d041e1df5485591c3b2a8a912ed155f57cb2acc93b901d5d92f214b9443d009253e9ca562ef48e9485ab5a5b", 0x5, 0x0, 0x1}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 2m44.217287879s ago: executing program 32 (id=40): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000001b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000007080)=[{{&(0x7f0000000a80)={0x2, 0x4e24, @multicast2}, 0x10, 0x0}}, {{&(0x7f0000000b80)={0x2, 0x4e24, @multicast2}, 0x10, 0x0}}], 0x2, 0x20000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x458, 0x153, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0xf0, 0x0, [{{0x9, 0x4, 0x0, 0x76, 0x1, 0x3, 0x1, 0x3, 0xf7, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x2ec}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x5, 0x9}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x39, 0x7f, 0x5, 0x20, 0x4}, 0x4d, &(0x7f0000000240)={0x5, 0xf, 0x4d, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x81, 0x2, 0x1, 0x8ef3, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x5, 0x2, 0x5}, @wireless={0xb, 0x10, 0x1, 0x4, 0x12, 0x0, 0x0, 0x1, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "acc6324dada9cd0255e27f79bb4143eb"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "46fb4a46aad69e7bc9284de965a264bc"}]}, 0x2, [{0xb5, &(0x7f00000002c0)=@string={0xb5, 0x3, "62cad6515e499b1624bb76e2e439598e77888870b4647a5ad8883520f89e71a4def65e610d23770c12a614dfaa9e205afdc8548e2315d7dd9cea9e39960a1c87112ac4096be614e0bbe269d578d4bb0d6512021943696c14b48fbbf6ab34f086442ab4336aac830fa8dae3e401231a44b58b75762a50bfff026b3c8ea92340b8d2cb3139e305ef85eac6f493c33b352e656cad96b0ef90f9f55a99d9dae683be1627c87b07e71056753450c7c3443c53e6fecc"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2809}}]}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x10, 0x0, 0x5e50, 0x2, &(0x7f0000000400)="353ef7c60af273e12810cb4a82e42ea688aac53cada899f60025be0173ec4a2a99d0fa569c16ac740a7bc87d285382264822e7fd4b012ad3fc2b7f9ca7088d372f00cc0b3e58a7e613f637856fe1569e578539f9b8b3921fbf1447a2cbd1d174756bfdbd90aca84c77d9cbd8483bfa4551628704364140f3d041e1df5485591c3b2a8a912ed155f57cb2acc93b901d5d92f214b9443d009253e9ca562ef48e9485ab5a5b", 0x5, 0x0, 0x1}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 13.929029377s ago: executing program 5 (id=635): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x377b, &(0x7f0000000140)={0x0, 0x516f, 0x2, 0x2, 0x23f}) bind$unix(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1f, 0x0, 0x7, 0x3c, 0x18001, 0xffffffffffffffff, 0xffff0000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5, 0x0, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x2, 0x4000007, 0x7, 0xb062765f569b903d, r4, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x1, @value, @void, @value}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000540)) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000030000200900"], 0xb0}}, 0x0) 11.044123594s ago: executing program 3 (id=647): write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) setsockopt$sock_int(r0, 0x1, 0x21, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x4102, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) 10.680833129s ago: executing program 3 (id=649): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x2d2, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008b216740420709204661010203010902c002010000000009047500efd08de70009054e"], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[], 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00'}) socket$pppoe(0x18, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r6, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) 9.833779991s ago: executing program 5 (id=656): setrlimit(0x40000000000008, &(0x7f0000000000)) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) 8.808000048s ago: executing program 5 (id=659): syz_usb_connect(0x1, 0x24, &(0x7f0000000980)=ANY=[@ANYRES64=0x0], 0x0) (async) r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000980)=ANY=[@ANYRES64=0x0], 0x0) memfd_create(&(0x7f0000000280)='%\x00', 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x4000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a58000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002c0004802800018007000100637400001c0002800800014000000013080002400000000e050003"], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e26, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x2}, 0x1c) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f00000000c0)={0x14, 0x5, 0xd}) (async) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f00000000c0)={0x14, 0x5, 0xd}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008102"]) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000004000000100004000"]) io_setup(0xfb, &(0x7f0000000140)=0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r10, 0x400454c9, 0xba98575a95aeb70d) (async) ioctl$TUNSETOFFLOAD(r10, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r10, 0x400454cd, 0x337) (async) ioctl$TUNSETLINK(r10, 0x400454cd, 0x337) io_submit(r8, 0x1, &(0x7f00000004c0)=[&(0x7f0000000340)={0x2000000, 0x0, 0x0, 0x0, 0x0, r9, &(0x7f0000000200)="13", 0xfffffdfc}]) syz_open_dev$radio(0xfffffffffffffffc, 0x1, 0x2) r11 = socket$can_bcm(0x1d, 0x2, 0x2) preadv2(r11, &(0x7f0000000340)=[{&(0x7f0000000180)=""/147, 0x93}], 0x1, 0x20, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) (async) r12 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r12, &(0x7f0000000280)={&(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0}, 0x4c800) (async) sendmsg$kcm(r12, &(0x7f0000000280)={&(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0}, 0x4c800) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="00000100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.370791742s ago: executing program 3 (id=661): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f0000000100)}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000040)='./file0\x00', 0x200) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) socket$caif_stream(0x25, 0x1, 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r6 = dup(r5) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000000)={"1b00", 0x3, 0x5, 0x2, 0x800, 0x0, "0400", '\x00', "0300", "e8cc1304", ["8bada11e96411000", "ab5286400000000000001000", "000000ff0000000000000020", "0000000000000000001000"]}) sendmmsg$unix(r7, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)}, {&(0x7f0000000100)="d5", 0x1}], 0x2}}], 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)) 7.073641109s ago: executing program 0 (id=662): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) readahead(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6a27b19d", @ANYRES16=r2, @ANYBLOB="010029bd7000000000006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600501400000800b70099000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050427a57000fedbdf250300000008000100", @ANYRES32=r7], 0x60}}, 0x44084) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000380)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xee01, 0x0}}, './file0\x00'}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x40080, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x800}}], [{@fsuuid={'fsuuid', 0x3d, {[0x61, 0x66, 0x1, 0x66, 0x36, 0x36, 0x35, 0x38], 0x2d, [0x61, 0x32, 0x35], 0x2d, [0x37, 0x63, 0x31, 0x9c3dc1def0aba29a], 0x2d, [0x66, 0x30, 0x64, 0x30], 0x2d, [0x33, 0x64, 0x37, 0x65, 0x35, 0x65, 0x34, 0x32]}}}]}}) 6.717457327s ago: executing program 0 (id=664): msgctl$IPC_RMID(0x0, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) 6.429315555s ago: executing program 0 (id=666): r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "76510000008000", "07f217bd2e511e465bbbd5de32b495b2f9044677d4d588360663af84db44be59", "9bba8c07", "f37f20e2ff799aae"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0'}, 0xfc94) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipmr_newroute={0x1c, 0x18, 0x1, 0x70bd2b, 0x25dfdbfc, {0x80, 0x80, 0x4, 0x5, 0xfd, 0x1, 0xfd, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') openat2(r4, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000640)={0x100, 0x0, 0x8}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x1a, 0x0, 0x0, @u32=0xfac0c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10c}, 0x20000000) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x1, 0x0, 0x3008, 0x8, 0xd, 0x2, 0x2, 0x6}}) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) socketpair(0x8, 0xa, 0x42, &(0x7f0000000040)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmmsg(r7, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 6.165960479s ago: executing program 5 (id=669): setrlimit(0x40000000000008, &(0x7f0000000000)) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) 6.054658109s ago: executing program 0 (id=670): syz_usb_connect(0x0, 0x8a, &(0x7f0000000d80)=ANY=[@ANYBLOB="1201000074a19a083328010206d8010203010902"], 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x3, {0x0, 0x0, 0x2}, 0xff}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x0, 0xff, 0x4}}, 0x18) sendmmsg$inet(r0, &(0x7f0000004980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000010) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x9, 0xc, 0x4, 0x6, 0x5d0bef1f, 0x400, 0x5, 0x837, 0xffffffff, 0x9fec, 0x401, 0x2000068, 0x7, 0xdd64, 0x1, 0x8, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0xffff, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x9, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x4, 0x267, 0x1, 0x0, 0x81, 0xff, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x8, 0x7ff, 0x44, 0x2, 0x9, 0x800, 0x3, 0x8, 0x0, 0x8e5e00, 0x922e, 0x0, 0x8, 0x2, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x1, 0x1, 0x2, 0x5, 0x0, 0xb, 0x6, 0x0, 0x3365, 0xa82f, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0xc, 0x81, 0x111, 0x7, 0x5c20, 0x7b, 0x0, 0xe, 0x4, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90a, 0xff, 0x2, 0x7, 0xd, 0xc7, 0x0, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0xd, 0x4, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0xe56d, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x9, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x10000, 0x81, 0x2, 0xffff6c4b, 0x1, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x3, 0x603c, 0x80000004, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x4, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x8a, 0x10, 0x4, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0x0, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0xa2, 0x3, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x20002, 0x5, 0x1, 0x2, 0xfff, {0x5, 0x0, 0x9c, 0xf9e, 0xfff, 0x7}, {0xf8, 0x2, 0x0, 0x4, 0x6fb}, 0x6, 0x3}}]}]}}]}, 0x478}}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x880) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05640, &(0x7f0000000180)={0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0xa, [{}, {}, {}, {}, {0x0, 0x2}], 0x8, 0x0, 0x8}}) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x4}, 0x4}}, 0x0, 0x0, 0x29, 0x0, "ee8b0e650926a96ecc13ae3cf053651960388bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xfffffffffffffe1d) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x4e21, 0x0, @mcast1, 0x10}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x19, &(0x7f0000000540)=0x8, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 5.673447485s ago: executing program 1 (id=671): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x80800) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f00000011c0)={0x25, 0x3, 0x0, {0x6, 0x4, 0x0, 'gtp\x00'}}, 0x25) sendmsg$nl_netfilter(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[], 0xffffff70}, 0x1, 0x0, 0x0, 0x200050c0}, 0x4000000) r4 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) connect$inet(r4, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r4, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x1, 0x401eb86) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000001200), r1) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24004481}, 0x4000) set_mempolicy(0x0, &(0x7f0000000080)=0x5, 0x40000000f) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_open_dev$mouse(&(0x7f0000001040), 0x2, 0x490000) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x0, 0x0) write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001002f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000160500030000000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a0edd8de27fb47a39cae8ed0e83c2e4a95b6c0c87e0564d12b8aa294f15c98f4059e8073b6c11af0a007bfd01f2fca4441f098e45b0041b635f683817fec707d512bf7264915d"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xb}, 0x1c) 5.105575687s ago: executing program 5 (id=672): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYRESOCT=r5], 0x97c}, 0x1, 0x0, 0x0, 0x40800}, 0x4010) preadv(r4, &(0x7f0000000780)=[{&(0x7f0000000180)=""/2, 0x2}], 0x1, 0xfffffffd, 0x7) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000100)=""/200, 0xc8}, {0x0}, {0x0}, {&(0x7f0000001240)=""/167, 0xa7}], 0x4, 0x1000, 0x3f2f0fde) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0xfffffffe}) shutdown(r1, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/109, 0x6d}, {&(0x7f00000001c0)=""/120, 0x78}, {&(0x7f00000014c0)=""/4085, 0xff5}, {&(0x7f0000001140)=""/79, 0x4f}, {&(0x7f00000036c0)=""/4061, 0xfdd}, {&(0x7f0000009f40)=""/121, 0x79}], 0x6}, 0x2) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001940)={0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="00121a0000001b781449ff8b1784848afab32e46ca2065f369e96725e203e1ae"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000200)={0x20, 0xd, 0xe8, {0xe8, 0x21, "02c9287db65aaa7e862b56e7ae2a67ac49cd45727bf7eba952e7ce5440c3a3d98e062f0679fbf987cf80861e0f96fdc3fa9f23ee52a9638f8a978854a2cb09a088663d93970c26cdfc00afc6865dd285d314802aab15a83d1d3e59b7dbfbb3c2b435362f5c6d2498642921a4f57162469e1107c9be039c068810a47dbfb4dcbc91b38f93e6baab530d0765b874205315c4cc4bc55b741008176195f756119b6abc4ca6cf9a93c55fbfa00f76b7b0e2e263247b5bdb4abbf9dcb0f3d06954b939371b7e7a1092831f141ea8e8166da5a0a13e31041098075ca8cd44dfb03214b7a3c94a047f97"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}}, &(0x7f0000000600)={0x44, &(0x7f0000000140)={0x20, 0x8, 0x21, "fc4437caf39e555b86e2f3efb0520f4d1a70fbf092bc40e395880e6849251b5e29"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3a}, &(0x7f0000000380)={0x20, 0x81, 0x1, '('}, &(0x7f00000003c0)={0x20, 0x82, 0x1, 'j'}, &(0x7f00000004c0)={0x20, 0x83, 0x1, "9b"}, &(0x7f0000000500)=ANY=[@ANYBLOB="20846c1700008828f7"], &(0x7f0000000540)={0x20, 0x85, 0x3, "733d9a"}}) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000001c0)={0x20, 0xc, 0x2e, "1aa8254cc2d8e71cc3178fe0b7a8e913374d119a399a07b0be6b859419fca29d5b7221a141db08f843ce0ac83bef"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') lseek(r8, 0xfffffffffffffffe, 0x0) read$FUSE(r8, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 4.846428892s ago: executing program 1 (id=673): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x200, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x45}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x14004841) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=r3], 0x1000f) 4.454901035s ago: executing program 1 (id=674): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000100)=0x811f, 0x4) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x1e) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000440)=@broute={'broute\x00', 0x20, 0x2, 0x166, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x9, 0x8, 0x8917, 'veth1_to_batadv\x00', 'syzkaller0\x00', 'veth1_macvtap\x00', 'veth0_to_team\x00', @multicast, [0xff, 0x0, 0x0, 0xff, 0xff], @random="b5d5764bf1e3", [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x9e, 0xd6, [], [@common=@STANDARD={'\x00', 0x8}], @common=@dnat={'dnat\x00', 0x10, {{@remote, 0x10}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1de) connect$pptp(r4, &(0x7f00000001c0)={0x18, 0x2, {0x3, @loopback}}, 0x1e) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) read$dsp(r2, &(0x7f0000000000)=""/40, 0x28) 4.31184892s ago: executing program 3 (id=676): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa02, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) (fail_nth: 14) 3.936193396s ago: executing program 3 (id=677): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)}], 0x1}}], 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xfffffffffffffea8, &(0x7f0000000780)=ANY=[]) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './bus'}, 0x9) copy_file_range(r2, &(0x7f00000008c0)=0x4, r0, 0x0, 0x8, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x82100, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = fanotify_init(0x200, 0x0) r5 = memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x96k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xeb\xaf\xaa\xee\'t\xbe\x9b\rln\x7f\xab\x8d\xac\x06\x00\x00\x00\x00\x00\x00\x00\x9bY\xd9\xd4\xc6A\x84\x9d\\\xc4\x0e\xf4\bO\x80\xaa\r\b\xc0\xb9\x84\xd0,\'\xc5p\xb6 \x03\x12\xca\xef\x02f\xa2\x9d\x96\xa7{\x9d\xf0\xe2,T\x13\xc4W*\xd5\xeaX\x8c\xb3\x81\r=\"\xe1\xf2\xc9^\x90\xc1\xaa\xb6\xb8\xad\x04\x13\xe7\x04\x1b5qMnI-\xeaA\x1a\xd9-%!\x0f\ab\x1e\xab\a\xe4\xd4E\xf9\x8f\xd2\x05\xfd\xa7I\xf9#8\xf6bc\x1bl\xb2\xcb\xf9rc)&\x1d\xce\x970\x01\xbb\xcb@\xd8Y\xb9\x93=7\f9\xe5`\xb3\xf3=;\xe3E[\x12?\xe2n\xd0\x05\x98\x1c6F;fp\xce\xcfH\xaf\x93\x1e\x8e\x88\xfdx\xd9\x03,B\xd1L:\xaf!\x81\x03\x18\xa1\xf3\x87\x18\x83\xc0\x7fJ+\xe0N\xa8>7}a\x91y\x19\x13\xf6\xee.j\xdbh\x00&$\xf8e\x01\xa6\x0e\a\xcf\xaeq\xae\xbc\x94\x88eidE\xf9\xb9\xaa\x14U\t\xf4\xe27\xf9\xf5\xb2/\xa3\xafX\xd1\xf3v\x85z\x1b?)\f\xf8>\xa7C\xdfW\x80\xc5\xed\xbbPM\x9b\x1b*\'O\x7f@%Q\x8c\x98\x7f\xffd\xc2VY\xf4\x9b\xf3\x80\xed\x13m\x15\x86\x9d\xa1\xa8\xae\xa9fsLp\x1f.\x11\x83K\x18k\xf4\x8e\xc6>B!\xca\xe4\xd4\x1f\xe0F\x01\b\xb2\x0fK\x8e\xfbv\x00Yh<\xd0\x85\xcbn\x17\x9a\x8b\xa4\x04p\xe1\xfd\xf1\xb9\xf2\x94\x81\xe5v\xf6\x8dY\xd9\r_\xe4\x00\xfcb\xff=\x9fQC\xcf\x8c\x97\xd1@\xeem\x992U\x01\xb5\x15\x00\xfa\x11\xa1\xfc\xe4\xc8\v\x90\xbf\x1f\x11\xc4t\x91Z\xbb[\xe0?