last executing test programs: 2m52.147608582s ago: executing program 3 (id=569): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0xfffffffd}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000006, 0x10012, r0, 0x6acfb000) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x80000000, 0x2001) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000000c0)={r3, 0xd7d2, {0x0, 0x0, 0x0, 0x6, 0x401, 0x0, 0x3, 0x3, 0xc, "e15e73682d7d19f636e28799ec52586e59289f336e0057aa7a0ee773c1959d385c2aceb7deb166782de2396e5f7648a466744c86a9636b8e9a012eea0f24ced2", "999be734987127e677aaf99a5e1128c7e4aecd30c3032ef80c653de64566ce25a4057f0443792ec770958c6ce5eed2fce29d3b141785f05f9193f1509e4c2ffc", "a61273573ab300023f07f52a7e75bc5761e9475c01e168afd3799ebc983d2a09", [0x100]}}) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x22e8, &(0x7f0000001980)={[{0x3c, 0x4e00, "a9202fa5672bfd95a1ca64558e7e9d903014ee2a235f16fe81cc24b95140c05f4dc3cd027257775c8789775cf3ce8544770e44596fdfcaa9987c1d2f"}, {0x35, 0x4e00, "d8e98f0bbc609dc24ec38f8c0c6f8927fcbcfcd0dea2445f8ec1d44e5713eece9cecdff4b6cfb85b8a7632d136d2f67dcffe00ab20"}, {0x1000, 0x4e00, "8535d8fd2b489b32f94cb478446b555c3da41ecb9c31c3833a48df5bbf938248cec43b4d3fcab5902d24c612168eca8459cf257cddaaaa3f388bdc4eeffe02d2ae64de790e724d6d33a9c06af653008595e1bf1cfaf9edcdb59b19807e557ad36fde7da6771464cdf0b803ee74a2f14558fee12bf30c3a46bad873942cd9d05cb5676abd43c9df891b3f83591c958e3a1f8ef4d08520dc1b2d8976d7634d21b96b1ce8dcc83c0298a056e2d0dbd46ccf9ce06df27df8a25e73bf4fba459e030eee84de23026fe6bfd38fbf7e5c933cdcc745dbfecb5e9d0042f8320cad504b6fcba40db6c03975cbc2bbe85b7204c5d2b6185e3fec4ace77bb6302e1c21c2d1642ad8f21b73f49668d5f5f83dd4d8defa4ff7eef1742b005160bc4323d0686f3ef44396f30505e86ae8f9a7b90d0be043ed3bde908ff41dfcbaec2a3802039f088444c08130c3911bebc4dad9e000fceca9751178164b2319940cae950a9c3f49286028fafb8772d9ae05975e81359b82a845c5e12c89cbcce8fd223fe025fcf58f4008b1ae2b9ace8d6a5511da6b1d645fc814a93365c4b3cfe3f6ba6d4b8961a429fab2eeafefd4f257444bee6a2dc932e63058051d36fc65fbbe9ade4d84c61b919d2dcc19d5810ca2ae679845a7dd75be80540dd0911ec67cd5fd5d816a056dd2e0061f3e0f47b7fa2523b52b8766c6045d81a16c8f36853ecfc4a9c2824e9b59a2a63a69c0e371bb0c5afc58f848d9e341999143317ecd2d66dc837bd6cb94e98fb0d468de5ddff9bd0ee9ea34841b2d3c67b9fd985836b8b6b5933151e93ffa80b411bed0f7bb78eb7594fd8947bfe761d3fe502b7e1bdbdf8cda2409503a2947c5f1c96ab7e4db80f54a6050198b0529ec0723cb2757a3b18086a5b287c66d19c29c759c9e194a1e8b2c886b99f7e70dd36c421f238c52595502079603a23768fbce0a38ff4fd6836bea7594e77da5e9aa51bb8b49869a5f29a39ba11ba11d4da19e41fc428c94d2f8b9e29314b43e50cdf17085831845e57c04ae110e542192bcf1f67245170c1e9f46412362f4badb3203e0f0e7df15605a05d0c2392553c0d141cae68494b24c8d0b66cc40456a7182206040fcd87d6f664b2d47d096bc2378880d306a7ac503301051385b2944d6359aa47cfde0f0b4821390d6eec4e689400f06b9c416bc7fd6f1e05cb37f13f94560f92a8737e9951d487661b410b202e5d884c901640409a465b91e5958192acbf1021acb6427ff615da99f445d21f82ef1ef9ea410ff5cbe9c76f9afb394fda9b6aa62478a4382108ebb90ffdeb8783ea70d6dfaf8572c39560ee43f78c3af7f46e113ccfbfe7b8df819bebd47a690e521c495294f2de8e06f4f1e596176fe7a3b5a1ed53faed4b31eb6e82254bcfffee99c3f12fd6d67cfe7220260c668cac612b6aa42391dc68beadfb2d78cff6dc9d1f3b5e34f23614ec4339a052f55abd5fe88c75c80434d1aca903cd7e1e2984dac05e15daf86d507bbe30acd9f17102159192c06e740b260b18a56a62e094ae563a9fc24e8062479bd9af7acf312683abc8e4d3ef2d68119a9843ee80d11ba23bf21ecac423444816630bf3ba7624ba4390a03963edae09d203c74a332d7c9ff34cf6ffac52136e94b923daa719989b21c8a47c56cc7b4fffffe5029aa34590f6887922dc075b9171e180340e7309c669ec27b79d6c7d4066d5f5f1e68c099a148a1a8f8a88ce3b5fe582339c26182a808fcebecdcf0ae6f9621c6e4b67b398aefc7f8282f4e39f13b8a40d00962905c4108cfbb6546c269c77d25b4982f6498d05ba5fa28bc79a0f18fb7208d7699bf855d3d4c7dae4d04da655f4b127d073a17eacb43e1534c06fd6da4f10632b089be218909a38502d9a5cce15eef21c40217cb6e3312f5d008a1e4ed5b51093b5ed65481db3a58603a4a8fd42cf0b3f3ba059312e1f13f639c7065d484528ea3da83f02ec519a1aa8fbebe1145f7cadad3a169748e5b320af0ee5887adf8090d64a3a1cd40eb79a34a8a12810290fae998c8d65e6e81dcaeb6e04ca1cf3d9389b9f8831eda175582f18d7fdc1402ea2664fb67d3ef8dd07c39bf7ba8a737838c8ab3637d1d20a7ee416f8dac805bca90748797910cec39bf4ae68fc17a79a424e035520f826ba15ec8bccc7a1f9871a13759bf03b80281701868bbac9e8847aeab89f428a1e8944a71caa03cfec72e5bcb841a867c6a668eac53f8beb0b210e7329436cffaf2c6065acde59009bdf621aa15ed3476670b54e9fbb83db7c7b9f7e6c8c21d9740d971bad854cc6a4abec30d528c47c0feaba7246dd484f3729c89f232ccef93254e5a2e2cbd4db666eacc4fe0755dce5beea95672b97ba06d17ec23ecdd705bcf0da2cc7b44feb5a742fe710e9fd6b5571ff360d581cf7425093596170605513502e6583b1f34bee0f7c738ebe53f511e5be6f9324cbb73764e9e5f7f0efe02ca6e6dac76342eeb7f0182b15a135e323e578139e3ad381e19e57cbd0edf6d0dd4a129af3936b97bbed2a38d77d78fcff824c87ce0b01d515024e83009c538da8fe697ed77c7da155f11f8f75d32ecc12ecc5a38c9fdea0f6059c654b86ff7537d18d614ce1add753bfbabd6fa9c5eff393cc741e50eb5996c4e5272a2d5a899bd39752c57216cd5e72c42d8327ecc3653ba8a733a8f8559d0e47e486a8fd8c56f3ba08199cd1fa77079c6a1ecfe00d0f67155579bd1ae53f917747a71697ef1535ec85f2354185ad2312a03ff5b009351af0654b158905fbee291c4d5806b111db74a3de0a9aeb03818b33b2939e80690989f66ce0f93973d84d24b390aaa48f2b8db95a74392b33e51123fb8e38d4944c55f5bf50dd216e48c662663275449bbe1a21b5c64afc918f37e35836d3deeda835809fbeaf5f71f389cac1086a197258b1655fcbcd4104b7689e397dda4b6bb0c204759106f0198eb9cbc5aca501d691d1db9c6767e35c9f0de5dfc597ce39d2c63bca49f95571950ebd1290a1eca909805841e5f2e4e1b0d75ac21b69dbb2b3d41edd803bfe52d85c7dccc5b10a4caae2c4513777e5c782caff252e10c432bfde7f47a587dd1c857bc6ad8acf903a6fcdc133d2bdb5c4a2ac19a67a5efe60ca838b407611be004da17e2d60cf2416cd369eeb98dc2eb1e71efe4511d4159bcb4ebb81275ad214cb20af5f818dd1d44eac6cc240bc60a71f9d4b2c086d8f627ac1f4e5f12e40fcb1a750f0d394f4c56e791da90f3b38959e30d64c639dcbb69af42779d1be8c4d24e99954b98be72f1c0db83292099e6eed67178814fd7bfe30c7448a2a8305a6ed9c5f8e295e06f2528a8968b780bee132b9ce6cfb90c9e74fa56f166fe84982b46aded2d69574184b6cbace36e1b4429ccde53b8b8ca16ef6914f6342ba07e73034d8f715a912d91b32ab9a5a2191f07268d250fa92c4f7114e6f6330d86eea63e8158625a44796c0212b61f57cda9dd742ea6f7379c22406e4eb121f2c5479a9c9d6470004fad1f71d49fe57436f30c57a24a519233460be746a46e3ed793cf8cca5a7439d2b0956d367575222d1dab1363e7e408e9c38e9a32529dc25fbf21f674462c4f882c44effb42a2777dc630e51e645a1dcc90eb6d3c53333143626bfbb7d2f5214aea62b3ed33214bdc10ed8579b2cf239f4f1b91379992ccc7c77bc121aa833b88da68cea22b9c355b6eab71198eec6fef35348474ad945d9ef07a7952001e2402c8701705b36606c79d9b997c215a6b4821c4ecc0c787e9552a8cb678eeea5a5fff9205bf01b3184bebe4fce6e55d16114c39b20a73da14b3b1fa93d2e7ff5fc6856c8edead6cb14340df848c8da1df4de195cfbeb755a4aee70ac95557a105f23cca45f25d004040d0551048cf2b0dbb6aea615fac9395696488d4246ea572370df4383c5a1bec8b4fc06f8f1d4b707d0eae7d51a0ddf303f565577e3c94dd1c80c05aad6f8e792ea9d9e380dbfc0c2594d47da402a3be57829048d7e4614c5f3964454be5d0f61c51e45be008f0468af7af5e6bffa8ce7d18d2f87b71dbac30d439e25d5ba568c739c14073f2315c21a086880d013e70352679108016b82bbc361cd65f159147e6e8d377ee1839fadf6c67c29ea2cf4ecb99ec252eb7ba08ee49f2907fe9e811d044010e3efa3ec20a42fc064e51a9e362aab5aaf5c97b4d853674d25885fbd5f2d6dd978a9290fbee3b7fc370359bf1496e978d61b9e6f920c298616ca22560f8d8a3e91d0e107b1ce195df3c2688b0beb3e3929fba19bc3b5d2e052b055ebcb4608b05f92417c1c1b822db3e6f57a2cb318e51b7e1779ff9d910b13370f89bace169940e6574310f5cff0f1bcf6243c0b9466757f0dc3bb94506a90d8976eaa163da32932976a4926b20aaf9ba24b899dbeeaea65442d2f71064d5c3e121d5dc183c36e06f8ab56fcf6e6c34fb2df517f93035969031c988669081cabf78bc46760b9784da3484bca7a359298246e4ba42d48b5ad34984d5421044f5bfee9b6fb91f55e7fdeb5957f9db2a3a02b6afe94c0532a8b235b7ac7301ae21ea9705420e2bcf39d2395a72c9bae97fece38ac67d402f9798c693c46e528576d64c538ed50803bebc253f2ae5af6928e49b8a9b858f2cc80758606abee754d0ef3ec49ca3b0ca87fcd03b08651f3888f51a126eaef45dfde883de572e3701789b209af3aab60adf69c0b5718fa8cf788915a782a7aaceebbf7b766dd992e16c1c0fa32415d98f26730e97a6a3a66655a12ed04f3a37fe9148abbda296935d051596a0086a4b6dcbf1d4bfd1a59db686a1e425cb417faa73754c9746302a0bdbb3744c9ef1dcb10182ac575e5ce444847e7dd03ed6bed37bf62693ce20fcef4f0a885336ae9ec4944b19c48c84908c44ae8e6bb442a19ad7b39a2c2d91ec2885df6b7de9ba9c8924da1e576822fb1eaf606adc2bcb2eabe5e20df5909f901a0f1134ca63a9e53e47c18396002c20f128462517ed6b0a26cb78c503791d862f5311066bce9c83ce2706c962a366b535b68ac2a17f525ea693f34a55617d4767be74db1ce94c468ef08ee47219d6f1b737148c6a098b2827c4b652e18819f105719dea1e703680c7ccfc2a985803a8df17e4ccce5707b87949402f49f4c4a8c17bb45de330da403122a91a6d75d561c1cc6cb851e186bc035f4381ce98e266c1377f3d810734d57e1fe7b65be4454f35db4e073505e55924b1edce55ac5505f1de0b592f340909420cf29ac8feeedbe69963c3223f155d4518d71e10e4e15a647d66745a73e089820a527909eb8bfe1123a3d4837729e02319569396ce08b4c5ce282ca1423752b3862a76baad33f8c99c45f5ff1d48354001814668d8107126b116e194c10cc0e224b6c22d0d4447b02209c0ffb7d3cf3c705cbe75e5a504e7105d9014bf9b218888dd5dbd1f2c66b754a20fa18a397bde27b722a8d07c6c689d83781b4f019ed6e3e9f58dd7377329fa1d1885940f5358cf256c95473f6889be56a9697207d23066198b37af040d31c685c6cc9235383e29b687619bbcd6ea6ced07ac0c97918b6d1ff8f35e31b1df4a4d26c028a1f3c12d8b5e14258736ab41eae12b4adf648fa7c08564f952cb6b930cdba8596c07aa8aa8b04d5f924bd0fc3013cb8c7a831936fd96ffb682a7d106519c4fabf39afcf746e9cf4a0597d9d497f0637543daf1b5b5bdf1f3a24d39344bf85b78011adea9acbe34eb9a2337d424a92c9dac0cc98b2b55d2ed789cc5c53f8295d762a798a5ced2efbee97ccd9f9d87baaa4"}, {0xcf, 0x4e00, "4069ea426a8e0c3b4577b29cbdfee37177a86d2ee5cbf3665d8996c634b7f67b3afbb5d22d5016d84aeb29b558649385a5fa8fd6e9b5d56c64af088e71227cd7a5f98980ffc0c751f1480f818cbc0be7633a07eeca4e67bbba6a192b008d8c428cd0e28a1488d640e0ef957012724bf6641c001710d4f37337d346ba6f6b979c0cd5813b627de564e801ea94822f348bddfd70a7a39a224371ff0e01c8299ad3a5395062612c164184db4820552488dd25cb8bc2fe21d43df5043d293747171aae4ad92ce04893b6317dbccf658de7"}, {0xcd, 0x4e00, "f741b5a56f9a42b349d6b3c54814317c14475bd23b780bcab9756d841faf125a0a94c3ab447dd0a2c4999f68650e4a1eb1ed8be7bbd0a90716420fed48a77764aaa25622f5da691dc741c7c032291cd31e14170224588d2bbce8889bb80bf7944f614354356282eab80475c62473b6d1111d5faa2e31d88d00be030cae1544dc71e0e7db500f3956cb495b7b3fd493743816d9e190badd06da6432ce984a6ebefefb6f91da4e5f1917704a612b60b9340374dd8b87079315085b9ffa64a0238f629fd5af5806814a539881b5ff"}, {0x1000, 0x4e00, "ec75b0ea98e36e3eacce6bd7251bac7c6e0db06a1d2e9bbc10545509e9cf3d3eaf255bc0a61a3fc9e1c77040b4568429f3642c1c8554b248d4e090707d5cd6e205d64d914bd125537281045b4986c2bddc08191c54f7f988ceccf62d352c514381337a8f2bd5c18d35bb88935fa115debf8d4ee12c40396ef2861d79632bf8c2d3bf8ac19147c96eaddd4df947d1df14b79f0262d1a457d5d0754fb2635c84a3aa49ac901add01bfd5e2e261ecf09efd12be40184e41fa0bd1657c68a8527e56adc7b34a75e78b54b0096707595fb14c3be167fba4d4f717669da199e9c513856973d129bfa8b3994b42cdc9aef4b105b4c3da5e9360f46b421d97cdc2773c451d18e39f9576a9f8ca59d4253ec0e6b676f3647a39009f29a8c6f96c65b15e384d5098c5f2f46f7baca5c5687b35c5a15baf3d6b959a8e769d2882dfab4cf391ff749f8f996ab89b4abf7512a0b2e7b3df767ef02c6d1597538182cd85e45968f72d6b7a496b397d6317ec4b52be09770e0df678b10012b69273e5bfdb76bcc32999ba2f2ac0f76aecae5582074bb5c6b915752f312b897cb8839013415c035c28fefad49e4ab0228f45e3d3d2126edfae3e0d57d497aea4836e824ac7fa3bbdaf004a27d31eea012114746ab14fcae201501ed6405050a91cf2d02839827b856a4ff96a1ffc6222d34f253d51f4bca8d4cbb6255e212a9e514fb893ed22aa8217d123848cc538816c0121a47cd7bc18b7fd00bfefa5af00c314b4506413545bef8ccc450bf3dda5040df8c704b01f1c3748bf2a9f405489921cef2693dceffaa5d08dc8f39d2da37ff8c87c444b6f82f49e4a4ee79fec02eee3412a12f4edd329906016d49aabc265be58a7e83160c775a89789a9e42749d2b821d51a8ffdb89c69ce9d93f0caf47e02b39a165fa0af2856b53f83dc09cc4b7c1fd2dedd2dba9c06a6c001577ffcfebddfda99041adf65411a4fcc97d27fee857319002355f01228ce392c9625e4600b02e1ecdcd9fb4afde177680d8ddd873f8dd896a9119ea28b11af1d09bffe8769eb17f9199632246cb2ca0e76d2329723028899d69867f2805bd00360e1008034b1a4848c20bd4157ea71c687d00ae6e96ac9f6fa2d69e06a4875a67bfa60092b1b0eaf155f8f3d5787711a020b4342a5a7e18c1835898f09717fd352d99fcb5fe59e1b45e2a3be7f2f2029e70870c016c68af480918c9bd73ee0c59198b65cc30880ebf9aa64c68e0b9a1773c354885e2bbe59476aad170e6d897d195fd3ef97219c0bdf305868dad564372167671c01e25ee60af19f24c7e54faa3b77538cc08fc085c5910d301af7d32d16eed27d818a64bef26c110dd0bc63ba05153597dad0c5d7099a64fe09a1803a3f4db75745cbdd58a8a00294052c0c375f77798cddc294244b70cbb318ba43dba7857881177c2d73fc76bf301f415014bf9861777af6d49a08b546a500d83068b105646f037e799fc049cfbd8b7fbe90b188f21f5b531b19c1dd2fb9fe4188c6f7251652d95355902a9bcadf36c1a76e7c24df9267e3f9d649c10954462fd0a0fdf02bee83f3d3c1c5c8f975e104bbe562697571e2ba4361b099488a9b962e8575915bca11136d933f5599f093d3168ef418c7628026306e7963a2f6d7380dcad1a2f1f0dfbeb479fad9d629f5a2c90165c4e660e47e26aa568ce53e6e16cdef963e6636cdeba1b47399bb9d9131cb6dd9d85491d62973961fb9e2baa45a6648e24ee7eeb8b0eb54d4c237cecca634710433ccba0be0e23df858c8594a44afe8402cc3f5acb0a07252060cd15ad9bb9b5aa4843560f216328ddcdb014b6e0de7e73e87e7ea94f7f7f0f9c86f743904c68e95657071e56b5578bb94cd9f02e7cb1d8e1031ac34e9c52b5f7fbacbae5e9185f6ac803ef14d6e275dbf379101d01e40aebc0295ef7ccf6eb1b38ab016323181fe715fa0287860e18209515f53ca43b66d505edbabb13d8f1a79b3d3113da97fd59b87e51fc283f2cf92f17804ee1999375b6d0962b348a302f3ac68560b60a4706e51d67ed9fa5b9e97565815ccb00ad585fd276e72a73be327bd7c4fdc5e874c9b293f4dd69b5fd76049a92c493f312e61b2bd9482ba00ccd1f0282ed780a7b63e7f0f55bbcb852d2a11a430de56d86c4fcd9c69c7ec2e987c903e9aeeeb6094b883846c3566035f3627c92d07d2892d2105c0c4b0089f9fe9acbeaf2813fd1dd561b8af6b019254f7d210f473441445edab3c4e3d14f67b5099faab3a4743961aeef341583436f61298750f890617fd77c4fd6c6549e4e68dde78e1168fb7a22537f9698a8585b556b362e17fe436e66d75de19c738a9b04095d01de47bcca88cabb2f7c5721abfd378f45cd735cf962875db3bb0ed1ebcafc9b21f726a3e78cac3510239fd09ac5639db38f70951d05ff145aa3f9ec25514795a14fb2e1a7f4667b86ad02340846dc354aad551f0e317ac3cace116f0f9c8f31dbfba3d58f990e2d9ed03fb1da3c3a82935f9a92299a61d3dc4ceb6a55b5620b36d31431bbfcc334bc3141d7913d6eba70b898529c6cb866e2621a900befdc859949be1abddbff82e335bcfc2815a8e0624f70a61e40c8e11a30340c3c923c37945657877e000f88b1e8b356cbfd49bdea9947b74068cc79e94b4aa3a42c86d7130aae4aa9c33d8b6149ef226c0e8d94d86c9fdce3e8910cbf0617a7e4d24cbec67a70d7a9c57de5a4a6f40f43e7ddf97b8e80109dcd939df9bbdf1d29a799f2653ee5d2b7c17666628a9d74addf440cb823db319fa7b5fb2ced2a7aebc3607500e6a7907c2300019bd0a2021cba673cd2457b19b6ade221369a7603dba3841d4915454268c6bfdccff2fd4e583ea40f80bd95475b3679a448c35a6fd114f2bfe34969d1a91eb7d9c16bf2a553db2af36801d3c19a1bcf3a2bd6a5000a1d0533b836a11d2c5f00ad445c281806008a6f4a3d3cd0f0c907c8db1ed5c9c947282bddea49ec1a0631be3cd6f886eeedac7f4579c3de4c6ad9d62520bb9cee9501335cd95f40f2d8a1133d4fbb80a716a919a78033411cca1f39d671c3d92106ca6887599c61ba49f41bf37f1f3cf762034bf60abbc536747932c975e65bb45d8778ad2002b9824cbcd7b38d0f3e7e432eeaeb05a065ba34015d2cb728ebed8bc6c22e211f4553e3174c93d53575d057099e8cff2a15f75370f19e1f6b4d161607791b1a0235a28169019d9dcc21f11322d9dabc724eb4e0146387ded4e91954d9c606a7617cc4076b89d7d893f53544a2b64f63ee76e7a823028dbb5817f69b70cc332ae38bc6009745d72e1abd56e6424fe10d45bf4e9722db6b65bb37b48542566afe02cc6a0ee6a6990ac0bff603c9bb8b687c73868bea1e0b28314e4c50f8e34269bb7fcb0faf960766f84cda4d5f71ebe52bfbbdab3f938557dfb77073ac4263559ae12d0c5d026f837dfbfed9f72cb8080fbab2732b1e5c378b5bcf33a997a24d9229c545fd2b2b8cdcb2490e0b6211e4d743225eb69612fe20b36b051a41f599404a28e7bf72971be994ea6b109f3ece0df32df4ffc652ab8d2a581d05d0090dd6c3db65392598921ebf34e40f82f79b2aa003361f62cd6caae5d98b059808c09f3a002b5686fe254372c85d5191f9d1e8f11489f2986702538fc8a5b9b39ce6f45aa9e7a9cee33fbd74d26dc84311be34aa29a821cde05d31e650db038b65365fbe760e73e2ce68a413665894d303f0355df2e3b33f69f36aa1c4f8b3bd04e54a25823e55ab8a0dcd8519674450e5262b459b9a49cb7cbc670259ef8107b89cf2584abe4883efad7fd5c7fad2e67fa0369bba24d52811454d473316f5c50701f419c0f43157f544ce6a496ba2ef01662bde94af1c125bd729bb574a31583b6135ca1bc371f3d5ce7ec7ca042ec1c228da6d14381195e46ae51a9ba4c3a7f8db3fb83d2210e34571d8849c5b68fbeab4c31d4844a802ab8eedd30cbc6cbca2fa54bcecb00dc2efdc9b2938f875f09da926497e1178834e1701310e8f1f8fb319273ce42bc6867dac8823d6c23446b2c6fcfbae2ad947ee5e8cc38ae9e6d35d13f3d72b92b9cf6bac7f22f983a4de47e78504ae9a620bc19341bd68402e9b7a656d09556e6d8b180de8afe677bef320e35c21cdb530e356d215c4108a33877bc8a1e14622d020f98769bdf8ac2f72150e4c40ff6d89b3e9aae5246b1a414de4826c909a90db6e32d205334b0cd2813d83757a95ab023c8036930abb324ee548cce5f6ee443513895423f408b6cc2d4d675cf3655b56f75bb585ef4b765682276d19f769713a81195256d3e482d17bb00885e22b68406d2ac0dd97b835f30b497cee9853357fc38f783136d1182e8ea17a4d770ba35620b1108ff62e534a6b89edf34f312d841f9f27bbfb9c2f2e5e4db10c4521d3f22931fac6e040dca24d44899ac860e74061d9fd0db1b79a7cee7e87b4071d4af5772c068248be0f2bbdaee721853ff511602105160a0ac9d2186d6366818357f6c48d7b9db145a02b4bea154df609778424131456f821e8dd4535b072db9977e0b07e2b6dba98fc3794b864ccc24f6350582c8dce5b8cffed553e19e06f745dd03561ad83da3bfec9e76677a907a8fb468c4a4dcbac720f93241b64127181281fb1cff0568de399be84ba4fcfa7a1bddf46a4cb9b5dda2e6cd6325df8c42c4e995bd656a999faea57d88da42246d65cc035b1e92b16f35b150461654b83376f57cb9ab9339881027059ffd744594a7da73bff3fe85a0a5d150c94644b178742c3787a843247906fc717298d79497732c7479b0a8f533ba9c88cf207a6d31d08e9ebf0c7c01a7e24571fe8c334a0c72b0de543c72fbb4123ffb966c5209fa6a8885f87323614991a49953194904abd59ee7461159f648379e6de12d700fc20e2bf7272afe7e1e218cc2a693997ae6e43374c6cfd5e574e3dda7f7c3d796b5cb16f11fb7e3b269bab9b67caab1345cde1d8e8434a4d7a41eaf1eacac29966cce9ee9d6e6001ec36a5871efcbd5568946149093939ae4f2a030bd3830690bf053b71c8f189fff6682b6c41689efe9364f7acdc3ddb99e496dd6b855c032ec7f1e899406c44f3e65942406dc1475c39c77c82d11fcebd3c4f5d2fbdc15ccab9a49174f2e1752f23c060df3c79ae5bb488c1d3dcdac16826da61eb872fbf6f94a1b7afe208689237893ea501f9e0affa088ccc7964220ea1229cb2f89a264a30541d4bcef5d3cd5e1e8b9f89a76a1451cd2ac81787332dd233b77897463de9c21eaf73107f37f5e03125b73b67adaf61d36154996f80519f7c5ef73aa22d30b4e963ca6352ff360c6669eb7956adc2a9606e119027018835f07dc408cb212c969dc4b66653d10b831a7d36dbf018c8a2de511df1a1b55833c503facccf6f98eed07521c73496e4473b51a7b4384fc8d02265939e46bfd57cf64580aa5b48fe72e1353d0e79b1a5c5e350b4d1fcf50ad7b33864d38e27f165e5fc665bd1d3b8dd51d72e52c1764c90c60dd1ea0d80f47c7783e819ce8cd2f9422d47119a627287f3221dba23745b5301224a692b420645f161ed51db238f9592ae3316774563e7696048673297ba9fa3a2f6a2cfee7f84bdfb593b0ede2dd7ab239823ede2719ba480a3329bc97abe320ade9214bf875104d5e71e1afe9b318a09a2b9330e70bc7acd5d45613f9acfc3c37edffdd6ddf7dff7491e2a82ba87306623523e873d6951e8cd98c25d2611504a02f59d6b6bd9f08c39177bf3458f0d014b49b30104e9859dc380a199a73a4c813"}, {0x40, 0x4e00, "6670df72217c18eb482fe327505d123f1b1bb159181779f1c81e6711881ad4b456e8ecc54ca1d8058c72bf7b0d53b8fa4966bd7c1a1c5d3439004280b6d0b631"}, {0x74, 0x4e00, "c5d3eaae0678c7fb566a3d1d164e09e4009b7e94cd9a3be733b24be6eafa08905d77faffe4b85cd58f2207cb7966c5a09f82e9aa25996cf19e8d7e31bf46dc37f3b53ec315825efc409ecd360b7ff9a98242622ee4ab02e01ee388a6011d249970a5d885d7df3f3e055202d81fe5184543918b4c"}]}) 2m50.483068147s ago: executing program 3 (id=579): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r1, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m50.350303098s ago: executing program 3 (id=580): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000000)=0xf, 0x4) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000340)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x200000, 0x9, "00000000020000000900", "00004702", "03000800", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0xc, "3b20000082000000000000f3ffffff", "1575a859", "0708eade", '\'q6O', ["aabe8450515924475793e8a7", "7f09000200ff80e10300", "fa0700f22b42a3023be516d1"]}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$vcsa(&(0x7f0000000280), 0x9, 0xc8042) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$CEC_DQEVENT(r3, 0xc0506107, &(0x7f00000002c0)={0x0, 0x0, 0x0, @raw}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000428bd7000fedbdf2517000000f396272e", @ANYRES32=r4, @ANYBLOB="0c00990006000000660000000a00060008021100000000000a001a0008021100000100000a00060008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000a001a00ffffffffffff0000"], 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x1010) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f00000003c0)={0x8, 0x9, 0x9, {0x5, 0x3fc}, 0x4}) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0x301200) 2m50.281779579s ago: executing program 3 (id=582): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/cpu_byteorder', 0x2080, 0x80) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/112, 0x6c}], 0x2, 0x0, 0x0) setreuid(0xffffffffffffffff, 0xffffffffffffffff) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/cpu_byteorder', 0x2080, 0x80) (async) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/112, 0x6c}], 0x2, 0x0, 0x0) (async) setreuid(0xffffffffffffffff, 0xffffffffffffffff) (async) 2m50.11159397s ago: executing program 3 (id=584): rt_sigprocmask(0xaf3adbc6ae65f7b1, &(0x7f0000000040)={[0x3]}, 0x0, 0x8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x109000, 0x0) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x109000, 0x0) close(0x3) (async) close(0x3) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open$dir(&(0x7f00000000c0)='./file0\x00', 0x80000, 0x110) clock_gettime(0x0, &(0x7f00000001c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) (async) pwritev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) close(r3) sendfile(r3, r2, 0x0, 0xf03a0005) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x3b) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8}]}]}]}, 0x30}}, 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x1000000, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e24,timeout=0x0000000000000009,rq=0x000000000000007f,sq=0x0000000000000001,sq=0x0000000000000008,timeout=0x0000000000000004,rw,dont_hash,rootcontext=system_u,uid=', @ANYRESDEC=0xee00, @ANYBLOB="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"]) syz_open_dev$vim2m(&(0x7f0000000080), 0x1146, 0x2) 2m49.959334648s ago: executing program 3 (id=585): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7200000000003900000008000300", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m34.895725318s ago: executing program 32 (id=585): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7200000000003900000008000300", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 13.096284995s ago: executing program 1 (id=1246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x163301, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000a40)=0x4, 0x4) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa86dd60b79a5600442900fe8000000000000000000000000000aaff0300000000000000000000000000010420880b000000000000081c000086dd080088be000000001000007f0100000000000000080022eb00000000200000000200000000000000000000100800655800000000e501613173524f3eacc69f60a0e0c9b5ff5dc3d00922dd032b67f905ba7bcb0d3c608111e86682fba6a2f69a260929596a8d3c3593735e0868071d26356e9a901bf2cc1c71ddc6b22b406eeaa9a2914dc87181daa3456a"], 0x7e) syz_open_dev$vcsa(&(0x7f00000002c0), 0xb8, 0x600080) r6 = syz_clone(0xa1880411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x1, &(0x7f0000000140)="1f0bd3802e5a60643477bdfc11ec6c6307cda15c68416c38285a2616e824ede0e2a7a816754f472d3e1f8cf7a5cc47411d6a305ea91cd2433d48edf7e7491c3d7f2e8733109429b32b35a2e36dbafde4b28710a94d77796adb81139397a04719ea1d7f1885ec5bdd65a980063961ff949320c533d47bf7b16552b5fa83a073566ad64e816d00b34cc7") ptrace$getregset(0x4204, r6, 0x1, &(0x7f0000001180)={&(0x7f0000000080)=""/68, 0x44}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x332) accept(r7, 0x0, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x4010, 0xffffffffffffffff, 0x0) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, 0x0, &(0x7f0000000000)) listen(r7, 0x0) 11.401317256s ago: executing program 1 (id=1252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20004450) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0xa6ff, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a00"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 11.153710287s ago: executing program 1 (id=1253): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000140)="af1dc8faf88d33cde06f2f56db8b07dcccd7a4b16412fa4e", 0x18, 0x3b60, 0x0, 0x0) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f00000000c0)={0x7, 0x2, 0x7fff, 0x7fff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x1}) ioctl$VT_RESIZE(r1, 0x5609, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0x8004500f, &(0x7f00000001c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x40000010) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@favordynmods}]}) 9.56324539s ago: executing program 1 (id=1258): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) r3 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0xa0242, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000000c0)=0x17) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000080)) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xb0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xce}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 8.816610604s ago: executing program 1 (id=1262): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000100)={{0x9, 0x0, 0x5, 0x8, '\x00', 0x9}, 0x6, 0x1, 0xd, r1, 0x3, 0x9, 'syz0\x00', &(0x7f00000000c0)=['\n((\x00', 'D\x00', '@-(\x00'], 0xa}) ptrace$getregset(0x4204, r1, 0x4, &(0x7f0000000300)={&(0x7f0000000240)=""/159, 0x9f}) waitid(0x1, r1, &(0x7f0000000340), 0x8, &(0x7f00000003c0)) close(r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000480)={0x0, @remote, @broadcast}, &(0x7f00000004c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000500)={{{@in=@private, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6}}, &(0x7f0000000600)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@mcast1, @in6=@empty, 0x4e23, 0x7, 0x4e23, 0x5, 0x2, 0x80, 0x0, 0x3a, r2, r3}, {0x16c5, 0x2, 0x9, 0xbe10, 0x1, 0x5, 0x3, 0x2}, {0x3, 0x8a, 0x19ee4b98, 0x4}, 0x6, 0x0, 0x2, 0x0, 0x0, 0x3}, {{@in=@private=0xa010101, 0x4d3, 0x6c}, 0x2, @in=@remote, 0x3501, 0x4, 0x3, 0x2, 0x0, 0x4, 0xfe0}}, 0xe8) r4 = shmget(0x0, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) shmctl$IPC_INFO(r4, 0x3, &(0x7f0000000a80)=""/170) 8.516893677s ago: executing program 0 (id=1263): mkdir(&(0x7f00000020c0)='./file0\x00', 0x10) syz_open_dev$video4linux(&(0x7f0000000280), 0xb9, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0) 7.71461641s ago: executing program 2 (id=1265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="016f080032c375dd0000140000004600003f00000000008490783fffff20ac1414aa00000000c540018438379f26649a49cdda79c98861dd5bf61b8dc92156a455122529a04b557ffe323d43d23967ac", @ANYRES32=0x41424344], 0xfd6c) 7.458473926s ago: executing program 4 (id=1266): setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) kexec_load(0x4, 0x1, &(0x7f0000000380)=[{0x0, 0x0, 0x40000000, 0x41000000}], 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 7.202584491s ago: executing program 4 (id=1267): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_mmap={0xc, 0xa, 0x4, 0x2, 0xfc, {0x77359400}, {0x1, 0x2, 0xb, 0x6a, 0x2, 0x8, "0049c400"}, 0x8, 0x1, {&(0x7f00000000c0)=[{0x700, 0x3, {0x8000}, 0x3}, {0x7, 0x39, {0x4}, 0x80ffd}]}, 0x7}) 7.03881446s ago: executing program 2 (id=1268): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) copy_file_range(r5, 0x0, r5, &(0x7f0000000180)=0xffffffff00000000, 0x3, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0x9362, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="38020000", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fbdbdf2509000000700001801400020064756d6d7930000000000000000000000800030003000000140002000000000000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="0800030ce936854dbdc013000000010000000000", @ANYRES32=0x0, @ANYBLOB="140002006e6574706369300000000000000000005400018008000300000000000800030002000000080003000300000008000300000000001400020068737230000000000000000000000000140002006261746164765f736c6176655f310000080003000100000048000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e30000000000000000008000100", @ANYRES32=r10, @ANYBLOB="0800030010b0e4a41400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000006c0001800800030002000000140002006d61637365633000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006261746164765f736c6176655f3100000800030003000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000500001801400020076657468305f766972745f776966690008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000700000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="48000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000001400020064756d6d7930000000000000000000000800030001000000080003000100000008000100", @ANYRES32=r10, @ANYBLOB], 0x238}}, 0x4008080) 6.938028603s ago: executing program 4 (id=1269): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 6.655808361s ago: executing program 0 (id=1270): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000040)=0x1) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200400, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r1, 0xc0046d00, &(0x7f00000000c0)=0x5) (async) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000140)={@empty, @multicast1, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_route_sched_retired(r1, &(0x7f0000001c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001c00)={&(0x7f00000001c0)=@delchain={0x1a18, 0x65, 0x800, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xf, 0x9}, {0x0, 0xffff}, {0x8, 0xffff}}, [@f_rsvp={{0x9}, {0x14c8, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff3}}, @TCA_RSVP_DST={0x8, 0x2, @loopback}, @TCA_RSVP_ACT={0x194, 0x6, [@m_mpls={0x104, 0x1, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x59e4, 0x5, 0x100, 0x1587}}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xf, 0x7, 0x1000000b, 0x4, 0x8}, 0x1}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_PROTO={0x6, 0x4, 0x4}, @TCA_MPLS_LABEL={0x8, 0x5, 0xbeff9}]}, {0x7e, 0x6, "abc0aeff2d8716371f97cd4c869d13fd04b1f11ea3a999941b3624ab7959fb14c3bbc0797722de4bc6d3e217788321d964cbbc06760c1e3462f3b473a04b5a45a970871951d7e0f4056f28c46c78fd389dd5d5142f10fdd1b0307b1f91a251093a112143d87b0a105bb9de19d4b155218917f4feebad3746c256"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x8c, 0x5, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x5c6, 0x4, 0xc9a, 0x6}}, @TCA_DEF_DATA={0x19, 0x3, '/dev/dma_heap/system\x00'}]}, {0x2a, 0x6, "74009933d4650b87dc6fea5f08771593b0615bf621e968fa2f439e9d0602f262decf11e07361"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_RSVP_POLICE={0xbc, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xda4b}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3b939b60}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80, 0x1, 0x4, 0x2, 0x10, {0x5, 0x2, 0x268b, 0x4, 0x0, 0x6}, {0x9f, 0xbdcefbf4f3fab20d, 0x600, 0x4b, 0x9, 0x1ff}, 0x1, 0xf46b, 0x2c0}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x7, 0xc, 0x5, 0x8, {0x3, 0x2, 0x6, 0x5, 0x3ff, 0x400}, {0x5, 0x2, 0x3ed9, 0x9, 0x3, 0x8}, 0x9, 0x2, 0xf}}]}, @TCA_RSVP_ACT={0x125c, 0x6, [@m_skbmod={0x108, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0xdb, 0x6, "3ddcabd8742ef096078b5327ab0633461a90b402fc66e110ef681d87e21651d949f7bdc7df48c12a2b69c274b5ee8d3ab5e354fbc5ccbae7af1aa4ad154f8688de56ee0ba927d399f0a7ebdf15b814cf323e51a51189b9648d55638b156ff5c7a61912956cdbb600972494aa5a384724b8f9545f1ac78e873c02d3ff695c4723ffacc566d1e9d154547f8df65d1e8f57b8b9ccb328c85b09f1fd10a157a280b252f37160ff1a8af278e53a7e93d6550b15806833ab5e40962271bb93689a2953625385f011f3095b7e19d1c8d20063e5e21f0a5c4aba2a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x1068, 0x5, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x200}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4, 0xffff}}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4, 0xa}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x36, 0x1, 0x3, 0x5e}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_bpf={0xe8, 0xf, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x1c, 0x4, [{0xaf, 0x2, 0x1, 0x8001}, {0x3, 0x14, 0x4, 0x4}, {0x4, 0x7, 0x3, 0x5}]}]}, {0xa3, 0x6, "e433807665d344a10c82cc3717091f5833a8efbaa0b499cb8da67dcdd99b7f84c6380ee0f2a9ddc7bc95c1d6c844b4048660aab8e9d29bf13dc5087f2ff9b49c2f21f09eea4703c90dff394e30fe7c2246ace94e4dc98bdde9210737d1d98c4846900fd447644036150288182664fe47f70dec25f813855b184b3d8f4eafaddaea891f37f5cb4000c167c71af4d28270e674bf3b6dc95225c7c1cee667a523"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @f_rsvp={{0x9}, {0x304, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0xfff, 0x8}, {0xe5e, 0x6, 0x2}, 0x16, 0xd4, 0x1}}, @TCA_RSVP_ACT={0x2e0, 0x6, [@m_ctinfo={0x138, 0x13, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x10001}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7}, @TCA_CTINFO_ACT={0x18, 0x3, {0xffffffff, 0x60f0, 0x3, 0x81, 0x1}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1a7}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xffffffff}]}, {0xc3, 0x6, "b01c5251ad91877fc92eb291e6d4e4d9e133ce71d7e020c1f5f978e90034365e4733393d1f67ed8c3a148063fc072b3e8a7add7d81b1e70d1f012dd905ac5b949cf6d603cfffdce249a7351ab677c0f1cfcb63b51db9f77a75b0c1e80c712a410dda9e0bf1869857d8548357e3e5f98195a0c3d79e73ebf5afbfa9ecbe86be60c5e66f6bc4071674a6013a6cf72d1c3b1b70aedaa27f150a99c1618ce2705bf5de62773ce084bee6ced76828e2d1d6e78339bd15b55fdac7b6a12b3bb17a16"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0x9c, 0x1f, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x7ff, 0x0, 0xffffffff, 0xb2}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x48, 0x6, "84991ca00dc91ee5c97428719d9c64584fe61e8040e975edc689457fdf1e4dd827d8c7a6095e9a091456d206654df3eba3703e3b430514de6a62ce9a19fd6fcedef5c476"}, {0xc}, {0xc, 0x8, {0x0, 0x4}}}}, @m_sample={0x108, 0x19, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x80000000}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x80000000}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}]}, {0xc4, 0x6, "f7585a4ec1ffa4e559ae2c424bc65e6c37abd1a6bbfdc4357ba924301bfe29e3ba5ea0aeb34c4f6175835a255a860d995fe98c167d45b236371bf975e6866ec3dbfa42ee11596715fa464a62fe54e2348b5e85edefebcc6fe2028b296c1110616b97399ed7d5ed26090e9f76c46f64335365c7d46f6a3fa172a6206b33109d9eb77ed0e82717b28ae09e3b337335568ff229ab43077abb9cce30222fd892c2bcb3c503329711855d130ca308f5c2ecccca85de0d1df3b46ffdd75001ac669c57"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @f_rsvp6={{0xa}, {0x50, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @private0}, @TCA_RSVP_SRC={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0x8}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x7, 0x3}}]}}, @f_rsvp6={{0xa}, {0x1a8, 0x2, [@TCA_RSVP_ACT={0x1a4, 0x6, [@m_csum={0x140, 0x3, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x7fffffff, 0xfffffffffffffff2, 0x6}, 0x2f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x5, 0x5, 0x4, 0x8}, 0x2a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x800, 0x20000000, 0x5, 0x7fffffff}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xa968, 0x100, 0x10000000, 0x80000001, 0x6}, 0x38}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x9384, 0x2, 0x6, 0x5}, 0x3f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x6, 0x10000000, 0x9, 0x2}, 0x49}}]}, {0x6a, 0x6, "586d23f727f238554d1b13da924c280c04f1f1b99fb7df9bad0eba0da9ca93254c7d13618bbb0302f2c05e6e8da42b2de60e77e7dbcc82081786f7b584e35e4bdc118a19fb1f96e61724154a7f8040ece0f9cf24dd6018f0aa0c7979ea6f71ddea712388252d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0x60, 0x18, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x35}}]}, {0x27, 0x6, "dd54cc19709ea47b2544c6e2bc36e944b6ac47eaac8ffabbec2be346292c54172b6b39"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x1a18}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001c80)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000001cc0)={0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000001d40)={&(0x7f0000001d00)=[0x0, 0x0, 0x0], 0x3}) (async) ftruncate(r3, 0x9) bind$isdn(r3, &(0x7f0000001d80)={0x22, 0x9, 0x2, 0x7, 0x2}, 0x6) (async) ioctl$SOUND_OLD_MIXER_INFO(r3, 0x80304d65, &(0x7f0000001dc0)) (async) openat$cgroup_type(r3, &(0x7f0000001e00), 0x2, 0x0) mmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2000003, 0x11, r3, 0xcb4cf000) (async) r4 = openat$cgroup_ro(r3, &(0x7f0000001e40)='net_prio.prioidx\x00', 0x0, 0x0) sendmsg$802154_dgram(r4, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001e80)="1b1b8cab8292bfbd7d260fc691d61cd0d214c747e9390caff3b2c15acecd74898c54db390a1d9e13a0a869c57d35d1a6fbdf0e5c1583340cc3cee360c7", 0x3d}, 0x1, 0x0, 0x0, 0x4000001}, 0x12000080) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000002000)={&(0x7f0000001f40), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x40804) r5 = syz_open_procfs$userns(0x0, &(0x7f0000002040)) fsync(r5) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000024c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002480)={&(0x7f0000002100)={0x360, r6, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x19c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8f724298c59d302c}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x596a6e6ab24db471}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x360}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) pwrite64(r1, &(0x7f0000002500)="f5ff00af8a995ebee7a9b4b5e1d17aadf373f9250020c29c913a60893811aaf0f34e67a08ff94cf79c10f11c4e317dfaa5ed9805a446faa8e18b7a5863b8fd8406e111c4414d3b14a9119aea3811c11fa1d70632d6dfc690571cff5cf74500f9a8a3bc576fae6830be75174117683a8508e2c40b4d210a6341809cb51fc026d12501db22adcb1aed840aa5204e01e0039f18e55bce0cab1dffb1545f01f4615347107ce631cc4b75c563ad8016a970e8db9ed73b4fc4f390fe4ee6034b92ad288999b601e878efa9b331df1c292942e983a1adac94e1b3722978c13e", 0xdc, 0x3899) (async) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000002600)=0xe) (async) r7 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000026c0)={'ip6gre0\x00', &(0x7f0000002640)={'syztnl1\x00', r2, 0x2f, 0x4, 0x7, 0x2, 0x42, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7800, 0x80, 0x6, 0x81}}) (async) recvmmsg(r3, &(0x7f0000004800)=[{{&(0x7f0000002700)=@ll, 0x80, &(0x7f00000047c0)=[{&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)}, {&(0x7f00000037c0)=""/4096, 0x1000}], 0x3}, 0x4}], 0x1, 0x12100, &(0x7f0000004840)) fcntl$setpipe(r3, 0x407, 0x800000000000000) socket$igmp(0x2, 0x3, 0x2) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$XFS_IOC_BULKSTAT(r8, 0x8040587f, &(0x7f0000004d00)={{0x0, 0x2, 0xffff, 0x1, 0x8}, &(0x7f0000004880)=[{}, {}, {}, {}, {}, {}]}) 6.498809029s ago: executing program 2 (id=1271): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r4 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d00010000600009040080020300000009210604000122050009058103200009080709050203"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000200)={0x81, 0x4, 0x6, 0x5, 0xf, "d85d68298af2ef7d46fcae012b25561b6932e0"}) r5 = syz_usb_connect(0x11434b1d89a5e1c4, 0x494, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x1d, 0xfc, 0x5d, 0x8, 0x5ac, 0x21c, 0x9293, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x482, 0x1, 0x40, 0xc3, 0x80, 0x2, "", [{{0x9, 0x4, 0x5, 0x0, 0xb, 0x3, 0xa8, 0x2, 0x9, [@hid_hid={0x9, 0x21, 0xe8b, 0x5, 0x1, {0x22, 0x87}}], [{{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x72, 0x72, 0xd, [@generic={0x2, 0x23}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x8001}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x2, 0x9, 0x3, [@generic={0x9a, 0x1, "d1a54b48924d7603b5f67d1904050788289510885aa3f364af737939d8079b2136f540072248de79fc504e78c4f16466be00d1ba58904a0f010a71c1b82df1c547295b1cf42a5614aadd79dfe9caeb42f88ff2f5606dcf238ad718cd992b256293971ad8b5d8272e8f1d929a719c2934a018fbeaa69fb8a22069f9ad8c01af91af0ef3dce03486f67d93bc97c8ac833df66919026f590a17"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x3ff, 0x9, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x81, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x94}]}}, {{0x9, 0x5, 0x3, 0x3, 0x20, 0xff, 0x0, 0x2, [@generic={0x77, 0x1, "e6343a75c2e7d28d1a859d7cc5d5a2ba6373a2b4197c239f503c909f2f6ac212fad8711462e8eebdf21405142ac5225ab0f4f0757202d179833fb7b865d7dd97d26079e3cb639461d0f91021878005c1bb3eb38e3bd4d19fd929865d00e2e5d6bdf723f0b2ab000de288dbe95a19db6f6c60c975fc"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x40, 0x32, 0xf, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x9}]}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0xff, 0xe, 0xb, [@generic={0xe5, 0x37, "d79934abf1014d2fb271d876970b62878aa3c91ea18238fba2c698ce51d789e4917e07f998a95004ea91149d41d881c5c729ce3628a6fe5b5c7a08ad9ab0d30faf83a3d5179648460a11d7efe497d0aa4c8a450066d8eac8d632c79cd33d0d3a3aeffac2cb2152fa0dd6222ba7fcdc5e05673d55a1c40609a36604c519755ff16ca19e5b6919ce7cc5713530a740d9d92802bf96e65a85d83a6c6b9d2a8ab29b2f197e1cf07c61bae868b117edc186c06f61bb15b2b0b2fa2b31d3749771ba79d2aa5631810d8fde395078ffbfc56b9d745c90758b3053f906fb87225952536a22fd5b"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x200, 0x6, 0xa, 0x8, [@generic={0x2c, 0x3, "9057d8f685d2058ec00526cd034dad615a5846b86bb7bcf244a4db4b5041c133476bc6f2e8182381aae0"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x10, 0x1, 0x2, 0x7, [@generic={0x8, 0x24, "e0da7c2bf5bd"}, @generic={0x3d, 0x22, "85c0219ba0749046cb8aa9db145b9be9ae12d2de2eccbe63a1963bf8b2b305720cec3ddddbc7adeb037976091e63310cd431ef67254eaccadf2a16"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x5a, 0x8, 0x0, [@generic={0xb1, 0x20, "d38b72e2cbddb286cf4b1decdfb3d3916545c7faba9158700710f12aec39cd596036f3fee6b584a9efb851e7215fd74851502372b81f427864fe1152a3718250e39b145da95b8b883736f25ed66173b7c02507a963d233d844cb08504423df01b2af682c401ab48a2263b07644be2a647bc88f08432c1c48da1b1f61e24777c245c13c745424df6dbd7f6d81b8e9d4c3e319ea916be01bdceafad7b951143657449e5520db14b56e432887b969f24c"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x719d}]}}, {{0x9, 0x5, 0xa, 0x1, 0x8, 0x5, 0x4, 0x3, [@generic={0xb1, 0x1d, "8294aaf7f9ca340de4e8d1048520f61d3f713e7cbbe5f399ebea606a2e15381d3f2d113e35f6800394bc521c87f3ad6a8d478791a0ebde49427c5dc717c480f48f50721ad732e663d82102ff0e205d09c1b1de886ad0f472902fe4c73ae23dc9b6456a8f2b691a6670876a5e9526df543481981fef0386d24bc790729d76336cd4adc3960d99007b400f12b83006d8cda98857290b75ea9128e9d757aa1eb0abcd077f9b54376fc49675f253bd7895"}, @generic={0xf, 0xf, "3431b342700e077bfc20e9a561"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x4, 0xe, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xa4, 0x9}]}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x110, 0x5, 0xd, 0xe, 0x8, 0x4}, 0xb1, &(0x7f0000000900)={0x5, 0xf, 0xb1, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "51d3d78146e9769249595ff9eefd2b4d"}, @generic={0x95, 0x10, 0x2, "ea09f811b0ff2619cd5a670ae8cbff74fb1879cd3444839f66b6c83c99114841b13865845d661e32268c241c2f3c29775f0a96c375b4ca3ff6d66960d294791ab689b8cc2730718f785829f11c40776c83d9e8a27b8d48dafa024bbf2ab1da26dc6ea6b7f54b53c67439bad0b34ac012f186413d81f866500fba2a654c29bf16286a5f897f5e2efcf2efbf891605bfbad5b4"}]}, 0x3, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x4c0a}}, {0xe0, &(0x7f0000000a40)=@string={0xe0, 0x3, "74dfecba6d74da8e54d3bbe8ddcd4f4adb3db6ec0bd329a30c9884ecc43c425e9274344c494639f3c53325ad32550a80d212eac83f874302122b4d6365fe4b86fb5b471b543c9e9815cbafad28826fe995a9f4b953ec8745c7fe8cdc00f13d7eba9d1272375137e0838fb94ebc77e732f7eee1e3b584460fea99d8486486e4689504632e9f7399d883f5f54ed8463ec2b5cd22d679ed12df91196ca3c0dc1556a84c13203dcb8fbfeb65bad2ed6bac011a61d9ce263e91ec8219dacfa4ab4860f669188742c72b17c4b9912abadc444143df2d2253e07aa5c96e3c68d339"}}]}) syz_usb_control_io$uac2(r5, &(0x7f0000000cc0)={0x14, &(0x7f0000000b80)={0x40, 0x8, 0x8f, {0x8f, 0xe, "a3aa6e9c378f35d5bf9847e0401134a566dd79b40ded065073d29a047a430fdcfd0a54df0d2aec70575ebaa9c7f60fc57f0cf0f95d19dba5a02c82294e62843f379c8fa41ed6ba2fecd2f6b84bbf307d3d26738af04547134a7dc500f030b4ab053410d2211fac58696d3d9ce29673b1c8c862b3ac9fb3817493e7b36aef40892b4c7c665e10eb0ffd80ed6254"}}, &(0x7f0000000c40)={0x0, 0x3, 0x5d, @string={0x5d, 0x3, "b1f881776d089c43d1fc39e7b4d6486ccd2a55b68eb18a173e41c348880974a7ca0477423fe5b61260551953256eb5a23b104c8afb9ce58f2b38efeb55b5f92b12d8f4400cec548c01a6ce19a660d9c49e5d0be22de1e00152a272"}}}, &(0x7f0000000f00)={0x44, &(0x7f0000000d00)=ANY=[@ANYBLOB="e317090000009d78914a99ce2f8647"], &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0xb5}, &(0x7f0000000dc0)={0x20, 0x81, 0x3, "c7078d"}, &(0x7f0000000e00)={0x20, 0x82, 0x3, "58ac95"}, &(0x7f0000000e40)={0x20, 0x83, 0x2, "06fc"}, &(0x7f0000000e80)={0x20, 0x84, 0x1, '3'}, &(0x7f0000000ec0)={0x20, 0x85, 0x3, "207e82"}}) setns(r1, 0x24020000) syz_clone(0x35200011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0xa0, 0x1e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x8}}) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x40050) 6.434690744s ago: executing program 0 (id=1272): setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) kexec_load(0x4, 0x1, &(0x7f0000000380)=[{0x0, 0x0, 0x5, 0x41000000}], 0x1) r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0xf, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'bond_slave_0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x2, './file0\x00'}}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000606695400000001000700"/28], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x24000000) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) kexec_load(0x7, 0x2, &(0x7f0000000640)=[{&(0x7f0000000480)="ac560b489ea4c79854a73298e8d50cf4da3adfe0ea3899984cd16092ed5e2065432d5711a81c818d2ea050a64639236aa79d09f53d8c28a8d30cbd0f5247026f7465516ac7061a5d5f6d6192341e89d11ba3f3706d035343b2bb70ee3f93d9d9cf8ebdf4c89a1a09e98074981184d9d3a5196f84ca8349fb52f3fd91f4ba348d36074d4a931114ddfca16b826297d5e74ecef20da7f40b3385d41f516c0917c77aa8592f8f14296c0c9d8e66d8686714ec328709dbd6", 0xb6, 0x80000000, 0x80000000}, {&(0x7f0000000540)="4119cad6434871496bad9ad931f07ab280605036c225f0310541b47be24ec68ee88bd15c0b4a8143632e584fefa67cd4769bd7da29e69d8d879e4590d631b1928752ad4f9bfdd6c8d8b5635594c13010265735b7fc29533ba6ec28abb89df4d489bbd01437271d93c42c6699680bc57101a12149ed8f59d8128a564f2bfaa7bf7f7ad691360feccdab03d8a119cae2d4aa677a02f3319de06066667d3cd5c627e43b800e0bef4d33097587e6bdecb4f5a9c1e5d7156d3a51ff427b9a47c312869d11e69c1d3ab0c37e8ef5a71cb7eceee7", 0xd1, 0x6, 0xfffffffffffffff8}], 0x150000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r6, 0x0, 0x0, 0x141, 0x0, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000200)={0x15, 0x2000000}) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x8f02, 0x8, r2}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="d80000001c0081044e81f7b01acfe2222d", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000000c0)={r4}) fcntl$lock(r5, 0x25, &(0x7f0000000300)={0x0, 0x4, 0x1, 0x2}) fcntl$lock(r4, 0x25, &(0x7f0000000140)={0x0, 0x1, 0x7, 0x101, r2}) ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="042c", @ANYRES16=0x0, @ANYBLOB="44b62202769e49886f94911036c23c8072dbc342", @ANYRESHEX=r5], 0x9) setsockopt$inet_udp_int(r9, 0x11, 0x1, &(0x7f0000000100)=0x1, 0x4) 4.314576201s ago: executing program 4 (id=1273): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x10001, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd81, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0x58000, 