\xa6pV\xa3\xba\xbe\xde\xda\xb3~&~]', 0x2) r6 = dup(r5) write$vhost_msg(r6, &(0x7f0000000200)={0x1, {0x0, 0x0, 0x0, 0x1, 0x4}}, 0x48) fanotify_mark(r4, 0x1, 0x40000010, r6, 0x0) execveat(r6, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 3.701567903s ago: executing program 4 (id=678): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f0000000280), 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000001fc0)=ANY=[@ANYBLOB="4500000006000000009c00000000"], 0x45) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x0, 0x100, 0x12345}) r2 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x21, 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) socket$xdp(0x2c, 0x3, 0x0) 3.389770611s ago: executing program 4 (id=679): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1a00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x800, 0x0, {0xa, 0x0, 0x1c, 0x2, 0xfd, 0x0, 0x0, 0x0, 0x2200}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_int(r0, &(0x7f0000000000)='memory.low\x00', 0x2, 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES16=r0], 0x21c}}, 0x0) 2.779716226s ago: executing program 4 (id=680): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x1401c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x200, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x45}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x20000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x101ff, 0x2, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r8 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.668394826s ago: executing program 0 (id=681): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 2.585642531s ago: executing program 1 (id=682): setrlimit(0x40000000000008, &(0x7f0000000000)) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) 1.947570475s ago: executing program 3 (id=683): r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, 0x0, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x46e8}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket$inet_sctp(0x2, 0x0, 0x84) faccessat2(r0, 0x0, 0x2, 0x1100) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x102, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_usb_connect(0x3, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12017c00022f8b881063071110e1a5010203010902340001fa02007f0904cb8002ff633d8009050204ff0304b10e080b25bbf1def7fa19090504030804010106080b50023a795d"], 0x0) 1.630308106s ago: executing program 4 (id=684): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x50) (async, rerun: 64) r0 = epoll_create1(0x0) (rerun: 64) r1 = epoll_create1(0x0) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) epoll_pwait(r0, &(0x7f0000000280)=[{}], 0x1, 0x35f, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) 1.453831973s ago: executing program 1 (id=685): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001200)="a912", 0x2}], 0x1}, 0x20000801) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x40002002) 1.04849473s ago: executing program 4 (id=686): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) unshare(0x2040400) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f02ebbee8, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) 243.957284ms ago: executing program 1 (id=687): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) syz_pidfd_open(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x40, 0xe, 0x3a, "e5ed2fca4e9ef7d3aaab66d8fe312e1cf5090515196acd04bec50edea733402b115954b5727f55431ae42877f367ce6d6149446e43c43a59dc2e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) getdents64(r0, &(0x7f00000000c0)=""/4096, 0x1000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48040}, 0x200080c0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x20, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}, @typed={0x4, 0x1d}]}, 0x20}, 0x1, 0x0, 0x0, 0x404000d}, 0x20000000) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r5, 0x81204101, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180ffffff86dd6000008000641100fe8000000008000000000000000000bbff02000000000000000000000000000100006322004d90"], 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000095}, 0x4009) 157.540416ms ago: executing program 5 (id=688): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) syz_pidfd_open(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x40, 0xe, 0x3a, "e5ed2fca4e9ef7d3aaab66d8fe312e1cf5090515196acd04bec50edea733402b115954b5727f55431ae42877f367ce6d6149446e43c43a59dc2e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) getdents64(r0, &(0x7f00000000c0)=""/4096, 0x1000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48040}, 0x200080c0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x20, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}, @typed={0x4, 0x1d}]}, 0x20}, 0x1, 0x0, 0x0, 0x404000d}, 0x20000000) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x81204101, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180ffffff86dd6000008000641100fe8000000008000000000000000000bbff02000000000000000000000000000100006322004d90"], 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000095}, 0x4009) 156.677215ms ago: executing program 4 (id=689): r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "76510000008000", "07f217bd2e511e465bbbd5de32b495b2f9044677d4d588360663af84db44be59", "9bba8c07", "f37f20e2ff799aae"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0'}, 0xfc94) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipmr_newroute={0x1c, 0x18, 0x1, 0x70bd2b, 0x25dfdbfc, {0x80, 0x80, 0x4, 0x5, 0xfd, 0x1, 0xfd, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') openat2(r4, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000640)={0x100, 0x0, 0x8}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x1a, 0x0, 0x0, @u32=0xfac0c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10c}, 0x20000000) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x1, 0x0, 0x3008, 0x8, 0xd, 0x2, 0x2, 0x6}}) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) socketpair(0x8, 0xa, 0x42, &(0x7f0000000040)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmmsg(r7, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 0s ago: executing program 0 (id=690): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x1f66, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, @in6={0xa, 0x1, 0xfffffffc, @remote, 0x5b1}, @in6={0xa, 0x4e23, 0x4, @mcast1, 0xb}], 0x54) kernel console output (not intermixed with test programs): 164.497906][ T10] ftdi_sio ttyUSB0: unknown device type: 0x9011 [ 164.531423][ T10] usb 6-1: USB disconnect, device number 7 [ 164.554004][ T10] ftdi_sio 6-1:0.163: device disconnected [ 164.649599][ T6848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.714797][ T6848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.027448][ T5838] ftdi_sio 1-1:0.163: FTDI USB Serial Device converter detected [ 165.046868][ T5838] ftdi_sio ttyUSB0: unknown device type: 0x9011 [ 165.097634][ T5838] usb 1-1: USB disconnect, device number 14 [ 165.148600][ T5838] ftdi_sio 1-1:0.163: device disconnected [ 165.768482][ T6893] netlink: 28 bytes leftover after parsing attributes in process `syz.4.251'. [ 166.640917][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.255'. [ 166.678706][ T6904] netlink: 'syz.1.254': attribute type 29 has an invalid length. [ 167.377933][ T6918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.258'. [ 167.532078][ T6922] input: syz0 as /devices/virtual/input/input11 [ 167.750394][ T53] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 168.039870][ T6926] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 168.314300][ T53] usb 5-1: config 0 has an invalid interface number: 163 but max is 0 [ 168.346084][ T53] usb 5-1: config 0 has no interface number 0 [ 168.379674][ T53] usb 5-1: config 0 interface 163 altsetting 0 endpoint 0x1 has invalid maxpacket 560, setting to 64 [ 168.455519][ T53] usb 5-1: config 0 interface 163 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 168.486472][ T53] usb 5-1: config 0 interface 163 altsetting 0 endpoint 0xC has invalid maxpacket 463, setting to 64 [ 168.552682][ T53] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=90.11 [ 168.576437][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.615055][ T53] usb 5-1: Product: syz [ 168.638340][ T53] usb 5-1: Manufacturer: syz [ 168.645477][ T53] usb 5-1: SerialNumber: syz [ 168.686360][ T53] usb 5-1: config 0 descriptor?? [ 168.696600][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.263'. [ 168.915224][ T6919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.924739][ T6919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.006534][ T53] ftdi_sio 5-1:0.163: FTDI USB Serial Device converter detected [ 169.055349][ T53] ftdi_sio ttyUSB0: unknown device type: 0x9011 [ 169.115046][ T53] usb 5-1: USB disconnect, device number 12 [ 169.144864][ T53] ftdi_sio 5-1:0.163: device disconnected [ 169.156697][ T5838] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 169.250380][ T6926] netlink: 156 bytes leftover after parsing attributes in process `ôª\k[sC®Ö˜›Y [ 169.250380][ T6926] I}'. [ 169.447636][ T5838] usb 6-1: Using ep0 maxpacket: 32 [ 169.473512][ T5838] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 169.495513][ T5838] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 169.560787][ T5838] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 169.606588][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 169.634879][ T5838] usb 6-1: config 1 has no interface number 0 [ 169.641919][ T5838] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 169.672383][ T5838] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 169.689177][ T5838] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 169.709091][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.729797][ T5838] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 169.756649][ T6941] loop6: detected capacity change from 0 to 16384 [ 169.798952][ T10] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 169.808573][ T10] usb 1-1: config 0 has no interface number 0 [ 169.825129][ T10] usb 1-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 169.846114][ T6941] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 169.896243][ T10] usb 1-1: config 0 interface 109 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.906841][ T6941] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 169.940761][ T5838] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 169.952259][ T10] usb 1-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 169.971690][ T10] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 170.011413][ T10] usb 1-1: Manufacturer: syz [ 170.033526][ T10] usb 1-1: config 0 descriptor?? [ 170.070534][ T10] cxacru 1-1:0.109: cxacru_bind: interface has incorrect endpoints [ 170.113715][ T10] cxacru 1-1:0.109: usbatm_usb_probe: bind failed: -19! [ 170.274212][ T5838] usb 1-1: USB disconnect, device number 15 [ 170.360077][ T10] usb 6-1: USB disconnect, device number 8 [ 170.367533][ T10] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 170.849330][ T6953] xt_hashlimit: max too large, truncated to 1048576 [ 170.938565][ T6953] No such timeout policy "syz1" [ 171.049705][ T30] audit: type=1326 audit(1743469056.726:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6effb8d169 code=0x7ffc0000 [ 171.320728][ T30] audit: type=1326 audit(1743469056.726:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6effb8d169 code=0x7ffc0000 [ 171.384311][ T30] audit: type=1326 audit(1743469056.756:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6effb8d169 code=0x7ffc0000 [ 171.413556][ T30] audit: type=1326 audit(1743469056.766:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6effb8d169 code=0x7ffc0000 [ 171.541540][ T30] audit: type=1326 audit(1743469056.776:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6effb8d169 code=0x7ffc0000 [ 171.759802][ T30] audit: type=1326 audit(1743469056.776:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6effb8d169 code=0x7ffc0000 [ 171.974247][ T30] audit: type=1326 audit(1743469056.776:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6effb8d169 code=0x7ffc0000 [ 172.051355][ T30] audit: type=1326 audit(1743469056.776:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6effb8d169 code=0x7ffc0000 [ 172.151983][ T30] audit: type=1326 audit(1743469056.776:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6effb8d169 code=0x7ffc0000 [ 172.351546][ T30] audit: type=1326 audit(1743469056.776:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6effb8d169 code=0x7ffc0000 [ 172.476350][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 172.671300][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 172.728028][ T10] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 172.760931][ T5838] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 172.779014][ T10] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 172.798434][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 172.834627][ T10] usb 4-1: config 1 has no interface number 0 [ 172.844761][ T10] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 172.857634][ T53] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 172.870602][ T10] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 172.940475][ T10] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 172.960393][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.968715][ T5838] usb 2-1: Using ep0 maxpacket: 16 [ 173.001532][ T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 173.012767][ T5838] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 173.021598][ T5838] usb 2-1: config 0 has no interface number 0 [ 173.028520][ T53] usb 5-1: config 0 has an invalid interface number: 163 but max is 0 [ 173.036316][ T5838] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.046122][ T53] usb 5-1: config 0 has no interface number 0 [ 173.074147][ T53] usb 5-1: config 0 interface 163 altsetting 0 endpoint 0x1 has invalid maxpacket 560, setting to 64 [ 173.084642][ T5838] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.127967][ T5838] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 173.150295][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.201014][ T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 173.244872][ T5838] usb 2-1: config 0 descriptor?? [ 173.299875][ T53] usb 5-1: config 0 interface 163 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 173.328264][ T53] usb 5-1: config 0 interface 163 altsetting 0 endpoint 0xC has invalid maxpacket 463, setting to 64 [ 173.352016][ T53] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=90.11 [ 173.365674][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.375310][ T53] usb 5-1: Product: syz [ 173.594191][ T53] usb 5-1: Manufacturer: syz [ 173.611036][ T53] usb 5-1: SerialNumber: syz [ 173.649515][ T53] usb 5-1: config 0 descriptor?? [ 173.882449][ T6981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.897292][ T6981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.989667][ T53] ftdi_sio 5-1:0.163: FTDI USB Serial Device converter detected [ 174.005573][ T53] ftdi_sio ttyUSB0: unknown device type: 0x9011 [ 174.012960][ T6986] loop6: detected capacity change from 0 to 16384 [ 174.051851][ T53] usb 5-1: USB disconnect, device number 13 [ 174.221196][ T6987] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 174.231222][ T6987] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 174.278644][ T10] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 174.434965][ T5899] usb 4-1: USB disconnect, device number 10 [ 174.442143][ T5899] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 174.542410][ T53] ftdi_sio 5-1:0.163: device disconnected [ 175.121372][ T6998] ipip0: entered promiscuous mode [ 175.306841][ T53] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 175.488173][ T53] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.546294][ T53] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 175.556252][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.567530][ T53] usb 6-1: config 0 descriptor?? [ 175.579304][ T53] pwc: Askey VC010 type 2 USB webcam detected. [ 175.722366][ T5838] usbhid 2-1:0.1: can't add hid device: -71 [ 175.729659][ T5838] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 175.796138][ T5838] usb 2-1: USB disconnect, device number 17 [ 175.981841][ T53] pwc: recv_control_msg error -32 req 02 val 2b00 [ 175.997594][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.284'. [ 176.037313][ T7000] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 176.046426][ T53] pwc: recv_control_msg error -32 req 02 val 2700 [ 176.063932][ T53] pwc: recv_control_msg error -71 req 02 val 2c00 [ 176.094181][ T53] pwc: recv_control_msg error -71 req 04 val 1000 [ 176.133058][ T53] pwc: recv_control_msg error -71 req 04 val 1300 [ 176.173468][ T53] pwc: recv_control_msg error -71 req 04 val 1400 [ 176.180809][ T53] pwc: recv_control_msg error -71 req 02 val 2000 [ 176.205601][ T53] pwc: recv_control_msg error -71 req 02 val 2100 [ 176.235906][ T53] pwc: recv_control_msg error -71 req 04 val 1500 [ 176.245505][ T53] pwc: recv_control_msg error -71 req 02 val 2500 [ 176.261051][ T53] pwc: recv_control_msg error -71 req 02 val 2400 [ 176.275265][ T53] pwc: recv_control_msg error -71 req 02 val 2600 [ 176.290356][ T53] pwc: recv_control_msg error -71 req 02 val 2900 [ 176.313202][ T53] pwc: recv_control_msg error -71 req 02 val 2800 [ 176.327840][ T53] pwc: recv_control_msg error -71 req 04 val 1100 [ 176.343006][ T53] pwc: recv_control_msg error -71 req 04 val 1200 [ 176.384335][ T53] pwc: Registered as video103. [ 176.419446][ T53] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input12 [ 176.469341][ T53] usb 6-1: USB disconnect, device number 9 [ 176.725651][ T7025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.486713][ T5838] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 177.653854][ T7040] syz.1.292 uses obsolete (PF_INET,SOCK_PACKET) [ 177.677121][ T5838] usb 6-1: config index 0 descriptor too short (expected 8192, got 77) [ 177.742076][ T5838] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.785349][ T5838] usb 6-1: config 0 has no interfaces? [ 177.910365][ T5838] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 177.952079][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.077856][ T5838] usb 6-1: Product: syz [ 178.090553][ T5838] usb 6-1: Manufacturer: syz [ 178.100633][ T5838] usb 6-1: SerialNumber: syz [ 178.127059][ T5838] usb 6-1: config 0 descriptor?? [ 178.210221][ T7042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.269181][ T7055] FAULT_INJECTION: forcing a failure. [ 179.269181][ T7055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.356774][ T7055] CPU: 1 UID: 0 PID: 7055 Comm: syz.0.297 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 179.356805][ T7055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 