0x7, 0x4, 0x5, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0x8}, {0xf, 0x5, 0x8, '\x00', 0x13}, {0x7, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0x10}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x67}, {0x2, 0x9, 0x2, '\x00', 0x8}, {0x9, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x87, 0x6, 0x3, '\x00', 0xa6}, {0x58, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfd, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.491271355s ago: executing program 2 (id=1274): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.579334577s ago: executing program 4 (id=1275): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.279736179s ago: executing program 2 (id=1276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="016f080032c375dd0000140000004600003f00000000008490783fffff20ac1414aa00000000c540018438379f26649a49cdda79c98861dd5bf61b8dc92156a455122529a04b557ffe323d43d23967ac", @ANYRES32=0x41424344], 0xfd6c) 1.569245704s ago: executing program 0 (id=1277): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_mmap={0xc, 0xa, 0x4, 0x2, 0xfc, {0x77359400}, {0x1, 0x2, 0xb, 0x6a, 0x2, 0x8, "0049c400"}, 0x8, 0x1, {&(0x7f00000000c0)=[{0x700, 0x3, {0x8000}, 0x3}, {0x7, 0x39, {0x4}, 0x80ffd}]}, 0x7}) 1.356290835s ago: executing program 2 (id=1278): mkdir(&(0x7f00000020c0)='./file0\x00', 0x10) syz_open_dev$video4linux(&(0x7f0000000280), 0xb9, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0) 947.096141ms ago: executing program 0 (id=1279): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) copy_file_range(r5, 0x0, r5, &(0x7f0000000180)=0xffffffff00000000, 0x3, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0x9362, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="38020000", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fbdbdf2509000000700001801400020064756d6d7930000000000000000000000800030003000000140002000000000000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="0800030ce936854dbdc013000000010000000000", @ANYRES32=0x0, @ANYBLOB="140002006e6574706369300000000000000000005400018008000300000000000800030002000000080003000300000008000300000000001400020068737230000000000000000000000000140002006261746164765f736c6176655f310000080003000100000048000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e30000000000000000008000100", @ANYRES32=r10, @ANYBLOB="0800030010b0e4a41400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000006c0001800800030002000000140002006d61637365633000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006261746164765f736c6176655f3100000800030003000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000500001801400020076657468305f766972745f776966690008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000700000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="48000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000001400020064756d6d7930000000000000000000000800030001000000080003000100000008000100", @ANYRES32=r10, @ANYBLOB], 0x238}}, 0x4008080) 860.225744ms ago: executing program 4 (id=1280): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) connect$inet(r0, &(0x7f0000003580)={0x2, 0x4e21, @dev}, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000300)={0x60, 0x8, 0x6, "e2b0e6b0c55d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001440)={0x2c, &(0x7f0000001200)={0x20, 0x11, 0x2, "65ec"}, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000180)="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", 0xfd, 0x800, &(0x7f0000000340)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x12}, 0xff}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 82.24244ms ago: executing program 1 (id=1281): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x10002, 0x10442) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x80) (async) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r7, 0x114, 0x2, 0x0, 0x0) syz_clone(0x4011000, &(0x7f00000008c0)="1dd33f4d65ac4e81f30c360c34451b8e61243ca779be7104eaafec36f1f1d8a9d090f5388295bd1080160d8ae70b6bb0c25d6b7ce1b56b0f146db328577afcccf61cd8577dccd24e7cb1ee814fd503649699a2fb042a5a6996570f92fac4e677cf6b44b235419ae021b1e1dd5510fcf9c6c126ec6c675d79a7d0c289c848121aa496e40a497b43a99dac45e99d4d4e808944078e63e49dd7fa4d10724cc36a4547b469df3a209d0ddf9812fb81a584ee8ede9d25162dceea7279839335c5ef131193d41ed77fa854b7d2a066736c3f3e25dccbd1d0a2bf7e3c79f9778a419d18f2f1fc4e6829c8be98f460eb248275b88f14788431d3991d772062f6971a8e4b9b0bfea4dfc05c7e6174340b452bd58d341cdb331223008fbebbd1a70c6452c0f202d54d15edd0d6880564f7ef307df442979607b7994a794ff98a32e1736a3ab0a2221731cc5310484b8d64d3c567ef0b1352be541543a486b85880a69b97085764051a5c62b0e9ee3d273418cf70360f06f8c527a0030c423ccf92b2a035dd94426effe808a6978f7ad8d9b45b392e4c3b7552b359bbe265b0b3f6b7e0de9e694de92444a27cd6e8c047eb49327392b6e5c34aa0eeb012492c6f8cd09f1ba81e7f9357bb11bb5873bf5af59465eb4d74c532be34dd348605a7914a5b042bd52e47c6661f8ed3af25c743f506171647e76c8441dd5f52a1f31c45f7ea82794ecd52859128ac3785563d41dc8734ab39b7a50a7ab386f8fc86eed74c28cf1e2dde44384d1d18e9d05347202243bdf192f5d024dea3704e579c9e0d29d2ad29ad28f20834a3fc724b0902dc090c0d3390245104bd82357652eb2613ec19ca3184c24b61b76ba39737b0bcc58dc6c22af82d930b7fd9ce669b99db731926f17940c6053e7b5ae5b0842250c7b79d1d51f73bffbf4fb55418bb0442a32f53b1272f4b2492f21e85a73794543203ccba4475370c49ed4f9f0b122ef75341b030aa42fefa98f98c3acfd1c32b0ac49ccd99e169456b00be188a63283648233da68090e359d07b397786d1324b912f98a985b51935d62a4bbc65cefd353a90b9715d5dfb504cbe617b6d31390518c69c6f70072d6a779bbef697a9ffd9d177a17748bdcd8cc3e1fa5bdbb0ce26544ab9680e4309a91608f0dc97264a4dbeab64e1d6e484f21f8d076c2ee64bfd8932ab4765b8c2a0763a073d1ae96c6bf974239a58cf9c23f5e47ddfb3d7c71f315817ef5765a19e7e74db6b3256f28264d1f119821cfb03e1206caaa4efa0fdd26249a3e5bbd75c0df614a55e007dad83a82a075801995d17f01c0865600791a676f5bba133439ee3e608622a2ef0ecd5d89f63c39cda3d26a5500088fa50552c6b112066b948f6c0bf998f47120e93bdbc64d2ab2e24d844540965af1add000ffd7e77d5cccb58ab83d5f559ec82e642480f7648ef03035a1acdc7934d8f442183c22c031342bf9aecac118db65ea991e866b8178f87c1c233ad7a4e0a695acf65dc8dc4bc82004af7be2fe1e1576071af4fe53d3c8bcf0f3597c48bbced8d42c4c27a28bd500833fced590d210391f574b42495320b47319fe73fc37027ad4880a9cfd41074a69ea86b75db3ac59e6c5a28361c35aad9eb9c8dc43c859d13a5a88fe3ac78ed20e18590bb01408dae26a41072510eaee091b0f286f068035ab690b65e987c529e1a9926925a50871a7ec040273f637ea5554e8aa09adbebb5799b9bca5cf12fe5bc0073b79b21d5c36e525d8a612dbf87711ba549146962d54a5adab6cae62ee427f9a92121b45c813063afa6a721f15d4bc9097c2ded40b4ea0e0354ec7ffb4cf0aabad9dac145e286d1b36c6f020edab827277ce351e2686d2eb6009a81d4f3c2804b38dd7640b27d0d0c5c1da715527c846e4501142de88f0958d49a577261fa5af2fc9288f2271efc361fd7240d9dc795785a8b47261b5791e4252cc39d83e3f0957ee8c34af824eaf7f18ca19c388898044626aa611ae925c2377a25dec1e2dc7824ea86d25bbe098965c7306a0cade9f1bfa14d3e17e0d2ec752b13ae251b99ed0d705dd4fcceda2a0f2d35a047829779da692170b87395af978de101fd1930babcf68c5e4f876bb51ee757f5110629aa17a63c1fa826b7f642453989cc7d86c0044a9217e67e756232b7644345d543020e82284602f7251e50daeabfd544542c34aa1dda168d8a71c6f0c6bd22f140aa42d42a16714e97f21a26b8f8cf9a51b66e8ef2e59f25d200612ebe591847cbe5fb52bb7750b0fc85e229e800c1d65179c83183fb6f319f80a0c49d5acc7cc722854a21cd14abe0283a331ae3a88973a70611e9f0b704be4afbb4b3855fb6906ae388521d195e0077bcae0fa2e62f47c7e6287e0ad2c9380bff7305f5edf779a004e1d71415208084b22317399e099a43ffe0a5df338c94f782a8365be0c402d8b17d970a1c7d78a9ff1fa2dc3ef0ee0d55142fc0dc129ccbcbcd38baed99a7f5f642949f03f7164e6197d477d69697e4ac5834ea464d372a4750f31a1b7c700db16c4deccd7634d3fbaf0a025edffbd65d5f0943c4c2384d5eb3588f1524cef4c60f95d353b22954ceb820ac792365f84664aaee85c3ab215447e53f6aea409bcbd8f1c72ff9ff88cb475da38112f1ed06afae3ca7b35fa32c031b464c8bdfcda6b57138e57d34f36c20c0ea4b7636a0fc468f0353e65f4d983c42f59ccfb0f08a58f3515de5babfe47d88a647e001c8475ac9049b276a5d9464c3621e6a9e8cc9fa55679adb220da557e567ef48e975338dd3ff321156a05cd630b5003382f5ce4607c037c570b9244545b93fd05980c174c78f2e06756936a1bbda64d7f43434ff7549a902d4d346f1abf99cc912cbdf7d14ef5d0d817c159201e125c0885786fa974bca193aac555bff1935b46a7d7d0e4049bba7a14301304f5285f559d6407fcfc2b75971cfda3fb556a946de8beb526de55abf67473b26ad32b3a3cd7d9e828352153db9ed678dd1b1bcf1aa44e55defd746a45c323f2f8ba378c515ff6f2ff5b033cdd2af7d16c2f08aa1b71478c49088c56feffbe432dde2dc8c217974275d0052ead8797450341190ee861f7e7c3d927630e61ceea3d6a1ee12c5fd1b02d219b498ac4c877d64853870e467bd4cf5c498395bc3d143b2b2e4b76a6ec0545be8aa133a90d476bad93e74db8806b736bec5f50f6c6ed8caa56fcf3b3d091392e1ed2f7e31174543a10aab9fda5db20a4813e10dd4474ce799f1156a17acb7912a10de91349f2dcba0eabf0387372cd9cad75f10bc548cb6e0dd378d1bfa14185cc63351a063a30c8d427303aeea6f40acd553253d9c12f9a2f0503bd5cd7ff271dd710dc8de0f9e84c84a887ad6d26ccaa04d67013e5ba8ec2e2cfe5cb0334abc4e7a7857e14a32e982749b735e7973b9736b1b3063d6a6d71459957e230e98e43aeec3bdb305de5706418467dd1e16e3c4fd0c2dc05a909ffbd08951f76f446d8c76b8b1634b4658b4df00ccacc93f7acd133bd850a2c3b110183e8b1d2f84db42cc2dc7e4912dfe291b5767b54f58aece0961d2cd166c56a9ef6465e1fa0994a47fb4f3e9f67e128571988297d3182d09588d1295dba7620ca93768d5b219a42335efb32c2cb3d7e1da8b9da480b6c43b677fee0ad0e2ccd46cb5d2cd3fed108f481934029a45f5b136b74f90c1a447633c9d87411e7e706437a837ad60b9e9afaa266b2f480c966c021c1b52e26f507e5fee225ae0f1c34551a20f756d1d37e3daf9bd5c3d74dda198aa7b6af17c0564efbe7987319cb8dfdb4adbf32e3b2a13e53bf570182c501df3e481d191f4f3a3a136ffe3613791fad4be23e961712c207eeb73bb910c4c90a6156fafe6478a12e8a8f8e1efeebf1dc9df6ffca17a73489fc3b8ef13924d52c82cb650adb74a4b31c711fac174098a4a94cc8f1350aa99a782d5230127fc452f0fe3e21e8c7fc48b9ca397c0976d254b6fb38569ecccc5b6a5148ffa60e0d2f010f5b4cb77b2de7ff8c0f6dfdf978e4c494bf2ff6961d776f85364c5aa2140aff5bb8904feb2069fb4870ccd40b5c5ec73c16322a39276e16db4cc84c0891c031205eab8a8cccbbd7e6db817e1fdacd619c9d3e30c7f2e10938d4f2680dc8348d8da3b4f37f597f3974e49131e51142eb4a490834e4339b590211d94bfdf2ce38a344b33db107d3823d8086abb1ca059c8b200c302d164b069140f81e600dc834e94f5562b1279877f29ce637e3a798e02c5a2f9a395058a408a4213d97133b93d3ee96f5beede63d0268e96eaa7a7e84650c5e891f1390eef7b16d8197a4b0fb172eba6f615a8a5d44330b3a123cdce810652268c19f67c3d00eede184c4d25181b7dc5e4bae0018ff5b652ac70f8107c2d2439a7b97f0b47dc5223dd08b2e6b3ff9b4bae376a3949c569d11c5311a515d6b59299a232bb939d7d8bdfc6275e6f0b947b4facea03f4038f74e6cd32536be8b8045ccc02ba70ab9a6beec3d83874be498aa848e7adfe9d5e32f25549381aa6192860c73db02899e98f09cf87cc7e446634cab27fd63dd2409c052417d41b3895041c8abaa3a452201400281fbd741a946f13813052d2c4f500452b517e92c401138e0fed7344dc6742401fd3230a6db71eff0785c404c8bcdfcbb94d7d94306c24996ed31a58403fbbe6089a8c6917e1b9db34926f0dd3dd4e6a144e09329ad35cd3169393198fd53c0032c9e23d30ed99b19e029e751eefdd9d36162c9515bdf7382c59a4b97e0848a0fe3925c6ccdadc83f2eb471d419ec72d685247b24312ecf547deed0f6dc791cd61822088f7f542125d2ece5e2a5e15f904129611f57581481562901883fdf054b9be434820b430b63b4bfa7b668a79037c0f218366beb3eb7fbfdf016363085333043ef3a4ab17da6666f13735662944cebbfb8de16609c74193ed8b09570025212829da05f03dd1e84739115c690212adff398648fea1ef4291c4e022eb76dcc8742a58ce133909250284c28eef8593544e88c89af1056238bd16e6215c7bbef89cd7b2e063483516a7f6f360aafbd88762623e6adbe38b40e4fc841c55c34e46979d9e27f1ff6f4d9e12bde7f253777ac1cca8df2a902fb6284229b731c94ed0ef536b7e8418e5178f2aca4814f3f048e77f768cb46bcdbd01dbc23419b841787803b99de909019eedb3303f2068b49a2f0427db1e815c09da6bce4d08776146292ab28fba593b2817f186ced6a9614dc93a706d5a5be9354692d7ce8a6882b563c3211fb16cea55b808a46a347f5b64d91915a93744ba0c22f98fb5c145ef6c2d2b06225cb6b6b24587f01b7d3dcd5775931292094d09d3a3b7e5acc858c5eae573f7d0d2a6ead6f090613f54ddcb25008fd172f6730046d52b1dab1df9551b21cccc2ecfbbb8e20ffae826bd629fd5ccb70f47e580d2f0ba4c491475ab23f744d77cd3daef65bc93b7c1791d9aee9fc52a61a03b7f0e5cc0e3ef242932734a9dcb395ffe2998b57a2c0ae596fd829b4e8483d8a31e86b931e76a0a04fbfc8ad4519657468f9f602c0eae9f8284cc9082aa9e8dfabc2094310642057b219a7d7c6d351475cf205ea84f89bd2aa5ad7773be3f6f86f28595cdd1708e1777a89a7390064b49de4dd57d64d37595b8d0d4fd1506330ba7b4c943c7756bfb02e0de8462110bec4aa2e8db8023eecbba4a02033f207ba3a4cc18425d0bee0bd1f68b9bbeb4c6c2c08854ce1e1e6f26cbd5d50c69d9b583bd26a9b5f1f4c547a711cf64f4337c89d1da66380d6083d462c8", 0x1000, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)="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") (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0], 0x1}) (async) recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000300)=0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}, 0x1, 0x0, 0x0, 0x404c831}, 0x44) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000080000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000004c000000060a010400000000000000000500000008000b40000000002400048020000180070001006374000014000280080002400000000d08000140000000080900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0xffffffff}, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 0s ago: executing program 0 (id=1282): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x587, 0x0, 0xb}]}) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bind$ax25(r0, &(0x7f0000000100)={{0x3, @bcast, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) connect(r2, &(0x7f0000000cc0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x3, @multicast2}}, {{0x2, 0xfffc, @private}}}, 0x108) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) r6 = socket(0x11, 0x3, 0x0) mmap(&(0x7f0000731000/0x1000)=nil, 0x1000, 0x2, 0x812, r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00') fchdir(r7) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) r8 = getpid() syz_pidfd_open(r8, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000240), &(0x7f0000000280), 0x2, 0x1) syz_open_procfs(r8, &(0x7f0000000000)='net/netfilter\x00') kernel console output (not intermixed with test programs): merate USB device [ 252.794237][ T818] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.794266][ T818] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 252.796146][ T818] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 252.796175][ T818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 252.796198][ T818] usb 2-1: SerialNumber: syz [ 253.072933][ T818] usb 2-1: 0:2 : does not exist [ 253.155609][ T818] usb 2-1: USB disconnect, device number 41 [ 253.253554][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 253.440846][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 253.489821][ T8325] use of bytesused == 0 is deprecated and will be removed in the future, [ 253.489838][ T8325] use the actual size instead. [ 253.520880][ T5142] Bluetooth: hci4: command 0x040f tx timeout [ 253.520940][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 254.030591][ T8329] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 254.030917][ T8329] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 254.031126][ T8329] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 254.031345][ T8329] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 254.214432][ T8344] 9p: Could not find request transport: fd0x000000000000000d [ 255.229432][ T8362] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 255.229454][ T8362] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 255.570635][ T5914] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 255.723057][ T5914] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.723084][ T5914] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.724398][ T5914] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 255.724417][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 255.724430][ T5914] usb 2-1: SerialNumber: syz [ 255.792132][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.804382][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.945684][ T5914] usb 2-1: 0:2 : does not exist [ 256.022759][ T5914] usb 2-1: USB disconnect, device number 42 [ 256.085571][ T5825] Bluetooth: hci4: command 0x040f tx timeout [ 256.085611][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 256.085640][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 256.085668][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 256.161363][ T8370] netlink: 17 bytes leftover after parsing attributes in process `syz.0.801'. [ 256.190180][ T8367] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 256.190200][ T8367] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 256.203894][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.269861][ T8367] vhci_hcd vhci_hcd.0: Device attached [ 256.366649][ T8382] netlink: 14 bytes leftover after parsing attributes in process `syz.2.804'. [ 256.510855][ T37] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 256.511045][ T818] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 256.609487][ T8384] FAULT_INJECTION: forcing a failure. [ 256.609487][ T8384] name failslab, interval 1, probability 0, space 0, times 0 [ 256.609516][ T8384] CPU: 1 UID: 0 PID: 8384 Comm: syz.1.805 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 256.609537][ T8384] Tainted: [L]=SOFTLOCKUP [ 256.609543][ T8384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 256.609552][ T8384] Call Trace: [ 256.609558][ T8384] [ 256.609565][ T8384] dump_stack_lvl+0xe8/0x150 [ 256.609588][ T8384] should_fail_ex+0x46b/0x600 [ 256.609608][ T8384] should_failslab+0xa8/0x100 [ 256.609633][ T8384] kmem_cache_alloc_noprof+0x87/0x680 [ 256.609655][ T8384] ? do_getname+0x2e/0x250 [ 256.609674][ T8384] do_getname+0x2e/0x250 [ 256.609688][ T8384] ? getname_flags+0x11/0x20 [ 256.609705][ T8384] do_sys_openat2+0xca/0x200 [ 256.609725][ T8384] ? __pfx_do_sys_openat2+0x10/0x10 [ 256.609752][ T8384] __se_sys_openat2+0x223/0x2d0 [ 256.609772][ T8384] ? __pfx___se_sys_openat2+0x10/0x10 [ 256.609799][ T8384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.609816][ T8384] do_syscall_64+0x15f/0xf80 [ 256.609837][ T8384] ? trace_irq_disable+0x3b/0x140 [ 256.609855][ T8384] ? clear_bhb_loop+0x40/0x90 [ 256.609874][ T8384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.609890][ T8384] RIP: 0033:0x7f3089ecc819 [ 256.609904][ T8384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.609918][ T8384] RSP: 002b:00007f308811e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 256.609935][ T8384] RAX: ffffffffffffffda RBX: 00007f308a145fa0 RCX: 00007f3089ecc819 [ 256.609946][ T8384] RDX: 0000200000000300 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 256.609958][ T8384] RBP: 00007f308811e090 R08: 0000000000000000 R09: 0000000000000000 [ 256.609967][ T8384] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 256.609977][ T8384] R13: 00007f308a146038 R14: 00007f308a145fa0 R15: 00007ffcf553e1f8 [ 256.610000][ T8384] [ 256.665285][ T37] usb 1-1: Using ep0 maxpacket: 8 [ 256.732950][ T37] usb 1-1: config 0 has no interfaces? [ 256.733051][ T37] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 256.733113][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.823136][ T37] usb 1-1: config 0 descriptor?? [ 256.913837][ T8386] 9pnet_fd: Insufficient options for proto=fd [ 256.979799][ T8389] syz.2.807: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 256.990165][ T8389] CPU: 1 UID: 0 PID: 8389 Comm: syz.2.807 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 256.990198][ T8389] Tainted: [L]=SOFTLOCKUP [ 256.990206][ T8389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 256.990220][ T8389] Call Trace: [ 256.990229][ T8389] [ 256.990238][ T8389] dump_stack_lvl+0xe8/0x150 [ 256.990270][ T8389] warn_alloc+0x263/0x3e0 [ 256.990301][ T8389] ? unwind_get_return_address+0x4d/0x90 [ 256.990332][ T8389] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 256.990359][ T8389] ? arch_stack_walk+0xfb/0x150 [ 256.990394][ T8389] ? __pfx_warn_alloc+0x10/0x10 [ 256.990432][ T8389] ? __pfx_stack_trace_save+0x10/0x10 [ 256.990455][ T8389] ? __pfx_hlock_conflict+0x10/0x10 [ 256.990515][ T8389] __vmalloc_node_range_noprof+0x132/0x1750 [ 256.990550][ T8389] ? add_lock_to_list+0xc7/0x100 [ 256.990585][ T8389] ? lockdep_unlock+0x5d/0xd0 [ 256.990609][ T8389] ? __lock_acquire+0x146e/0x2cf0 [ 256.990662][ T8389] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 256.990707][ T8389] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 256.990742][ T8389] vmalloc_noprof+0xb2/0xe0 [ 256.990772][ T8389] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 256.990807][ T8389] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 256.990839][ T8389] ? dvb_demux_do_ioctl+0x323/0x540 [ 256.990873][ T8389] dvb_demux_do_ioctl+0x460/0x540 [ 256.990908][ T8389] dvb_usercopy+0x199/0x2e0 [ 256.990944][ T8389] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 256.990974][ T8389] ? __pfx_dvb_usercopy+0x10/0x10 [ 256.991012][ T8389] ? __fget_files+0x3a6/0x420 [ 256.991038][ T8389] ? __fget_files+0x2a/0x420 [ 256.991067][ T8389] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 256.991097][ T8389] dvb_demux_ioctl+0x29/0x40 [ 256.991128][ T8389] __se_sys_ioctl+0xff/0x170 [ 256.991162][ T8389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.991188][ T8389] do_syscall_64+0x15f/0xf80 [ 256.991219][ T8389] ? trace_irq_disable+0x3b/0x140 [ 256.991246][ T8389] ? clear_bhb_loop+0x40/0x90 [ 256.991273][ T8389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.991296][ T8389] RIP: 0033:0x7f3f2e88c819 [ 256.991316][ T8389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.991336][ T8389] RSP: 002b:00007f3f2cabd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.991360][ T8389] RAX: ffffffffffffffda RBX: 00007f3f2eb06090 RCX: 00007f3f2e88c819 [ 256.991378][ T8389] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 256.991393][ T8389] RBP: 00007f3f2e922c91 R08: 0000000000000000 R09: 0000000000000000 [ 256.991407][ T8389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.991421][ T8389] R13: 00007f3f2eb06128 R14: 00007f3f2eb06090 R15: 00007fff893785e8 [ 256.991459][ T8389] [ 257.014746][ T8389] Mem-Info: [ 257.014780][ T8389] active_anon:40449 inactive_anon:0 isolated_anon:0 [ 257.014780][ T8389] active_file:17053 inactive_file:40041 isolated_file:0 [ 257.014780][ T8389] unevictable:768 dirty:150 writeback:0 [ 257.014780][ T8389] slab_reclaimable:12712 slab_unreclaimable:102876 [ 257.014780][ T8389] mapped:30821 shmem:34256 pagetables:1339 [ 257.014780][ T8389] sec_pagetables:0 bounce:0 [ 257.014780][ T8389] kernel_misc_reclaimable:0 [ 257.014780][ T8389] free:1273997 free_pcp:8628 free_cma:0 [ 257.014932][ T8389] Node 0 active_anon:161796kB inactive_anon:0kB active_file:68212kB inactive_file:159964kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123284kB dirty:600kB writeback:0kB shmem:135488kB kernel_stack:13080kB pagetables:5176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 257.015080][ T8389] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 257.015229][ T8389] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 257.015427][ T8389] lowmem_reserve[]: 0 2499 2500 2500 2500 [ 257.015533][ T8389] Node 0 DMA32 free:1162356kB boost:0kB min:3920kB low:6448kB high:8976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:161796kB inactive_anon:0kB active_file:68212kB inactive_file:159964kB unevictable:1536kB writepending:600kB zspages:0kB present:3129332kB managed:2559328kB mlocked:0kB bounce:0kB free_pcp:29108kB local_pcp:12304kB free_cma:0kB [ 257.015705][ T8389] lowmem_reserve[]: 0 0 1 1 1 [ 257.015807][ T8389] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1592kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 257.015990][ T8389] lowmem_reserve[]: 0 0 0 0 0 [ 257.016126][ T8389] Node 1 Normal free:3918272kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:5396kB local_pcp:916kB free_cma:0kB [ 257.019712][ T8389] lowmem_reserve[]: 0 0 0 0 0 [ 257.019824][ T8389] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 257.105678][ T8389] Node 0 DMA32: 3837*4kB (UME) 2462*8kB (UM) 1169*16kB (UME) 512*32kB (UME) 173*64kB (UME) 61*128kB (UME) 61*256kB (UM) 36*512kB (UM) 17*1024kB (UME) 5*2048kB (UM) 247*4096kB (M) = 1162420kB [ 257.106163][ T8389] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 257.106364][ T8389] Node 1 Normal: 10*4kB (UM) 15*8kB (UM) 10*16kB (UM) 12*32kB (UM) 8*64kB (UM) 10*128kB (UM) 4*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 954*4096kB (M) = 3918272kB [ 257.106819][ T8389] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 257.106860][ T8389] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 257.106905][ T8389] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 257.106953][ T8389] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 257.136291][ T37] usb 1-1: USB disconnect, device number 43 [ 257.150337][ T8389] 91346 total pagecache pages [ 257.150405][ T8389] 0 pages in swap cache [ 257.150426][ T8389] Free swap = 124996kB [ 257.150447][ T8389] Total swap = 124996kB [ 257.150469][ T8389] 2097051 pages RAM [ 257.150490][ T8389] 0 pages HighMem/MovableOnly [ 257.150511][ T8389] 425207 pages reserved [ 257.353988][ T8389] 0 pages cma reserved [ 257.580579][ T8371] vhci_hcd: connection reset by peer [ 257.590297][ T44] vhci_hcd vhci_hcd.0: stop threads [ 257.590360][ T44] vhci_hcd vhci_hcd.0: release socket [ 257.590500][ T44] vhci_hcd vhci_hcd.0: disconnect device [ 257.680913][ T8393] netlink: 14 bytes leftover after parsing attributes in process `syz.1.808'. [ 257.883570][ T8393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.963382][ T8393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.004873][ T8393] bond0 (unregistering): Released all slaves [ 258.234477][ T60] Bluetooth: hci4: unexpected event for opcode 0x0419 [ 258.476658][ T8409] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 258.478944][ T8409] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 258.479130][ T8409] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 258.479299][ T8409] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 258.726687][ T8419] 9pnet_fd: Insufficient options for proto=fd [ 258.767272][ T8414] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 258.767640][ T8414] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 258.767870][ T8414] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 258.768088][ T8414] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 259.580948][ T8441] FAT-fs (nullb0): bogus number of reserved sectors [ 259.581025][ T8441] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 259.585742][ T8436] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 259.586141][ T8436] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 259.586437][ T8436] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 259.587651][ T8436] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 259.798307][ T8447] 9pnet_fd: Insufficient options for proto=fd [ 260.092425][ T8451] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 260.092680][ T8451] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 260.092877][ T8451] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 260.093066][ T8451] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 260.126622][ T5914] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 260.144179][ T8454] netlink: 256 bytes leftover after parsing attributes in process `syz.1.828'. [ 260.144609][ T8454] unsupported nlmsg_type 40 [ 260.291037][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 260.294009][ T5914] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 260.294042][ T5914] usb 3-1: config 0 has no interface number 0 [ 260.297742][ T5914] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 260.297773][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.297795][ T5914] usb 3-1: Product: syz [ 260.297811][ T5914] usb 3-1: Manufacturer: syz [ 260.297828][ T5914] usb 3-1: SerialNumber: syz [ 260.360311][ T5914] usb 3-1: config 0 descriptor?? [ 260.382801][ T5914] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 260.604362][ T5914] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 260.621724][ T5914] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 260.685925][ T60] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 260.694520][ T37] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 260.990979][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 261.009724][ T8469] IPVS: sync thread started: state = MASTER, mcast_ifn = ip_vti0, syncid = 4, id = 0 [ 261.026649][ T37] usb 5-1: unable to get BOS descriptor or descriptor too short [ 261.027547][ T37] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 261.027578][ T37] usb 5-1: can't read configurations, error -71 [ 261.105207][ T5893] usb 3-1: USB disconnect, device number 47 [ 261.152634][ T5893] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 261.189956][ T5893] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 261.216367][ T5893] quatech2 3-1:0.51: device disconnected [ 261.264721][ T8468] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 261.266895][ T8468] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 261.267152][ T8468] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 261.267353][ T8468] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 261.620758][ T5914] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 261.625943][ T8478] 9pnet_fd: Insufficient options for proto=fd [ 261.670976][ T818] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 261.770758][ T5915] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 261.772294][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 261.792636][ T5914] usb 1-1: config 3 has an invalid interface number: 25 but max is 0 [ 261.792663][ T5914] usb 1-1: config 3 has no interface number 0 [ 261.792695][ T5914] usb 1-1: config 3 interface 25 has no altsetting 0 [ 261.795431][ T5914] usb 1-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=e6.a2 [ 261.795467][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.795483][ T5914] usb 1-1: Product: syz [ 261.795494][ T5914] usb 1-1: Manufacturer: syz [ 261.795504][ T5914] usb 1-1: SerialNumber: syz [ 261.884238][ T8481] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 261.884494][ T8481] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 261.884859][ T8481] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 261.885138][ T8481] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 261.950697][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 261.962295][ T5915] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 261.962358][ T5915] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 261.962374][ T5915] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 261.962411][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 261.962427][ T5915] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 261.962447][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 261.962518][ T5915] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 261.962536][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.068968][ T5915] usb 2-1: config 0 descriptor?? [ 262.075004][ T8473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.078098][ T8473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.126363][ T8473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.834'. [ 262.246445][ T5914] usb 1-1: USB disconnect, device number 44 [ 262.279053][ T5919] udevd[5919]: setting mode of /dev/bus/usb/001/044 to 020664 failed: No such file or directory [ 262.279355][ T5919] udevd[5919]: setting owner of /dev/bus/usb/001/044 to uid=0, gid=0 failed: No such file or directory [ 262.335480][ T8475] openvswitch: netlink: Missing valid actions attribute. [ 262.335513][ T8475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.372272][ T5915] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 262.397581][ T5915] usb 2-1: USB disconnect, device number 43 [ 262.425832][ T5915] usblp0: removed [ 262.735109][ T8492] FAULT_INJECTION: forcing a failure. [ 262.735109][ T8492] name failslab, interval 1, probability 0, space 0, times 0 [ 262.735146][ T8492] CPU: 1 UID: 0 PID: 8492 Comm: syz.0.841 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 262.735175][ T8492] Tainted: [L]=SOFTLOCKUP [ 262.735183][ T8492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 262.735197][ T8492] Call Trace: [ 262.735205][ T8492] [ 262.735234][ T8492] dump_stack_lvl+0xe8/0x150 [ 262.735283][ T8492] should_fail_ex+0x46b/0x600 [ 262.735314][ T8492] should_failslab+0xa8/0x100 [ 262.735350][ T8492] __kmalloc_noprof+0xdf/0x7b0 [ 262.735388][ T8492] ? kfree+0x4d/0x6c0 [ 262.735418][ T8492] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 262.735452][ T8492] tomoyo_realpath_from_path+0xe3/0x5d0 [ 262.735481][ T8492] ? tomoyo_domain+0xd7/0x130 [ 262.735514][ T8492] ? tomoyo_path_number_perm+0x219/0x630 [ 262.735550][ T8492] tomoyo_path_number_perm+0x246/0x630 [ 262.735589][ T8492] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 262.735624][ T8492] ? __lock_acquire+0x6b5/0x2cf0 [ 262.735657][ T8492] ? do_raw_spin_lock+0x12b/0x2f0 [ 262.735715][ T8492] ? __fget_files+0x2a/0x420 [ 262.735745][ T8492] ? __fget_files+0x2a/0x420 [ 262.735770][ T8492] ? __fget_files+0x3a6/0x420 [ 262.735796][ T8492] ? __fget_files+0x2a/0x420 [ 262.735828][ T8492] security_file_ioctl+0xc3/0x2a0 [ 262.735865][ T8492] __se_sys_ioctl+0x47/0x170 [ 262.735898][ T8492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.735924][ T8492] do_syscall_64+0x15f/0xf80 [ 262.735954][ T8492] ? trace_irq_disable+0x3b/0x140 [ 262.735980][ T8492] ? clear_bhb_loop+0x40/0x90 [ 262.736007][ T8492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.736031][ T8492] RIP: 0033:0x7fa774f9c819 [ 262.736052][ T8492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.736071][ T8492] RSP: 002b:00007fa7731f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.736096][ T8492] RAX: ffffffffffffffda RBX: 00007fa775215fa0 RCX: 00007fa774f9c819 [ 262.736113][ T8492] RDX: 00002000000001c0 RSI: 000000004068aea3 RDI: 0000000000000004 [ 262.736129][ T8492] RBP: 00007fa7731f6090 R08: 0000000000000000 R09: 0000000000000000 [ 262.736143][ T8492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.736157][ T8492] R13: 00007fa775216038 R14: 00007fa775215fa0 R15: 00007ffd29dfd348 [ 262.736193][ T8492] [ 262.736228][ T8492] ERROR: Out of memory at tomoyo_realpath_from_path. [ 262.892174][ T5915] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 263.053011][ T5915] usb 2-1: device descriptor read/64, error -71 [ 263.235019][ T8496] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 263.235276][ T8496] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 263.235467][ T8496] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 263.235659][ T8496] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 263.290739][ T5915] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 263.326207][ T8505] netlink: 92 bytes leftover after parsing attributes in process `syz.2.845'. [ 263.383558][ T8507] 9pnet_fd: Insufficient options for proto=fd [ 263.420758][ T5915] usb 2-1: device descriptor read/64, error -71 [ 263.480706][ T818] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 263.531140][ T5915] usb usb2-port1: attempt power cycle [ 263.630690][ T818] usb 5-1: Using ep0 maxpacket: 32 [ 263.632653][ T818] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 263.632770][ T818] usb 5-1: config 0 has no interface number 0 [ 263.635382][ T818] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 263.635411][ T818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.635432][ T818] usb 5-1: Product: syz [ 263.635453][ T818] usb 5-1: Manufacturer: syz [ 263.635464][ T818] usb 5-1: SerialNumber: syz [ 263.692767][ T818] usb 5-1: config 0 descriptor?? [ 263.698249][ T818] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 263.870676][ T5915] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 263.891616][ T5915] usb 2-1: device descriptor read/8, error -71 [ 263.936648][ T818] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 263.958998][ T818] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 264.130770][ T5915] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 264.156139][ T5915] usb 2-1: device descriptor read/8, error -71 [ 264.266750][ T5915] usb usb2-port1: unable to enumerate USB device [ 264.288515][ T8515] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 264.316381][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 264.346077][ T37] usb 5-1: USB disconnect, device number 11 [ 264.409347][ T37] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 264.468395][ T37] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 264.469589][ T37] quatech2 5-1:0.51: device disconnected [ 265.062843][ T818] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 265.063372][ T818] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 265.063916][ T818] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 265.064343][ T818] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 265.064365][ T818] rtc rtc0: __rtc_set_alarm: err=-22 [ 265.285291][ T8529] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 265.285954][ T8529] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 265.287428][ T8529] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 265.287596][ T8529] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 265.418443][ T8536] 9pnet_fd: Insufficient options for proto=fd [ 265.850930][ T818] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 265.980725][ T37] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 266.006306][ T818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.006346][ T818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.006369][ T818] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 266.006411][ T818] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 266.006427][ T818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.078546][ T818] usb 1-1: config 0 descriptor?? [ 266.150745][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 266.153071][ T37] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 266.153099][ T37] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 266.153122][ T37] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 266.153248][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 266.153265][ T37] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 266.153284][ T37] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 266.153363][ T37] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 266.153380][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.255637][ T37] usb 3-1: config 0 descriptor?? [ 266.533107][ T37] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 266.606789][ T37] usb 3-1: USB disconnect, device number 48 [ 266.687292][ T37] usblp0: removed [ 266.930409][ T818] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 266.980885][ T818] usb 1-1: USB disconnect, device number 45 [ 267.087036][ T8559] fido_id[8559]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 267.108348][ T37] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 267.208567][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 267.272104][ T37] usb 3-1: device descriptor read/64, error -71 [ 267.353534][ T8563] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 267.355823][ T8563] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 267.366137][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 267.366928][ T8563] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 267.367117][ T8563] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 267.520727][ T37] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 267.660819][ T37] usb 3-1: device descriptor read/64, error -71 [ 267.771048][ T37] usb usb3-port1: attempt power cycle [ 267.880731][ T818] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 268.034565][ T818] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.034612][ T818] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.034666][ T818] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 268.034710][ T818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.121008][ T37] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 268.143632][ T37] usb 3-1: device descriptor read/8, error -71 [ 268.292517][ T818] usb 1-1: GET_CAPABILITIES returned 0 [ 268.292565][ T818] usbtmc 1-1:16.0: can't read capabilities [ 268.421656][ T37] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 268.441995][ T37] usb 3-1: device descriptor read/8, error -71 [ 268.534643][ T5914] usb 1-1: USB disconnect, device number 46 [ 268.553595][ T37] usb usb3-port1: unable to enumerate USB device [ 268.941096][ T8589] netlink: 36 bytes leftover after parsing attributes in process `syz.2.871'. [ 269.370672][ T60] Bluetooth: hci3: command 0x0406 tx timeout [ 269.440718][ T5142] Bluetooth: hci4: command 0x040f tx timeout [ 269.440783][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 269.925727][ T8591] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 269.925985][ T8591] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 269.926190][ T8591] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 269.926397][ T8591] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 270.191162][ T5914] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 270.346451][ T5914] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 270.346484][ T5914] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 270.346508][ T5914] usb 3-1: config 220 has no interface number 2 [ 270.346602][ T5914] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 270.346634][ T5914] usb 3-1: config 220 interface 0 has no altsetting 0 [ 270.346656][ T5914] usb 3-1: config 220 interface 76 has no altsetting 0 [ 270.346676][ T5914] usb 3-1: config 220 interface 1 has no altsetting 0 [ 270.413851][ T5914] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 270.413884][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.413905][ T5914] usb 3-1: Product: syz [ 270.413921][ T5914] usb 3-1: Manufacturer: syz [ 270.413935][ T5914] usb 3-1: SerialNumber: syz [ 270.700060][ T5914] usb 3-1: selecting invalid altsetting 0 [ 270.707843][ T5914] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 270.707878][ T5914] uvcvideo 3-1:220.0: No valid video chain found. [ 270.748401][ T5914] usb 3-1: selecting invalid altsetting 0 [ 270.748439][ T5914] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 270.773273][ T5914] usb 3-1: USB disconnect, device number 53 [ 271.200887][ T5142] Bluetooth: hci1: command 0x0c1a tx timeout [ 272.015245][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 272.015299][ T5142] Bluetooth: hci4: command 0x040f tx timeout [ 272.015331][ T5142] Bluetooth: hci3: command 0x0406 tx timeout [ 272.213371][ T8632] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 272.213691][ T8632] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 272.213942][ T8632] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 272.239407][ T8632] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 272.505558][ T8641] netlink: 'syz.0.887': attribute type 40 has an invalid length. [ 273.260746][ T5914] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 273.415283][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 273.415317][ T5914] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 273.415365][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 273.415388][ T5914] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 273.420321][ T5914] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 273.420357][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.420379][ T5914] usb 3-1: Product: syz [ 273.420395][ T5914] usb 3-1: Manufacturer: syz [ 273.420411][ T5914] usb 3-1: SerialNumber: syz [ 273.502698][ T5914] usb 3-1: config 0 descriptor?? [ 273.519645][ T5914] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 273.522232][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 273.797601][ T5914] ums-isd200 3-1:0.0: probe with driver ums-isd200 failed with error -22 [ 273.971360][ T8653] netlink: 132 bytes leftover after parsing attributes in process `syz.2.889'. [ 274.240677][ T5825] Bluetooth: hci4: command 0x040f tx timeout [ 274.240719][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 274.240783][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 274.787111][ T8674] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 274.787386][ T8674] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 274.787584][ T8674] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 274.787892][ T8674] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 274.930316][ T8696] 9pnet_virtio: no channels available for device syz [ 275.049550][ T8699] netlink: 176 bytes leftover after parsing attributes in process `syz.4.901'. [ 275.049652][ T8699] ip6gretap0: entered promiscuous mode [ 275.049945][ T8699] netlink: 176 bytes leftover after parsing attributes in process `syz.4.901'. [ 275.200774][ T5914] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 275.202290][ T5893] usb 3-1: USB disconnect, device number 54 [ 275.330795][ T5914] usb 2-1: device descriptor read/64, error -71 [ 275.572352][ T5914] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 275.719890][ T5914] usb 2-1: device descriptor read/64, error -71 [ 275.821077][ T5914] usb usb2-port1: attempt power cycle [ 276.160724][ T5914] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 276.181967][ T5914] usb 2-1: device descriptor read/8, error -71 [ 276.297388][ T8723] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 276.297609][ T8723] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 276.297906][ T8723] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 276.298104][ T8723] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 276.420660][ T5914] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 276.442582][ T5914] usb 2-1: device descriptor read/8, error -71 [ 276.553194][ T5914] usb usb2-port1: unable to enumerate USB device [ 276.920178][ T38] audit: type=1326 audit(1776359267.477:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8739 comm="syz.0.913" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa774f9c819 code=0x0 [ 277.590723][ T5893] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 277.662205][ T8754] overlayfs: failed to resolve './file2': -2 [ 277.754116][ T5893] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 277.754146][ T5893] usb 5-1: config 0 has no interface number 0 [ 277.757580][ T5893] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 277.757609][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.757630][ T5893] usb 5-1: Product: syz [ 277.757651][ T5893] usb 5-1: Manufacturer: syz [ 277.757667][ T5893] usb 5-1: SerialNumber: syz [ 277.810014][ T5893] usb 5-1: config 0 descriptor?? [ 278.085326][ T5893] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 278.160446][ T5893] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 278.165518][ T5893] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 278.165739][ T5893] usb 5-1: media controller created [ 278.240673][ T5142] Bluetooth: hci1: command 0x0c1a tx timeout [ 278.306759][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 278.326638][ T5825] Bluetooth: hci4: command 0x040f tx timeout [ 278.326675][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 