179.356819][ T7055] Call Trace: [ 179.356827][ T7055] [ 179.356836][ T7055] dump_stack_lvl+0x241/0x360 [ 179.356886][ T7055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.356916][ T7055] ? __pfx__printk+0x10/0x10 [ 179.356967][ T7055] should_fail_ex+0x424/0x570 [ 179.357006][ T7055] _copy_from_user+0x2d/0xb0 [ 179.357036][ T7055] do_seccomp+0x20a/0x1000 [ 179.357069][ T7055] ? __pfx_do_seccomp+0x10/0x10 [ 179.357092][ T7055] ? fput+0x9b/0xd0 [ 179.357117][ T7055] ? ksys_write+0x275/0x2d0 [ 179.357158][ T7055] ? do_syscall_64+0xb6/0x230 [ 179.357182][ T7055] do_syscall_64+0xf3/0x230 [ 179.357202][ T7055] ? clear_bhb_loop+0x45/0xa0 [ 179.357227][ T7055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.357249][ T7055] RIP: 0033:0x7f004058d169 [ 179.357272][ T7055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.357290][ T7055] RSP: 002b:00007f0041409038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 179.357317][ T7055] RAX: ffffffffffffffda RBX: 00007f00407a5fa0 RCX: 00007f004058d169 [ 179.357332][ T7055] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 179.357345][ T7055] RBP: 00007f0041409090 R08: 0000000000000000 R09: 0000000000000000 [ 179.357358][ T7055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.357370][ T7055] R13: 0000000000000001 R14: 00007f00407a5fa0 R15: 00007f00408cfa28 [ 179.357402][ T7055] [ 179.580237][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.298'. [ 180.091718][ T5838] usb 6-1: USB disconnect, device number 10 [ 180.219656][ T53] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 180.644919][ T53] usb 2-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 180.654642][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.694888][ T5921] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 180.774942][ T53] usb 2-1: config 0 descriptor?? [ 180.980943][ T5921] usb 6-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 181.031284][ T5921] usb 6-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.074602][ T5921] usb 6-1: config 1 interface 0 has no altsetting 0 [ 181.275033][ T5921] usb 6-1: New USB device found, idVendor=222a, idProduct=0001, bcdDevice= 0.40 [ 181.339683][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.378107][ T5921] usb 6-1: Product: ã°”ç“飜䙃횉î…á•é»ë›¬ä›‡å‰¥é²¤æ¿«ì¸™ê’¿æžê®¬ã©­ášŸâŽ˜éŠ©åŒ¤å‘›é›… [ 181.408915][ T5921] usb 6-1: Manufacturer: íž»è‘촪礒퇗áªã¼ì–±ë§œé‰‚닄껈僊ê­å•°ï–ƒã¨‘່焖㟎 [ 181.463714][ T7066] fuse: Unknown parameter 'ÿÿ017777777777777777777770000000000000000000001000000000000000000004groò%d' [ 181.483771][ T53] usbhid 2-1:0.0: can't add hid device: -71 [ 181.491146][ T53] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 181.510088][ T5921] usb 6-1: SerialNumber: 鯒⛬ᖇ둷撹㔟꿮诀쮾玾â“騵匔쫵êªç™¤ä£¥é’ƒ [ 181.531304][ T53] usb 2-1: USB disconnect, device number 18 [ 181.558943][ T7074] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 181.608013][ T7074] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 181.856367][ T5921] usbhid 6-1:1.0: can't add hid device: -71 [ 181.874754][ T5921] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 181.897124][ T5921] usb 6-1: USB disconnect, device number 11 [ 182.985025][ T7093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.056053][ T5921] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 183.236075][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 183.245196][ T5921] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 183.270695][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.297913][ T5921] usb 5-1: Product: syz [ 183.312173][ T5921] usb 5-1: Manufacturer: syz [ 183.324708][ T5921] usb 5-1: SerialNumber: syz [ 183.359365][ T5921] visor 5-1:4.0: Sony Clie 3.5 converter detected [ 183.782935][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.311'. [ 183.876430][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 183.876452][ T30] audit: type=1800 audit(1743469069.526:48): pid=7098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.308" name="/" dev="fuse" ino=0 res=0 errno=0 [ 184.657692][ T5838] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 184.716449][ T5897] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 184.846931][ T5838] usb 4-1: Using ep0 maxpacket: 8 [ 184.923109][ T5838] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 184.934649][ T5897] usb 2-1: config 0 has no interfaces? [ 184.954361][ T5838] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.981548][ T5897] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 184.998973][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.029014][ T5897] usb 2-1: Product: syz [ 185.039465][ T5838] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 185.060749][ T5838] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 185.073026][ T5838] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 185.083444][ T5838] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.096566][ T5838] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 185.106567][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.107890][ T5921] usb 5-1: clie_3_5_startup: get config number failed: -71 [ 185.151948][ T5897] usb 2-1: Manufacturer: syz [ 185.171960][ T5897] usb 2-1: SerialNumber: syz [ 185.182126][ T5921] visor 5-1:4.0: probe with driver visor failed with error -71 [ 185.195845][ T5897] usb 2-1: config 0 descriptor?? [ 185.202244][ T5838] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 185.243921][ T5921] usb 5-1: USB disconnect, device number 14 [ 186.754165][ T7122] syz.5.316 (7122): drop_caches: 2 [ 186.984255][ T7118] mmap: syz.0.313 (7118) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 187.577015][ T7138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.634902][ T5921] usb 4-1: USB disconnect, device number 11 [ 187.741500][ T5899] usb 2-1: USB disconnect, device number 19 [ 187.961428][ T7144] openvswitch: netlink: Message has 4 unknown bytes. [ 187.994328][ T7144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.956589][ T5921] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 189.021203][ T7168] veth0_vlan: entered allmulticast mode [ 189.026927][ T1207] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 189.047123][ T7168] veth0_vlan: left promiscuous mode [ 189.063850][ T7168] veth0_vlan: entered promiscuous mode [ 189.166592][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.186206][ T5921] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 189.196342][ T1207] usb 5-1: Using ep0 maxpacket: 32 [ 189.207202][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.210477][ T1207] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 189.241351][ T1207] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 189.251717][ T1207] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 189.287190][ T5921] usb 6-1: config 0 descriptor?? [ 189.303425][ T1207] usb 5-1: config 1 has no interface number 0 [ 189.322144][ T1207] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 189.360624][ T1207] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 189.735684][ T1207] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 189.756125][ T5838] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 189.779131][ T1207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.821432][ T1207] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 189.921866][ T5921] hkems 0003:2006:0118.0004: unknown main item tag 0x3 [ 189.945613][ T5838] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.961839][ T5838] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 189.980665][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.999495][ T5921] hkems 0003:2006:0118.0004: unknown main item tag 0x2 [ 190.020472][ T5838] usb 2-1: config 0 descriptor?? [ 190.027890][ T1207] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 190.045058][ T5921] hkems 0003:2006:0118.0004: unknown main item tag 0x0 [ 190.056495][ T5921] hkems 0003:2006:0118.0004: hidraw0: USB HID v0.01 Device [HID 2006:0118] on usb-dummy_hcd.5-1/input0 [ 190.070135][ T5838] pwc: Askey VC010 type 2 USB webcam detected. [ 190.097335][ T5921] hkems 0003:2006:0118.0004: no inputs found [ 190.136060][ T5921] hkems 0003:2006:0118.0004: force feedback init failed [ 190.470871][ T5838] pwc: recv_control_msg error -32 req 02 val 2b00 [ 190.487436][ T5838] pwc: recv_control_msg error -32 req 02 val 2700 [ 190.508382][ T5838] pwc: recv_control_msg error -32 req 02 val 2c00 [ 190.530339][ T5897] usb 5-1: USB disconnect, device number 15 [ 190.532862][ T5838] pwc: recv_control_msg error -32 req 04 val 1000 [ 190.549464][ T5921] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 190.557435][ T5838] pwc: recv_control_msg error -32 req 04 val 1300 [ 190.564855][ T5838] pwc: recv_control_msg error -32 req 04 val 1400 [ 190.570512][ T5897] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 190.574006][ T5838] pwc: recv_control_msg error -32 req 02 val 2000 [ 190.586559][ T5838] pwc: recv_control_msg error -32 req 02 val 2100 [ 190.612295][ T5838] pwc: recv_control_msg error -32 req 04 val 1500 [ 190.626875][ T5838] pwc: recv_control_msg error -32 req 02 val 2500 [ 190.634161][ T5838] pwc: recv_control_msg error -32 req 02 val 2400 [ 190.647245][ T5838] pwc: recv_control_msg error -32 req 02 val 2600 [ 190.654932][ T5838] pwc: recv_control_msg error -32 req 02 val 2900 [ 190.666814][ T5838] pwc: recv_control_msg error -32 req 02 val 2800 [ 190.692545][ T7177] netlink: 'syz.3.332': attribute type 10 has an invalid length. [ 190.726043][ T5921] usb 1-1: Using ep0 maxpacket: 8 [ 190.748415][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.762542][ T7177] veth0_vlan: left promiscuous mode [ 190.782589][ T5921] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 190.784806][ T7177] veth0_vlan: entered promiscuous mode [ 190.814308][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.818498][ T7177] team0: Device veth0_vlan failed to register rx_handler [ 190.856390][ T5921] usb 1-1: config 0 descriptor?? [ 190.873160][ T5921] usb 1-1: bad CDC descriptors [ 190.881835][ T5838] pwc: recv_control_msg error -71 req 04 val 1200 [ 190.894218][ T5921] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 190.907484][ T5838] pwc: Registered as video103. [ 190.912560][ T5921] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 190.925041][ T5921] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 190.972468][ T7177] tipc: Resetting bearer [ 190.980148][ T5838] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 191.017651][ T5838] usb 2-1: USB disconnect, device number 20 [ 191.096933][ T7174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.136627][ T7174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.181371][ T7174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.218601][ T7174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.275129][ T5838] usb 1-1: USB disconnect, device number 16 [ 191.419728][ T5899] usb 6-1: USB disconnect, device number 12 [ 191.639649][ T7183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.996677][ T7192] netlink: 264 bytes leftover after parsing attributes in process `syz.4.338'. [ 192.266614][ T7201] loop6: detected capacity change from 0 to 16384 [ 192.355325][ T43] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 192.546934][ T7203] netlink: 'syz.5.343': attribute type 1 has an invalid length. [ 192.695393][ T7203] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.754629][ T7205] bond1: (slave gretap1): making interface the new active one [ 192.799009][ T7205] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 193.457833][ T7216] fuse: Bad value for 'fd' [ 194.285117][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.291867][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.866959][ T5838] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 194.933719][ T1207] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 195.028283][ T5838] usb 2-1: device descriptor read/64, error -71 [ 195.117859][ T1207] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 195.126733][ T1207] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 195.187869][ T1207] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 195.231264][ T1207] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 195.253364][ T1207] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 195.296243][ T5838] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 195.315468][ T1207] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 195.330377][ T1207] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 195.343761][ T1207] usb 6-1: Product: syz [ 195.349772][ T1207] usb 6-1: Manufacturer: syz [ 195.374360][ T1207] cdc_wdm 6-1:1.0: skipping garbage [ 195.385277][ T1207] cdc_wdm 6-1:1.0: skipping garbage [ 195.400698][ T1207] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 195.432763][ T1207] cdc_wdm 6-1:1.0: Unknown control protocol [ 195.442072][ T5838] usb 2-1: device descriptor read/64, error -71 [ 195.544747][ T7243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.581989][ T5838] usb usb2-port1: attempt power cycle [ 195.637611][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 195.642275][ T5897] usb 6-1: USB disconnect, device number 13 [ 195.644468][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 195.656281][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 195.936838][ T5838] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 195.986652][ T5838] usb 2-1: device descriptor read/8, error -71 [ 196.087869][ T7246] syz.4.354 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 196.246355][ T5838] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 196.265925][ T7252] dlm: Unknown command passed to DLM device : 16 [ 196.265925][ T7252] [ 196.291699][ T5838] usb 2-1: device descriptor read/8, error -71 [ 196.428320][ T5838] usb usb2-port1: unable to enumerate USB device [ 196.526398][ T5897] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 196.688577][ T5897] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.747026][ T5897] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 196.792056][ T5897] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 196.802102][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.819766][ T5897] usb 4-1: Product: syz [ 196.832918][ T5897] usb 4-1: Manufacturer: syz [ 196.853573][ T5897] usb 4-1: SerialNumber: syz [ 197.078307][ T5897] usb 4-1: 0:2 : does not exist [ 197.176327][ T5897] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 197.266552][ T5897] usb 4-1: USB disconnect, device number 12 [ 197.520389][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.923940][ T7284] loop6: detected capacity change from 0 to 16384 [ 198.107397][ T7262] block device autoloading is deprecated and will be removed. [ 199.112455][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'. [ 201.028578][ T7329] FAULT_INJECTION: forcing a failure. [ 201.028578][ T7329] name failslab, interval 1, probability 0, space 0, times 0 [ 201.056485][ T7329] CPU: 0 UID: 0 PID: 7329 Comm: syz.3.377 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 201.056517][ T7329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 201.056528][ T7329] Call Trace: [ 201.056534][ T7329] [ 201.056540][ T7329] dump_stack_lvl+0x241/0x360 [ 201.056569][ T7329] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.056591][ T7329] ? __pfx__printk+0x10/0x10 [ 201.056610][ T7329] ? __lock_acquire+0xad5/0xd80 [ 201.056634][ T7329] should_fail_ex+0x424/0x570 [ 201.056662][ T7329] should_failslab+0xac/0x100 [ 201.056680][ T7329] kmem_cache_alloc_noprof+0x78/0x390 [ 201.056696][ T7329] ? skb_clone+0x20c/0x390 [ 201.056714][ T7329] skb_clone+0x20c/0x390 [ 201.056730][ T7329] __netlink_deliver_tap+0x3c4/0x7f0 [ 201.056757][ T7329] ? netlink_deliver_tap+0x2e/0x1b0 [ 201.056773][ T7329] netlink_deliver_tap+0x19d/0x1b0 [ 201.056791][ T7329] netlink_unicast+0x7c6/0x9a0 [ 201.056813][ T7329] ? __pfx_netlink_unicast+0x10/0x10 [ 201.056830][ T7329] ? skb_put+0x114/0x1f0 [ 201.056853][ T7329] netlink_sendmsg+0x8c3/0xcd0 [ 201.056880][ T7329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.056901][ T7329] ? aa_sock_msg_perm+0x91/0x160 [ 201.056925][ T7329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.056942][ T7329] __sock_sendmsg+0x221/0x270 [ 201.056961][ T7329] ____sys_sendmsg+0x523/0x860 [ 201.056989][ T7329] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.057010][ T7329] ? __fget_files+0x2a/0x420 [ 201.057029][ T7329] ? __fget_files+0x2a/0x420 [ 201.057053][ T7329] __sys_sendmsg+0x271/0x360 [ 201.057079][ T7329] ? __pfx___sys_sendmsg+0x10/0x10 [ 201.057140][ T7329] ? do_syscall_64+0xb6/0x230 [ 201.057157][ T7329] do_syscall_64+0xf3/0x230 [ 201.057171][ T7329] ? clear_bhb_loop+0x45/0xa0 [ 201.057198][ T7329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.057212][ T7329] RIP: 0033:0x7fa67f58d169 [ 201.057226][ T7329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.057238][ T7329] RSP: 002b:00007fa680364038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.057255][ T7329] RAX: ffffffffffffffda RBX: 00007fa67f7a5fa0 RCX: 00007fa67f58d169 [ 201.057266][ T7329] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 201.057276][ T7329] RBP: 00007fa680364090 R08: 0000000000000000 R09: 0000000000000000 [ 201.057285][ T7329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.057293][ T7329] R13: 0000000000000000 R14: 00007fa67f7a5fa0 R15: 00007fa67f8cfa28 [ 201.057316][ T7329] [ 201.315281][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.437008][ T5899] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 201.758179][ T5899] usb 2-1: config 0 has an invalid interface number: 163 but max is 0 [ 201.796026][ T5899] usb 2-1: config 0 has no interface number 0 [ 201.806251][ T5899] usb 2-1: config 0 interface 163 altsetting 0 endpoint 0x1 has invalid maxpacket 560, setting to 64 [ 201.854589][ T5899] usb 2-1: config 0 interface 163 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 201.936011][ T5899] usb 2-1: config 0 interface 163 altsetting 0 endpoint 0xC has invalid maxpacket 463, setting to 64 [ 202.001121][ T5899] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=90.11 [ 202.018364][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.056429][ T5899] usb 2-1: Product: syz [ 202.065999][ T5899] usb 2-1: Manufacturer: syz [ 202.076130][ T5899] usb 2-1: SerialNumber: syz [ 202.116805][ T5899] usb 2-1: config 0 descriptor?? [ 202.150065][ T5897] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 202.346073][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 202.394905][ T5897] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 202.395813][ T5899] ftdi_sio 2-1:0.163: FTDI USB Serial Device converter detected [ 202.420291][ T5897] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 202.474072][ T5897] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 202.498925][ T5899] ftdi_sio ttyUSB0: unknown device type: 0x9011 [ 202.536287][ T5897] usb 4-1: config 1 has no interface number 0 [ 202.577912][ T5899] usb 2-1: USB disconnect, device number 25 [ 202.593168][ T5897] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.610369][ T5899] ftdi_sio 2-1:0.163: device disconnected [ 202.638541][ T5897] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 202.697248][ T5897] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 202.744530][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.756298][ T53] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 202.812227][ T5897] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 202.940490][ T53] usb 5-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 202.959381][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.997519][ T53] usb 5-1: config 0 descriptor?? [ 203.012732][ T5897] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 203.040880][ T3553] bond0: (slave wlan1): link status definitely down, disabling slave [ 203.325772][ T7350] netlink: 'syz.4.380': attribute type 21 has an invalid length. [ 203.376163][ T7350] netlink: 156 bytes leftover after parsing attributes in process `syz.4.380'. [ 203.957245][ T5948] usb 4-1: USB disconnect, device number 13 [ 203.964110][ T5948] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 205.413027][ T5838] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 206.098551][ T5838] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.116195][ T5838] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 206.125293][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.169149][ T53] usbhid 5-1:0.0: can't add hid device: -71 [ 206.218236][ T53] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 206.265553][ T53] usb 5-1: USB disconnect, device number 16 [ 206.302659][ T5838] usb 1-1: config 0 descriptor?? [ 206.337159][ T5838] pwc: Askey VC010 type 2 USB webcam detected. [ 206.603653][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 206.603685][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 206.610358][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 206.615824][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 206.622446][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 206.686522][ T5899] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 206.737748][ T5838] pwc: recv_control_msg error -32 req 02 val 2b00 [ 206.749245][ T7375] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 206.782257][ T7390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.394'. [ 206.793700][ T5838] pwc: recv_control_msg error -32 req 02 val 2700 [ 206.835434][ T5838] pwc: recv_control_msg error -71 req 02 val 2c00 [ 206.883063][ T5899] usb 2-1: config 0 has an invalid interface number: 163 but max is 0 [ 206.896187][ T5838] pwc: recv_control_msg error -71 req 04 val 1000 [ 206.920624][ T5899] usb 2-1: config 0 has no interface number 0 [ 206.929838][ T5838] pwc: recv_control_msg error -71 req 04 val 1300 [ 206.962258][ T5899] usb 2-1: config 0 interface 163 altsetting 0 endpoint 0x1 has invalid maxpacket 560, setting to 64 [ 206.977875][ T5838] pwc: recv_control_msg error -71 req 04 val 1400 [ 207.007194][ T5838] pwc: recv_control_msg error -71 req 02 val 2000 [ 207.014602][ T5899] usb 2-1: config 0 interface 163 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 207.036254][ T5838] pwc: recv_control_msg error -71 req 02 val 2100 [ 207.056817][ T5838] pwc: recv_control_msg error -71 req 04 val 1500 [ 207.064290][ T5899] usb 2-1: config 0 interface 163 altsetting 0 endpoint 0xC has invalid maxpacket 463, setting to 64 [ 207.086822][ T5838] pwc: recv_control_msg error -71 req 02 val 2500 [ 207.093830][ T5838] pwc: recv_control_msg error -71 req 02 val 2400 [ 207.107950][ T5899] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=90.11 [ 207.123614][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.133915][ T5838] pwc: recv_control_msg error -71 req 02 val 2600 [ 207.149037][ T5899] usb 2-1: Product: syz [ 207.153446][ T5838] pwc: recv_control_msg error -71 req 02 val 2900 [ 207.161781][ T5899] usb 2-1: Manufacturer: syz [ 207.173919][ T5899] usb 2-1: SerialNumber: syz [ 207.178977][ T5838] pwc: recv_control_msg error -71 req 02 val 2800 [ 207.197069][ T5899] usb 2-1: config 0 descriptor?? [ 207.204162][ T5838] pwc: recv_control_msg error -71 req 04 val 1100 [ 207.226038][ T5838] pwc: recv_control_msg error -71 req 04 val 1200 [ 207.257141][ T5838] pwc: Registered as video103. [ 207.264516][ T5838] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 207.302180][ T5838] usb 1-1: USB disconnect, device number 17 [ 207.308621][ T1207] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 207.460324][ T7386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.477748][ T7386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.506071][ T1207] usb 6-1: Using ep0 maxpacket: 16 [ 207.519648][ T1207] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.544862][ T5899] ftdi_sio 2-1:0.163: FTDI USB Serial Device converter detected [ 207.564491][ T1207] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.595564][ T5899] ftdi_sio ttyUSB0: unknown device type: 0x9011 [ 207.614645][ T1207] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 207.647856][ T5899] usb 2-1: USB disconnect, device number 26 [ 207.667190][ T1207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.676361][ T5899] ftdi_sio 2-1:0.163: device disconnected [ 207.707338][ T1207] usb 6-1: config 0 descriptor?? [ 208.137090][ T7418] FAULT_INJECTION: forcing a failure. [ 208.137090][ T7418] name failslab, interval 1, probability 0, space 0, times 0 [ 208.184808][ T1207] corsair 0003:1B1C:1B02.0005: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 208.233135][ T7418] CPU: 1 UID: 0 PID: 7418 Comm: syz.4.403 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 208.233167][ T7418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 208.233181][ T7418] Call Trace: [ 208.233190][ T7418] [ 208.233199][ T7418] dump_stack_lvl+0x241/0x360 [ 208.233237][ T7418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.233268][ T7418] ? __pfx__printk+0x10/0x10 [ 208.233310][ T7418] should_fail_ex+0x424/0x570 [ 208.233350][ T7418] should_failslab+0xac/0x100 [ 208.233374][ T7418] __kmalloc_cache_noprof+0x73/0x370 [ 208.233397][ T7418] ? sctp_add_bind_addr+0x89/0x3a0 [ 208.233424][ T7418] sctp_add_bind_addr+0x89/0x3a0 [ 208.233452][ T7418] sctp_copy_local_addr_list+0x313/0x500 [ 208.233478][ T7418] ? sctp_copy_local_addr_list+0xad/0x500 [ 208.233501][ T7418] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 208.233529][ T7418] ? sctp_v4_is_any+0x35/0x60 [ 208.233551][ T7418] ? sctp_copy_one_addr+0x94/0x360 [ 208.233578][ T7418] sctp_bind_addr_copy+0xad/0x3b0 [ 208.233600][ T7418] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 208.233637][ T7418] sctp_connect_new_asoc+0x337/0x700 [ 208.233668][ T7418] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 208.233695][ T7418] ? sctp_sendmsg+0xf30/0x3620 [ 208.233734][ T7418] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 208.233761][ T7418] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 208.233787][ T7418] sctp_sendmsg+0x2009/0x3620 [ 208.233836][ T7418] ? __pfx_sctp_sendmsg+0x10/0x10 [ 208.233867][ T7418] ? aa_sk_perm+0x96f/0xac0 [ 208.233912][ T7418] ? inet_sendmsg+0x330/0x390 [ 208.233946][ T7418] __sock_sendmsg+0x1a6/0x270 [ 208.233974][ T7418] ____sys_sendmsg+0x523/0x860 [ 208.234016][ T7418] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.234044][ T7418] ? __fget_files+0x2a/0x420 [ 208.234072][ T7418] ? __fget_files+0x2a/0x420 [ 208.234107][ T7418] __sys_sendmsg+0x271/0x360 [ 208.234144][ T7418] ? __pfx___sys_sendmsg+0x10/0x10 [ 208.234234][ T7418] ? do_syscall_64+0xb6/0x230 [ 208.234261][ T7418] do_syscall_64+0xf3/0x230 [ 208.234281][ T7418] ? clear_bhb_loop+0x45/0xa0 [ 208.234305][ T7418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.234324][ T7418] RIP: 0033:0x7f8853b8d169 [ 208.234349][ T7418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.234366][ T7418] RSP: 002b:00007f8854936038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.234387][ T7418] RAX: ffffffffffffffda RBX: 00007f8853da5fa0 RCX: 00007f8853b8d169 [ 208.234398][ T7418] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000003 [ 208.234410][ T7418] RBP: 00007f8854936090 R08: 0000000000000000 R09: 0000000000000000 [ 208.234420][ T7418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 208.234430][ T7418] R13: 0000000000000000 R14: 00007f8853da5fa0 R15: 00007f8853ecfa28 [ 208.234458][ T7418] [ 208.538666][ T7421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.647255][ T1207] corsair 0003:1B1C:1B02.0005: Read invalid backlight brightness: ad. [ 208.921445][ T7394] netlink: 'syz.5.396': attribute type 10 has an invalid length. [ 209.019297][ T7394] team0: Device hsr_slave_0 failed to register rx_handler [ 209.115750][ T1207] usb 6-1: USB disconnect, device number 14 [ 209.358375][ T7439] netlink: 20 bytes leftover after parsing attributes in process `syz.0.407'. [ 209.371077][ T7439] fuse: Bad value for 'user_id' [ 209.376078][ T7439] fuse: Bad value for 'user_id' [ 209.466116][ T53] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 209.662971][ T53] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.691252][ T53] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 209.704494][ T53] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.757160][ T53] usb 2-1: Product: syz [ 209.763704][ T53] usb 2-1: Manufacturer: syz [ 209.793608][ T53] usb 2-1: SerialNumber: syz [ 210.068091][ T7435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.108235][ T7435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.369295][ T53] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 210.566918][ T5838] usb 2-1: USB disconnect, device number 27 [ 211.029468][ T5838] usblp0: removed [ 211.036298][ T53] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 211.211190][ T53] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.250616][ T53] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 211.301398][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.396758][ T53] usb 6-1: config 0 descriptor?? [ 211.438078][ T53] pwc: Askey VC010 type 2 USB webcam detected. [ 211.705561][ T7466] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 211.827053][ T5838] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 211.844340][ T53] pwc: recv_control_msg error -32 req 02 val 2b00 [ 211.909871][ T53] pwc: recv_control_msg error -32 req 02 val 2700 [ 211.994190][ T53] pwc: recv_control_msg error -71 req 02 val 2c00 [ 212.014539][ T53] pwc: recv_control_msg error -71 req 04 val 1000 [ 212.025506][ T5838] usb 2-1: config 0 has an invalid interface number: 163 but max is 0 [ 212.039811][ T53] pwc: recv_control_msg error -71 req 04 val 1300 [ 212.054143][ T5838] usb 2-1: config 0 has no interface number 0 [ 212.091281][ T5838] usb 2-1: config 0 interface 163 altsetting 0 endpoint 0x1 has invalid maxpacket 560, setting to 64 [ 212.101824][ T53] pwc: recv_control_msg error -71 req 04 val 1400 [ 212.185129][ T53] pwc: recv_control_msg error -71 req 02 val 2000 [ 212.202071][ T53] pwc: recv_control_msg error -71 req 02 val 2100 [ 212.229120][ T53] pwc: recv_control_msg error -71 req 04 val 1500 [ 212.250238][ T53] pwc: recv_control_msg error -71 req 02 val 2500 [ 212.266068][ T5838] usb 2-1: config 0 interface 163 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 212.298494][ T53] pwc: recv_control_msg error -71 req 02 val 2400 [ 212.319380][ T5838] usb 2-1: config 0 interface 163 altsetting 0 endpoint 0xC has invalid maxpacket 463, setting to 64 [ 212.356317][ T53] pwc: recv_control_msg error -71 req 02 val 2600 [ 212.384814][ T53] pwc: recv_control_msg error -71 req 02 val 2900 [ 212.393280][ T5838] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=90.11 [ 212.393947][ T53] pwc: recv_control_msg error -71 req 02 val 2800 [ 212.424604][ T53] pwc: recv_control_msg error -71 req 04 val 1100 [ 212.444738][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.453562][ T53] pwc: recv_control_msg error -71 req 04 val 1200 [ 212.484334][ T7474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.504431][ T5838] usb 2-1: Product: syz [ 212.525766][ T5838] usb 2-1: Manufacturer: syz [ 212.535011][ T53] pwc: Registered as video103. [ 212.540233][ T5838] usb 2-1: SerialNumber: syz [ 212.563487][ T53] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input15 [ 212.584539][ T5838] usb 2-1: config 0 descriptor?? [ 212.615017][ T53] usb 6-1: USB disconnect, device number 15 [ 212.796138][ T5921] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 212.842618][ T7462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.865300][ T7462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.937443][ T5838] ftdi_sio 2-1:0.163: FTDI USB Serial Device converter detected [ 212.956155][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 212.967270][ T5838] ftdi_sio ttyUSB0: unknown device type: 0x9011 [ 212.970483][ T5921] usb 4-1: config 0 has an invalid interface number: 249 but max is 0 [ 212.984945][ T5838] usb 2-1: USB disconnect, device number 28 [ 213.000211][ T5921] usb 4-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 213.021318][ T5838] ftdi_sio 2-1:0.163: device disconnected [ 213.024647][ T5921] usb 4-1: config 0 has no interface number 0 [ 213.068073][ T5921] usb 4-1: config 0 interface 249 altsetting 0 has an endpoint descriptor with address 0x1B, changing to 0xB [ 213.100739][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.422'. [ 213.116372][ T5921] usb 4-1: config 0 interface 249 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 213.176764][ T5921] usb 4-1: config 0 interface 249 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 7 [ 213.215383][ T5921] usb 4-1: New USB device found, idVendor=20f4, idProduct=724a, bcdDevice=af.20 [ 213.232402][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.244500][ T5921] usb 4-1: Product: syz [ 213.254303][ T5921] usb 4-1: Manufacturer: syz [ 213.260893][ T5921] usb 4-1: SerialNumber: syz [ 213.291274][ T5921] usb 4-1: config 0 descriptor?? [ 213.301670][ T7477] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 213.546257][ T7477] netlink: 'syz.3.420': attribute type 10 has an invalid length. [ 213.554136][ T7477] netlink: 2 bytes leftover after parsing attributes in process `syz.3.420'. [ 213.561741][ T5838] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 213.571204][ T7477] team0: entered promiscuous mode [ 213.583464][ T7477] team_slave_0: entered promiscuous mode [ 213.591524][ T7477] team_slave_1: entered promiscuous mode [ 213.625390][ T7477] bond0: (slave team0): Releasing backup interface [ 213.664351][ T7477] bridge0: port 3(team0) entered blocking state [ 213.676402][ T1207] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 213.688738][ T7477] bridge0: port 3(team0) entered disabled state [ 213.698962][ T7477] team0: entered allmulticast mode [ 213.705574][ T7477] team_slave_0: entered allmulticast mode [ 213.714530][ T7477] team_slave_1: entered allmulticast mode [ 213.726688][ T5838] usb 6-1: Using ep0 maxpacket: 8 [ 213.739550][ T5838] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 213.762595][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.807169][ T5838] usb 6-1: Product: syz [ 213.817029][ T5838] usb 6-1: Manufacturer: syz [ 213.833119][ T5921] usb 4-1: USB disconnect, device number 14 [ 213.849249][ T1207] usb 1-1: unable to get BOS descriptor or descriptor too short [ 213.863701][ T5838] usb 6-1: SerialNumber: syz [ 213.884491][ T1207] usb 1-1: not running at top speed; connect to a high speed hub [ 213.907299][ T5838] usb 6-1: config 0 descriptor?? [ 213.918653][ T1207] usb 1-1: config 17 has an invalid interface number: 8 but max is 1 [ 213.936497][ T1207] usb 1-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 213.963236][ T1207] usb 1-1: config 17 has no interface number 0 [ 213.977382][ T1207] usb 1-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 214.002038][ T1207] usb 1-1: config 17 interface 8 has no altsetting 0 [ 214.020464][ T1207] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 214.069025][ T1207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.096004][ T1207] usb 1-1: Product: syz [ 214.100306][ T1207] usb 1-1: Manufacturer: syz [ 214.112894][ T1207] usb 1-1: SerialNumber: syz [ 214.149465][ T5838] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 214.414243][ T7491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.485291][ T7491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.624358][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.425'. [ 214.653643][ T7504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.697661][ T7504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.762774][ T5838] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 214.909091][ T7511] fuse: Unknown parameter '0x000000000000000c00000000000000000000' [ 215.858104][ T59] I/O error, dev loop6, sector 504 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 216.478423][ T1207] usb 1-1: selecting invalid altsetting 0 [ 216.628073][ T1207] usb 1-1: USB disconnect, device number 18 [ 216.654170][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.435'. [ 216.944885][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.993225][ T5921] usb 6-1: USB disconnect, device number 16 [ 217.008116][ T5838] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 217.198790][ T5838] usb 5-1: config 0 has an invalid interface number: 163 but max is 0 [ 217.220429][ T5838] usb 5-1: config 0 has no interface number 0 [ 217.236046][ T5838] usb 5-1: config 0 interface 163 altsetting 0 endpoint 0x1 has invalid maxpacket 560, setting to 64 [ 217.267752][ T5838] usb 5-1: config 0 interface 163 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 217.306408][ T1207] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 217.316008][ T5838] usb 5-1: config 0 interface 