278.326726][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 278.586002][ T5893] usb 5-1: DVB: registering adapter 1 frontend 0 (E3C EC100 DVB-T)... [ 278.628094][ T5893] dvbdev: dvb_create_media_entity: media entity 'E3C EC100 DVB-T' registered. [ 278.849402][ T5893] DVB: Unable to find symbol mxl5005s_attach() [ 279.508856][ T60] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 279.620648][ T9] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 279.760693][ T9] usb 3-1: device descriptor read/64, error -71 [ 279.846804][ T5893] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 280.004773][ T9] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 280.036167][ T5893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.037985][ T5893] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 280.038014][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 280.038039][ T5893] usb 2-1: Product: syz [ 280.038050][ T5893] usb 2-1: SerialNumber: syz [ 280.109426][ T5893] usb 2-1: config 0 descriptor?? [ 280.119935][ T5893] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 280.130744][ T9] usb 3-1: device descriptor read/64, error -71 [ 280.147313][ T5893] usb 2-1: Detected SIO [ 280.154928][ T5893] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 280.241247][ T9] usb usb3-port1: attempt power cycle [ 280.318507][ T5915] usb 2-1: USB disconnect, device number 52 [ 280.364985][ T5915] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 280.383987][ T5915] ftdi_sio 2-1:0.0: device disconnected [ 280.401898][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 280.448902][ T37] usb 5-1: USB disconnect, device number 12 [ 280.590789][ T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 280.611999][ T9] usb 3-1: device descriptor read/8, error -71 [ 280.854508][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 280.875950][ T9] usb 3-1: device descriptor read/8, error -71 [ 280.981278][ T9] usb usb3-port1: unable to enumerate USB device [ 281.775654][ T37] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 281.859211][ T8821] 9pnet: p9_errstr2errno: server reported unknown error [ 281.970692][ T37] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.970804][ T37] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.972037][ T37] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 281.972065][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 281.972087][ T37] usb 2-1: SerialNumber: syz [ 282.311858][ T37] usb 2-1: 0:2 : does not exist [ 282.311929][ T37] usb 2-1: unit 5 not found! [ 282.388297][ T37] usb 2-1: USB disconnect, device number 53 [ 282.580043][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.621143][ T5142] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 282.627798][ T8835] cgroup: Need name or subsystem set [ 283.008867][ T8843] netlink: 16 bytes leftover after parsing attributes in process `syz.1.949'. [ 283.090846][ T8846] 9pnet: p9_errstr2errno: server reported unknown error [ 283.246650][ T5142] Bluetooth: hci4: unexpected event for opcode 0x0419 [ 283.314608][ T37] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 283.470722][ T37] usb 2-1: Using ep0 maxpacket: 8 [ 283.475487][ T37] usb 2-1: unable to get BOS descriptor or descriptor too short [ 283.476704][ T37] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.476730][ T37] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 283.479126][ T37] usb 2-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 283.479159][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.479175][ T37] usb 2-1: Product: syz [ 283.479185][ T37] usb 2-1: Manufacturer: syz [ 283.479197][ T37] usb 2-1: SerialNumber: syz [ 283.554644][ T37] usb 2-1: config 0 descriptor?? [ 283.590394][ T8857] romfs: Unknown parameter 'discard' [ 283.620697][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 283.663383][ T8857] netlink: 36 bytes leftover after parsing attributes in process `syz.2.954'. [ 283.752283][ T9] usb 5-1: device descriptor read/64, error -71 [ 283.805109][ T37] usb 2-1: USB disconnect, device number 54 [ 283.992491][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 284.121305][ T9] usb 5-1: device descriptor read/64, error -71 [ 284.232390][ T9] usb usb5-port1: attempt power cycle [ 284.419313][ T5142] Bluetooth: hci1: unexpected event for opcode 0x0419 [ 284.450736][ T5893] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 284.570733][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 284.594003][ T9] usb 5-1: device descriptor read/8, error -71 [ 284.609446][ T5893] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.609472][ T5893] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 284.611869][ T5893] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 284.611946][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 284.611984][ T5893] usb 1-1: SerialNumber: syz [ 284.830734][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 284.852019][ T9] usb 5-1: device descriptor read/8, error -71 [ 284.899900][ T5893] usb 1-1: 0:2 : does not exist [ 284.956988][ T5893] usb 1-1: USB disconnect, device number 47 [ 284.967829][ T9] usb usb5-port1: unable to enumerate USB device [ 284.998294][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 285.328107][ T8891] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 285.556291][ T8897] netlink: 16 bytes leftover after parsing attributes in process `syz.0.968'. [ 286.260857][ T5893] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 286.338773][ T8927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.361532][ T9] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 286.422407][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 286.427617][ T5893] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 286.427648][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.427671][ T5893] usb 1-1: Product: syz [ 286.427687][ T5893] usb 1-1: Manufacturer: syz [ 286.427702][ T5893] usb 1-1: SerialNumber: syz [ 286.474711][ T5893] usb 1-1: config 0 descriptor?? [ 286.488914][ T5893] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 286.513777][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.513806][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 286.515560][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 286.515591][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 286.515614][ T9] usb 2-1: SerialNumber: syz [ 286.719606][ T8931] netlink: 104 bytes leftover after parsing attributes in process `syz.4.982'. [ 286.786281][ T9] usb 2-1: 0:2 : does not exist [ 286.923552][ T9] usb 2-1: USB disconnect, device number 55 [ 287.103224][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.250659][ T37] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 287.417086][ T37] usb 3-1: unable to get BOS descriptor or descriptor too short [ 287.417749][ T37] usb 3-1: not running at top speed; connect to a high speed hub [ 287.419828][ T37] usb 3-1: language id specifier not provided by device, defaulting to English [ 287.469569][ T37] usb 3-1: New USB device found, idVendor=0e41, idProduct=4250, bcdDevice= 0.40 [ 287.469602][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.469686][ T37] usb 3-1: Product: ꭪␮ᘛҌl€ [ 287.469704][ T37] usb 3-1: SerialNumber: syz [ 287.558047][ T37] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 287.576845][ T5893] gspca_ov534_9: reg_w failed -71 [ 287.678662][ T37] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 287.679388][ T37] snd_usb_pod 3-1:1.0: Line 6 BassPODxt found [ 287.679402][ T37] usb 3-1: selecting invalid altsetting 5 [ 287.679412][ T37] snd_usb_pod 3-1:1.0: set_interface failed [ 287.679615][ T37] snd_usb_pod 3-1:1.0: Line 6 BassPODxt now disconnected [ 287.679775][ T37] snd_usb_pod 3-1:1.0: probe with driver snd_usb_pod failed with error -22 [ 287.729291][ T37] snd_usb_pod 3-1:1.1: Line 6 BassPODxt found [ 287.729329][ T37] usb 3-1: selecting invalid altsetting 5 [ 287.729346][ T37] snd_usb_pod 3-1:1.1: set_interface failed [ 287.729599][ T37] snd_usb_pod 3-1:1.1: Line 6 BassPODxt now disconnected [ 287.729802][ T37] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 287.784569][ T37] snd_usb_pod 3-1:1.2: Line 6 BassPODxt found [ 287.784593][ T37] usb 3-1: selecting invalid altsetting 5 [ 287.784608][ T37] snd_usb_pod 3-1:1.2: set_interface failed [ 287.784838][ T37] snd_usb_pod 3-1:1.2: Line 6 BassPODxt now disconnected [ 287.785005][ T37] snd_usb_pod 3-1:1.2: probe with driver snd_usb_pod failed with error -22 [ 287.832866][ T37] usb 3-1: USB disconnect, device number 59 [ 287.884651][ T5893] gspca_ov534_9: Unknown sensor 0000 [ 287.884762][ T5893] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 287.910187][ T5893] usb 1-1: USB disconnect, device number 48 [ 287.927970][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.270758][ T9] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 288.412965][ T9] usb 2-1: device descriptor read/64, error -71 [ 288.431019][ T5893] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 288.560861][ T37] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 288.585796][ T5893] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 288.585833][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.585847][ T5893] usb 1-1: Product: syz [ 288.585857][ T5893] usb 1-1: Manufacturer: syz [ 288.585868][ T5893] usb 1-1: SerialNumber: syz [ 288.591552][ T5893] usb 1-1: config 0 descriptor?? [ 288.660659][ T9] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 288.705401][ T8958] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 288.705726][ T8958] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 288.705962][ T8958] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 288.706258][ T8958] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 288.721875][ T37] usb 5-1: Using ep0 maxpacket: 8 [ 288.793130][ T37] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.793161][ T37] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 288.799798][ T37] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 288.799820][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.799834][ T37] usb 5-1: Product: syz [ 288.799845][ T37] usb 5-1: Manufacturer: syz [ 288.799899][ T37] usb 5-1: SerialNumber: syz [ 288.830688][ T9] usb 2-1: device descriptor read/64, error -71 [ 288.891428][ T5893] usb 1-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 288.891449][ T5893] f81604 1-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 288.891477][ T5893] f81604 1-1:0.0: probe with driver f81604 failed with error -121 [ 288.899143][ T37] usb 5-1: config 0 descriptor?? [ 288.933251][ T37] powermate 5-1:0.0: probe with driver powermate failed with error -22 [ 288.949126][ T9] usb usb2-port1: attempt power cycle [ 289.123907][ T8954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.124588][ T8954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.143944][ T5914] usb 5-1: USB disconnect, device number 17 [ 289.196145][ T5893] usb 1-1: USB disconnect, device number 49 [ 289.290744][ T9] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 289.311510][ T9] usb 2-1: device descriptor read/8, error -71 [ 289.320723][ T37] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 289.473647][ T37] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.473696][ T37] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.475151][ T37] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 289.475178][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 289.475204][ T37] usb 3-1: SerialNumber: syz [ 289.580786][ T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 289.601426][ T9] usb 2-1: device descriptor read/8, error -71 [ 289.711392][ T9] usb usb2-port1: unable to enumerate USB device [ 289.759020][ T8965] usb usb9: usbfs: process 8965 (syz.0.996) did not claim interface 0 before use [ 289.799102][ T37] usb 3-1: 0:2 : does not exist [ 289.854583][ T8970] tipc: Enabling of bearer rejected, failed to enable media [ 289.900998][ T37] usb 3-1: USB disconnect, device number 60 [ 289.975837][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.576967][ T8980] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1001'. [ 290.720842][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 290.720884][ T5142] Bluetooth: hci4: command 0x040f tx timeout [ 290.720914][ T5142] Bluetooth: hci3: command 0x0406 tx timeout [ 291.352651][ T8978] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 291.359110][ T8978] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 291.359278][ T8978] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 291.360376][ T8978] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 291.850816][ T9] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 291.960767][ T37] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 292.002316][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 292.004589][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.004628][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 2: 128, using maximum allowed: 30 [ 292.004667][ T9] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 292.004710][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 292.004827][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 292.004850][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.009985][ T9] usb 2-1: config 0 descriptor?? [ 292.088599][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 292.153116][ T37] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.153145][ T37] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 292.154371][ T37] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 292.154396][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 292.154416][ T37] usb 5-1: SerialNumber: syz [ 292.420191][ T37] usb 5-1: 0:2 : does not exist [ 292.488787][ T37] usb 5-1: USB disconnect, device number 18 [ 292.646453][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 292.678511][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 292.774891][ T9] gspca_vc032x: reg_w err -71 [ 292.774987][ T9] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 292.807412][ T9] usb 2-1: USB disconnect, device number 60 [ 293.160768][ T37] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 293.240694][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 293.313441][ T37] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 293.313471][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 293.313490][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 293.313507][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 293.316074][ T37] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 293.316100][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.316119][ T37] usb 3-1: Product: syz [ 293.316132][ T37] usb 3-1: Manufacturer: syz [ 293.316149][ T37] usb 3-1: SerialNumber: syz [ 293.321618][ T37] usb 3-1: config 0 descriptor?? [ 293.361204][ T60] Bluetooth: hci3: command 0x0406 tx timeout [ 293.370753][ T5142] Bluetooth: hci4: command 0x040f tx timeout [ 293.370804][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 293.372124][ T9] usb 2-1: device descriptor read/64, error -71 [ 293.428476][ T37] iguanair 3-1:0.0: failed to get version [ 293.438151][ T37] iguanair 3-1:0.0: probe with driver iguanair failed with error -90 [ 293.532772][ T37] usb 3-1: USB disconnect, device number 61 [ 293.620723][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 293.750654][ T9] usb 2-1: device descriptor read/64, error -71 [ 293.834200][ T9017] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 293.834463][ T9017] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 293.834682][ T9017] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 293.835365][ T9017] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 293.868613][ T9] usb usb2-port1: attempt power cycle [ 294.075441][ T9030] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 294.075471][ T9030] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 294.232053][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 294.255651][ T9] usb 2-1: device descriptor read/8, error -71 [ 294.510697][ T9] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 294.533889][ T9] usb 2-1: device descriptor read/8, error -71 [ 294.642472][ T9] usb usb2-port1: unable to enumerate USB device [ 295.121688][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 295.840701][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 295.840741][ T60] Bluetooth: hci4: command 0x040f tx timeout [ 295.840769][ T60] Bluetooth: hci3: command 0x0406 tx timeout [ 296.086294][ T9055] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 296.086604][ T9055] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 296.086880][ T9055] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 296.098999][ T9055] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 296.360685][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 296.510940][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 296.516143][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 296.516173][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 296.556412][ T9] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 296.556445][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.556468][ T9] usb 1-1: Product: syz [ 296.556485][ T9] usb 1-1: Manufacturer: syz [ 296.556501][ T9] usb 1-1: SerialNumber: syz [ 296.602334][ T9] usb 1-1: config 0 descriptor?? [ 296.641875][ T5914] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 296.770730][ T5914] usb 5-1: device descriptor read/64, error -71 [ 297.020094][ T9] usb 1-1: USB disconnect, device number 50 [ 297.021286][ T5914] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 297.170721][ T5914] usb 5-1: device descriptor read/64, error -71 [ 297.281245][ T5914] usb usb5-port1: attempt power cycle [ 297.360947][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 297.620694][ T5914] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 297.641917][ T5914] usb 5-1: device descriptor read/8, error -71 [ 297.780701][ T5915] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 297.880657][ T5914] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 297.901426][ T5914] usb 5-1: device descriptor read/8, error -71 [ 297.921087][ T5915] usb 2-1: device descriptor read/64, error -71 [ 298.012347][ T5914] usb usb5-port1: unable to enumerate USB device [ 298.160714][ T5825] Bluetooth: hci4: command 0x040f tx timeout [ 298.160803][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 298.160874][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 298.165345][ T5915] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 298.290704][ T5915] usb 2-1: device descriptor read/64, error -71 [ 298.401810][ T5915] usb usb2-port1: attempt power cycle [ 298.440078][ T9087] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 298.440316][ T9087] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 298.442240][ T9087] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 298.442440][ T9087] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 298.741331][ T5915] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 298.762696][ T5915] usb 2-1: device descriptor read/8, error -71 [ 298.872013][ T37] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 299.000709][ T5915] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 299.020685][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 299.024108][ T5915] usb 2-1: device descriptor read/8, error -71 [ 299.025964][ T37] usb 3-1: unable to get BOS descriptor or descriptor too short [ 299.027415][ T37] usb 3-1: config 4 has an invalid interface number: 21 but max is 3 [ 299.027442][ T37] usb 3-1: config 4 has an invalid interface number: 196 but max is 3 [ 299.027463][ T37] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 299.027483][ T37] usb 3-1: config 4 has 2 interfaces, different from the descriptor's value: 4 [ 299.027509][ T37] usb 3-1: config 4 has no interface number 0 [ 299.027521][ T37] usb 3-1: config 4 has no interface number 1 [ 299.027558][ T37] usb 3-1: config 4 interface 21 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 299.027573][ T37] usb 3-1: config 4 interface 21 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 299.027589][ T37] usb 3-1: config 4 interface 21 altsetting 14 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 299.027607][ T37] usb 3-1: config 4 interface 21 altsetting 14 endpoint 0x87 has invalid maxpacket 1023, setting to 64 [ 299.027639][ T37] usb 3-1: config 4 interface 21 altsetting 14 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 299.027657][ T37] usb 3-1: config 4 interface 21 altsetting 14 endpoint 0x5 has invalid maxpacket 903, setting to 64 [ 299.027675][ T37] usb 3-1: config 4 interface 21 altsetting 14 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 299.027712][ T37] usb 3-1: config 4 interface 21 altsetting 14 has a duplicate endpoint with address 0x5, skipping [ 299.027739][ T37] usb 3-1: config 4 interface 21 altsetting 14 has 8 endpoint descriptors, different from the interface descriptor's value: 16 [ 299.027758][ T37] usb 3-1: too many endpoints for config 4 interface 196 altsetting 172: 82, using maximum allowed: 30 [ 299.027808][ T37] usb 3-1: config 4 interface 196 altsetting 172 has a duplicate endpoint with address 0xA, skipping [ 299.027833][ T37] usb 3-1: config 4 interface 196 altsetting 172 has an endpoint descriptor with address 0x5B, changing to 0xB [ 299.027859][ T37] usb 3-1: config 4 interface 196 altsetting 172 endpoint 0xB has invalid wMaxPacketSize 0 [ 299.027888][ T37] usb 3-1: config 4 interface 196 altsetting 172 has 3 endpoint descriptors, different from the interface descriptor's value: 82 [ 299.027908][ T37] usb 3-1: config 4 interface 21 has no altsetting 0 [ 299.027921][ T37] usb 3-1: config 4 interface 196 has no altsetting 0 [ 299.030420][ T37] usb 3-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=11.15 [ 299.030466][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.067437][ T37] usb 3-1: Product: syz [ 299.067452][ T37] usb 3-1: Manufacturer: syz [ 299.067463][ T37] usb 3-1: SerialNumber: syz [ 299.133673][ T5915] usb usb2-port1: unable to enumerate USB device [ 299.321604][ T9097] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 299.526152][ T5142] Bluetooth: hci3: Malformed Event: 0x02 [ 299.565300][ T7844] cgroup: fork rejected by pids controller in /syz4 [ 299.610465][ T37] usb 3-1: USB disconnect, device number 62 [ 299.760729][ T5142] Bluetooth: hci1: command 0x0c1a tx timeout [ 300.480742][ T60] Bluetooth: hci3: command 0x0406 tx timeout [ 300.482337][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 300.520332][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.572115][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.577921][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.649093][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.652916][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.851167][ T9128] FAULT_INJECTION: forcing a failure. [ 300.851167][ T9128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.851217][ T9128] CPU: 0 UID: 0 PID: 9128 Comm: syz.1.1052 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 300.851248][ T9128] Tainted: [L]=SOFTLOCKUP [ 300.851257][ T9128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 300.851272][ T9128] Call Trace: [ 300.851281][ T9128] [ 300.851290][ T9128] dump_stack_lvl+0xe8/0x150 [ 300.851321][ T9128] should_fail_ex+0x46b/0x600 [ 300.851366][ T9128] _copy_from_user+0x2d/0xb0 [ 300.851396][ T9128] __sys_sendto+0x2bc/0x710 [ 300.851438][ T9128] ? __pfx___sys_sendto+0x10/0x10 [ 300.851508][ T9128] ? ksys_write+0x248/0x270 [ 300.851543][ T9128] ? __pfx_ksys_write+0x10/0x10 [ 300.851584][ T9128] __x64_sys_sendto+0xde/0x100 [ 300.851621][ T9128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.851646][ T9128] do_syscall_64+0x15f/0xf80 [ 300.851676][ T9128] ? trace_irq_disable+0x3b/0x140 [ 300.851702][ T9128] ? clear_bhb_loop+0x40/0x90 [ 300.851730][ T9128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.851753][ T9128] RIP: 0033:0x7f3089ecc819 [ 300.851772][ T9128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.851792][ T9128] RSP: 002b:00007f308811e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 300.851817][ T9128] RAX: ffffffffffffffda RBX: 00007f308a145fa0 RCX: 00007f3089ecc819 [ 300.851834][ T9128] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000005 [ 300.851849][ T9128] RBP: 00007f308811e090 R08: 0000200000000140 R09: 0000000000000014 [ 300.851865][ T9128] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 300.851879][ T9128] R13: 00007f308a146038 R14: 00007f308a145fa0 R15: 00007ffcf553e1f8 [ 300.851915][ T9128] [ 301.334780][ T1478] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.380724][ T5915] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 301.530677][ T5915] usb 3-1: Using ep0 maxpacket: 8 [ 301.533000][ T5915] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 301.537219][ T5915] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 301.537247][ T5915] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 301.537269][ T5915] usb 3-1: Product: syz [ 301.537284][ T5915] usb 3-1: Manufacturer: syz [ 301.537299][ T5915] usb 3-1: SerialNumber: syz [ 301.819006][ T5915] usb 3-1: Invalid connection information received from device [ 302.035485][ T37] usb 3-1: USB disconnect, device number 63 [ 302.206844][ T1478] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.407629][ T9142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1057'. [ 302.523308][ T1478] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.733085][ T5142] Bluetooth: hci4: command tx timeout [ 302.756000][ T1478] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.931913][ T9121] chnl_net:caif_netlink_parms(): no params data found [ 303.074684][ T9121] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.074898][ T9121] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.075095][ T9121] bridge_slave_0: entered allmulticast mode [ 303.077761][ T9121] bridge_slave_0: entered promiscuous mode [ 303.188542][ T9121] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.188643][ T9121] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.188783][ T9121] bridge_slave_1: entered allmulticast mode [ 303.198647][ T9121] bridge_slave_1: entered promiscuous mode [ 303.340731][ T9121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.348805][ T9121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.609599][ T9121] team0: Port device team_slave_0 added [ 303.711985][ T1478] bridge_slave_1: left allmulticast mode [ 303.712007][ T1478] bridge_slave_1: left promiscuous mode [ 303.736134][ T1478] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.785339][ T9161] tmpfs: Unknown parameter 'grpqua_inode_hardlimit' [ 303.842311][ T1478] bridge_slave_0: left allmulticast mode [ 303.842339][ T1478] bridge_slave_0: left promiscuous mode [ 303.842585][ T1478] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.892082][ T37] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 304.062363][ T37] usb 2-1: Using ep0 maxpacket: 32 [ 304.064138][ T37] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.064162][ T37] usb 2-1: config 0 has no interfaces? [ 304.066512][ T37] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 304.066537][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.066557][ T37] usb 2-1: Product: syz [ 304.066572][ T37] usb 2-1: Manufacturer: syz [ 304.066587][ T37] usb 2-1: SerialNumber: syz [ 304.083447][ T37] usb 2-1: config 0 descriptor?? [ 304.702597][ T9181] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1063'. [ 304.800890][ T5142] Bluetooth: hci4: command tx timeout [ 304.981402][ T1478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.041652][ T1478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.085805][ T1478] bond0 (unregistering): Released all slaves [ 305.133929][ T9121] team0: Port device team_slave_1 added [ 305.166487][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1 [ 305.298923][ T9121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.298938][ T9121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.298972][ T9121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.306186][ T9121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.306204][ T9121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.306233][ T9121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.602094][ T1478] IPVS: stopping master sync thread 8469 ... [ 305.674596][ T9121] hsr_slave_0: entered promiscuous mode [ 305.678301][ T9121] hsr_slave_1: entered promiscuous mode [ 305.685947][ T9121] debugfs: 'hsr0' already exists in 'hsr' [ 305.686013][ T9121] Cannot create hsr debugfs directory [ 306.432440][ T5488] 8021q: adding VLAN 0 to HW filter on device eth2 [ 306.654939][ T818] usb 2-1: USB disconnect, device number 69 [ 306.880817][ T5142] Bluetooth: hci4: command tx timeout [ 307.216182][ T9219] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 307.216211][ T9219] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 307.870763][ T1478] hsr_slave_0: left promiscuous mode [ 307.910792][ T1478] hsr_slave_1: left promiscuous mode [ 307.912228][ T1478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.912279][ T1478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.960343][ T1478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.960377][ T1478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.085107][ T1478] veth1_macvtap: left promiscuous mode [ 308.085211][ T1478] veth0_macvtap: left promiscuous mode [ 308.140976][ T1478] veth1_vlan: left promiscuous mode [ 308.141174][ T1478] veth0_vlan: left promiscuous mode [ 308.421628][ T37] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 308.508881][ T9257] FAULT_INJECTION: forcing a failure. [ 308.508881][ T9257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.508930][ T9257] CPU: 1 UID: 0 PID: 9257 Comm: syz.0.1077 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 308.508958][ T9257] Tainted: [L]=SOFTLOCKUP [ 308.508966][ T9257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 308.508988][ T9257] Call Trace: [ 308.508996][ T9257] [ 308.509005][ T9257] dump_stack_lvl+0xe8/0x150 [ 308.509034][ T9257] should_fail_ex+0x46b/0x600 [ 308.509062][ T9257] _copy_from_user+0x2d/0xb0 [ 308.509088][ T9257] __sys_bind+0x1cc/0x410 [ 308.509120][ T9257] ? __pfx___sys_bind+0x10/0x10 [ 308.509159][ T9257] ? __pfx_ksys_write+0x10/0x10 [ 308.509193][ T9257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.509215][ T9257] __x64_sys_bind+0x7a/0x90 [ 308.509245][ T9257] do_syscall_64+0x15f/0xf80 [ 308.509272][ T9257] ? trace_irq_disable+0x3b/0x140 [ 308.509296][ T9257] ? clear_bhb_loop+0x40/0x90 [ 308.509322][ T9257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.509342][ T9257] RIP: 0033:0x7fa774f9c819 [ 308.509360][ T9257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.509378][ T9257] RSP: 002b:00007fa7731f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 308.509400][ T9257] RAX: ffffffffffffffda RBX: 00007fa775215fa0 RCX: 00007fa774f9c819 [ 308.509415][ T9257] RDX: 0000000000000006 RSI: 0000200000000280 RDI: 0000000000000004 [ 308.509428][ T9257] RBP: 00007fa7731f6090 R08: 0000000000000000 R09: 0000000000000000 [ 308.509440][ T9257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.509453][ T9257] R13: 00007fa775216038 R14: 00007fa775215fa0 R15: 00007ffd29dfd348 [ 308.509483][ T9257] [ 308.570701][ T37] usb 2-1: Using ep0 maxpacket: 32 [ 308.574430][ T37] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.574515][ T37] usb 2-1: config 0 has no interfaces? [ 308.662535][ T37] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 308.662624][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.662681][ T37] usb 2-1: Product: syz [ 308.662735][ T37] usb 2-1: Manufacturer: syz [ 308.662779][ T37] usb 2-1: SerialNumber: syz [ 308.771899][ T37] usb 2-1: config 0 descriptor?? [ 308.960809][ T5142] Bluetooth: hci4: command tx timeout [ 309.112250][ T5914] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 309.285268][ T5914] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.285297][ T5914] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 309.287398][ T5914] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 309.287427][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 309.287448][ T5914] usb 1-1: SerialNumber: syz [ 309.531561][ T1478] team0 (unregistering): Port device team_slave_1 removed [ 309.574251][ T5914] usb 1-1: 0:2 : does not exist [ 309.611439][ T1478] team0 (unregistering): Port device team_slave_0 removed [ 309.619462][ T5914] usb 1-1: USB disconnect, device number 51 [ 309.725686][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 309.999894][ T5488] 8021q: adding VLAN 0 to HW filter on device eth3 [ 311.290946][ T5914] usb 2-1: USB disconnect, device number 70 [ 311.796477][ T9299] comedi comedi1: mpc624: I/O base address not correctly aligned [ 313.049454][ T5914] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 313.212478][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 313.217267][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.217307][ T5914] usb 2-1: config 0 has no interfaces? [ 313.256591][ T5914] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 313.256618][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.256634][ T5914] usb 2-1: Product: syz [ 313.256646][ T5914] usb 2-1: Manufacturer: syz [ 313.256657][ T5914] usb 2-1: SerialNumber: syz [ 313.323098][ T5914] usb 2-1: config 0 descriptor?? [ 313.683968][ T9121] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 313.740443][ T9121] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 313.753910][ T9121] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 313.928044][ T9121] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 313.933322][ T9121] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 314.025010][ T9347] loop8: detected capacity change from 0 to 7 [ 314.128886][ T9121] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 314.138583][ T9121] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 314.284683][ T9121] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 314.539642][ T9347] Dev loop8: unable to read RDB block 7 [ 314.539691][ T9347] loop8: unable to read partition table [ 314.539940][ T9347] loop8: partition table beyond EOD, truncated [ 314.539981][ T9347] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 314.692692][ T9367] tmpfs: Bad value for 'mpol' [ 314.833495][ T9369] netlink: 'syz.0.1097': attribute type 1 has an invalid length. [ 315.414624][ T9121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.512325][ T9121] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.670244][ T9390] netlink: 372 bytes leftover after parsing attributes in process `syz.0.1100'. [ 315.673216][ T9390] binder: 9389:9390 ioctl c018620c 200000000640 returned -22 [ 315.727896][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.728036][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.834867][ T37] usb 2-1: USB disconnect, device number 71 [ 315.898831][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.899047][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.764570][ T818] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 316.943693][ T818] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.943727][ T818] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 316.988232][ T818] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 316.988267][ T818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 316.988290][ T818] usb 2-1: SerialNumber: syz [ 317.216196][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.216289][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.314514][ T818] usb 2-1: 0:2 : does not exist [ 317.370428][ T818] usb 2-1: USB disconnect, device number 72 [ 317.493941][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.944708][ T9121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.426016][ T9] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 318.600753][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 318.626662][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 318.626693][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.626733][ T9] usb 3-1: config 0 has no interface number 0 [ 318.626781][ T9] usb 3-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 318.643097][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 318.643192][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.643256][ T9] usb 3-1: Product: syz [ 318.643294][ T9] usb 3-1: Manufacturer: syz [ 318.643366][ T9] usb 3-1: SerialNumber: syz [ 318.720867][ T9] usb 3-1: config 0 descriptor?? [ 318.750999][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 318.939907][ T9] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 318.940158][ T9] quatech2 3-1:0.51: probe with driver quatech2 failed with error -8 [ 319.185145][ T37] usb 3-1: USB disconnect, device number 64 [ 319.203455][ T9121] veth0_vlan: entered promiscuous mode [ 319.237205][ T9121] veth1_vlan: entered promiscuous mode [ 319.475447][ T9121] veth0_macvtap: entered promiscuous mode [ 319.499184][ T9121] veth1_macvtap: entered promiscuous mode [ 319.579733][ T9121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.624948][ T9121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.665222][ T150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.665517][ T150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.667633][ T150] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.668173][ T150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.437406][ T32] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 320.622362][ T32] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.622399][ T32] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 320.624226][ T32] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 320.624264][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 320.624281][ T32] usb 1-1: SerialNumber: syz [ 320.692180][ T1478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.692201][ T1478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.924015][ T32] usb 1-1: 0:2 : does not exist [ 320.977526][ T32] usb 1-1: USB disconnect, device number 52 [ 321.170292][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.413162][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.413190][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.435653][ T9497] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 322.435911][ T9497] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 322.436105][ T9497] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 322.436711][ T9497] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 322.436812][ T9497] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 322.507581][ T9] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 322.585075][ T9497] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 322.650789][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 322.653711][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 322.653744][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.653768][ T9] usb 3-1: config 0 has no interface number 0 [ 322.653817][ T9] usb 3-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 322.678331][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 322.678426][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.678494][ T9] usb 3-1: Product: syz [ 322.678542][ T9] usb 3-1: Manufacturer: syz [ 322.678574][ T9] usb 3-1: SerialNumber: syz [ 322.813388][ T9] usb 3-1: config 0 descriptor?? [ 322.869077][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 323.054820][ T9] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 323.055089][ T9] quatech2 3-1:0.51: probe with driver quatech2 failed with error -8 [ 323.237299][ T9] usb 3-1: USB disconnect, device number 65 [ 323.271545][ T32] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 323.433029][ T32] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 323.433075][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 323.433107][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 323.437432][ T32] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 323.437472][ T32] usb 2-1: New USB device strings: Mfr=0, Product=237, SerialNumber=3 [ 323.437495][ T32] usb 2-1: Product: syz [ 323.437512][ T32] usb 2-1: SerialNumber: syz [ 323.533741][ T32] usb 2-1: config 0 descriptor?? [ 323.534906][ T9509] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 323.753556][ T32] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10 [ 324.056530][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 324.106097][ T32] usb 2-1: USB disconnect, device number 73 [ 324.106198][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 324.154022][ T9521] FAULT_INJECTION: forcing a failure. [ 324.154022][ T9521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.154064][ T9521] CPU: 1 UID: 0 PID: 9521 Comm: syz.2.1133 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 324.154095][ T9521] Tainted: [L]=SOFTLOCKUP [ 324.154102][ T9521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 324.154115][ T9521] Call Trace: [ 324.154123][ T9521] [ 324.154132][ T9521] dump_stack_lvl+0xe8/0x150 [ 324.154167][ T9521] should_fail_ex+0x46b/0x600 [ 324.154196][ T9521] _copy_to_user+0x31/0xb0 [ 324.154228][ T9521] simple_read_from_buffer+0xe1/0x170 [ 324.154260][ T9521] proc_fail_nth_read+0x1be/0x230 [ 324.154291][ T9521] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 324.154320][ T9521] ? rw_verify_area+0x2ac/0x4e0 [ 324.154349][ T9521] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 324.154376][ T9521] vfs_read+0x212/0xa80 [ 324.154415][ T9521] ? __pfx_vfs_read+0x10/0x10 [ 324.154447][ T9521] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 324.154488][ T9521] ? lockdep_hardirqs_on+0x7a/0x110 [ 324.154516][ T9521] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 324.154544][ T9521] ? mutex_lock_nested+0x152/0x1d0 [ 324.154564][ T9521] ? fdget_pos+0x252/0x320 [ 324.154596][ T9521] ksys_read+0x156/0x270 [ 324.154630][ T9521] ? __pfx_ksys_read+0x10/0x10 [ 324.154669][ T9521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.154694][ T9521] do_syscall_64+0x15f/0xf80 [ 324.154722][ T9521] ? trace_irq_disable+0x3b/0x140 [ 324.154747][ T9521] ? clear_bhb_loop+0x40/0x90 [ 324.154774][ T9521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.154796][ T9521] RIP: 0033:0x7f3f2e84d04e [ 324.154817][ T9521] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 324.154836][ T9521] RSP: 002b:00007f3f2caddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 324.154860][ T9521] RAX: ffffffffffffffda RBX: 00007f3f2cade6c0 RCX: 00007f3f2e84d04e [ 324.154875][ T9521] RDX: 000000000000000f RSI: 00007f3f2cade0a0 RDI: 0000000000000004 [ 324.154888][ T9521] RBP: 00007f3f2cade090 R08: 0000000000000000 R09: 0000000000000000 [ 324.154901][ T9521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.154914][ T9521] R13: 00007f3f2eb06038 R14: 00007f3f2eb05fa0 R15: 00007fff893785e8 [ 324.154946][ T9521] [ 324.346427][ T819] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 324.357749][ T5142] Bluetooth: hci1: command 0x0c1a tx timeout [ 324.480788][ T5142] Bluetooth: hci4: command 0x0c1a tx timeout [ 324.481434][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 324.481483][ T5142] Bluetooth: hci3: command 0x0406 tx timeout [ 324.520725][ T819] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 324.520756][ T819] usb 5-1: config 0 has no interface number 0 [ 324.520805][ T819] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 324.520832][ T819] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 324.526739][ T819] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 324.526773][ T819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.526795][ T819] usb 5-1: Product: syz [ 324.526811][ T819] usb 5-1: Manufacturer: syz [ 324.526827][ T819] usb 5-1: SerialNumber: syz [ 324.662726][ T819] usb 5-1: config 0 descriptor?? [ 324.665288][ T9518] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 324.702959][ T819] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 324.749786][ T819] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 325.030025][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 325.301194][ T9] usb 5-1: USB disconnect, device number 23 [ 325.332091][ T9] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 325.335032][ T9] cyberjack 5-1:0.69: device disconnected [ 326.125054][ T9546] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1142'. [ 326.270310][ T819] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 326.443345][ T819] usb 5-1: Using ep0 maxpacket: 32 [ 326.446436][ T819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.446481][ T819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.446530][ T819] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 326.446561][ T819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.535848][ T819] usb 5-1: config 0 descriptor?? [ 326.560825][ T60] Bluetooth: hci4: command 0x0c1a tx timeout [ 326.589175][ T9553] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1145'. [ 327.200100][ T9544] netlink: 'syz.4.1141': attribute type 1 has an invalid length. [ 327.200136][ T9544] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1141'. [ 327.200184][ T9544] NCSI netlink: No device for ifindex 0 [ 327.235540][ T9544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.236270][ T9544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.314542][ T819] ft260 0003:0403:6030.000A: failed to retrieve chip version [ 327.315172][ T819] ft260 0003:0403:6030.000A: probe with driver ft260 failed with error -71 [ 327.361797][ T819] usb 5-1: USB disconnect, device number 24 [ 328.352749][ T818] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 328.540847][ T818] usb 5-1: Using ep0 maxpacket: 8 [ 328.571707][ T818] usb 5-1: unable to get BOS descriptor or descriptor too short [ 328.576268][ T818] usb 5-1: config 2 has an invalid interface number: 187 but max is 0 [ 328.576301][ T818] usb 5-1: config 2 has no interface number 0 [ 328.576354][ T818] usb 5-1: config 2 interface 187 altsetting 0 endpoint 0xA has invalid maxpacket 1028, setting to 1024 [ 328.576386][ T818] usb 5-1: config 2 interface 187 altsetting 0 endpoint 0x5 has an invalid bInterval 239, changing to 11 [ 328.607323][ T818] usb 5-1: New USB device found, idVendor=04b4, idProduct=5500, bcdDevice=2a.7c [ 328.607358][ T818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.607381][ T818] usb 5-1: Product: syz [ 328.607397][ T818] usb 5-1: Manufacturer: syz [ 328.607413][ T818] usb 5-1: SerialNumber: syz [ 328.640871][ T60] Bluetooth: hci4: command 0x0c1a tx timeout [ 328.659775][ T5893] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 328.718422][ T9575] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 328.866921][ T5893] usb 2-1: config 2 has an invalid interface number: 114 but max is 0 [ 328.867261][ T5893] usb 2-1: config 2 has no interface number 0 [ 328.867316][ T5893] usb 2-1: config 2 interface 114 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 328.867342][ T5893] usb 2-1: config 2 interface 114 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 328.867599][ T5893] usb 2-1: config 2 interface 114 altsetting 15 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 328.867631][ T5893] usb 2-1: config 2 interface 114 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 328.867655][ T5893] usb 2-1: config 2 interface 114 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 328.867680][ T5893] usb 2-1: config 2 interface 114 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 328.867933][ T5893] usb 2-1: config 2 interface 114 altsetting 15 has an endpoint descriptor with address 0xC7, changing to 0x87 [ 328.867962][ T5893] usb 2-1: config 2 interface 114 altsetting 15 has a duplicate endpoint with address 0x87, skipping [ 328.867988][ T5893] usb 2-1: config 2 interface 114 altsetting 15 has a duplicate endpoint with address 0x9, skipping [ 328.868260][ T5893] usb 2-1: config 2 interface 114 altsetting 15 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 328.868293][ T5893] usb 2-1: config 2 interface 114 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 328.868320][ T5893] usb 2-1: config 2 interface 114 altsetting 15 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 328.868351][ T5893] usb 2-1: config 2 interface 114 has no altsetting 0 [ 329.145447][ T9575] binder: Bad value for 'stats' [ 329.151985][ T5893] usb 2-1: New USB device found, idVendor=110a, idProduct=1250, bcdDevice= 6.b5 [ 329.165155][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.165230][ T5893] usb 2-1: Product: ⠊ [ 329.165245][ T5893] usb 2-1: Manufacturer: 贀⧭횇捅뭑犿橈졸𤋮彴듺哦谖졽篤ﳹ⿩薈翏闈橷⣘圱鯎钐빏ﭱꛜ欀͠橩몛。￿￿￿诿ꢟ쳪厥£逾呓䏙憮閙ꛐ⪜킴ⷊ瞚㾓灢안褼ሾ뎃뛂芿簮❅㔔戫⥌旂ᴉ뎅㏘ﲷ惻뎍울㡟锻䕻㺣ΰ룶鈵헣㋄ᄎ㚼ýڙ [ 329.165273][ T5893] usb 2-1: SerialNumber: syz [ 329.270219][ T818] cypress_m8 5-1:2.187: HID->COM RS232 Adapter converter detected [ 329.318715][ T9580] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 329.321871][ T818] cyphidcom ttyUSB0: required endpoint is missing [ 329.382394][ T818] usb 5-1: USB disconnect, device number 25 [ 329.416883][ T818] cypress_m8 5-1:2.187: device disconnected [ 329.833956][ T32] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 329.949081][ T9580] fuseblk: Bad value for 'fd' [ 329.977658][ T9591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1156'. [ 329.977700][ T9591] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1156'. [ 330.001360][ T32] usb 1-1: Using ep0 maxpacket: 16 [ 330.007044][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.007081][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.007104][ T32] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 330.007207][ T32] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 330.007227][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.164192][ T32] usb 1-1: config 0 descriptor?? [ 330.707652][ T9593] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 330.708010][ T9593] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 330.714552][ T9593] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 330.715675][ T9593] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 330.826576][ T32] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.000B/input/input12 [ 331.137015][ T9586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.175663][ T9586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.709778][ T5893] mxuport 2-1:2.114: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 331.723518][ T5893] mxuport 2-1:2.114: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 331.723602][ T5893] mxuport 2-1:2.114: probe with driver mxuport failed with error -71 [ 331.858490][ T5893] usb 2-1: USB disconnect, device number 74 [ 331.887347][ T32] appleir 0003:05AC:8241.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 332.308558][ T37] usb 1-1: reset high-speed USB device number 53 using dummy_hcd [ 332.720769][ T60] Bluetooth: hci4: command 0x0c1a tx timeout [ 332.720819][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 332.720853][ T60] Bluetooth: hci3: command 0x0406 tx timeout [ 332.720883][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 333.769529][ T9619] mkiss: ax0: crc mode is auto. [ 333.823208][ T9626] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 333.823678][ T9626] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 333.829575][ T9626] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 333.829907][ T9626] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 334.043963][ T5893] usb 1-1: USB disconnect, device number 53 [ 334.357187][ T819] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 334.558930][ T819] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 334.558967][ T819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.745635][ T819] usb 5-1: config 0 descriptor?? [ 334.851894][ T819] cp210x 5-1:0.0: cp210x converter detected [ 335.244837][ T819] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 335.342372][ T819] usb 5-1: cp210x converter now attached to ttyUSB0 [ 335.421556][ T37] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 335.570741][ T37] usb 2-1: Using ep0 maxpacket: 32 [ 335.573998][ T37] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 335.574031][ T37] usb 2-1: config 0 has no interface number 0 [ 335.574092][ T37] usb 2-1: config 0 interface 12 has no altsetting 0 [ 335.616789][ T37] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 335.616825][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.616849][ T37] usb 2-1: Product: syz [ 335.616867][ T37] usb 2-1: Manufacturer: syz [ 335.616883][ T37] usb 2-1: SerialNumber: syz [ 335.670788][ T37] usb 2-1: config 0 descriptor?? [ 335.841404][ T5142] Bluetooth: hci4: command 0x0c1a tx timeout [ 335.841447][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 335.841473][ T5142] Bluetooth: hci3: command 0x0406 tx timeout [ 335.841499][ T5142] Bluetooth: hci1: command 0x0c1a tx timeout [ 336.351510][ T37] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -71 [ 336.351571][ T37] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 336.351592][ T37] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 336.352337][ T37] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 336.378521][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888036f8e000: rx timeout, send abort [ 336.382800][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888036f8e000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 336.594659][ T37] usb 2-1: USB disconnect, device number 75 [ 337.408999][ T5915] usb 5-1: USB disconnect, device number 26 [ 337.483181][ T5915] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 337.619853][ T5915] cp210x 5-1:0.0: device disconnected [ 339.142862][ T37] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 339.316063][ T37] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.316101][ T37] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 339.319231][ T37] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 339.319273][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 339.319299][ T37] usb 3-1: SerialNumber: syz [ 339.747083][ T37] usb 3-1: 0:2 : does not exist [ 339.895347][ T37] usb 3-1: USB disconnect, device number 66 [ 340.037565][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.630691][ T5893] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 341.793596][ T5893] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.793655][ T5893] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 341.796633][ T5893] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 341.796657][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 341.796674][ T5893] usb 2-1: SerialNumber: syz [ 342.101609][ T5893] usb 2-1: 0:2 : does not exist [ 342.870457][ T5893] usb 2-1: USB disconnect, device number 76 [ 343.041271][ T5827] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 343.234425][ T5827] usb 1-1: Using ep0 maxpacket: 16 [ 343.250466][ T5827] usb 1-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 343.250612][ T5827] usb 1-1: config 0 interface 0 has no altsetting 0 [ 343.250655][ T5827] usb 1-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 343.250683][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.420906][ T9770] Cannot find set identified by id 0 to match [ 343.463344][ T5827] usb 1-1: config 0 descriptor?? [ 343.967087][ T5827] hid_parser_main: 4005 callbacks suppressed [ 343.967128][ T5827] apple 0003:05AC:0264.000C: unknown main item tag 0x0 [ 343.967167][ T5827] apple 0003:05AC:0264.000C: unknown main item tag 0x0 [ 343.967196][ T5827] apple 0003:05AC:0264.000C: unknown main item tag 0x0 [ 343.967225][ T5827] apple 0003:05AC:0264.000C: unknown main item tag 0x0 [ 343.967254][ T5827] apple 0003:05AC:0264.000C: unknown main item tag 0x0 [ 343.967285][ T5827] apple 0003:05AC:0264.000C: unknown main item tag 0x0 [ 343.967315][ T5827] apple 0003:05AC:0264.000C: unknown main item tag 0x0 [ 343.967345][ T5827] apple 0003:05AC:0264.000C: unknown main item tag 0x0 [ 343.967374][ T5827] apple 0003:05AC:0264.000C: unknown main item tag 0x0 [ 343.967403][ T5827] apple 0003:05AC:0264.000C: unknown main item tag 0x0 [ 344.185397][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 344.314489][ T5893] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 344.479116][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 344.494186][ T5893] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 344.509996][ T5893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.510028][ T5893] usb 2-1: config 0 has no interface number 0 [ 344.510083][ T5893] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 344.510114][ T5893] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 344.510145][ T5893] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 344.510192][ T5893] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 344.510218][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.709653][ T5893] usb 2-1: config 0 descriptor?? [ 344.743761][ T5893] ldusb 2-1:0.55: Interrupt in endpoint not found [ 344.766167][ T5827] apple 0003:05AC:0264.000C: hidraw0: USB HID v0.0b Device [HID 05ac:0264] on usb-dummy_hcd.0-1/input0 [ 344.967891][ T5827] usb 1-1: USB disconnect, device number 54 [ 344.978852][ T37] usb 2-1: USB disconnect, device number 77 [ 345.008384][ T9786] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1215'. [ 345.123141][ T5893] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 345.272744][ T9788] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 345.272780][ T9788] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 345.292499][ T9788] vhci_hcd vhci_hcd.0: Device attached [ 345.311864][ T5893] usb 5-1: unable to get BOS descriptor or descriptor too short [ 345.312687][ T5893] usb 5-1: not running at top speed; connect to a high speed hub [ 345.314293][ T5893] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 345.318778][ T5893] usb 5-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 345.318820][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.318837][ T5893] usb 5-1: Product: syz [ 345.318849][ T5893] usb 5-1: Manufacturer: syz [ 345.318861][ T5893] usb 5-1: SerialNumber: syz [ 345.533950][ T5915] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 346.301249][ T5827] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 346.471486][ T5827] usb 1-1: Using ep0 maxpacket: 8 [ 346.474536][ T5827] usb 1-1: config 0 has no interfaces? [ 346.474671][ T5827] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 346.474692][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.549395][ T5827] usb 1-1: config 0 descriptor?? [ 346.651342][ T819] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 346.845055][ T9789] vhci_hcd: connection reset by peer [ 346.845445][ T1478] vhci_hcd vhci_hcd.0: stop threads [ 346.845477][ T1478] vhci_hcd vhci_hcd.0: release socket [ 346.878644][ T5827] usb 1-1: USB disconnect, device number 55 [ 346.879628][ T819] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.879657][ T819] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 346.900685][ T819] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 346.900729][ T819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 346.900755][ T819] usb 3-1: SerialNumber: syz [ 347.175485][ T1478] vhci_hcd vhci_hcd.0: disconnect device [ 347.244224][ T819] usb 3-1: 0:2 : does not exist [ 347.358212][ T5893] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 347.436769][ T819] usb 3-1: USB disconnect, device number 67 [ 347.658595][ T9810] netlink: 'syz.0.1222': attribute type 2 has an invalid length. [ 347.746708][ T5893] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 347.782915][ T5914] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 347.887591][ T9808] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 347.905041][ T9808] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 347.905380][ T9808] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 347.905684][ T9808] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 347.960727][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 347.977861][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.977930][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 347.977964][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 348.082726][ T5914] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 348.082767][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 348.082792][ T5914] usb 2-1: Product: syz [ 348.082809][ T5914] usb 2-1: Manufacturer: syz [ 348.082824][ T5914] usb 2-1: SerialNumber: syz [ 348.153337][ T5914] usb 2-1: config 0 descriptor?? [ 348.188143][ T5914] imon_raw 2-1:0.0: IR endpoint missing [ 348.242972][ T5893] usb 5-1: invalid MIDI EP [ 348.242998][ T5893] usb 5-1: snd-bcd2000: error during probing [ 348.375987][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1221'. [ 348.632823][ T9] usb 2-1: USB disconnect, device number 78 [ 348.679969][ T6373] udevd[6373]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.722268][ T5893] snd-bcd2000 5-1:1.0: probe with driver snd-bcd2000 failed with error -22 [ 348.954084][ T5893] usb 5-1: invalid MIDI EP [ 348.954112][ T5893] usb 5-1: snd-bcd2000: error during probing [ 348.956067][ T5893] snd-bcd2000 5-1:1.1: probe with driver snd-bcd2000 failed with error -22 [ 349.007165][ T5893] usb 5-1: invalid MIDI EP [ 349.007192][ T5893] usb 5-1: snd-bcd2000: error during probing [ 349.011620][ T5893] snd-bcd2000 5-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 349.040754][ T5893] usb 5-1: USB disconnect, device number 27 [ 349.224417][ T9792] udevd[9792]: setting mode of /dev/bus/usb/005/027 to 020664 failed: No such file or directory [ 349.225463][ T9792] udevd[9792]: setting owner of /dev/bus/usb/005/027 to uid=0, gid=0 failed: No such file or directory [ 349.394758][ T6373] udevd[6373]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 349.760946][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 349.920989][ T60] Bluetooth: hci4: command 0x0c1a tx timeout [ 349.921047][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 349.926142][ T5142] Bluetooth: hci3: command 0x0406 tx timeout [ 350.000147][ T9836] netlink: 'syz.0.1229': attribute type 2 has an invalid length. [ 350.540708][ T5893] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 350.555407][ T9847] FAULT_INJECTION: forcing a failure. [ 350.555407][ T9847] name failslab, interval 1, probability 0, space 0, times 0 [ 350.555450][ T9847] CPU: 0 UID: 0 PID: 9847 Comm: syz.4.1233 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 350.555481][ T9847] Tainted: [L]=SOFTLOCKUP [ 350.555490][ T9847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 350.555504][ T9847] Call Trace: [ 350.555514][ T9847] [ 350.555524][ T9847] dump_stack_lvl+0xe8/0x150 [ 350.555570][ T9847] should_fail_ex+0x46b/0x600 [ 350.555602][ T9847] should_failslab+0xa8/0x100 [ 350.555640][ T9847] __kmalloc_noprof+0xdf/0x7b0 [ 350.555673][ T9847] ? tomoyo_encode+0x28b/0x550 [ 350.555707][ T9847] tomoyo_encode+0x28b/0x550 [ 350.555738][ T9847] tomoyo_realpath_from_path+0x58d/0x5d0 [ 350.555768][ T9847] ? tomoyo_domain+0xd7/0x130 [ 350.555801][ T9847] ? tomoyo_path_number_perm+0x219/0x630 [ 350.555838][ T9847] tomoyo_path_number_perm+0x246/0x630 [ 350.555874][ T9847] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 350.555909][ T9847] ? __lock_acquire+0x6b5/0x2cf0 [ 350.555943][ T9847] ? do_raw_spin_lock+0x12b/0x2f0 [ 350.556003][ T9847] ? __fget_files+0x2a/0x420 [ 350.556039][ T9847] ? __fget_files+0x2a/0x420 [ 350.556064][ T9847] ? __fget_files+0x3a6/0x420 [ 350.556091][ T9847] ? __fget_files+0x2a/0x420 [ 350.556124][ T9847] security_file_ioctl+0xc3/0x2a0 [ 350.556163][ T9847] __se_sys_ioctl+0x47/0x170 [ 350.556199][ T9847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.556225][ T9847] do_syscall_64+0x15f/0xf80 [ 350.556256][ T9847] ? trace_irq_disable+0x3b/0x140 [ 350.556282][ T9847] ? clear_bhb_loop+0x40/0x90 [ 350.556310][ T9847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.556332][ T9847] RIP: 0033:0x7f31264fc819 [ 350.556355][ T9847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.556375][ T9847] RSP: 002b:00007f312474e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 350.556400][ T9847] RAX: ffffffffffffffda RBX: 00007f3126775fa0 RCX: 00007f31264fc819 [ 350.556417][ T9847] RDX: 00002000000001c0 RSI: 000000004068aea3 RDI: 0000000000000004 [ 350.556433][ T9847] RBP: 00007f312474e090 R08: 0000000000000000 R09: 0000000000000000 [ 350.556448][ T9847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.556462][ T9847] R13: 00007f3126776038 R14: 00007f3126775fa0 R15: 00007fff6b9067a8 [ 350.556497][ T9847] [ 350.567915][ T9847] ERROR: Out of memory at tomoyo_realpath_from_path. [ 350.590866][ T9] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 350.704242][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 351.012844][ T5915] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 351.018340][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.018373][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 351.051972][ T5893] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 351.052011][ T5893] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 351.052037][ T5893] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 351.052062][ T5893] usb 2-1: config 1 has no interface number 0 [ 351.052131][ T5893] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 351.052165][ T5893] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 351.052218][ T5893] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 351.052245][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.224927][ T5893] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 351.353823][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 351.353861][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 351.353887][ T9] usb 3-1: SerialNumber: syz [ 351.414286][ T5893] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 351.530874][ T819] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 351.692703][ T819] usb 1-1: Using ep0 maxpacket: 32 [ 351.697000][ T819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.697051][ T819] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 351.697076][ T819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.753234][ T9] usb 3-1: 0:2 : does not exist [ 351.812310][ T819] usb 1-1: config 0 descriptor?? [ 351.841001][ T819] hub 1-1:0.0: USB hub found [ 352.026592][ T819] hub 1-1:0.0: 1 port detected [ 352.063646][ T9] usb 3-1: USB disconnect, device number 68 [ 352.445663][ T5827] usb 2-1: USB disconnect, device number 79 [ 352.460051][ T5827] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 352.740170][ T6373] udevd[6373]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 352.786469][ T9857] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 353.072621][ T5827] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 353.073111][ T5827] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 353.077307][ T5827] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 353.077841][ T5827] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 353.077862][ T5827] rtc rtc0: __rtc_set_alarm: err=-22 [ 353.396167][ T9864] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1238'. [ 353.415396][ T9849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.415923][ T9849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.587571][ T5914] usb 1-1-port1: cannot disable (err = -71) [ 353.801032][ T5827] usb 1-1: USB disconnect, device number 56 [ 353.823713][ T12] usb 1-1: Failed to suspend device, error -71 [ 354.471969][ T5914] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 354.623786][ T5914] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.623818][ T5914] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 354.625876][ T5914] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 354.625922][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 354.625938][ T5914] usb 5-1: SerialNumber: syz [ 354.940944][ T5914] usb 5-1: 0:2 : does not exist [ 355.349580][ T5914] usb 5-1: USB disconnect, device number 28 [ 355.409329][ T9890] Bluetooth: MGMT ver 1.23 [ 355.627951][ T6373] udevd[6373]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.297716][ T9898] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 356.358133][ T9898] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 356.358589][ T9898] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 356.541902][ T9898] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 356.684332][ T9910] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1252'. [ 357.851079][ T818] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 358.029131][ T818] usb 3-1: unable to get BOS descriptor or descriptor too short [ 358.043628][ T818] usb 3-1: not running at top speed; connect to a high speed hub [ 358.047662][ T818] usb 3-1: config 43 has an invalid interface number: 2 but max is 1 [ 358.047701][ T818] usb 3-1: config 43 has an invalid descriptor of length 0, skipping remainder of the config [ 358.047734][ T818] usb 3-1: config 43 has 1 interface, different from the descriptor's value: 2 [ 358.047780][ T818] usb 3-1: config 43 has no interface number 0 [ 358.047838][ T818] usb 3-1: config 43 interface 2 has no altsetting 0 [ 358.122023][ T818] usb 3-1: string descriptor 0 read error: -22 [ 358.122207][ T818] usb 3-1: Dual-Role OTG device on HNP port [ 358.122587][ T818] usb 3-1: New USB device found, idVendor=1410, idProduct=a011, bcdDevice=4b.61 [ 358.122618][ T818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.282582][ T818] hub 3-1:43.2: bad descriptor, ignoring hub [ 358.282631][ T818] hub 3-1:43.2: probe with driver hub failed with error -5 [ 358.321580][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 358.401556][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 358.401606][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 358.560845][ T60] Bluetooth: hci4: command 0x0c1a tx timeout [ 358.672098][ T818] usb 3-1: USB disconnect, device number 69 [ 359.441088][ T38] audit: type=1326 audit(1776359349.997:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31264fc819 code=0x7ffc0000 [ 359.442112][ T38] audit: type=1326 audit(1776359350.007:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31264fc819 code=0x7ffc0000 [ 359.442168][ T38] audit: type=1326 