163 altsetting 0 endpoint 0xC has invalid maxpacket 463, setting to 64 [ 217.361288][ T5838] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=90.11 [ 217.385985][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.416532][ T5838] usb 5-1: Product: syz [ 217.447144][ T5838] usb 5-1: Manufacturer: syz [ 217.451818][ T5838] usb 5-1: SerialNumber: syz [ 217.486349][ T1207] usb 1-1: Using ep0 maxpacket: 32 [ 217.497707][ T5838] usb 5-1: config 0 descriptor?? [ 217.504089][ T1207] usb 1-1: config 0 has an invalid interface number: 249 but max is 0 [ 217.515989][ T1207] usb 1-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 217.559414][ T1207] usb 1-1: config 0 has no interface number 0 [ 217.572284][ T1207] usb 1-1: config 0 interface 249 altsetting 0 has an endpoint descriptor with address 0x1B, changing to 0xB [ 217.712977][ T1207] usb 1-1: config 0 interface 249 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 217.910026][ T1207] usb 1-1: config 0 interface 249 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 7 [ 217.935369][ T7531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.944508][ T7531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.947353][ T1207] usb 1-1: New USB device found, idVendor=20f4, idProduct=724a, bcdDevice=af.20 [ 217.984191][ T1207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.013181][ T1207] usb 1-1: Product: syz [ 218.018844][ T1207] usb 1-1: Manufacturer: syz [ 218.030144][ T1207] usb 1-1: SerialNumber: syz [ 218.041115][ T5838] ftdi_sio 5-1:0.163: FTDI USB Serial Device converter detected [ 218.056662][ T1207] usb 1-1: config 0 descriptor?? [ 218.066089][ T5838] ftdi_sio ttyUSB0: unknown device type: 0x9011 [ 218.085295][ T7540] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 218.116848][ T5838] usb 5-1: USB disconnect, device number 17 [ 218.137292][ T5838] ftdi_sio 5-1:0.163: device disconnected [ 218.321980][ T7540] netlink: 'syz.0.440': attribute type 10 has an invalid length. [ 218.367300][ T7540] netlink: 2 bytes leftover after parsing attributes in process `syz.0.440'. [ 218.478368][ T1207] usb 1-1: USB disconnect, device number 19 [ 218.823662][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.448'. [ 220.336228][ T5921] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 220.531040][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 220.547731][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 220.563337][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 220.567782][ T1207] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 220.592025][ T5921] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 220.629622][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 220.643751][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 220.663363][ T5921] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 220.673599][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.777578][ T5921] usb 2-1: Product: syz [ 220.781273][ T5894] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 220.781783][ T5921] usb 2-1: Manufacturer: syz [ 220.935839][ T1207] usb 5-1: device descriptor read/64, error -71 [ 220.976734][ T5921] usb 2-1: SerialNumber: syz [ 220.996335][ T5921] usb 2-1: config 0 descriptor?? [ 221.010425][ T5921] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input16 [ 221.110420][ T5894] usb 6-1: config index 0 descriptor too short (expected 12306, got 18) [ 221.149801][ T5894] usb 6-1: config 102 has too many interfaces: 120, using maximum allowed: 32 [ 221.196024][ T1207] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 221.213228][ T5894] usb 6-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 221.229562][ T5921] usb 2-1: USB disconnect, device number 29 [ 221.237015][ T5894] usb 6-1: config 102 has 0 interfaces, different from the descriptor's value: 120 [ 221.247585][ T5894] usb 6-1: New USB device found, idVendor=05ee, idProduct=4010, bcdDevice=20.1c [ 221.257155][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.366627][ T1207] usb 5-1: device descriptor read/64, error -71 [ 221.480361][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'. [ 221.536992][ T1207] usb usb5-port1: attempt power cycle [ 221.706518][ T5838] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 221.896534][ T5838] usb 4-1: Using ep0 maxpacket: 32 [ 221.912121][ T5838] usb 4-1: config 0 has an invalid interface number: 249 but max is 0 [ 221.920953][ T1207] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 221.932716][ T5838] usb 4-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 221.953363][ T5838] usb 4-1: config 0 has no interface number 0 [ 221.976960][ T1207] usb 5-1: device descriptor read/8, error -71 [ 221.988984][ T5838] usb 4-1: config 0 interface 249 altsetting 0 has an endpoint descriptor with address 0x1B, changing to 0xB [ 222.046782][ T5838] usb 4-1: config 0 interface 249 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 222.068804][ T5838] usb 4-1: config 0 interface 249 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 7 [ 222.104746][ T5838] usb 4-1: New USB device found, idVendor=20f4, idProduct=724a, bcdDevice=af.20 [ 222.114626][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.123569][ T5838] usb 4-1: Product: syz [ 222.127981][ T5838] usb 4-1: Manufacturer: syz [ 222.133917][ T5838] usb 4-1: SerialNumber: syz [ 222.140901][ T5838] usb 4-1: config 0 descriptor?? [ 222.154868][ T7604] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 222.226382][ T1207] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 222.264469][ T1207] usb 5-1: device descriptor read/8, error -71 [ 222.373988][ T7604] netlink: 'syz.3.460': attribute type 10 has an invalid length. [ 222.382672][ T1207] usb usb5-port1: unable to enumerate USB device [ 222.399338][ T7604] netlink: 2 bytes leftover after parsing attributes in process `syz.3.460'. [ 222.453176][ T7604] bridge0: port 3(team0) entered blocking state [ 222.459655][ T7604] bridge0: port 3(team0) entered forwarding state [ 222.471288][ T7604] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.597848][ T5838] usb 4-1: USB disconnect, device number 15 [ 224.102767][ T7629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.320086][ T5894] usb 6-1: string descriptor 0 read error: -71 [ 224.372608][ T5894] usb 6-1: USB disconnect, device number 17 [ 224.605727][ T7639] netlink: 24 bytes leftover after parsing attributes in process `syz.5.470'. [ 224.816946][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'. [ 226.638637][ T30] audit: type=1326 audit(1743469112.306:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.3.478" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa67f58d169 code=0x0 [ 227.517886][ T7689] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 228.476238][ T5921] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 228.521789][ T7707] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 1, id = 0 [ 228.648910][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 228.676161][ T5948] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 228.694042][ T5921] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 228.729620][ T5921] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 228.766408][ T5921] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 228.786494][ T5921] usb 4-1: config 1 has no interface number 0 [ 228.812881][ T5921] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 228.858035][ T5921] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 228.882428][ T5948] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 228.902144][ T5948] usb 6-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 228.925016][ T5921] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 228.971984][ T5948] usb 6-1: config 2 interface 0 has no altsetting 0 [ 228.979449][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.000490][ T5948] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 229.020818][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.056555][ T5921] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 229.063004][ T5948] usb 6-1: Product: syz [ 229.068100][ T5948] usb 6-1: Manufacturer: syz [ 229.086288][ T5948] usb 6-1: SerialNumber: syz [ 229.258639][ T5921] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 230.096134][ T5921] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 230.209579][ T1207] usb 4-1: USB disconnect, device number 16 [ 230.217585][ T1207] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 230.299734][ T5921] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 230.334253][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.378581][ T5921] usb 1-1: config 0 descriptor?? [ 230.678533][ T5921] hackrf 1-1:0.0: Board ID: 00 [ 230.700051][ T5921] hackrf 1-1:0.0: Firmware version: [ 230.744112][ T5921] hackrf 1-1:0.0: Registered as swradio24 [ 230.764867][ T5921] videodev: could not get a free minor [ 230.792680][ T5921] hackrf 1-1:0.0: Failed to register as video device (-23) [ 230.815420][ T5921] hackrf 1-1:0.0: probe with driver hackrf failed with error -23 [ 230.866254][ T1207] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 230.906497][ T5894] usb 1-1: USB disconnect, device number 20 [ 231.056074][ T1207] usb 5-1: Using ep0 maxpacket: 32 [ 231.069691][ T1207] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 231.091607][ T1207] usb 5-1: config 0 has no interface number 0 [ 231.125128][ T1207] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 231.146451][ T1207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.180035][ T1207] usb 5-1: Product: syz [ 231.191673][ T1207] usb 5-1: Manufacturer: syz [ 231.204107][ T1207] usb 5-1: SerialNumber: syz [ 231.228164][ T1207] usb 5-1: config 0 descriptor?? [ 231.262349][ T1207] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 231.478555][ T1207] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 231.504883][ T5948] usb 6-1: USB disconnect, device number 18 [ 231.549390][ T1207] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 231.908894][ T5948] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 232.031182][ T7734] vlan2: entered promiscuous mode [ 232.059289][ T7734] veth0_virt_wifi: entered promiscuous mode [ 232.113388][ T7734] vlan2: entered allmulticast mode [ 232.125597][ T5948] usb 6-1: Using ep0 maxpacket: 16 [ 232.146093][ T7734] veth0_virt_wifi: entered allmulticast mode [ 232.168912][ T5948] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 232.191560][ T5948] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.254420][ T5948] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 232.261393][ T7734] team0: Port device vlan2 added [ 232.301600][ T5948] usb 6-1: config 1 has no interface number 1 [ 232.314821][ T5948] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 232.351274][ T5948] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 65535, setting to 64 [ 232.367398][ T1207] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 232.395621][ T7761] xt_hashlimit: size too large, truncated to 1048576 [ 232.420185][ T5948] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 232.442518][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.464382][ T7759] xt_hashlimit: size too large, truncated to 1048576 [ 232.491981][ T5948] usb 6-1: Product: syz [ 232.514389][ T5948] usb 6-1: Manufacturer: syz [ 232.540072][ T5948] usb 6-1: SerialNumber: syz [ 232.575278][ T1207] usb 4-1: config 0 has no interfaces? [ 232.603450][ T1207] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 232.619623][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.634040][ T1207] usb 4-1: Product: syz [ 232.651109][ T1207] usb 4-1: Manufacturer: syz [ 232.659323][ T1207] usb 4-1: SerialNumber: syz [ 232.675013][ T1207] usb 4-1: config 0 descriptor?? [ 232.856243][ T5948] usb 6-1: USB disconnect, device number 19 [ 232.914249][ T7757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.925182][ T7757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.984166][ T5921] IPVS: starting estimator thread 0... [ 233.068693][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.098491][ T7770] IPVS: using max 25 ests per chain, 60000 per kthread [ 233.147256][ T920] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 233.318320][ T920] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 233.344725][ T920] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 233.373674][ T920] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 233.409399][ T7776] fuse: Invalid uid '00000000000000000005' [ 233.411982][ T920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.474807][ T7767] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 233.495872][ T920] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 233.630234][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 233.637785][ T920] usb 5-1: USB disconnect, device number 22 [ 233.708563][ T920] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 233.787395][ T920] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 233.846783][ T5894] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 233.861630][ T920] quatech2 5-1:0.51: device disconnected [ 233.873361][ T7786] netlink: 16 bytes leftover after parsing attributes in process `syz.4.512'. [ 233.934086][ T7786] loop6: detected capacity change from 0 to 524287999 [ 233.954725][ T7767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.969906][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 233.979162][ C1] buffer_io_error: 24 callbacks suppressed [ 233.979179][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 234.012640][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 234.021870][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 234.033994][ T7789] veth0_to_team: entered promiscuous mode [ 234.043183][ T7789] veth0_to_team: entered allmulticast mode [ 234.043358][ T5894] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.067869][ T7767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.082364][ T5894] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 234.092376][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.102988][ T1207] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 234.112442][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 234.121643][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 234.131962][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 234.141162][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 234.150985][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 234.154109][ T5894] usb 6-1: config 0 descriptor?? [ 234.160284][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 234.176307][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 234.185568][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 234.195990][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 234.205224][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 234.214435][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 234.223640][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 234.231787][ T7786] ldm_validate_partition_table(): Disk read failed. [ 234.240141][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 234.249465][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 234.258927][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 234.264340][ T5894] pwc: Askey VC010 type 2 USB webcam detected. [ 234.268131][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 234.286507][ T7786] Dev loop6: unable to read RDB block 0 [ 234.304262][ T7786] loop6: unable to read partition table [ 234.315130][ T7786] loop_reread_partitions: partition scan of loop6 (ÿŸ ¾‚³˜±Ä6tPΪŔ±³×AÝÁ¬8ï*V^ñè3c) failed (rc=-5) [ 234.316498][ T1207] usb 1-1: Using ep0 maxpacket: 32 [ 234.340584][ T1207] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.381617][ T1207] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 234.416955][ T1207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.427131][ T1207] usb 1-1: Product: syz [ 234.431393][ T1207] usb 1-1: Manufacturer: syz [ 234.437118][ T1207] usb 1-1: SerialNumber: syz [ 234.457238][ T1207] usb 1-1: config 0 descriptor?? [ 234.482185][ T1207] usb 1-1: no audio or video endpoints found [ 234.666618][ T5894] pwc: recv_control_msg error -32 req 02 val 2b00 [ 234.674549][ T5894] pwc: recv_control_msg error -32 req 02 val 2700 [ 234.689172][ T1207] usb 1-1: USB disconnect, device number 21 [ 234.698839][ T7779] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 234.719802][ T5894] pwc: recv_control_msg error -71 req 02 val 2c00 [ 234.749200][ T5894] pwc: recv_control_msg error -71 req 04 val 1000 [ 234.760565][ T5894] pwc: recv_control_msg error -71 req 04 val 1300 [ 234.780053][ T5894] pwc: recv_control_msg error -71 req 04 val 1400 [ 234.787698][ T5894] pwc: recv_control_msg error -71 req 02 val 2000 [ 234.795085][ T5894] pwc: recv_control_msg error -71 req 02 val 2100 [ 234.806692][ T5894] pwc: recv_control_msg error -71 req 04 val 1500 [ 234.814576][ T5894] pwc: recv_control_msg error -71 req 02 val 2500 [ 234.824461][ T5894] pwc: recv_control_msg error -71 req 02 val 2400 [ 234.835309][ T5894] pwc: recv_control_msg error -71 req 02 val 2600 [ 234.844297][ T5894] pwc: recv_control_msg error -71 req 02 val 2900 [ 234.854259][ T5894] pwc: recv_control_msg error -71 req 02 val 2800 [ 234.863283][ T5894] pwc: recv_control_msg error -71 req 04 val 1100 [ 234.871299][ T5894] pwc: recv_control_msg error -71 req 04 val 1200 [ 234.883890][ T5894] pwc: Registered as video103. [ 234.895222][ T5894] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input17 [ 234.926550][ T5894] usb 6-1: USB disconnect, device number 20 [ 235.066836][ T5897] usb 4-1: USB disconnect, device number 17 [ 235.709610][ T7803] netlink: 36 bytes leftover after parsing attributes in process `syz.5.517'. [ 235.786107][ T1207] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 235.887663][ T5897] usb 2-1: USB disconnect, device number 30 [ 235.986359][ T1207] usb 1-1: device descriptor read/64, error -71 [ 236.196616][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.520'. [ 236.246326][ T1207] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 236.368821][ T7820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.396020][ T1207] usb 1-1: device descriptor read/64, error -71 [ 236.506516][ T1207] usb usb1-port1: attempt power cycle [ 236.536068][ T5897] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 236.706131][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 