audit(1776359350.007:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f31264bd04e code=0x7ffc0000 [ 359.442522][ T38] audit: type=1326 audit(1776359350.007:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31264fc819 code=0x7ffc0000 [ 359.442935][ T38] audit: type=1326 audit(1776359350.007:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31264fc819 code=0x7ffc0000 [ 359.443109][ T38] audit: type=1326 audit(1776359350.007:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31264fc819 code=0x7ffc0000 [ 359.444596][ T38] audit: type=1326 audit(1776359350.007:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31264fc819 code=0x7ffc0000 [ 359.445558][ T38] audit: type=1326 audit(1776359350.007:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31264fc819 code=0x7ffc0000 [ 359.445610][ T38] audit: type=1326 audit(1776359350.007:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f31264fc819 code=0x7ffc0000 [ 359.446046][ T38] audit: type=1326 audit(1776359350.007:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31264fc819 code=0x7ffc0000 [ 360.140908][ T5893] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 360.356902][ T5893] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.356938][ T5893] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.360115][ T5893] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 360.360157][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 360.360180][ T5893] usb 1-1: SerialNumber: syz [ 360.702993][ T5893] usb 1-1: 0:2 : does not exist [ 360.703132][ T5893] usb 1-1: unit 5 not found! [ 360.851006][ T5893] usb 1-1: USB disconnect, device number 57 [ 361.057059][ T6373] udevd[6373]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.580849][ T819] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 361.750663][ T819] usb 5-1: Using ep0 maxpacket: 32 [ 361.794019][ T819] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 361.794243][ T819] usb 5-1: config 0 has no interface number 0 [ 361.797181][ T819] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 361.797222][ T819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.797238][ T819] usb 5-1: Product: syz [ 361.797249][ T819] usb 5-1: Manufacturer: syz [ 361.797261][ T819] usb 5-1: SerialNumber: syz [ 361.929235][ T819] usb 5-1: config 0 descriptor?? [ 361.958196][ T5915] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 361.971586][ T819] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 362.141580][ T9] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 362.143168][ T5915] usb 1-1: too many configurations: 15, using maximum allowed: 8 [ 362.282800][ T5915] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 362.282841][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.282858][ T5915] usb 1-1: Product: syz [ 362.282869][ T5915] usb 1-1: Manufacturer: syz [ 362.282880][ T5915] usb 1-1: SerialNumber: syz [ 362.363412][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 362.365733][ T9] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 362.365807][ T9] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 362.365826][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.365853][ T9] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 362.365871][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.589322][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 362.654336][ T9] usb 3-1: config 0 descriptor?? [ 363.179941][ T819] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 363.209860][ T819] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 363.351008][ T9968] vivid-000: disconnect [ 363.404198][ T9] hid_parser_main: 28 callbacks suppressed [ 363.410134][ T9] corsair-cpro 0003:1B1C:0C10.000D: unknown main item tag 0x0 [ 363.410184][ T9] corsair-cpro 0003:1B1C:0C10.000D: unknown main item tag 0x0 [ 363.410340][ T9] corsair-cpro 0003:1B1C:0C10.000D: unknown main item tag 0x0 [ 363.410382][ T9] corsair-cpro 0003:1B1C:0C10.000D: unknown main item tag 0x0 [ 363.410409][ T9] corsair-cpro 0003:1B1C:0C10.000D: unknown main item tag 0x0 [ 363.508640][ T9] corsair-cpro 0003:1B1C:0C10.000D: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 363.727351][ T9975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1272'. [ 363.870831][ T9967] vivid-000: reconnect [ 364.032673][ T60] Bluetooth: hci2: unexpected event 0x2c length: 6 < 17 [ 364.113156][ T819] usb 5-1: USB disconnect, device number 29 [ 364.695302][ T9] corsair-cpro 0003:1B1C:0C10.000D: probe with driver corsair-cpro failed with error -90 [ 364.718426][ T819] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 364.757057][ T5915] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 364.757134][ T5915] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 364.808569][ T9] usb 3-1: USB disconnect, device number 70 [ 364.945825][ T819] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 364.976234][ T819] quatech2 5-1:0.51: device disconnected [ 365.863104][ T44] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.307859][ T5915] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 366.307925][ T5915] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 366.847049][ T5915] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 366.887792][ T5915] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 366.988992][ T5915] usb 1-1: USB disconnect, device number 58 [ 367.147825][ T5893] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 367.334480][ T5893] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.334511][ T5893] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 367.336195][ T5893] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 367.336226][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 367.336250][ T5893] usb 3-1: SerialNumber: syz [ 367.817425][ T5893] usb 3-1: 0:2 : does not exist [ 367.817512][ T5893] usb 3-1: unit 5 not found! [ 367.901334][ T5827] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 368.105497][ T5893] usb 3-1: USB disconnect, device number 71 [ 368.277918][ T5827] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 368.277961][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.324260][ T5827] usb 5-1: config 0 descriptor?? [ 368.429927][ T39] INFO: task syz-executor:5822 blocked for more than 163 seconds. [ 368.429962][ T39] Tainted: G L syzkaller #0 [ 368.429977][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 368.429995][ T39] task:syz-executor state:D stack:20880 pid:5822 tgid:5822 ppid:1 task_flags:0x400140 flags:0x00080002 [ 368.430068][ T39] Call Trace: [ 368.430077][ T39] [ 368.430093][ T39] __schedule+0x169e/0x54f0 [ 368.430146][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 368.430185][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 368.430220][ T39] ? rt_spin_lock+0x1e0/0x400 [ 368.430248][ T39] ? __pfx___schedule+0x10/0x10 [ 368.430288][ T39] ? schedule+0x90/0x360 [ 368.430321][ T39] schedule+0x164/0x360 [ 368.430353][ T39] fuse_chan_wait_aborted+0x15b/0x250 [ 368.430395][ T39] ? __pfx_fuse_chan_wait_aborted+0x10/0x10 [ 368.430433][ T39] ? __pfx_autoremove_wake_function+0x10/0x10 [ 368.447173][ T39] ? __pfx_fuse_chan_abort+0x10/0x10 [ 368.447313][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 368.447417][ T39] fuse_conn_destroy+0x1e7/0x3e0 [ 368.447508][ T39] ? __pfx_fuse_conn_destroy+0x10/0x10 [ 368.447579][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 368.447672][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 368.447771][ T39] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 368.447880][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 368.447961][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 368.448078][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 368.448175][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 368.448268][ T39] fuse_kill_sb_anon+0x1ef/0x270 [ 368.448371][ T39] deactivate_locked_super+0xbc/0x130 [ 368.448464][ T39] cleanup_mnt+0x437/0x4d0 [ 368.448561][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 368.448657][ T39] task_work_run+0x1d9/0x270 [ 368.448759][ T39] ? __pfx_task_work_run+0x10/0x10 [ 368.541520][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.541622][ T39] exit_to_user_mode_loop+0xed/0x480 [ 368.541695][ T39] ? rcu_is_watching+0x15/0xb0 [ 368.541778][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.541847][ T39] do_syscall_64+0x33e/0xf80 [ 368.541940][ T39] ? trace_irq_disable+0x3b/0x140 [ 368.542038][ T39] ? clear_bhb_loop+0x40/0x90 [ 368.542116][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.542185][ T39] RIP: 0033:0x7fd58377da57 [ 368.542235][ T39] RSP: 002b:00007fff428aa6d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 368.542313][ T39] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd58377da57 [ 368.542353][ T39] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff428aa790 [ 368.542397][ T39] RBP: 00007fff428aa790 R08: 00007fff428ab790 R09: 00000000ffffffff [ 368.542460][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff428ab820 [ 368.542497][ T39] R13: 00007fd583812048 R14: 0000000000030443 R15: 00007fff428ab860 [ 368.542589][ T39] [ 368.542883][ T39] [ 368.542883][ T39] Showing all locks held in the system: [ 368.542896][ T39] 3 locks held by kworker/u8:0/12: [ 368.542924][ T39] #0: ffff88813fe1c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 368.543086][ T39] #1: ffffc90000117c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 368.543228][ T39] #2: ffffffff8f79fcb8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 368.554159][ T39] 4 locks held by pr/legacy/17: [ 368.554591][ T39] #0: ffffffff8e3ba3a0 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250 [ 368.554914][ T39] #1: ffffffff8e2a1c98 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb90 [ 368.555780][ T39] #2: ffffffff9a0291d8 (&port_lock_key){+.+.}-{3:3}, at: serial8250_console_write+0x179/0x1b90 [ 368.556037][ T39] #3: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 368.591503][ T39] 1 lock held by khungtaskd/39: [ 368.591586][ T39] #0: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 368.619334][ T39] 6 locks held by kworker/u8:2/44: [ 368.619383][ T39] #0: ffff88801aea6138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 368.652399][ T39] #1: ffffc90000b57c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 368.652646][ T39] #2: ffffffff8f7913a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 368.652914][ T39] #3: ffff88805ab43160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 368.653090][ T39] #4: ffff88803b624310 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 368.653271][ T39] #5: ffffffff8f79fcb8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x13a/0x830 [ 368.722788][ T39] 2 locks held by kworker/u8:4/67: [ 368.722840][ T39] #0: ffff888037961138 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 368.723040][ T39] #1: ffffc9000152fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 368.723224][ T39] 5 locks held by kworker/u8:6/150: [ 368.723304][ T39] #0: ffff88813fe1c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 368.723468][ T39] #1: ffffc90003a07c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 368.723662][ T39] #2: ffff88805b6f8310 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 368.723904][ T39] #3: ffff88803c3d7520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 368.724096][ T39] #4: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 368.724278][ T39] 5 locks held by kworker/u8:7/1037: [ 368.762695][ T39] #0: ffff88813fe1c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 368.762856][ T39] #1: ffffc90005fa7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 368.763027][ T39] #2: ffff88801abbc310 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 368.763205][ T39] #3: ffff88803b73dd20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 368.763398][ T39] #4: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 368.763565][ T39] 4 locks held by kworker/u8:8/1274: [ 368.763601][ T39] #0: ffff888033800938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 368.763783][ T39] #1: ffffc90006b8fc40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 368.763993][ T39] #2: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 368.764155][ T39] #3: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60 [ 368.764292][ T39] 1 lock held by kworker/u8:10/1478: [ 368.781784][ T39] #0: ffff8880b863b9a0 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 368.782063][ T39] 5 locks held by kworker/u8:12/3519: [ 368.782100][ T39] #0: ffff88813fe1c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 368.782318][ T39] #1: ffffc90010637c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 368.782449][ T39] #2: ffff88803ff7e310 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 368.782645][ T39] #3: ffff888059a29d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 368.782907][ T39] #4: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 368.783060][ T39] 4 locks held by kworker/u8:15/3569: [ 368.783099][ T39] #0: ffff8880590bb938 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 368.783278][ T39] #1: ffffc900107b7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 368.794663][ T39] #2: ffff8880b86262d8 (&base->lock){-...}-{2:2}, at: __mod_timer+0x1ae/0xf60 [ 368.794734][ T39] #3: ffffffff99f30570 (&obj_hash[i].lock){-...}-{2:2}, at: debug_object_activate+0x72/0x520 [ 368.794784][ T39] 1 lock held by syslogd/5175: [ 368.794795][ T39] #0: ffff888033b949f0 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x1e2/0xd60 [ 368.794852][ T39] 2 locks held by getty/5578: [ 368.794862][ T39] #0: ffff8880377130a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 368.794933][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 368.794988][ T39] 1 lock held by syz-executor/5819: [ 368.794998][ T39] #0: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550 [ 368.795146][ T39] 1 lock held by syz-executor/5822: [ 368.795162][ T39] #0: ffff88805b9460d0 (&type->s_umount_key#57){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 368.795213][ T39] 8 locks held by kworker/1:3/5827: [ 368.795223][ T39] #0: ffff888021ad5538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 368.795284][ T39] #1: ffffc900052a7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 368.795324][ T39] #2: ffff88802a628210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 368.795368][ T39] #3: ffff888036510210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 368.795413][ T39] #4: ffff8880b873a288 ((lock)){+.+.}-{3:3}, at: __radix_tree_preload+0x141/0x870 [ 368.795455][ T39] #5: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 368.795497][ T39] #6: ffff88801b2fb100 (&root->kernfs_idr_lock){+.+.}-{3:3}, at: __kernfs_new_node+0x112/0x980 [ 368.795544][ T39] #7: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 368.795602][ T39] 11 locks held by kworker/1:5/5893: [ 368.795612][ T39] #0: ffff888021ad5538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 368.795653][ T39] #1: ffffc90005987c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 368.795694][ T39] #2: ffff88802a562210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 368.795735][ T39] #3: ffff888034fd2210 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xde/0x970 [ 368.795787][ T39] #4: ffff88805970d1d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 368.795836][ T39] #5: ffffffff8f707038 (register_mutex#6){+.+.}-{4:4}, at: usb_audio_disconnect+0xd5/0x740 [ 368.795888][ T39] #6: ffffffff8f6e7218 (sound_oss_mutex){+.+.}-{4:4}, at: snd_unregister_oss_device+0x93/0x230 [ 368.795930][ T39] #7: ffffffff8fb5be58 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x281/0x560 [ 368.795973][ T39] #8: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 368.796019][ T39] #9: ffff8880332f5898 (&si->socket.wq.wait){+.+.}-{3:3}, at: __wake_up_common_lock+0x2f/0x1e0 [ 368.808092][ T39] #10: ffff8880b873b9a0 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 368.808143][ T39] 3 locks held by udevd/5919: [ 368.808154][ T39] #0: ffff88805968b0f8 (kn->active#30){++++}-{0:0}, at: kernfs_fop_open+0x5a/0xcb0 [ 368.808213][ T39] #1: ffffffff8e50c130 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 368.808259][ T39] #2: ffff88801e6b2758 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0 [ 368.808309][ T39] 4 locks held by udevd/6373: [ 368.808319][ T39] #0: ffff8880361343d8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 368.808392][ T39] #1: ffff88805b8da878 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 368.808448][ T39] #2: ffff888032f6d008 (kn->active#34){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 368.808503][ T39] #3: ffff888034fd2210 (&dev->mutex){....}-{4:4}, at: serial_show+0x26/0xa0 [ 368.808558][ T39] 4 locks held by syz.2.1278/9998: [ 368.808569][ T39] #0: ffff888038b81db0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x194/0x9e0 [ 368.808629][ T39] #1: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 368.808678][ T39] #2: ffff88803657d958 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 368.808729][ T39] #3: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 368.808774][ T39] 2 locks held by syz.0.1282/10009: [ 368.808785][ T39] #0: ffff88805cb4e3e8 (&sb->s_type->i_mutex_key#4/1){+.+.}-{4:4}, at: start_dirop+0x4f/0x90 [ 368.808838][ T39] #1: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550 [ 368.808891][ T39] [ 368.808896][ T39] ============================================= [ 368.808896][ T39] [ 368.808921][ T39] NMI backtrace for cpu 0 [ 368.808938][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 368.808965][ T39] Tainted: [L]=SOFTLOCKUP [ 368.808972][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 368.808984][ T39] Call Trace: [ 368.808992][ T39] [ 368.809001][ T39] dump_stack_lvl+0xe8/0x150 [ 368.809026][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 368.809046][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 368.809067][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 368.809091][ T39] sys_info+0x135/0x170 [ 368.809121][ T39] watchdog+0xfd3/0x1030 [ 368.809150][ T39] ? watchdog+0x1c9/0x1030 [ 368.809177][ T39] kthread+0x388/0x470 [ 368.809201][ T39] ? __pfx_watchdog+0x10/0x10 [ 368.809218][ T39] ? __pfx_kthread+0x10/0x10 [ 368.809241][ T39] ret_from_fork+0x514/0xb70 [ 368.809263][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 368.809282][ T39] ? __switch_to+0xc79/0x1410 [ 368.809310][ T39] ? __pfx_kthread+0x10/0x10 [ 368.809334][ T39] ret_from_fork_asm+0x1a/0x30 [ 368.809368][ T39] [ 368.809375][ T39] Sending NMI from CPU 0 to CPUs 1: [ 368.809412][ C1] NMI backtrace for cpu 1 [ 368.809430][ C1] CPU: 1 UID: 0 PID: 32 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 368.809456][ C1] Tainted: [L]=SOFTLOCKUP [ 368.809463][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 368.809477][ C1] Workqueue: events mptcp_worker [ 368.809502][ C1] RIP: 0010:__lock_acquire+0x1821/0x2cf0 [ 368.809528][ C1] Code: 00 0f 83 8a 01 00 00 4e 8b 24 fd 00 d8 c3 95 ff c0 25 ff 0f 00 00 89 05 4d 87 23 14 4d 85 e4 0f 84 b2 01 00 00 49 8b 44 24 10 <48> 85 c0 0f 84 1c 0d 00 00 8b 0d 38 87 23 14 39 48 5c 0f 84 67 ff [ 368.809544][ C1] RSP: 0018:ffffc90000a6f140 EFLAGS: 00000082 [ 368.809559][ C1] RAX: ffffffff93696a50 RBX: 00000000000003cd RCX: ffffffff96538d58 [ 368.809572][ C1] RDX: ffffffff936f5300 RSI: ffff88801d6c69a0 RDI: 00000000000003cd [ 368.809586][ C1] RBP: 40ba7bc73982ff1a R08: ffffc90000a6f108 R09: 0000000000000020 [ 368.809599][ C1] R10: dffffc0000000000 R11: ffffffff81a12310 R12: ffffffff96538d58 [ 368.809613][ C1] R13: ffff88801d6c69a0 R14: ffff88801d6c5c40 R15: 0000000000000394 [ 368.809627][ C1] FS: 0000000000000000(0000) GS:ffff888125b68000(0000) knlGS:0000000000000000 [ 368.809642][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.809654][ C1] CR2: 0000001b3180fff8 CR3: 00000000382ca000 CR4: 00000000003526f0 [ 368.809670][ C1] Call Trace: [ 368.809677][ C1] [ 368.809686][ C1] ? lockdep_unlock+0x5d/0xd0 [ 368.809709][ C1] ? __lock_acquire+0x146e/0x2cf0 [ 368.809740][ C1] ? raw_spin_rq_lock_nested+0x31/0x150 [ 368.809759][ C1] lock_acquire+0x106/0x350 [ 368.809781][ C1] ? raw_spin_rq_lock_nested+0x31/0x150 [ 368.809800][ C1] ? lock_acquire+0x106/0x350 [ 368.809822][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 368.809844][ C1] _raw_spin_lock_nested+0x32/0x50 [ 368.809876][ C1] ? raw_spin_rq_lock_nested+0x31/0x150 [ 368.809893][ C1] raw_spin_rq_lock_nested+0x31/0x150 [ 368.809914][ C1] _task_rq_lock+0xbc/0x470 [ 368.809934][ C1] __schedule+0x1815/0x54f0 [ 368.809957][ C1] ? ktime_get+0x45/0x220 [ 368.809977][ C1] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 368.809998][ C1] ? ktime_get+0x1f5/0x220 [ 368.810017][ C1] ? lapic_next_event+0x11/0x20 [ 368.810037][ C1] ? clockevents_program_event+0x491/0x5f0 [ 368.810066][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 368.810096][ C1] ? __pfx___schedule+0x10/0x10 [ 368.810117][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 368.810142][ C1] ? irqentry_exit+0x1a6/0x680 [ 368.810168][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 368.810195][ C1] preempt_schedule_common+0x82/0xd0 [ 368.810218][ C1] preempt_schedule_thunk+0x16/0x30 [ 368.810246][ C1] _raw_spin_unlock_irqrestore+0x74/0x80 [ 368.810270][ C1] __mod_timer+0xb64/0xf60 [ 368.810297][ C1] sk_reset_timer+0x23/0xc0 [ 368.810321][ C1] tcp_event_new_data_sent+0x324/0x540 [ 368.810345][ C1] tcp_write_xmit+0x1c02/0x6430 [ 368.810393][ C1] __tcp_push_pending_frames+0x97/0x380 [ 368.810422][ C1] ? mptcp_worker+0x60e/0x1450 [ 368.810443][ C1] mptcp_check_data_fin+0x312/0x7f0 [ 368.810475][ C1] mptcp_worker+0x60e/0x1450 [ 368.810498][ C1] ? process_scheduled_works+0xa69/0x1910 [ 368.810519][ C1] ? process_scheduled_works+0xa69/0x1910 [ 368.810539][ C1] process_scheduled_works+0xb68/0x1910 [ 368.810571][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 368.810592][ C1] ? assign_work+0x3d5/0x5e0 [ 368.810611][ C1] worker_thread+0xa90/0x1040 [ 368.810642][ C1] kthread+0x388/0x470 [ 368.810665][ C1] ? __pfx_worker_thread+0x10/0x10 [ 368.810682][ C1] ? __pfx_kthread+0x10/0x10 [ 368.810705][ C1] ret_from_fork+0x514/0xb70 [ 368.810725][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 368.810743][ C1] ? __switch_to+0xc79/0x1410 [ 368.810771][ C1] ? __pfx_kthread+0x10/0x10 [ 368.810794][ C1] ret_from_fork_asm+0x1a/0x30 [ 368.810822][ C1] [ 368.842580][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 368.842658][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 368.842753][ T39] Tainted: [L]=SOFTLOCKUP [ 368.842776][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 368.842820][ T39] Call Trace: [ 368.842837][ T39] [ 368.842847][ T39] vpanic+0x56c/0xa60 [ 368.842917][ T39] ? __pfx___schedule+0x10/0x10 [ 368.843007][ T39] ? __pfx_vpanic+0x10/0x10 [ 368.843116][ T39] panic+0xc5/0xd0 [ 368.843215][ T39] ? __pfx_panic+0x10/0x10 [ 368.843324][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 368.843427][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 368.843515][ T39] watchdog+0x102c/0x1030 [ 368.843604][ T39] ? watchdog+0x1c9/0x1030 [ 368.843684][ T39] kthread+0x388/0x470 [ 368.843757][ T39] ? __pfx_watchdog+0x10/0x10 [ 368.843813][ T39] ? __pfx_kthread+0x10/0x10 [ 368.843903][ T39] ret_from_fork+0x514/0xb70 [ 368.843992][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 368.844062][ T39] ? __switch_to+0xc79/0x1410 [ 368.844145][ T39] ? __pfx_kthread+0x10/0x10 [ 368.844175][ T39] ret_from_fork_asm+0x1a/0x30 [ 368.844215][ T39] [ 368.844836][ T39] Kernel Offset: disabled