236.718093][ T5897] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 236.745467][ T5897] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 236.766013][ T5897] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 236.774221][ T5897] usb 2-1: Product: syz [ 236.796014][ T5897] usb 2-1: Manufacturer: syz [ 236.800680][ T5897] usb 2-1: SerialNumber: syz [ 236.856546][ T1207] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 236.908246][ T1207] usb 1-1: device descriptor read/8, error -71 [ 237.022435][ T5897] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 237.048593][ T5897] usb 2-1: Handspring Visor / Palm OS: port 172, is for unknown use [ 237.079487][ T5897] usb 2-1: Handspring Visor / Palm OS: port 0, is for Remote File System use [ 237.107546][ T5897] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 237.177915][ T1207] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 237.240964][ T7831] netlink: 'syz.3.526': attribute type 6 has an invalid length. [ 237.284126][ T1207] usb 1-1: device descriptor read/8, error -71 [ 237.356404][ T7817] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 237.396678][ T7817] Cannot find set identified by id 0 to match [ 237.413458][ T1207] usb usb1-port1: unable to enumerate USB device [ 237.416417][ T5897] usb 2-1: palm_os_3_probe - error -110 getting bytes available request [ 237.462651][ T5897] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 237.505722][ T5897] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 237.574646][ T5897] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 237.613267][ T5897] usb 2-1: USB disconnect, device number 31 [ 237.630402][ T5897] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 237.686662][ T5897] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 237.707977][ T5897] visor 2-1:1.0: device disconnected [ 237.779323][ T7841] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 237.796883][ T1207] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 237.963513][ T1207] usb 4-1: Using ep0 maxpacket: 32 [ 237.978607][ T1207] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 238.006287][ T1207] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 238.031574][ T1207] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 238.052826][ T1207] usb 4-1: config 1 has no interface number 0 [ 238.064124][ T1207] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 238.096300][ T1207] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 238.146082][ T1207] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 238.172676][ T7846] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 238.199754][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.240721][ T1207] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 238.440330][ T1207] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 238.550926][ T7858] netlink: 4 bytes leftover after parsing attributes in process `syz.5.535'. [ 238.866144][ T5897] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 239.060124][ T5897] usb 1-1: unable to get BOS descriptor or descriptor too short [ 239.083127][ T5897] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 239.119823][ T5897] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x3 is Bulk; changing to Interrupt [ 239.170114][ T5897] usb 1-1: config 1 interface 0 has no altsetting 0 [ 239.416586][ T5948] usb 4-1: USB disconnect, device number 18 [ 239.476154][ T1207] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 239.513612][ T5948] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 240.026090][ T5948] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 240.177935][ T5948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.231142][ T5948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.273139][ T5948] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 240.322268][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.360561][ T5948] usb 4-1: config 0 descriptor?? [ 240.534507][ T7878] netlink: 'syz.5.540': attribute type 10 has an invalid length. [ 240.631001][ T7878] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 240.683821][ T7877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.995458][ T5948] usbhid 4-1:0.0: can't add hid device: -71 [ 241.018270][ T5948] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 241.045148][ T5948] usb 4-1: USB disconnect, device number 19 [ 241.075529][ T7881] ptrace attach of "./syz-executor exec"[5857] was attempted by " Àÿ Ðÿ ð¥ Àÿ  Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  \x07 o \x09    [ 241.610517][ T5948] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 241.915267][ T5948] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.966003][ T5948] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 242.006416][ T5897] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 242.035481][ T5948] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 242.050322][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.078140][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.111691][ T5897] usb 1-1: can't set config #1, error -71 [ 242.136931][ T5948] usb 5-1: config 0 descriptor?? [ 242.144217][ T5897] usb 1-1: USB disconnect, device number 26 [ 242.436855][ T5853] Bluetooth: hci5: command 0x0406 tx timeout [ 243.735755][ T7915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.548'. [ 244.059385][ T5948] usb 5-1: string descriptor 0 read error: -71 [ 244.076073][ T5948] usb 5-1: USB disconnect, device number 23 [ 245.406635][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 245.588852][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 245.615481][ T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 245.653971][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 245.717954][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 245.770085][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 245.841911][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 245.881601][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 245.910549][ T10] usb 4-1: Product: syz [ 245.946492][ T10] usb 4-1: Manufacturer: syz [ 246.001767][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 246.040427][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 246.060277][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 246.096056][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 246.126093][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.557'. [ 246.256589][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 246.263261][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 246.269824][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 246.275809][ T920] usb 4-1: USB disconnect, device number 20 [ 246.276944][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 246.276965][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 247.826055][ T920] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 247.997245][ T5948] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 248.004969][ T920] usb 4-1: Using ep0 maxpacket: 16 [ 248.013705][ T920] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 248.026732][ T920] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.026898][ T5838] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 248.054783][ T920] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 248.075090][ T920] usb 4-1: config 1 has no interface number 1 [ 248.085287][ T920] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 248.116023][ T920] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 65535, setting to 64 [ 248.127394][ T53] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 248.168319][ T920] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 248.196413][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 248.209244][ T920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.215982][ T5838] usb 2-1: Using ep0 maxpacket: 32 [ 248.225459][ T5838] usb 2-1: config 0 has an invalid interface number: 249 but max is 0 [ 248.228069][ T920] usb 4-1: Product: syz [ 248.228205][ T5948] usb 5-1: config 0 has an invalid interface number: 249 but max is 0 [ 248.250666][ T920] usb 4-1: Manufacturer: syz [ 248.255854][ T920] usb 4-1: SerialNumber: syz [ 248.261720][ T5948] usb 5-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 248.281127][ T5948] usb 5-1: config 0 has no interface number 0 [ 248.287553][ T5948] usb 5-1: config 0 interface 249 altsetting 0 has an endpoint descriptor with address 0x1B, changing to 0xB [ 248.299347][ T5838] usb 2-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 248.299377][ T5838] usb 2-1: config 0 has no interface number 0 [ 248.309702][ T53] usb 1-1: Using ep0 maxpacket: 16 [ 248.365516][ T53] usb 1-1: unable to get BOS descriptor or descriptor too short [ 248.390469][ T5948] usb 5-1: config 0 interface 249 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 248.401164][ T5838] usb 2-1: config 0 interface 249 altsetting 0 has an endpoint descriptor with address 0x1B, changing to 0xB [ 248.403601][ T5948] usb 5-1: config 0 interface 249 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 7 [ 248.426613][ T53] usb 1-1: config 1 has an invalid interface number: 26 but max is 1 [ 248.442984][ T53] usb 1-1: config 1 has an invalid interface number: 89 but max is 1 [ 248.452903][ T53] usb 1-1: config 1 has an invalid descriptor of length 11, skipping remainder of the config [ 248.516013][ T53] usb 1-1: config 1 has no interface number 0 [ 248.520458][ T5838] usb 2-1: config 0 interface 249 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 248.554976][ T5838] usb 2-1: config 0 interface 249 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 7 [ 248.595006][ T53] usb 1-1: config 1 has no interface number 1 [ 248.598364][ T5838] usb 2-1: New USB device found, idVendor=20f4, idProduct=724a, bcdDevice=af.20 [ 248.621287][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.631491][ T920] usb 4-1: USB disconnect, device number 21 [ 248.638313][ T5948] usb 5-1: New USB device found, idVendor=20f4, idProduct=724a, bcdDevice=af.20 [ 248.639327][ T5838] usb 2-1: Product: syz [ 248.654940][ T53] usb 1-1: config 1 interface 26 altsetting 213 bulk endpoint 0xC has invalid maxpacket 1023 [ 248.670745][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.696800][ T5838] usb 2-1: Manufacturer: syz [ 248.696980][ T53] usb 1-1: config 1 interface 26 altsetting 213 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 248.708281][ T5838] usb 2-1: SerialNumber: syz [ 248.716126][ T5948] usb 5-1: Product: syz [ 248.737224][ T5948] usb 5-1: Manufacturer: syz [ 248.742398][ T5838] usb 2-1: config 0 descriptor?? [ 248.761366][ T5948] usb 5-1: SerialNumber: syz [ 248.763083][ T7965] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 248.785828][ T53] usb 1-1: config 1 interface 26 altsetting 213 bulk endpoint 0xD has invalid maxpacket 8 [ 248.802679][ T5948] usb 5-1: config 0 descriptor?? [ 248.854871][ T53] usb 1-1: config 1 interface 26 altsetting 213 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 248.866760][ T53] usb 1-1: config 1 interface 26 altsetting 213 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 248.867547][ T7963] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 248.897533][ T53] usb 1-1: config 1 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 248.929101][ T7782] udevd[7782]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.941238][ T53] usb 1-1: config 1 interface 26 has no altsetting 0 [ 248.965992][ T53] usb 1-1: config 1 interface 89 has no altsetting 0 [ 248.993835][ T53] usb 1-1: string descriptor 0 read error: -22 [ 249.016126][ T53] usb 1-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 249.028613][ T7965] netlink: 'syz.1.563': attribute type 10 has an invalid length. [ 249.036623][ T7965] netlink: 2 bytes leftover after parsing attributes in process `syz.1.563'. [ 249.045577][ T7965] team0: entered promiscuous mode [ 249.102214][ T53] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.115316][ T7965] team_slave_0: entered promiscuous mode [ 249.145581][ T7965] team_slave_1: entered promiscuous mode [ 249.145738][ T7963] netlink: 'syz.4.562': attribute type 10 has an invalid length. [ 249.153555][ T7965] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.243002][ T7969] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 249.265442][ T7969] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 249.297597][ T7963] netlink: 2 bytes leftover after parsing attributes in process `syz.4.562'. [ 249.315830][ T7963] team0: entered promiscuous mode [ 249.336781][ T53] usb 1-1: unknown interface protocol 0x7d, assuming v1 [ 249.343916][ T7963] team_slave_0: entered promiscuous mode [ 249.365172][ T5838] usb 2-1: USB disconnect, device number 32 [ 249.376588][ T53] usb 1-1: 26:2 : does not exist [ 249.408027][ T7963] team_slave_1: entered promiscuous mode [ 249.493042][ T53] usb 1-1: unknown interface protocol 0x13, assuming v1 [ 249.524279][ T53] usb 1-1: 89:2 : does not exist [ 249.608538][ T7963] bond0: (slave team0): Releasing backup interface [ 249.643427][ T53] usb 1-1: USB disconnect, device number 27 [ 249.673216][ T7963] bridge0: port 3(team0) entered blocking state [ 249.695075][ T7963] bridge0: port 3(team0) entered disabled state [ 249.723354][ T7963] team0: entered allmulticast mode [ 249.730251][ T7963] team_slave_0: entered allmulticast mode [ 249.740134][ T7963] team_slave_1: entered allmulticast mode [ 249.753889][ T7986] FAULT_INJECTION: forcing a failure. [ 249.753889][ T7986] name failslab, interval 1, probability 0, space 0, times 0 [ 249.810679][ T7986] CPU: 0 UID: 0 PID: 7986 Comm: syz.3.569 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 249.810711][ T7986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 249.810723][ T7986] Call Trace: [ 249.810732][ T7986] [ 249.810740][ T7986] dump_stack_lvl+0x241/0x360 [ 249.810773][ T7986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.810800][ T7986] ? __pfx__printk+0x10/0x10 [ 249.810835][ T7986] ? __pfx___might_resched+0x10/0x10 [ 249.810866][ T7986] should_fail_ex+0x424/0x570 [ 249.810903][ T7986] should_failslab+0xac/0x100 [ 249.810921][ T7986] __kvmalloc_node_noprof+0x170/0x5a0 [ 249.810939][ T7986] ? alloc_netdev_mqs+0xce7/0x1210 [ 249.810960][ T7986] ? alloc_netdev_mqs+0xc7c/0x1210 [ 249.810997][ T7986] alloc_netdev_mqs+0xce7/0x1210 [ 249.811025][ T7986] l2tp_eth_create+0x1cb/0xc30 [ 249.811052][ T7986] ? __asan_memcpy+0x40/0x70 [ 249.811086][ T7986] ? nla_memcpy+0x88/0xb0 [ 249.811104][ T7986] ? __msecs_to_jiffies+0x1e/0x50 [ 249.811130][ T7986] ? __pfx_l2tp_eth_create+0x10/0x10 [ 249.811166][ T7986] l2tp_nl_cmd_session_create+0x838/0xf40 [ 249.811204][ T7986] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 249.811228][ T7986] ? genl_family_rcv_msg_attrs_parse+0x1d4/0x290 [ 249.811259][ T7986] genl_rcv_msg+0xb38/0xf00 [ 249.811303][ T7986] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.811331][ T7986] ? __dev_queue_xmit+0x1780/0x3f60 [ 249.811347][ T7986] ? kasan_save_track+0x3f/0x80 [ 249.811373][ T7986] ? __kasan_slab_alloc+0x66/0x80 [ 249.811391][ T7986] ? do_syscall_64+0xf3/0x230 [ 249.811425][ T7986] ? __lock_acquire+0xad5/0xd80 [ 249.811450][ T7986] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 249.811489][ T7986] netlink_rcv_skb+0x208/0x480 [ 249.811515][ T7986] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.811538][ T7986] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 249.811578][ T7986] ? netlink_deliver_tap+0x2e/0x1b0 [ 249.811612][ T7986] genl_rcv+0x28/0x40 [ 249.811645][ T7986] netlink_unicast+0x7f8/0x9a0 [ 249.811674][ T7986] ? __pfx_netlink_unicast+0x10/0x10 [ 249.811691][ T7986] ? skb_put+0x114/0x1f0 [ 249.811715][ T7986] netlink_sendmsg+0x8c3/0xcd0 [ 249.811757][ T7986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.811787][ T7986] ? aa_sock_msg_perm+0x91/0x160 [ 249.811821][ T7986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.811837][ T7986] __sock_sendmsg+0x221/0x270 [ 249.811857][ T7986] ____sys_sendmsg+0x523/0x860 [ 249.811895][ T7986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.811925][ T7986] ? __fget_files+0x2a/0x420 [ 249.811952][ T7986] ? __fget_files+0x2a/0x420 [ 249.811983][ T7986] __sys_sendmsg+0x271/0x360 [ 249.812009][ T7986] ? __pfx___sys_sendmsg+0x10/0x10 [ 249.812102][ T7986] ? do_syscall_64+0xb6/0x230 [ 249.812126][ T7986] do_syscall_64+0xf3/0x230 [ 249.812141][ T7986] ? clear_bhb_loop+0x45/0xa0 [ 249.812159][ T7986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.812173][ T7986] RIP: 0033:0x7fa67f58d169 [ 249.812192][ T7986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.812211][ T7986] RSP: 002b:00007fa680364038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.812233][ T7986] RAX: ffffffffffffffda RBX: 00007fa67f7a5fa0 RCX: 00007fa67f58d169 [ 249.812248][ T7986] RDX: 0000000000000030 RSI: 0000200000000140 RDI: 0000000000000005 [ 249.812260][ T7986] RBP: 00007fa680364090 R08: 0000000000000000 R09: 0000000000000000 [ 249.812273][ T7986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 249.812284][ T7986] R13: 0000000000000000 R14: 00007fa67f7a5fa0 R15: 00007fa67f8cfa28 [ 249.812307][ T7986] [ 250.058845][ T7782] udevd[7782]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.063281][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.185460][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.191495][ C0] hrtimer: interrupt took 375585632 ns [ 250.223745][ T5948] usb 5-1: USB disconnect, device number 24 [ 250.291556][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.732619][ T7997] fuse: Bad value for 'user_id' [ 250.738205][ T7997] fuse: Bad value for 'user_id' [ 251.042828][ T8008] netlink: 'syz.4.577': attribute type 10 has an invalid length. [ 251.072888][ T8008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.091616][ T8008] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 251.185354][ T8008] netlink: 'syz.4.577': attribute type 29 has an invalid length. [ 251.196106][ T5838] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 251.236720][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 251.429019][ T10] usb 4-1: config 0 has an invalid interface number: 163 but max is 0 [ 251.451681][ T10] usb 4-1: config 0 has no interface number 0 [ 251.473572][ T10] usb 4-1: config 0 interface 163 altsetting 0 endpoint 0x1 has invalid maxpacket 560, setting to 64 [ 251.492558][ T10] usb 4-1: config 0 interface 163 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 251.504544][ T10] usb 4-1: config 0 interface 163 altsetting 0 endpoint 0xC has invalid maxpacket 463, setting to 64 [ 251.519586][ T10] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=90.11 [ 251.973249][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.986062][ T10] usb 4-1: Product: syz [ 251.990409][ T10] usb 4-1: Manufacturer: syz [ 252.000403][ T10] usb 4-1: SerialNumber: syz [ 252.033949][ T10] usb 4-1: config 0 descriptor?? [ 252.547560][ T8006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.606385][ T8006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.905583][ T10] ftdi_sio 4-1:0.163: FTDI USB Serial Device converter detected [ 252.935561][ T10] ftdi_sio ttyUSB0: unknown device type: 0x9011 [ 253.093428][ T10] usb 4-1: USB disconnect, device number 22 [ 253.145250][ T10] ftdi_sio 4-1:0.163: device disconnected [ 253.679340][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.581'. [ 254.277930][ T8035] netlink: 156 bytes leftover after parsing attributes in process `syz.4.583'. [ 254.436978][ T5838] usb 2-1: device descriptor read/64, error -71 [ 254.729364][ T5838] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 254.896627][ T8054] netlink: 'syz.4.589': attribute type 3 has an invalid length. [ 254.904835][ T8054] netlink: 76 bytes leftover after parsing attributes in process `syz.4.589'. [ 254.920375][ T5838] usb 2-1: Using ep0 maxpacket: 16 [ 255.216284][ T5838] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 255.235743][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.257224][ T5838] usb 2-1: config 0 descriptor?? [ 255.273890][ T5838] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 255.676162][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 255.731023][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.744461][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.896202][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 255.917532][ T10] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 255.945349][ T10] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 255.970515][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 256.002241][ T10] usb 5-1: config 1 has no interface number 0 [ 256.009218][ T53] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 256.042993][ T10] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 256.072737][ T10] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 256.125120][ T10] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 256.155499][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.218132][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 256.239798][ T5838] gspca_sonixj: reg_w1 err -110 [ 256.251271][ T5838] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 256.356902][ T5838] usb 2-1: USB disconnect, device number 34 [ 256.402625][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 256.538080][ T8073] netlink: 'syz.3.595': attribute type 10 has an invalid length. [ 256.588612][ T8073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.619913][ T8073] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 257.106707][ T1207] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 257.456284][ T1207] usb 4-1: Using ep0 maxpacket: 32 [ 257.486770][ T5838] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 257.507827][ T1207] usb 4-1: config 0 has an invalid interface number: 249 but max is 0 [ 257.522380][ T1207] usb 4-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 257.534265][ T1207] usb 4-1: config 0 has no interface number 0 [ 257.546633][ T920] usb 5-1: USB disconnect, device number 25 [ 257.572375][ T920] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 257.662488][ T1207] usb 4-1: config 0 interface 249 altsetting 0 has an endpoint descriptor with address 0x1B, changing to 0xB [ 257.689995][ T1207] usb 4-1: config 0 interface 249 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 257.737318][ T1207] usb 4-1: config 0 interface 249 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 7 [ 257.892447][ T1207] usb 4-1: New USB device found, idVendor=20f4, idProduct=724a, bcdDevice=af.20 [ 257.922188][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.951698][ T1207] usb 4-1: Product: syz [ 257.962684][ T1207] usb 4-1: Manufacturer: syz [ 257.975446][ T1207] usb 4-1: SerialNumber: syz [ 257.992889][ T1207] usb 4-1: config 0 descriptor?? [ 258.006015][ T8075] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 258.257379][ T8075] netlink: 'syz.3.596': attribute type 10 has an invalid length. [ 258.273863][ T8075] netlink: 2 bytes leftover after parsing attributes in process `syz.3.596'. [ 258.329615][ T1207] usb 4-1: USB disconnect, device number 23 [ 258.741579][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'. [ 258.780924][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'. [ 259.082931][ T8108] netlink: 32 bytes leftover after parsing attributes in process `syz.4.607'. [ 259.166210][ T8108] netlink: 104 bytes leftover after parsing attributes in process `syz.4.607'. [ 259.177121][ T53] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 259.315909][ T8112] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 259.322758][ T8112] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 259.352012][ T53] usb 1-1: unable to get BOS descriptor or descriptor too short [ 259.362208][ T8112] vhci_hcd vhci_hcd.0: Device attached [ 259.371517][ T53] usb 1-1: not running at top speed; connect to a high speed hub [ 259.385106][ T8120] netlink: 16 bytes leftover after parsing attributes in process `syz.5.609'. [ 259.393042][ T53] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 259.406847][ T8117] vhci_hcd: connection closed [ 259.410135][ T12] vhci_hcd: stop threads [ 259.430315][ T53] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 259.442436][ T12] vhci_hcd: release socket [ 259.452420][ T12] vhci_hcd: disconnect device [ 259.469610][ T53] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 22619, setting to 1023 [ 259.504057][ T53] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 259.523946][ T53] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.545003][ T53] usb 1-1: Product: syz [ 259.554675][ T53] usb 1-1: Manufacturer: syz [ 259.573948][ T53] usb 1-1: SerialNumber: syz [ 259.676002][ T5838] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 259.792129][ T8100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.818312][ T8100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.842557][ T5838] usb 6-1: config 2 has an invalid interface number: 83 but max is 0 [ 259.851911][ T5838] usb 6-1: config 2 has an invalid interface number: 5 but max is 0 [ 259.929856][ T5838] usb 6-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 259.952292][ T5838] usb 6-1: config 2 has no interface number 0 [ 259.962393][ T5838] usb 6-1: config 2 has no interface number 1 [ 259.962524][ T53] usb 1-1: cannot find UAC_HEADER [ 259.968542][ T5838] usb 6-1: too many endpoints for config 2 interface 5 altsetting 6: 249, using maximum allowed: 30 [ 259.968585][ T5838] usb 6-1: config 2 interface 5 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 249 [ 259.968613][ T5838] usb 6-1: config 2 interface 5 has no altsetting 0 [ 259.968648][ T5838] usb 6-1: New USB device found, idVendor=045e, idProduct=00c2, bcdDevice=e1.35 [ 259.968672][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.068954][ T8134] netlink: 156 bytes leftover after parsing attributes in process `syz.1.613'. [ 260.140166][ T53] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 260.204871][ T53] usb 1-1: USB disconnect, device number 29 [ 260.418946][ T8139] netlink: 'syz.5.609': attribute type 11 has an invalid length. [ 260.458621][ T7782] udevd[7782]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.672469][ T5838] usb 6-1: string descriptor 0 read error: -71 [ 260.820013][ T5838] usb 6-1: USB disconnect, device number 21 [ 261.587608][ T8142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.704566][ T8170] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 263.036585][ T8158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.195403][ T8174] FAULT_INJECTION: forcing a failure. [ 263.195403][ T8174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.256001][ T8174] CPU: 0 UID: 0 PID: 8174 Comm: syz.3.622 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 263.256032][ T8174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 263.256045][ T8174] Call Trace: [ 263.256053][ T8174] [ 263.256062][ T8174] dump_stack_lvl+0x241/0x360 [ 263.256099][ T8174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.256126][ T8174] ? __pfx__printk+0x10/0x10 [ 263.256167][ T8174] should_fail_ex+0x424/0x570 [ 263.256205][ T8174] _copy_from_user+0x2d/0xb0 [ 263.256233][ T8174] copy_msghdr_from_user+0xb3/0x580 [ 263.256263][ T8174] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 263.256305][ T8174] do_recvmmsg+0x3bf/0xab0 [ 263.256337][ T8174] ? __pfx_do_recvmmsg+0x10/0x10 [ 263.256374][ T8174] ? rcu_read_lock_any_held+0xbb/0x160 [ 263.256405][ T8174] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 263.256437][ T8174] ? vfs_write+0xb29/0xd10 [ 263.256476][ T8174] ? ksys_write+0x24e/0x2d0 [ 263.256508][ T8174] ? __mutex_unlock_slowpath+0x229/0x800 [ 263.256539][ T8174] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 263.256558][ T8174] ? __fget_files+0x2a/0x420 [ 263.256598][ T8174] __x64_sys_recvmmsg+0x1ab/0x260 [ 263.256621][ T8174] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 263.256648][ T8174] ? do_syscall_64+0xb6/0x230 [ 263.256670][ T8174] do_syscall_64+0xf3/0x230 [ 263.256690][ T8174] ? clear_bhb_loop+0x45/0xa0 [ 263.256715][ T8174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.256734][ T8174] RIP: 0033:0x7fa67f58d169 [ 263.256754][ T8174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.256776][ T8174] RSP: 002b:00007fa680364038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 263.256799][ T8174] RAX: ffffffffffffffda RBX: 00007fa67f7a5fa0 RCX: 00007fa67f58d169 [ 263.256814][ T8174] RDX: 040000000000049e RSI: 0000200000000300 RDI: 0000000000000003 [ 263.256827][ T8174] RBP: 00007fa680364090 R08: 0000000000000000 R09: 0000000000000000 [ 263.256840][ T8174] R10: 00001000000000fe R11: 0000000000000246 R12: 0000000000000002 [ 263.256853][ T8174] R13: 0000000000000000 R14: 00007fa67f7a5fa0 R15: 00007fa67f8cfa28 [ 263.256881][ T8174] [ 263.767462][ T8180] FAULT_INJECTION: forcing a failure. [ 263.767462][ T8180] name failslab, interval 1, probability 0, space 0, times 0 [ 263.788127][ T8180] CPU: 0 UID: 0 PID: 8180 Comm: syz.1.625 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 263.788149][ T8180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 263.788158][ T8180] Call Trace: [ 263.788164][ T8180] [ 263.788170][ T8180] dump_stack_lvl+0x241/0x360 [ 263.788199][ T8180] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.788230][ T8180] ? __pfx__printk+0x10/0x10 [ 263.788254][ T8180] ? __pfx___might_resched+0x10/0x10 [ 263.788286][ T8180] should_fail_ex+0x424/0x570 [ 263.788316][ T8180] should_failslab+0xac/0x100 [ 263.788338][ T8180] __kmalloc_cache_noprof+0x73/0x370 [ 263.788360][ T8180] ? nf_tables_newchain+0x24e0/0x3390 [ 263.788383][ T8180] nf_tables_newchain+0x24e0/0x3390 [ 263.788423][ T8180] ? __pfx_nf_tables_newchain+0x10/0x10 [ 263.788465][ T8180] ? __lock_acquire+0xad5/0xd80 [ 263.788498][ T8180] ? __nla_parse+0x40/0x60 [ 263.788522][ T8180] nfnetlink_rcv+0x12eb/0x28f0 [ 263.788544][ T8180] ? __kernel_text_address+0xd/0x40 [ 263.788586][ T8180] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 263.788620][ T8180] ? __lock_acquire+0xad5/0xd80 [ 263.788677][ T8180] ? netlink_deliver_tap+0x2e/0x1b0 [ 263.788701][ T8180] ? netlink_deliver_tap+0x2e/0x1b0 [ 263.788721][ T8180] netlink_unicast+0x7f8/0x9a0 [ 263.788746][ T8180] ? __pfx_netlink_unicast+0x10/0x10 [ 263.788763][ T8180] ? skb_put+0x114/0x1f0 [ 263.788791][ T8180] netlink_sendmsg+0x8c3/0xcd0 [ 263.788822][ T8180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.788848][ T8180] ? aa_sock_msg_perm+0x91/0x160 [ 263.788872][ T8180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.788897][ T8180] __sock_sendmsg+0x221/0x270 [ 263.788917][ T8180] ____sys_sendmsg+0x523/0x860 [ 263.788946][ T8180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.788967][ T8180] ? __fget_files+0x2a/0x420 [ 263.788987][ T8180] ? __fget_files+0x2a/0x420 [ 263.789011][ T8180] __sys_sendmsg+0x271/0x360 [ 263.789037][ T8180] ? __pfx___sys_sendmsg+0x10/0x10 [ 263.789099][ T8180] ? do_syscall_64+0xb6/0x230 [ 263.789116][ T8180] do_syscall_64+0xf3/0x230 [ 263.789130][ T8180] ? clear_bhb_loop+0x45/0xa0 [ 263.789148][ T8180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.789162][ T8180] RIP: 0033:0x7f6effb8d169 [ 263.789175][ T8180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.789188][ T8180] RSP: 002b:00007f6f00a19038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.789204][ T8180] RAX: ffffffffffffffda RBX: 00007f6effda5fa0 RCX: 00007f6effb8d169 [ 263.789215][ T8180] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 263.789225][ T8180] RBP: 00007f6f00a19090 R08: 0000000000000000 R09: 0000000000000000 [ 263.789234][ T8180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 263.789242][ T8180] R13: 0000000000000000 R14: 00007f6effda5fa0 R15: 00007f6effecfa28 [ 263.789265][ T8180] [ 264.658267][ T5948] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 264.780361][ T8189] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.831162][ T5948] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 264.882239][ T5948] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.924111][ T8190] netlink: 32 bytes leftover after parsing attributes in process `syz.0.627'. [ 264.943105][ T5948] usb 4-1: config 0 has no interface number 0 [ 264.953217][ T8190] netlink: 32 bytes leftover after parsing attributes in process `syz.0.627'. [ 264.972807][ T5948] usb 4-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 265.041316][ T5948] usb 4-1: config 0 interface 117 altsetting 0 has an endpoint descriptor with address 0x4E, changing to 0xE [ 265.044019][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.629'. [ 265.221078][ T5948] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 265.290835][ T5948] usb 4-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 265.337217][ T5948] usb 4-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 265.352271][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.378100][ T5948] usb 4-1: Product: syz [ 265.391283][ T5948] usb 4-1: Manufacturer: syz [ 265.414339][ T5948] usb 4-1: SerialNumber: syz [ 265.451833][ T5948] usb 4-1: config 0 descriptor?? [ 265.470967][ T5948] HFC-S_USB 4-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 266.152428][ T8220] netlink: 'syz.1.634': attribute type 10 has an invalid length. [ 266.221613][ T8220] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 266.359778][ T8216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.756327][ T5948] usb 4-1: USB disconnect, device number 24 [ 267.982273][ T8240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.640'. [ 268.012983][ T8242] netlink: 60 bytes leftover after parsing attributes in process `syz.3.639'. [ 268.620091][ T8255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.645'. [ 269.846334][ T5838] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 270.050999][ T8280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.652'. [ 270.084101][ T5838] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 270.102941][ T5838] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.156581][ T5838] usb 4-1: config 0 has no interface number 0 [ 270.177265][ T5838] usb 4-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 270.218939][ T5838] usb 4-1: config 0 interface 117 altsetting 0 has an endpoint descriptor with address 0x4E, changing to 0xE [ 270.276007][ T5838] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 270.316280][ T5838] usb 4-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 270.381262][ T5838] usb 4-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 270.419003][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.459056][ T5838] usb 4-1: Product: syz [ 270.463286][ T5838] usb 4-1: Manufacturer: syz [ 270.500174][ T5838] usb 4-1: SerialNumber: syz [ 270.548288][ T5838] usb 4-1: config 0 descriptor?? [ 270.576691][ T5838] HFC-S_USB 4-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 271.186316][ T5838] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 271.333728][ T8298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.348890][ T5838] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.376577][ T5838] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 271.392434][ T5838] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.407245][ T8298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.453855][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.484946][ T5838] usb 2-1: Product: syz [ 271.496290][ T5838] usb 2-1: Manufacturer: syz [ 271.500942][ T5838] usb 2-1: SerialNumber: syz [ 271.596143][ T24] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 271.721632][ T8293] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 271.826155][ T24] usb 6-1: device descriptor read/64, error -71 [ 272.136131][ T24] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 272.340124][ T8293] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 272.378253][ T24] usb 6-1: device descriptor read/64, error -71 [ 272.506318][ T24] usb usb6-port1: attempt power cycle [ 272.554770][ T5838] cdc_mbim 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 272.577285][ T5838] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 272.603099][ T5838] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 272.708246][ T10] usb 4-1: USB disconnect, device number 25 [ 272.755609][ T5838] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 272.785767][ T5838] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 272.835637][ T5838] wwan wwan0: port wwan0mbim0 attached [ 272.846021][ T24] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 272.901916][ T24] usb 6-1: device descriptor read/8, error -71 [ 272.927949][ T5838] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 42:42:42:42:42:42 [ 273.013105][ T5838] usb 2-1: USB disconnect, device number 35 [ 273.064194][ T5838] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 273.186607][ T24] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 273.340968][ T5838] wwan wwan0: port wwan0mbim0 disconnected [ 273.465857][ T8312] fuse: Bad value for 'fd' [ 273.679031][ T24] usb 6-1: device descriptor read/8, error -71 [ 273.787968][ T24] usb usb6-port1: unable to enumerate USB device [ 273.902222][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.666'. [ 275.308586][ T5838] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 275.508100][ T5838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 275.539838][ T5838] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 275.587139][ T5838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 275.643795][ T5838] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 275.688613][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.726348][ T5838] usb 6-1: Product: syz [ 275.739175][ T5838] usb 6-1: Manufacturer: syz [ 275.754183][ T5838] usb 6-1: SerialNumber: syz [ 275.792819][ T5838] usb 6-1: config 0 descriptor?? [ 275.806779][ T8338] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 275.815090][ T8344] loop2: detected capacity change from 0 to 7 [ 275.823337][ T8338] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 275.835949][ T8344] Dev loop2: unable to read RDB block 7 [ 275.841594][ T8344] loop2: AHDI p1 p2 p3 [ 275.873726][ T5838] usb 6-1: ucan: probing device on interface #0 [ 275.887052][ T8344] loop2: partition table partially beyond EOD, truncated [ 275.893391][ T8348] FAULT_INJECTION: forcing a failure. [ 275.893391][ T8348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.916933][ T8348] CPU: 1 UID: 0 PID: 8348 Comm: syz.3.676 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 275.916962][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 275.916975][ T8348] Call Trace: [ 275.916983][ T8348] [ 275.916992][ T8348] dump_stack_lvl+0x241/0x360 [ 275.917032][ T8348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.917063][ T8348] ? __pfx__printk+0x10/0x10 [ 275.917106][ T8348] should_fail_ex+0x424/0x570 [ 275.917144][ T8348] _copy_from_user+0x2d/0xb0 [ 275.917175][ T8348] kstrtouint_from_user+0xce/0x1a0 [ 275.917204][ T8348] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 275.917231][ T8348] ? __lock_acquire+0xad5/0xd80 [ 275.917265][ T8348] proc_fail_nth_write+0xac/0x2d0 [ 275.917293][ T8348] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 275.917323][ T8348] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 275.917357][ T8348] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 275.917386][ T8348] vfs_write+0x2bc/0xd10 [ 275.917422][ T8348] ? fdget_pos+0x247/0x310 [ 275.917451][ T8348] ? __pfx_vfs_write+0x10/0x10 [ 275.917485][ T8348] ? __fget_files+0x2a/0x420 [ 275.917511][ T8348] ? __fget_files+0x39d/0x420 [ 275.917535][ T8348] ? __fget_files+0x2a/0x420 [ 275.917569][ T8348] ksys_write+0x19d/0x2d0 [ 275.917603][ T8348] ? __pfx_ksys_write+0x10/0x10 [ 275.917639][ T8348] ? do_syscall_64+0xb6/0x230 [ 275.917664][ T8348] do_syscall_64+0xf3/0x230 [ 275.917684][ T8348] ? clear_bhb_loop+0x45/0xa0 [ 275.917710][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.917738][ T8348] RIP: 0033:0x7fa67f58bc1f [ 275.917758][ T8348] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 275.917775][ T8348] RSP: 002b:00007fa680364030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 275.917797][ T8348] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa67f58bc1f [ 275.917811][ T8348] RDX: 0000000000000001 RSI: 00007fa6803640a0 RDI: 0000000000000005 [ 275.917825][ T8348] RBP: 00007fa680364090 R08: 0000000000000000 R09: 0000000000000000 [ 275.917838][ T8348] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 275.917850][ T8348] R13: 0000000000000000 R14: 00007fa67f7a5fa0 R15: 00007fa67f8cfa28 [ 275.917883][ T8348] [ 275.936007][ T8344] loop2: p1 start 1601398130 is beyond EOD, truncated [ 276.164064][ T8344] loop2: p2 start 1702059890 is beyond EOD, truncated [ 276.176451][ T5838] usb 6-1: ucan: could not read protocol version, ret=0 [ 276.200032][ T8347] Dev loop2: unable to read RDB block 7 [ 276.205779][ T5838] usb 6-1: ucan: probe failed; try to update the device firmware [ 276.222515][ T8347] loop2: AHDI p1 p2 p3 [ 276.228649][ T8347] loop2: partition table partially beyond EOD, truncated [ 276.235864][ T8347] loop2: p1 start 1601398130 is beyond EOD, truncated [ 276.248240][ T8347] loop2: p2 start 1702059890 is beyond EOD, truncated [ 276.480806][ T8354] netlink: 60 bytes leftover after parsing attributes in process `syz.5.672'. [ 276.503637][ T8338] netlink: 60 bytes leftover after parsing attributes in process `syz.5.672'. [ 276.556053][ T53] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 276.755623][ T53] usb 4-1: Using ep0 maxpacket: 32 [ 276.762805][ T53] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 276.781762][ T53] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 276.806020][ T53] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 276.826229][ T53] usb 4-1: config 1 has no interface number 0 [ 276.852628][ T53] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 276.885959][ T53] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 276.912034][ T53] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 276.938211][ T53] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.973371][ T53] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 277.002359][ T8360] netlink: 'syz.4.679': attribute type 3 has an invalid length. [ 277.173036][ T53] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 277.601520][ T8369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.698152][ T8369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.126785][ T53] usb 4-1: USB disconnect, device number 26 [ 278.133746][ T53] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 278.307526][ T8377] bridge0: port 4(hsr0) entered blocking state [ 278.314214][ T8377] bridge0: port 4(hsr0) entered disabled state [ 278.333215][ T8377] hsr0: entered allmulticast mode [ 278.441872][ T8377] hsr_slave_0: entered allmulticast mode [ 278.482456][ T8377] hsr_slave_1: entered allmulticast mode [ 278.511957][ T8377] hsr0: entered promiscuous mode [ 278.605827][ T8377] bridge0: port 4(hsr0) entered blocking state [ 278.612416][ T8377] bridge0: port 4(hsr0) entered forwarding state [ 279.096170][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 279.864998][ T920] usb 6-1: USB disconnect, device number 26 [ 280.039455][ T31] INFO: task syz.2.40:6093 blocked for more than 143 seconds. [ 280.099141][ T8395] ieee80211 phy31: Selected rate control algorithm 'minstrel_ht' [ 280.107293][ T31] Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 [ 280.150857][ T31] Blocked by coredump. [ 280.170022][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 280.208472][ T31] task:syz.2.40 state:D stack:24520 pid:6093 tgid:6092 ppid:5860 task_flags:0x400448 flags:0x00004000 [ 280.244152][ T31] Call Trace: [ 280.253807][ T31] [ 280.263031][ T31] __schedule+0x1b88/0x5240 [ 280.268556][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.689'. [ 280.278341][ T31] ? schedule+0x163/0x360 [ 280.283397][ T31] ? __pfx___schedule+0x10/0x10 [ 280.289887][ T31] ? schedule+0x90/0x360 [ 280.291975][ T8399] ieee80211 phy32: Selected rate control algorithm 'minstrel_ht' [ 280.294171][ T31] ? schedule+0x90/0x360 [ 280.643381][ T31] schedule+0x163/0x360 [ 280.652811][ T31] schedule_timeout+0xb1/0x2b0 [ 280.665336][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 280.671262][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 280.677847][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 280.683509][ T31] ? wait_for_completion+0x2d4/0x600 [ 280.712871][ T31] wait_for_completion+0x32f/0x600 [ 280.718828][ T31] ? rcu_is_watching+0x15/0xb0 [ 280.723884][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 280.732893][ T31] ? __rcu_read_unlock+0xa1/0x110 [ 280.738484][ T31] io_wq_put_and_exit+0x374/0x750 [ 280.743693][ T31] ? io_wq_put_and_exit+0x1b3/0x750 [ 280.749559][ T31] ? __pfx_xa_find_after+0x10/0x10 [ 280.754850][ T31] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 280.761716][ T31] ? io_uring_clean_tctx+0x10c/0x1e0 [ 280.767564][ T31] ? io_uring_del_tctx_node+0x266/0x2b0 [ 280.773291][ T31] io_uring_clean_tctx+0x16a/0x1e0 [ 280.779155][ T31] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 280.784977][ T31] ? percpu_counter_add_batch+0x1a2/0x1f0 [ 280.791375][ T31] io_uring_cancel_generic+0x74f/0x800 [ 280.797639][ T31] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 280.803874][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 280.813559][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 280.819475][ T31] ? io_uring_unreg_ringfd+0x52f/0x540 [ 280.825139][ T31] do_exit+0x685/0x2950 [ 280.830001][ T31] ? do_raw_spin_lock+0x151/0x370 [ 280.835243][ T31] ? __pfx_do_exit+0x10/0x10 [ 280.840644][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 280.846551][ T31] do_group_exit+0x207/0x2c0 [ 280.851322][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 280.857178][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 280.862556][ T31] get_signal+0x1696/0x1730 [ 280.867744][ T31] ? __pfx_get_signal+0x10/0x10 [ 280.872761][ T31] arch_do_signal_or_restart+0x98/0x840 [ 280.878965][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 280.885337][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 [ 280.891770][ T31] syscall_exit_to_user_mode+0xce/0x340 [ 280.900201][ T31] do_syscall_64+0x100/0x230 [ 280.904839][ T31] ? clear_bhb_loop+0x45/0xa0 [ 280.917847][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.923804][ T31] RIP: 0033:0x7f1a3618d169 [ 280.932296][ T31] RSP: 002b:00007f1a33ff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 280.941022][ T31] RAX: fffffffffffffe00 RBX: 00007f1a363a5fa8 RCX: 00007f1a3618d169 [ 280.949615][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1a363a5fa8 [ 280.957759][ T31] RBP: 00007f1a363a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 280.965841][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a363a5fac [ 280.974038][ T31] R13: 0000000000000000 R14: 00007f1a364cf940 R15: 00007f1a364cfa28 [ 280.982506][ T31] [ 280.985606][ T31] [ 280.985606][ T31] Showing all locks held in the system: [ 280.993533][ T31] 1 lock held by khungtaskd/31: [ 281.002655][ T31] #0: ffffffff8ed3b560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 281.015555][ T31] 2 locks held by kworker/u8:10/3553: [ 281.027784][ T31] #0: ffff88801db21148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 281.043617][ T31] #1: ffffc9000cda7c60 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 281.060678][ T31] 2 locks held by getty/5593: [ 281.065395][ T31] #0: ffff88814d9e50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 281.088189][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x53d/0x16b0 [ 281.102049][ T31] 1 lock held by syz-executor/5828: [ 281.109836][ T31] 1 lock held by iou-wrk-6093/6107: [ 281.120470][ T31] #0: ffff88802d71e0a8 (&ctx->uring_lock){+.+.}-{4:4}, at: io_provide_buffers+0x701/0x980 [ 281.133407][ T31] 1 lock held by iou-wrk-6093/6111: [ 281.139836][ T31] #0: ffff88802d71e0a8 (&ctx->uring_lock){+.+.}-{4:4}, at: io_provide_buffers+0x701/0x980 [ 281.150593][ T31] 1 lock held by iou-wrk-6093/6112: [ 281.155820][ T31] #0: ffff88802d71e0a8 (&ctx->uring_lock){+.+.}-{4:4}, at: io_provide_buffers+0x701/0x980 [ 281.166626][ T31] 1 lock held by iou-wrk-6093/6113: [ 281.171855][ T31] #0: ffff88802d71e0a8 (&ctx->uring_lock){+.+.}-{4:4}, at: io_provide_buffers+0x701/0x980 [ 281.182337][ T31] 1 lock held by iou-wrk-6093/6114: [ 281.189530][ T31] #0: ffff88802d71e0a8 (&ctx->uring_lock){+.+.}-{4:4}, at: io_provide_buffers+0x701/0x980 [ 281.202798][ T31] 1 lock held by iou-wrk-6093/6115: [ 281.209885][ T31] #0: ffff88802d71e0a8 (&ctx->uring_lock){+.+.}-{4:4}, at: io_provide_buffers+0x701/0x980 [ 281.228488][ T31] 1 lock held by iou-wrk-6093/6116: [ 281.233790][ T31] #0: ffff88802d71e0a8 (&ctx->uring_lock){+.+.}-{4:4}, at: io_provide_buffers+0x701/0x980 [ 281.254168][ T31] 1 lock held by iou-wrk-6093/6117: [ 281.260882][ T31] 1 lock held by syz.1.687/8393: [ 281.271171][ T31] #0: ffffffff8ed40940 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 281.281881][ T31] 1 lock held by syz.5.688/8396: [ 281.287110][ T31] #0: ffffffff8ed40940 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 281.297403][ T31] [ 281.299754][ T31] ============================================= [ 281.299754][ T31] [ 281.347001][ T31] NMI backtrace for cpu 0 [ 281.347021][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 281.347045][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 281.347058][ T31] Call Trace: [ 281.347065][ T31] [ 281.347073][ T31] dump_stack_lvl+0x241/0x360 [ 281.347111][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.347141][ T31] ? __pfx__printk+0x10/0x10 [ 281.347181][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 281.347215][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 281.347240][ T31] ? _printk+0xd5/0x120 [ 281.347268][ T31] ? __wake_up_klogd+0xcc/0x110 [ 281.347300][ T31] ? __pfx__printk+0x10/0x10 [ 281.347331][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 281.347354][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 281.347386][ T31] watchdog+0x1058/0x10a0 [ 281.347408][ T31] ? watchdog+0x1ea/0x10a0 [ 281.347434][ T31] ? __pfx_watchdog+0x10/0x10 [ 281.347454][ T31] kthread+0x7b7/0x940 [ 281.347485][ T31] ? __pfx_watchdog+0x10/0x10 [ 281.347506][ T31] ? __pfx_kthread+0x10/0x10 [ 281.347532][ T31] ? __pfx_kthread+0x10/0x10 [ 281.347559][ T31] ? __pfx_kthread+0x10/0x10 [ 281.347586][ T31] ? __pfx_kthread+0x10/0x10 [ 281.347613][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 281.347639][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 281.347669][ T31] ? __pfx_kthread+0x10/0x10 [ 281.347698][ T31] ret_from_fork+0x4b/0x80 [ 281.347719][ T31] ? __pfx_kthread+0x10/0x10 [ 281.347747][ T31] ret_from_fork_asm+0x1a/0x30 [ 281.347783][ T31] [ 281.347791][ T31] Sending NMI from CPU 0 to CPUs 1: [ 281.513424][ C1] NMI backtrace for cpu 1 [ 281.513442][ C1] CPU: 1 UID: 0 PID: 6292 Comm: syz-executor Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 281.513462][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 281.513473][ C1] RIP: 0010:do_wait+0x3/0x510 [ 281.513500][ C1] Code: 8b 3c 24 e8 1f ab a8 00 e9 40 ff ff ff e8 e5 cf a9 0a 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 <41> 56 41 55 41 54 53 48 83 ec 40 49 89 fd 49 bf 00 00 00 00 00 fc [ 281.513514][ C1] RSP: 0018:ffffc9000c83fc48 EFLAGS: 00000246 [ 281.513530][ C1] RAX: 1ffff92001907f98 RBX: 1ffff92001907f97 RCX: ffff8880268fbc00 [ 281.513543][ C1] RDX: ffffc9000c83fca0 RSI: ffffffff8ebdc9d0 RDI: ffffc9000c83fca0 [ 281.513555][ C1] RBP: ffffc9000c83fd70 R08: 0000000000000005 R09: ffffffff8183cc0d [ 281.513567][ C1] R10: 0000000000000002 R11: ffff8880268fbc00 R12: dffffc0000000000 [ 281.513578][ C1] R13: 1ffff92001907f90 R14: 0000000000000000 R15: ffffffff9366f020 [ 281.513589][ C1] FS: 0000555555ed3500(0000) GS:ffff8881250b1000(0000) knlGS:0000000000000000 [ 281.513603][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.513614][ C1] CR2: 00007f8853d79178 CR3: 000000007e260000 CR4: 00000000003526f0 [ 281.513629][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 281.513638][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 281.513649][ C1] Call Trace: [ 281.513656][ C1] [ 281.513663][ C1] kernel_wait4+0x2ac/0x3c0 [ 281.513688][ C1] ? __pfx_kernel_wait4+0x10/0x10 [ 281.513715][ C1] ? hrtimer_nanosleep+0x352/0x410 [ 281.513739][ C1] __x64_sys_wait4+0x136/0x1e0 [ 281.513761][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 281.513787][ C1] ? __pfx___x64_sys_wait4+0x10/0x10 [ 281.513823][ C1] ? do_syscall_64+0xb6/0x230 [ 281.513840][ C1] do_syscall_64+0xf3/0x230 [ 281.513855][ C1] ? clear_bhb_loop+0x45/0xa0 [ 281.513874][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.513890][ C1] RIP: 0033:0x7f86b0b833d7 [ 281.513903][ C1] Code: 89 7c 24 10 48 89 4c 24 18 e8 45 1b 03 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 95 1b 03 00 8b 44 [ 281.513916][ C1] RSP: 002b:00007f86b0ecfd80 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 281.513950][ C1] RAX: ffffffffffffffda RBX: 0000000000000192 RCX: 00007f86b0b833d7 [ 281.513962][ C1] RDX: 0000000040000001 RSI: 00007f86b0ecfdec RDI: 00000000ffffffff [ 281.513973][ C1] RBP: 00007f86b0ecfdec R08: 0000000000000000 R09: 0000000000000000 [ 281.513984][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 281.513994][ C1] R13: 00000000000927c0 R14: 0000000000044852 R15: 00007f86b0ecfe40 [ 281.514014][ C1] [ 281.515687][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 281.789220][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 281.800680][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 281.810739][ T31] Call Trace: [ 281.814025][ T31] [ 281.816991][ T31] dump_stack_lvl+0x241/0x360 [ 281.821696][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.826908][ T31] ? __pfx__printk+0x10/0x10 [ 281.831525][ T31] ? vscnprintf+0x5d/0x90 [ 281.835886][ T31] panic+0x349/0x880 [ 281.839802][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 281.845188][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 281.851360][ T31] ? __pfx_panic+0x10/0x10 [ 281.855792][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 281.861173][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 281.867337][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 281.873536][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 281.879710][ T31] watchdog+0x1097/0x10a0 [ 281.884050][ T31] ? watchdog+0x1ea/0x10a0 [ 281.888475][ T31] ? __pfx_watchdog+0x10/0x10 [ 281.893250][ T31] kthread+0x7b7/0x940 [ 281.897342][ T31] ? __pfx_watchdog+0x10/0x10 [ 281.902029][ T31] ? __pfx_kthread+0x10/0x10 [ 281.906634][ T31] ? __pfx_kthread+0x10/0x10 [ 281.911235][ T31] ? __pfx_kthread+0x10/0x10 [ 281.915832][ T31] ? __pfx_kthread+0x10/0x10 [ 281.920434][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 281.925646][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 281.930857][ T31] ? __pfx_kthread+0x10/0x10 [ 281.935466][ T31] ret_from_fork+0x4b/0x80 [ 281.940075][ T31] ? __pfx_kthread+0x10/0x10 [ 281.944683][ T31] ret_from_fork_asm+0x1a/0x30 [ 281.949465][ T31] [ 281.952834][ T31] Kernel Offset: disabled [ 281.957180][ T31] Rebooting in 86400 seconds..